last executing test programs: 1m13.118040524s ago: executing program 0 (id=1027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8582, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.782667323s ago: executing program 0 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m12.641093468s ago: executing program 0 (id=1031): socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) 1m11.763399236s ago: executing program 0 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x83381a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1m11.738326978s ago: executing program 0 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101e, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000007, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m11.508733217s ago: executing program 0 (id=1052): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)=""/198, 0xc6}], 0x1}, 0x10101) 1m11.334367303s ago: executing program 32 (id=1052): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)=""/198, 0xc6}], 0x1}, 0x10101) 45.523227575s ago: executing program 2 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) 45.399159121s ago: executing program 2 (id=1365): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(0x3) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 45.226999966s ago: executing program 2 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a32000000001400000011000100"/119], 0x78}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 44.32505069s ago: executing program 2 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 44.318678259s ago: executing program 2 (id=1383): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) 43.973548511s ago: executing program 2 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 43.78708477s ago: executing program 33 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 3.644863606s ago: executing program 5 (id=1746): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000d83000/0x1000)=nil, 0x1000}}) 3.568037049s ago: executing program 5 (id=1748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2.084028652s ago: executing program 3 (id=1751): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x10001, 0x7, 0x5913, 0x7, 0x7fffffff, 0x833, 0x1000, 0x7fffffff}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x6}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010100}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.083006542s ago: executing program 5 (id=1760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x547b, 0x103f, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.949211507s ago: executing program 4 (id=1755): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r1, &(0x7f00000004c0)="a0a3", 0x2, 0x200080d1, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) 1.836333897s ago: executing program 3 (id=1756): r0 = syz_io_uring_setup(0x7df, &(0x7f0000000140)={0x0, 0x114df, 0x10101, 0x1, 0x4008b}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 1.80879006s ago: executing program 5 (id=1757): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1.513083509s ago: executing program 5 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) shutdown(r0, 0x1) 1.440719631s ago: executing program 3 (id=1763): syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, &(0x7f00000002c0)=@string={0x41, 0x3, "f5124fb95589327a4a0e37354c173e11bd97c03dc6a58a187874a862fb0f30189383ec08a5d1d0ce87857d419e41e2fc3c862617199d24e6cc87eeeb602a86"}}]}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000300)) 1.393333447s ago: executing program 5 (id=1764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) shutdown(r0, 0x1) 1.144274755s ago: executing program 1 (id=1766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) 1.043859217s ago: executing program 6 (id=1768): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 946.582279ms ago: executing program 6 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x547b, 0x103f, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 830.165824ms ago: executing program 4 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) 819.884579ms ago: executing program 1 (id=1771): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x32905200, 0x0, 0x401, 0x1, 0x8000002, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xea4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 710.992392ms ago: executing program 4 (id=1772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xa}}, @TCA_U32_POLICE={0x4}]}}]}, 0x80}}, 0x24044094) 678.351398ms ago: executing program 1 (id=1773): r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x3f) sendfile(r0, r0, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) pwritev(r0, &(0x7f0000003980)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 598.272919ms ago: executing program 6 (id=1774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffdb4c, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 505.21211ms ago: executing program 6 (id=1775): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xac, 0x3, 0xd, 0x0, 0x8009, 0xd, 0x3b, 0x2, 0x1, 0xf1, 0x6, 0x3, 0x0, 0x7fffffff, 0xeeb, 0x1, 0x3d, 0x2, 0xf, '\x00', 0x7, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x3f, 0x5, 0x3, '\x00', 0xfce}) 445.238517ms ago: executing program 1 (id=1776): mkdir(&(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 420.641569ms ago: executing program 4 (id=1777): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 292.998049ms ago: executing program 3 (id=1778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 195.07154ms ago: executing program 4 (id=1779): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) close(r0) 185.153939ms ago: executing program 1 (id=1780): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r0, 0x0, 0x0) 171.233047ms ago: executing program 6 (id=1781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0xe1}], 0x18, 0x24000080}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4) recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x4, &(0x7f0000007a40)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000080)=""/17, 0xc}, {&(0x7f0000000100)=""/89, 0x59}], 0x3}, 0x9}], 0x1, 0x12122, 0x0) 81.458473ms ago: executing program 3 (id=1782): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 80.868626ms ago: executing program 4 (id=1783): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1786): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x400000000003f) kernel console output (not intermixed with test programs): ntext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.889713][ T5870] usb 3-1: USB disconnect, device number 7 [ 123.909831][ T5871] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 124.092092][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.110280][ T7797] wireguard0: entered promiscuous mode [ 124.122313][ T7797] wireguard0: entered allmulticast mode [ 124.128058][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 124.178044][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.222038][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 124.248120][ T5871] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.261833][ T5871] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.279285][ T5871] usb 4-1: Manufacturer: syz [ 124.316069][ T5871] usb 4-1: config 0 descriptor?? [ 124.348675][ T7805] can: request_module (can-proto-0) failed. [ 124.602713][ T30] audit: type=1400 audit(1743767364.737:413): avc: denied { read write } for pid=7810 comm="syz.1.721" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 124.603052][ T5871] rc_core: IR keymap rc-hauppauge not found [ 124.625070][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.679179][ T5871] Registered IR keymap rc-empty [ 124.683109][ T30] audit: type=1400 audit(1743767364.737:414): avc: denied { open } for pid=7810 comm="syz.1.721" path="/117/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 124.693652][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.773871][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.803360][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 124.818590][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 124.929887][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.966278][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.012311][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.043054][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.072847][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.105834][ T30] audit: type=1400 audit(1743767365.237:415): avc: denied { accept } for pid=7829 comm="syz.0.726" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.118476][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.135179][ T950] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 125.158744][ T30] audit: type=1400 audit(1743767365.237:416): avc: denied { write } for pid=7829 comm="syz.0.726" path="socket:[16835]" dev="sockfs" ino=16835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.189555][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.222556][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.250029][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.292014][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.299774][ T950] usb 2-1: Using ep0 maxpacket: 32 [ 125.310823][ T950] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 125.320802][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.330070][ T950] usb 2-1: Product: syz [ 125.334699][ T950] usb 2-1: Manufacturer: syz [ 125.340146][ T950] usb 2-1: SerialNumber: syz [ 125.350057][ T7834] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 125.356970][ T5871] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 125.371240][ T950] usb 2-1: config 0 descriptor?? [ 125.400098][ T950] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 125.411366][ T5871] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.420825][ T30] audit: type=1400 audit(1743767365.557:417): avc: denied { ioctl } for pid=7835 comm="syz.0.729" path="socket:[16854]" dev="sockfs" ino=16854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.445328][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.466444][ T5871] usb 4-1: USB disconnect, device number 6 [ 125.541811][ T7840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.577748][ T30] audit: type=1400 audit(1743767365.707:418): avc: denied { read } for pid=7841 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.922229][ T30] audit: type=1400 audit(1743767366.057:419): avc: denied { mount } for pid=7852 comm="syz.4.735" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 125.944343][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.955240][ T7857] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 126.563746][ T30] audit: type=1400 audit(1743767366.697:420): avc: denied { read write } for pid=7876 comm="syz.0.748" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.575100][ T81] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.622532][ T81] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.629879][ T30] audit: type=1400 audit(1743767366.697:421): avc: denied { open } for pid=7876 comm="syz.0.748" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.655818][ T5870] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.810481][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 126.823907][ T5870] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 126.844711][ T5870] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.862419][ T5870] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.866069][ T950] gspca_topro: reg_r err -71 [ 126.879956][ T950] gspca_topro: Sensor soi763a [ 126.886941][ T5870] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.917034][ T950] usb 2-1: USB disconnect, device number 13 [ 126.921698][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 126.939404][ T5870] usb 4-1: config 0 has no interface number 0 [ 126.948397][ T5870] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 126.962735][ T5870] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.973084][ T5870] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.985642][ T5870] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.004678][ T5870] usb 4-1: config 0 interface 125 has no altsetting 2 [ 127.013338][ T5870] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 127.022685][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.030751][ T5870] usb 4-1: Product: syz [ 127.050812][ T5870] usb 4-1: Manufacturer: syz [ 127.055530][ T5870] usb 4-1: SerialNumber: syz [ 127.062789][ T5870] usb 4-1: config 0 descriptor?? [ 127.074330][ T5870] usb 4-1: selecting invalid altsetting 2 [ 127.274819][ T950] usb 4-1: USB disconnect, device number 7 [ 127.435076][ T7897] process 'syz.1.755' launched './file1' with NULL argv: empty string added [ 127.444154][ T30] audit: type=1400 audit(1743767367.577:422): avc: denied { execute_no_trans } for pid=7896 comm="syz.1.755" path="/119/file1" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.513693][ T30] audit: type=1400 audit(1743767367.647:423): avc: denied { mount } for pid=7898 comm="syz.1.756" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 127.546077][ T30] audit: type=1400 audit(1743767367.677:424): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 127.740190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.836044][ T30] audit: type=1400 audit(1743767367.967:425): avc: denied { mount } for pid=7902 comm="syz.2.758" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.868430][ T30] audit: type=1400 audit(1743767367.997:426): avc: denied { listen } for pid=7904 comm="syz.3.759" lport=56270 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.957662][ T30] audit: type=1400 audit(1743767368.047:427): avc: denied { accept } for pid=7904 comm="syz.3.759" lport=56270 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.988300][ T30] audit: type=1400 audit(1743767368.097:428): avc: denied { write } for pid=7904 comm="syz.3.759" lport=56270 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.015719][ T30] audit: type=1400 audit(1743767368.097:429): avc: denied { setopt } for pid=7904 comm="syz.3.759" lport=56270 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.255890][ T7916] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3435572954 (6871145908 ns) > initial count (1845465872 ns). Using initial count to start timer. [ 128.319036][ T7928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 128.449825][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.614050][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.626425][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.638502][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.654851][ T5870] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.664147][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.679202][ T5870] usb 4-1: config 0 descriptor?? [ 128.725421][ T7945] SELinux: failed to load policy [ 128.881883][ T7951] syzkaller0: entered promiscuous mode [ 128.887405][ T7951] syzkaller0: entered allmulticast mode [ 129.100645][ T5870] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 129.111059][ T5870] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 129.133532][ T5870] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 129.392588][ T950] usb 4-1: USB disconnect, device number 8 [ 129.818408][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 130.397528][ T7981] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.411741][ T7985] Bluetooth: Invalid esc byte 0x02 [ 130.450077][ T5870] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.605861][ T7981] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.623728][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 130.654617][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 130.674680][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.696840][ T5870] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 130.705931][ T7998] gtp0: entered promiscuous mode [ 130.718437][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.726817][ T5870] usb 3-1: Product: syz [ 130.731778][ T5870] usb 3-1: Manufacturer: syz [ 130.736440][ T5870] usb 3-1: SerialNumber: syz [ 130.748652][ T5870] usb 3-1: config 0 descriptor?? [ 130.784996][ T5870] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 130.805214][ T7981] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.821890][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 130.837490][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 130.847014][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 130.862769][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 130.870565][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 130.878374][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 130.889358][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 130.901483][ T5870] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 130.913367][ T7981] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.925251][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 130.948955][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 130.960093][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 130.967877][ T5870] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 130.977465][ T5870] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 131.025252][ T5870] usb 3-1: USB disconnect, device number 8 [ 131.045173][ T7981] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.066978][ T5870] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 131.078375][ T7981] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.096503][ T5870] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 131.103636][ T7981] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.123494][ T5870] keyspan 3-1:0.0: device disconnected [ 131.153653][ T7981] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.473685][ T8026] Driver unsupported XDP return value 0 on prog (id 130) dev N/A, expect packet loss! [ 131.771454][ T950] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 131.863876][ T8043] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.904522][ T8043] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.929745][ T950] usb 2-1: Using ep0 maxpacket: 8 [ 131.936291][ T950] usb 2-1: config 0 has no interfaces? [ 131.947561][ T950] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 131.948151][ T8043] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.967197][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.975788][ T950] usb 2-1: Product: syz [ 131.980693][ T950] usb 2-1: Manufacturer: syz [ 131.985357][ T950] usb 2-1: SerialNumber: syz [ 131.992073][ T950] usb 2-1: config 0 descriptor?? [ 132.014683][ T8043] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.097744][ T8043] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.114518][ T8043] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.128126][ T8043] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.143383][ T8043] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.217065][ T5870] usb 2-1: USB disconnect, device number 14 [ 132.339557][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 132.347368][ T30] audit: type=1400 audit(1743767372.467:438): avc: denied { write } for pid=8051 comm="syz.2.818" name="mouse0" dev="devtmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 132.425300][ T950] kernel read not supported for file /input/mouse0 (pid: 950 comm: kworker/0:2) [ 132.871739][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878086][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.260638][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 133.500570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.719123][ T30] audit: type=1400 audit(1743767373.847:439): avc: denied { read } for pid=8106 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.782372][ T8112] netlink: 'syz.0.846': attribute type 16 has an invalid length. [ 133.791007][ T8112] netlink: 'syz.0.846': attribute type 17 has an invalid length. [ 133.856526][ T8112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.017676][ T8123] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.143030][ T8123] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.207128][ T8123] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.286115][ T8123] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.302854][ T8138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.854'. [ 134.312713][ T8138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.854'. [ 134.675253][ T8123] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.709023][ T8123] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.748967][ T8123] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.827775][ T8123] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.956749][ T30] audit: type=1400 audit(1743767375.087:440): avc: denied { map } for pid=8158 comm="syz.4.865" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 135.260080][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.587595][ T1139] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.789776][ T5870] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.939742][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 135.946430][ T5870] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.957127][ T5870] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.967310][ T5870] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.977484][ T5870] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.990904][ T5870] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.000162][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.212597][ T5870] usb 5-1: GET_CAPABILITIES returned 0 [ 136.218126][ T5870] usbtmc 5-1:16.0: can't read capabilities [ 136.417412][ T5868] usb 5-1: USB disconnect, device number 5 [ 137.070646][ T30] audit: type=1400 audit(1743767377.207:441): avc: denied { create } for pid=8219 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.093601][ T30] audit: type=1400 audit(1743767377.217:442): avc: denied { connect } for pid=8219 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.125225][ T30] audit: type=1400 audit(1743767377.257:443): avc: denied { bind } for pid=8219 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.148216][ T30] audit: type=1400 audit(1743767377.257:444): avc: denied { listen } for pid=8219 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.170881][ T30] audit: type=1400 audit(1743767377.257:445): avc: denied { accept } for pid=8219 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.659788][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 137.666309][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.087736][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 138.135670][ T8252] kvm: emulating exchange as write [ 138.169753][ T30] audit: type=1400 audit(1743767378.297:446): avc: denied { append } for pid=8254 comm="syz.4.904" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.242557][ T30] audit: type=1400 audit(1743767378.367:447): avc: denied { shutdown } for pid=8254 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.373361][ T8260] syzkaller1: entered promiscuous mode [ 138.399208][ T8260] syzkaller1: entered allmulticast mode [ 138.717075][ T8277] SELinux: ebitmap: empty map [ 138.735051][ T8277] SELinux: failed to load policy [ 138.757817][ T8280] ======================================================= [ 138.757817][ T8280] WARNING: The mand mount option has been deprecated and [ 138.757817][ T8280] and is ignored by this kernel. Remove the mand [ 138.757817][ T8280] option from the mount to silence this warning. [ 138.757817][ T8280] ======================================================= [ 138.793217][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.810734][ T30] audit: type=1400 audit(1743767378.947:448): avc: denied { mount } for pid=8279 comm="syz.4.914" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 138.832461][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.856003][ T8280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.928207][ T30] audit: type=1400 audit(1743767379.057:449): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 138.948093][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.985013][ T30] audit: type=1400 audit(1743767379.057:450): avc: denied { write } for pid=8289 comm="syz.0.920" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.012175][ T30] audit: type=1400 audit(1743767379.087:451): avc: denied { ioctl } for pid=8289 comm="syz.0.920" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.036953][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.240594][ T30] audit: type=1326 audit(1743767379.367:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819478d169 code=0x7fc00000 [ 139.263814][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.271920][ T30] audit: type=1400 audit(1743767379.367:453): avc: denied { read } for pid=8299 comm="syz.1.923" path="socket:[20444]" dev="sockfs" ino=20444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.324985][ T30] audit: type=1326 audit(1743767379.367:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f819478d169 code=0x7fc00000 [ 139.349438][ T30] audit: type=1326 audit(1743767379.377:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819478d169 code=0x7fc00000 [ 139.382050][ T8310] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.437415][ T8312] input: syz0 as /devices/virtual/input/input14 [ 139.513498][ T8310] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.592098][ T8310] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.669162][ T8310] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.863618][ T8310] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.889943][ T8332] netlink: 'syz.2.937': attribute type 11 has an invalid length. [ 139.901218][ T8310] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.943095][ T8310] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.958931][ T8334] netlink: 'syz.3.938': attribute type 12 has an invalid length. [ 139.986640][ T8334] netlink: 'syz.3.938': attribute type 29 has an invalid length. [ 139.998439][ T8334] netlink: 148 bytes leftover after parsing attributes in process `syz.3.938'. [ 140.019845][ T8334] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 140.027728][ T8334] netlink: 43 bytes leftover after parsing attributes in process `syz.3.938'. [ 140.166704][ T8310] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.313373][ T8350] uprobe: syz.4.945:8350 failed to unregister, leaking uprobe [ 140.772072][ T8375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.813693][ T8375] batadv_slave_0: entered promiscuous mode [ 142.297890][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 142.385205][ T8427] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 142.758366][ T8449] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 144.325634][ T8526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.333374][ T8526] IPv6: NLM_F_CREATE should be set when creating new route [ 144.520383][ T5915] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 144.611684][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.720313][ T5915] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 144.728543][ T5915] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 144.750852][ T5915] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 144.769645][ T5915] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 144.789856][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 144.790116][ T5915] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 144.803489][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.833485][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.836845][ T5870] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 144.843039][ T5915] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.860426][ T5915] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.879767][ T5915] usb 2-1: Product: syz [ 144.888968][ T5870] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.894124][ T5915] usb 2-1: Manufacturer: syz [ 144.903134][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 144.916099][ T5870] usb 4-1: string descriptor 0 read error: -22 [ 144.925464][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 144.940934][ T5915] usb 2-1: SerialNumber: syz [ 144.957919][ T5915] usb 2-1: config 0 descriptor?? [ 144.962890][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.972033][ T8515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 145.000415][ T8523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.014116][ T5915] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 145.063793][ T5915] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 145.205267][ T5870] usb 4-1: USB disconnect, device number 9 [ 145.242022][ T8562] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 145.447503][ T5915] usb 2-1: USB disconnect, device number 15 [ 145.475068][ T5915] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 145.541287][ T8572] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 145.577170][ T8572] bond1: entered promiscuous mode [ 145.585870][ T8572] bond1: entered allmulticast mode [ 145.591804][ T8572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.776867][ T8583] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü [ 145.856446][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 145.856462][ T30] audit: type=1400 audit(1743767385.987:463): avc: denied { create } for pid=8586 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 145.884131][ T5870] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.908824][ T30] audit: type=1400 audit(1743767386.037:464): avc: denied { lock } for pid=8588 comm="syz.4.1045" path="socket:[22354]" dev="sockfs" ino=22354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 146.051502][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.072112][ T5870] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.097748][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.119476][ T5870] usb 3-1: config 0 descriptor?? [ 146.342404][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 146.350455][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 146.364011][ T5870] usb 3-1: USB disconnect, device number 9 [ 146.642019][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.651074][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.659087][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.667157][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.676937][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.712743][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.731978][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.739501][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.760718][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.768888][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.793472][ T30] audit: type=1400 audit(1743767386.917:465): avc: denied { mounton } for pid=8607 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 146.852576][ T5870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.919207][ T30] audit: type=1400 audit(1743767387.047:466): avc: denied { name_bind 0x1000000 } for pid=8617 comm="syz.1.1057" path="socket:[22404]" dev="sockfs" ino=22404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 147.035887][ T8623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 147.051275][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 147.059939][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.076408][ T5870] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 147.091623][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.110822][ T5870] usb 3-1: config 0 descriptor?? [ 147.118091][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 147.153836][ T5915] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.165159][ T5870] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 147.183214][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 147.193536][ T5870] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 147.313686][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.337499][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.353089][ T5915] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 147.373944][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.421450][ T5915] usb 5-1: config 0 descriptor?? [ 147.428238][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.446829][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.469834][ T8607] bridge_slave_0: entered allmulticast mode [ 147.477262][ T8607] bridge_slave_0: entered promiscuous mode [ 147.502755][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.512482][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.520298][ T8607] bridge_slave_1: entered allmulticast mode [ 147.528354][ T8607] bridge_slave_1: entered promiscuous mode [ 147.601942][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.625428][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.714980][ T5870] usb 3-1: USB disconnect, device number 10 [ 147.724712][ T8607] team0: Port device team_slave_0 added [ 147.735599][ T5870] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 147.749072][ T8607] team0: Port device team_slave_1 added [ 147.793733][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.804354][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.830248][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.839223][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.854812][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.862017][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.892427][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.952664][ T8607] hsr_slave_0: entered promiscuous mode [ 147.958826][ T8607] hsr_slave_1: entered promiscuous mode [ 147.965272][ T8607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.973186][ T8607] Cannot create hsr debugfs directory [ 148.106799][ T8607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.116397][ T8607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.127254][ T8607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.138095][ T8607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.203021][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.222374][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.233632][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.240813][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.257436][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.262372][ T5915] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 148.264600][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.343555][ T5915] hid-led 0003:27B8:01ED.0006: ThingM blink(1) initialized [ 148.487550][ T5915] usb 5-1: USB disconnect, device number 6 [ 148.716088][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.848293][ T8680] overlayfs: failed to resolve './file0': -2 [ 148.860988][ T54] Bluetooth: hci2: command tx timeout [ 149.029394][ T8607] veth0_vlan: entered promiscuous mode [ 149.062600][ T8607] veth1_vlan: entered promiscuous mode [ 149.106577][ T8607] veth0_macvtap: entered promiscuous mode [ 149.124446][ T8607] veth1_macvtap: entered promiscuous mode [ 149.175505][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.186917][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.201413][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.214409][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.225732][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.238657][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.251859][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.264118][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.312829][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.339982][ T81] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.358146][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.382894][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.397125][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.410812][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.425150][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.437588][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.449269][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.462860][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.472929][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.486921][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.501452][ T81] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 149.509991][ T81] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.517679][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.547375][ T8607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.559892][ T8607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.568740][ T8607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.579490][ T8607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.607645][ T81] usb 3-1: config 0 has no interface number 0 [ 149.620277][ T81] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 149.643752][ T81] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.696663][ T81] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 149.706123][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.759841][ T81] usb 3-1: Product: syz [ 149.764036][ T81] usb 3-1: Manufacturer: syz [ 149.768627][ T81] usb 3-1: SerialNumber: syz [ 149.894624][ T81] usb 3-1: config 0 descriptor?? [ 149.962138][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.996582][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.010782][ T3056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.018622][ T3056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.048975][ T30] audit: type=1400 audit(1743767390.177:467): avc: denied { mounton } for pid=8607 comm="syz-executor" path="/root/syzkaller.g6YAqy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 150.233494][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'. [ 150.325232][ T5915] usb 3-1: USB disconnect, device number 11 [ 150.769762][ T5949] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.932253][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.947117][ T5836] Bluetooth: hci2: command tx timeout [ 150.952823][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.964272][ T5949] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.974392][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.982754][ T5949] usb 4-1: SerialNumber: syz [ 151.013758][ T8727] netlink: 'syz.2.1095': attribute type 1 has an invalid length. [ 151.023566][ T8727] netlink: 'syz.2.1095': attribute type 4 has an invalid length. [ 151.035343][ T8727] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1095'. [ 151.201266][ T5949] usb 4-1: 0:2 : does not exist [ 151.245268][ T5949] usb 4-1: USB disconnect, device number 10 [ 151.378749][ T8741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.480605][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.921758][ T8760] kvm: MONITOR instruction emulated as NOP! [ 152.139176][ T8770] KVM: debugfs: duplicate directory 8770-5 [ 152.699860][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.699915][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 152.879700][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.022345][ T54] Bluetooth: hci2: command tx timeout [ 153.050506][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 153.065211][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.073812][ T5868] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 153.074011][ T5870] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 153.089345][ T5870] usb 4-1: can't read configurations, error -71 [ 153.231254][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.251281][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.269021][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.288820][ T5868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.298592][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.307662][ T5915] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 153.331174][ T5868] usb 3-1: config 0 descriptor?? [ 153.459938][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 153.466288][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.476539][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.491622][ T5915] usb 2-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 153.501376][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.509368][ T5915] usb 2-1: Product: syz [ 153.513633][ T5915] usb 2-1: Manufacturer: syz [ 153.518254][ T5915] usb 2-1: SerialNumber: syz [ 153.524764][ T5915] usb 2-1: config 0 descriptor?? [ 153.531606][ T5915] io_ti 2-1:0.0: required endpoints missing [ 153.749794][ T5868] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 153.764785][ T5868] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 153.810818][ T81] usb 2-1: USB disconnect, device number 16 [ 154.024198][ T5946] usb 3-1: USB disconnect, device number 12 [ 154.090102][ T30] audit: type=1800 audit(1743767394.217:468): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1143" name="file1" dev="overlay" ino=65 res=0 errno=0 [ 154.369675][ T5868] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 154.546498][ T5868] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 154.576009][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.607183][ T5868] usb 4-1: config 0 descriptor?? [ 154.719664][ T5946] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.879888][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 154.891694][ T5946] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 154.922958][ T5946] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.954968][ T5946] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.971960][ T5946] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.986119][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.994866][ T5946] usb 6-1: Product: syz [ 155.000739][ T5946] usb 6-1: Manufacturer: syz [ 155.005456][ T5946] usb 6-1: SerialNumber: syz [ 155.099999][ T54] Bluetooth: hci2: command tx timeout [ 155.246612][ T30] audit: type=1400 audit(1743767395.377:469): avc: denied { read } for pid=8855 comm="syz.5.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.255047][ T5946] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 155.296647][ T5946] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 155.338271][ T5946] usb 6-1: USB disconnect, device number 2 [ 155.582225][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.618258][ T8898] SELinux: failed to load policy [ 155.731017][ T950] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 155.863477][ T5868] pegasus 4-1:0.0: can't reset MAC [ 155.872015][ T5868] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 155.879934][ T950] usb 3-1: Using ep0 maxpacket: 8 [ 155.887865][ T950] usb 3-1: config 0 has no interfaces? [ 155.909943][ T5868] usb 4-1: USB disconnect, device number 13 [ 155.920089][ T950] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 155.936321][ T950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.058655][ T950] usb 3-1: Product: syz [ 156.067352][ T950] usb 3-1: Manufacturer: syz [ 156.080856][ T950] usb 3-1: SerialNumber: syz [ 156.099317][ T950] usb 3-1: config 0 descriptor?? [ 156.255336][ T30] audit: type=1400 audit(1743767396.387:470): avc: denied { bind } for pid=8907 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.338011][ T5868] usb 3-1: USB disconnect, device number 13 [ 156.411813][ T8912] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 156.585801][ T30] audit: type=1400 audit(1743767396.717:471): avc: denied { execute } for pid=8915 comm="syz.1.1175" path="/dev/dsp" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 156.799810][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 156.969821][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 156.981312][ T5868] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 156.996543][ T5868] usb 4-1: config 0 has no interface number 0 [ 157.012832][ T5868] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 157.027334][ T5868] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 157.040844][ T5868] usb 4-1: config 0 interface 41 has no altsetting 0 [ 157.051617][ T5868] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 157.062359][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.077176][ T5868] usb 4-1: Product: syz [ 157.083174][ T5868] usb 4-1: Manufacturer: syz [ 157.087785][ T5868] usb 4-1: SerialNumber: syz [ 157.104658][ T5868] usb 4-1: config 0 descriptor?? [ 157.112340][ T8918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.121375][ T8918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.148888][ T5870] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.324366][ T5870] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.335775][ T5870] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.344452][ T8918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.367169][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.369763][ T8918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.399040][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 157.430476][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 157.433367][ T30] audit: type=1400 audit(1743767397.557:472): avc: denied { create } for pid=8942 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 157.507512][ T5870] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.522451][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.542418][ T5870] usb 5-1: Product: syz [ 157.546622][ T5870] usb 5-1: Manufacturer: syz [ 157.567754][ T5870] cdc_wdm 5-1:1.0: skipping garbage [ 157.581653][ T5870] cdc_wdm 5-1:1.0: skipping garbage [ 157.589416][ T5870] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 157.619994][ T5870] cdc_wdm 5-1:1.0: Unknown control protocol [ 157.854519][ T5868] Error reading MAC address [ 157.886209][ T8918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.900522][ C1] wdm_int_callback: 4 callbacks suppressed [ 157.900544][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 157.900951][ T5915] usb 5-1: USB disconnect, device number 7 [ 157.906361][ C1] wdm_int_callback: 4 callbacks suppressed [ 157.906386][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 157.906405][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 157.979910][ T8918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.109781][ T5870] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.249887][ T81] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 158.274100][ T8965] fuse: root generation should be zero [ 158.281223][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 158.287828][ T5870] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 158.307963][ T5870] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.318387][ T5870] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.328533][ T5870] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.340322][ T5870] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.361537][ T5870] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.371051][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.374486][ T8968] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 158.421357][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.432804][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.442724][ T81] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.456196][ T81] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.465729][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.491979][ T81] usb 2-1: config 0 descriptor?? [ 158.605249][ T5870] usb 3-1: usb_control_msg returned -32 [ 158.621099][ T5870] usbtmc 3-1:16.0: can't read capabilities [ 158.706752][ T5868] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, ee:a8:b7:0f:d3:58 [ 158.746221][ T5868] usb 4-1: USB disconnect, device number 14 [ 158.759321][ T5868] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 158.790411][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1199'. [ 158.942114][ T81] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 158.960595][ T81] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 159.333418][ T8996] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 159.531257][ T5949] usb 3-1: USB disconnect, device number 14 [ 159.772093][ T30] audit: type=1400 audit(1743767399.907:473): avc: denied { mounton } for pid=9005 comm="syz.3.1209" path="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.807675][ T9006] overlayfs: invalid redirect ((null)) [ 159.889915][ T81] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.042081][ T81] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.055475][ T81] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.065252][ T81] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.074830][ T81] usb 6-1: Product: syz [ 160.079190][ T81] usb 6-1: Manufacturer: syz [ 160.084375][ T81] usb 6-1: SerialNumber: syz [ 160.139773][ T5870] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.306579][ T5870] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.317535][ T5870] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 160.317646][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.317915][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 160.317979][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 160.319877][ T5870] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.319921][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.319938][ T5870] usb 4-1: Product: syz [ 160.319951][ T5870] usb 4-1: Manufacturer: syz [ 160.324678][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 160.324690][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 160.327082][ T5870] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 160.327100][ T5870] cdc_wdm 4-1:1.0: Unknown control protocol [ 160.591009][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 160.592065][ T5949] usb 4-1: USB disconnect, device number 15 [ 160.597635][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 160.597655][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 160.618733][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.890060][ T5915] usb 2-1: USB disconnect, device number 17 [ 161.138793][ T81] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 161.203064][ T81] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 161.213983][ T81] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 161.829829][ T81] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 161.851956][ T81] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 161.859854][ T950] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 161.884545][ T81] usb 6-1: USB disconnect, device number 3 [ 161.900470][ T81] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 162.039813][ T950] usb 4-1: Using ep0 maxpacket: 32 [ 162.053220][ T9048] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 162.055878][ T950] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.087390][ T950] usb 4-1: config 0 has no interface number 0 [ 162.109100][ T950] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.121622][ T950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.130950][ T950] usb 4-1: Product: syz [ 162.136382][ T950] usb 4-1: Manufacturer: syz [ 162.156547][ T950] usb 4-1: SerialNumber: syz [ 162.167478][ T950] usb 4-1: config 0 descriptor?? [ 162.215429][ T950] smsc95xx v2.0.0 [ 162.598543][ T9066] block nbd2: shutting down sockets [ 162.660061][ T30] audit: type=1326 audit(1743767402.787:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69078d169 code=0x7ffc0000 [ 162.683375][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.753287][ T30] audit: type=1326 audit(1743767402.787:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69078d169 code=0x7ffc0000 [ 162.825143][ T30] audit: type=1326 audit(1743767402.787:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd69078d169 code=0x7ffc0000 [ 162.903601][ T30] audit: type=1326 audit(1743767402.827:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69078d169 code=0x7ffc0000 [ 163.216472][ T950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 163.333605][ T950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 163.351320][ T950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 163.481578][ T950] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 163.574337][ T950] usb 4-1: USB disconnect, device number 16 [ 163.718912][ T9099] Invalid ELF header magic: != ELF [ 163.729302][ T30] audit: type=1400 audit(1743767403.847:478): avc: denied { module_load } for pid=9097 comm="syz.4.1246" path="/285/bus" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 163.752280][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.139152][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1261'. [ 165.324981][ T30] audit: type=1400 audit(1743767405.457:479): avc: denied { view } for pid=9141 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 165.582841][ T9162] netlink: 'syz.5.1269': attribute type 13 has an invalid length. [ 165.726966][ T30] audit: type=1400 audit(1743767405.857:480): avc: denied { getopt } for pid=9168 comm="syz.2.1273" lport=54158 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 165.826774][ T9173] loop7: detected capacity change from 0 to 16384 [ 166.029777][ T9173] I/O error, dev loop7, sector 7168 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 166.066103][ T9179] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 166.100579][ T9173] I/O error, dev loop7, sector 7424 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 166.135169][ T9179] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 166.150334][ T9173] I/O error, dev loop7, sector 7168 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.165711][ T9179] Buffer I/O error on dev loop7, logical block 129, lost async page write [ 166.181293][ T9173] Buffer I/O error on dev loop7, logical block 896, async page read [ 166.196008][ T9179] Buffer I/O error on dev loop7, logical block 130, lost async page write [ 166.212107][ T9173] I/O error, dev loop7, sector 7176 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.239514][ T9173] Buffer I/O error on dev loop7, logical block 897, async page read [ 166.251474][ T9173] I/O error, dev loop7, sector 7184 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.261220][ T9179] Buffer I/O error on dev loop7, logical block 131, lost async page write [ 166.265626][ T9173] Buffer I/O error on dev loop7, logical block 898, async page read [ 166.278931][ T9173] I/O error, dev loop7, sector 7192 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.290593][ T9173] Buffer I/O error on dev loop7, logical block 899, async page read [ 166.300538][ T9173] I/O error, dev loop7, sector 7200 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.309784][ T9179] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 166.310619][ T9173] Buffer I/O error on dev loop7, logical block 900, async page read [ 166.327528][ T9173] I/O error, dev loop7, sector 7208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.337558][ T9173] I/O error, dev loop7, sector 7216 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.409948][ T950] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.536745][ T9179] ldm_validate_partition_table(): Disk read failed. [ 166.570551][ T9179] Dev loop7: unable to read RDB block 0 [ 166.586886][ T9179] loop7: unable to read partition table [ 166.599907][ T950] usb 5-1: Using ep0 maxpacket: 8 [ 166.600452][ T9179] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 166.617209][ T950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.643573][ T950] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 166.663697][ T950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.688714][ T950] usb 5-1: config 0 descriptor?? [ 166.702552][ T950] gspca_main: spca501-2.14.0 probing 0000:0000 [ 166.834159][ T30] audit: type=1400 audit(1743767406.957:481): avc: denied { name_bind } for pid=9207 comm="syz.2.1289" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 167.107620][ T950] gspca_spca501: reg write: error -71 [ 167.129680][ T950] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 167.149711][ T950] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 167.171614][ T950] usb 5-1: USB disconnect, device number 8 [ 167.851146][ T30] audit: type=1326 audit(1743767407.977:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.4.1305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd69078d169 code=0x0 [ 167.886695][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 167.970028][ T910] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 168.079733][ T81] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 168.131294][ T910] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 168.141413][ T910] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.150017][ T910] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.159374][ T910] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.167951][ T910] usb 3-1: Product: syz [ 168.172225][ T910] usb 3-1: Manufacturer: syz [ 168.176813][ T910] usb 3-1: SerialNumber: syz [ 168.183434][ T910] usb 3-1: config 0 descriptor?? [ 168.192700][ T910] usb 3-1: selecting invalid altsetting 0 [ 168.244121][ T81] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.254864][ T81] usb 4-1: config 0 has no interfaces? [ 168.262710][ T81] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.292281][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.316333][ T81] usb 4-1: config 0 descriptor?? [ 168.326362][ T9249] loop9: detected capacity change from 0 to 7 [ 168.338515][ T9249] Dev loop9: unable to read RDB block 7 [ 168.344532][ T9249] loop9: AHDI p3 p4 [ 168.348946][ T9249] loop9: partition table partially beyond EOD, truncated [ 168.357250][ T9249] loop9: p3 start 1886353253 is beyond EOD, truncated [ 168.383697][ T5828] udevd[5828]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 168.397927][ T910] usb 3-1: USB disconnect, device number 15 [ 168.535534][ T81] usb 4-1: USB disconnect, device number 17 [ 168.666996][ T9259] netlink: 'syz.5.1312': attribute type 1 has an invalid length. [ 168.679153][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1312'. [ 168.879894][ T30] audit: type=1400 audit(1743767408.997:483): avc: denied { write } for pid=9267 comm="syz.5.1316" path="socket:[26746]" dev="sockfs" ino=26746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.984627][ T30] audit: type=1400 audit(1743767409.117:484): avc: denied { watch_reads } for pid=9269 comm="syz.2.1317" path="pipe:[4080]" dev="pipefs" ino=4080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 169.089220][ T9274] vivid-000: disconnect [ 169.326470][ T30] audit: type=1400 audit(1743767409.457:485): avc: denied { create } for pid=9283 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 169.399649][ T30] audit: type=1400 audit(1743767409.507:486): avc: denied { write } for pid=9283 comm="syz.3.1323" path="socket:[26560]" dev="sockfs" ino=26560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 169.487061][ T30] audit: type=1400 audit(1743767409.547:487): avc: denied { watch_sb watch_reads } for pid=9286 comm="syz.2.1324" path="/289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.497863][ T9271] vivid-000: reconnect [ 169.898318][ T9300] uprobe: syz.1.1330:9300 failed to unregister, leaking uprobe [ 170.012343][ T9303] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1331'. [ 170.245790][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 170.354894][ T30] audit: type=1400 audit(1743767410.477:488): avc: denied { setattr } for pid=9315 comm="syz.1.1338" name="PACKET" dev="sockfs" ino=26831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.330299][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 171.390366][ T9362] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.404849][ T9362] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 171.414552][ T950] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 171.511083][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 171.517923][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.534058][ T5871] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 171.544339][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.564434][ T5871] usb 6-1: config 0 descriptor?? [ 171.572213][ T950] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.592653][ T5871] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 171.605643][ T950] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 171.615096][ T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.624395][ T950] usb 5-1: Product: syz [ 171.629070][ T950] usb 5-1: Manufacturer: syz [ 171.639836][ T950] usb 5-1: SerialNumber: syz [ 171.911290][ T950] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 172.098774][ T30] audit: type=1400 audit(1743767412.227:489): avc: denied { read write } for pid=9348 comm="syz.4.1351" name="lp0" dev="devtmpfs" ino=2971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 172.169509][ T30] audit: type=1400 audit(1743767412.277:490): avc: denied { open } for pid=9348 comm="syz.4.1351" path="/dev/usb/lp0" dev="devtmpfs" ino=2971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 172.216135][ C1] usblp0: nonzero write bulk status received: -71 [ 172.226562][ T81] usb 5-1: USB disconnect, device number 9 [ 172.241601][ T81] usblp0: removed [ 172.317864][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 172.557492][ T30] audit: type=1400 audit(1743767412.687:491): avc: denied { create } for pid=9385 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.618795][ T30] audit: type=1400 audit(1743767412.687:492): avc: denied { write } for pid=9385 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.939809][ T5949] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 173.049954][ T5871] gspca_vc032x: reg_w err -71 [ 173.059802][ T5871] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 173.076997][ T5871] usb 6-1: USB disconnect, device number 4 [ 173.123548][ T5949] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 173.144264][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.159766][ T5949] usb 2-1: Product: syz [ 173.164054][ T5949] usb 2-1: Manufacturer: syz [ 173.168655][ T5949] usb 2-1: SerialNumber: syz [ 173.200184][ T5949] usb 2-1: config 0 descriptor?? [ 173.207590][ T5949] ch341 2-1:0.0: ch341-uart converter detected [ 173.215175][ T9416] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1379'. [ 173.349697][ T5915] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 173.511349][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.539707][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.551512][ T5915] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 173.563706][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.580042][ T5915] usb 4-1: config 0 descriptor?? [ 173.760751][ T9431] pim6reg1: entered allmulticast mode [ 174.097362][ T9437] syzkaller0: entered promiscuous mode [ 174.110532][ T9437] syzkaller0: entered allmulticast mode [ 174.237011][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.244335][ T5949] ch341-uart ttyUSB0: break control not supported, using simulated break [ 174.258519][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.268413][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.277938][ T5949] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 174.285052][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.294911][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.303387][ T5949] usb 2-1: USB disconnect, device number 18 [ 174.340071][ T5949] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 174.349109][ T5949] ch341 2-1:0.0: device disconnected [ 174.410810][ T5915] hid-led 0003:27B8:01ED.0009: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 174.454652][ T5915] hid-led 0003:27B8:01ED.0009: ThingM blink(1) initialized [ 174.649895][ T5868] usb 4-1: USB disconnect, device number 18 [ 174.837423][ T30] audit: type=1400 audit(1743767414.967:493): avc: denied { listen } for pid=9447 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.901914][ T30] audit: type=1400 audit(1743767414.967:494): avc: denied { accept } for pid=9447 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.816716][ T9463] loop7: detected capacity change from 0 to 16384 [ 175.954363][ T9463] blk_print_req_error: 48 callbacks suppressed [ 175.954382][ T9463] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 175.961791][ T9467] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 175.974946][ T9463] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 175.984007][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 175.994068][ T9463] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.009812][ T9463] buffer_io_error: 807 callbacks suppressed [ 176.009828][ T9463] Buffer I/O error on dev loop7, logical block 608, async page read [ 176.024302][ T9467] Buffer I/O error on dev loop7, logical block 256, lost async page write [ 176.033256][ T9467] Buffer I/O error on dev loop7, logical block 257, lost async page write [ 176.041903][ T9469] batadv_slave_1: entered promiscuous mode [ 176.055663][ T9463] I/O error, dev loop7, sector 4872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.081678][ T9467] Buffer I/O error on dev loop7, logical block 258, lost async page write [ 176.089729][ T9463] Buffer I/O error on dev loop7, logical block 609, async page read [ 176.090711][ T9467] Buffer I/O error on dev loop7, logical block 259, lost async page write [ 176.098372][ T9463] I/O error, dev loop7, sector 4880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.108092][ T9467] Buffer I/O error on dev loop7, logical block 260, lost async page write [ 176.121414][ T9476] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.1402'. [ 176.125422][ T9463] Buffer I/O error on dev loop7, logical block 610, async page read [ 176.135138][ T9476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1402'. [ 176.143036][ T9463] I/O error, dev loop7, sector 4888 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.162231][ T9467] Buffer I/O error on dev loop7, logical block 261, lost async page write [ 176.171107][ T9467] Buffer I/O error on dev loop7, logical block 262, lost async page write [ 176.180313][ T9463] I/O error, dev loop7, sector 4896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.201510][ T9467] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 176.211600][ T9463] I/O error, dev loop7, sector 4904 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.255351][ T9467] ldm_validate_partition_table(): Disk read failed. [ 176.262509][ T9467] Dev loop7: unable to read RDB block 0 [ 176.268619][ T9467] loop7: unable to read partition table [ 176.282393][ T9467] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 176.315390][ T9472] team0: Port device team_slave_1 removed [ 176.344686][ T9440] chnl_net:caif_netlink_parms(): no params data found [ 176.379876][ T54] Bluetooth: hci0: command tx timeout [ 176.414457][ T9468] batadv_slave_1: left promiscuous mode [ 176.604693][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.612682][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.626433][ T9440] bridge_slave_0: entered allmulticast mode [ 176.626608][ T30] audit: type=1400 audit(1743767416.757:495): avc: denied { read } for pid=9490 comm="syz.4.1408" path="socket:[27265]" dev="sockfs" ino=27265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.635484][ T9440] bridge_slave_0: entered promiscuous mode [ 176.666680][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.673880][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.682410][ T9440] bridge_slave_1: entered allmulticast mode [ 176.689155][ T9440] bridge_slave_1: entered promiscuous mode [ 176.713607][ T9440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.722746][ T81] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 176.733095][ T9440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.758224][ T9440] team0: Port device team_slave_0 added [ 176.767177][ T9440] team0: Port device team_slave_1 added [ 176.809892][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.816847][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.845013][ T9440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.857647][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.873396][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.904045][ T9440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.923763][ T81] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.950264][ T81] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 176.972361][ T81] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.003859][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.018318][ T9440] hsr_slave_0: entered promiscuous mode [ 177.033614][ T9440] hsr_slave_1: entered promiscuous mode [ 177.040809][ T9440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.048378][ T9440] Cannot create hsr debugfs directory [ 177.053697][ T9481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.091848][ T81] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.408555][ T5949] usb 2-1: USB disconnect, device number 19 [ 177.473817][ T9440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.511836][ T9440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.530423][ T9440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.569026][ T9440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.705065][ T9440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.724522][ T9440] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.737208][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.744348][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.760467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.767587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.937446][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.072439][ T9440] veth0_vlan: entered promiscuous mode [ 178.081668][ T9440] veth1_vlan: entered promiscuous mode [ 178.109398][ T9440] veth0_macvtap: entered promiscuous mode [ 178.118158][ T9440] veth1_macvtap: entered promiscuous mode [ 178.132488][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.143285][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.153174][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.163633][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.173565][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.184125][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.193975][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.214810][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.234466][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.266164][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.291721][ T9523] loop7: detected capacity change from 0 to 16384 [ 178.304247][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.425401][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.440948][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.460320][ T54] Bluetooth: hci0: command tx timeout [ 178.462204][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.510755][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.537827][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.569668][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.579539][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.594976][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.615175][ T9526] ldm_validate_partition_table(): Disk read failed. [ 178.622665][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.630087][ T9526] Dev loop7: unable to read RDB block 0 [ 178.633171][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.640617][ T9526] loop7: unable to read partition table [ 178.648969][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.655587][ T9526] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 178.668026][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.710912][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.736449][ T9440] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.761860][ T9440] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.816234][ T9440] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.844964][ T9440] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.869006][ T9535] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 178.928221][ T9535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.986318][ T9538] bond2: (slave gretap1): making interface the new active one [ 179.014371][ T9538] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 179.193432][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.213335][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.319391][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.347168][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.752233][ T30] audit: type=1400 audit(1743767419.867:496): avc: denied { mount } for pid=9555 comm="syz.5.1424" name="/" dev="hugetlbfs" ino=29792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 179.808961][ T9556] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.818178][ T30] audit: type=1400 audit(1743767419.937:497): avc: denied { mounton } for pid=9555 comm="syz.5.1424" path="/66/file1/bus" dev="hugetlbfs" ino=28753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 179.842162][ T5946] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 179.876204][ T9556] overlayfs: failed to set xattr on upper [ 179.882626][ T9556] overlayfs: ...falling back to redirect_dir=nofollow. [ 179.891039][ T9556] overlayfs: ...falling back to index=off. [ 179.896992][ T9556] overlayfs: ...falling back to uuid=null. [ 179.903389][ T9556] overlayfs: maximum fs stacking depth exceeded [ 179.929860][ T30] audit: type=1400 audit(1743767420.047:498): avc: denied { allowed } for pid=9558 comm="syz.4.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.000709][ T30] audit: type=1400 audit(1743767420.137:499): avc: denied { unmount } for pid=8607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 180.031984][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 180.060153][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.082891][ T5946] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 180.098492][ T9563] syzkaller0: entered promiscuous mode [ 180.104391][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.112888][ T9563] syzkaller0: entered allmulticast mode [ 180.126235][ T9563] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 180.137144][ T5946] usb 4-1: config 0 descriptor?? [ 180.149839][ T5946] gspca_main: spca501-2.14.0 probing 0000:0000 [ 180.200968][ T910] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 180.379172][ T910] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.446674][ T910] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.504487][ T910] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.522366][ T910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.539889][ T54] Bluetooth: hci0: command tx timeout [ 180.679280][ T9559] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 180.732982][ T910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.742299][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1430'. [ 180.758352][ T5946] gspca_spca501: reg write: error -71 [ 180.774253][ T5946] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 180.812495][ T5946] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 180.897063][ T5946] usb 4-1: USB disconnect, device number 19 [ 180.928281][ T9579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input18 [ 181.170574][ T5946] usb 5-1: USB disconnect, device number 10 [ 181.665190][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1440'. [ 182.102472][ T9605] batadv_slave_1: entered promiscuous mode [ 182.188008][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 182.525395][ T9605] team0: Port device team_slave_1 removed [ 182.622927][ T54] Bluetooth: hci0: command tx timeout [ 182.688714][ T9604] batadv_slave_1: left promiscuous mode [ 182.757727][ T5946] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 182.942467][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 182.975136][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.997746][ T5946] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 183.017078][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.102560][ T5946] usb 2-1: config 0 descriptor?? [ 183.119240][ T5946] gspca_main: spca501-2.14.0 probing 0000:0000 [ 183.257362][ T30] audit: type=1400 audit(1743767423.387:500): avc: denied { read write } for pid=9629 comm="syz.3.1455" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.330534][ T30] audit: type=1400 audit(1743767423.387:501): avc: denied { open } for pid=9629 comm="syz.3.1455" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.359090][ T30] audit: type=1400 audit(1743767423.417:502): avc: denied { map } for pid=9629 comm="syz.3.1455" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.382702][ T30] audit: type=1400 audit(1743767423.417:503): avc: denied { execute } for pid=9629 comm="syz.3.1455" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.615849][ T5946] gspca_spca501: reg write: error -71 [ 183.661450][ T5946] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 183.670356][ T5946] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 183.692911][ T5946] usb 2-1: USB disconnect, device number 20 [ 184.931030][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 185.047690][ T30] audit: type=1326 audit(1743767425.167:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7c38d169 code=0x7ffc0000 [ 185.156360][ T30] audit: type=1326 audit(1743767425.177:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7c38d169 code=0x7ffc0000 [ 185.179683][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.205499][ T30] audit: type=1326 audit(1743767425.177:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5e7c38d169 code=0x7ffc0000 [ 185.228663][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.276841][ T30] audit: type=1326 audit(1743767425.177:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7c38d169 code=0x7ffc0000 [ 185.301561][ T30] audit: type=1326 audit(1743767425.177:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7c38d169 code=0x7ffc0000 [ 185.324880][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.334889][ T30] audit: type=1326 audit(1743767425.217:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.5.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f5e7c38d169 code=0x7ffc0000 [ 185.358261][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.389694][ T5871] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 185.551365][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.570505][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.585200][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.601264][ T5871] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.615317][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.686132][ T5871] usb 7-1: config 0 descriptor?? [ 186.118996][ T5871] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 186.154567][ T5871] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 186.483828][ T5948] usb 7-1: USB disconnect, device number 2 [ 187.673319][ T9735] input: syz0 as /devices/virtual/input/input20 [ 187.680020][ T9737] veth0_to_bond: entered promiscuous mode [ 187.699910][ T9737] bridge0: entered promiscuous mode [ 187.726564][ T9736] bridge0: left promiscuous mode [ 187.742814][ T9736] veth0_to_bond: left promiscuous mode [ 187.761408][ T81] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.939099][ T81] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.975925][ T81] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.988791][ T81] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.007033][ T81] usb 6-1: Product: syz [ 188.018014][ T81] usb 6-1: Manufacturer: syz [ 188.032849][ T81] usb 6-1: SerialNumber: syz [ 188.259892][ T81] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.545812][ C1] usblp0: nonzero write bulk status received: -71 [ 188.549743][ T5915] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.562763][ T81] usb 6-1: USB disconnect, device number 5 [ 188.581826][ T81] usblp0: removed [ 188.652093][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 188.652111][ T30] audit: type=1400 audit(1743767428.787:521): avc: denied { cmd } for pid=9757 comm="syz.1.1509" path="socket:[30604]" dev="sockfs" ino=30604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 188.721550][ T5915] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 188.734858][ T5915] usb 7-1: config 0 has no interface number 0 [ 188.756265][ T5915] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 188.783658][ T5915] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.817594][ T5915] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 188.825022][ T30] audit: type=1326 audit(1743767428.947:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 188.830314][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.864061][ T5915] usb 7-1: Product: syz [ 188.868253][ T5915] usb 7-1: Manufacturer: syz [ 188.875872][ T5915] usb 7-1: SerialNumber: syz [ 188.895688][ T5915] usb 7-1: config 0 descriptor?? [ 188.907073][ T9752] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 188.937817][ T5915] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 188.961193][ T30] audit: type=1326 audit(1743767428.947:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 188.965843][ T5915] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 189.025360][ T30] audit: type=1326 audit(1743767428.987:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 189.074388][ T30] audit: type=1326 audit(1743767428.987:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 189.199287][ T30] audit: type=1326 audit(1743767428.987:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 189.284423][ T30] audit: type=1326 audit(1743767429.027:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 189.336994][ T30] audit: type=1326 audit(1743767429.027:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 189.470505][ T30] audit: type=1326 audit(1743767429.027:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 189.513805][ T81] usb 7-1: USB disconnect, device number 3 [ 189.552492][ T81] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 189.586555][ T30] audit: type=1326 audit(1743767429.047:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 189.611967][ T81] cyberjack 7-1:0.69: device disconnected [ 190.243199][ T9777] input: syz1 as /devices/virtual/input/input21 [ 190.965674][ T9785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.101413][ T5868] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 192.109873][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.263075][ T9840] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1543'. [ 192.283517][ T9840] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1543'. [ 192.292945][ T5868] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.304182][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 192.320623][ T5868] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.334227][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 192.345623][ T5868] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.355668][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.369617][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.378265][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 192.395173][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 192.407775][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 192.431774][ T9819] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 192.437405][ T5871] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 192.456740][ T5868] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.470934][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.493749][ T5871] usb 5-1: Product: syz [ 192.497976][ T5871] usb 5-1: Manufacturer: syz [ 192.522534][ T5871] usb 5-1: SerialNumber: syz [ 192.564865][ T5871] usb 5-1: config 0 descriptor?? [ 192.579053][ T9820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 192.600579][ T5871] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 192.619212][ T5179] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 192.707178][ T5179] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 192.792649][ T5179] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 192.793043][ T5871] usb 6-1: USB disconnect, device number 6 [ 192.861561][ T5179] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 192.948952][ T5820] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 192.974570][ T9820] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 193.028179][ T5179] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 193.062689][ T5946] usb 5-1: USB disconnect, device number 11 [ 193.068670][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.350923][ T81] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 193.515661][ T81] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.534344][ T81] usb 7-1: config 0 has no interface number 0 [ 193.559836][ T81] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 193.629779][ T81] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 193.652465][ T81] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.694041][ T81] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.718656][ T81] usb 7-1: config 0 descriptor?? [ 193.750463][ T9859] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 193.810797][ T81] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 194.063296][ T81] usb 7-1: USB disconnect, device number 4 [ 194.063342][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 194.180119][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 194.180132][ T30] audit: type=1400 audit(1743767434.317:533): avc: denied { ioctl } for pid=9876 comm="syz.5.1557" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 194.235932][ T9882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.303918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.316265][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325806][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.200770][ T5915] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 195.379781][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 195.394204][ T5915] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 195.422017][ T5915] usb 7-1: config 0 has no interface number 0 [ 195.428215][ T5915] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.481762][ T5915] usb 7-1: config 0 interface 85 has no altsetting 0 [ 195.521363][ T5915] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 195.542099][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.570018][ T5915] usb 7-1: Product: syz [ 195.576687][ T5915] usb 7-1: Manufacturer: syz [ 195.592333][ T5915] usb 7-1: SerialNumber: syz [ 195.620449][ T5915] usb 7-1: config 0 descriptor?? [ 195.699922][ T30] audit: type=1326 audit(1743767435.827:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 195.759970][ T30] audit: type=1326 audit(1743767435.857:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 195.806524][ T30] audit: type=1326 audit(1743767435.857:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 195.838288][ T30] audit: type=1326 audit(1743767435.857:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 195.884829][ T30] audit: type=1326 audit(1743767435.857:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 195.932201][ T30] audit: type=1326 audit(1743767435.857:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 195.957307][ T30] audit: type=1326 audit(1743767435.857:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 195.982526][ T30] audit: type=1326 audit(1743767435.857:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 196.048045][ T30] audit: type=1326 audit(1743767435.857:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feca738d169 code=0x7ffc0000 [ 196.242689][ T5915] appletouch 7-1:0.85: Geyser mode initialized. [ 196.261451][ T5915] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input23 [ 196.508155][ T5915] usb 7-1: USB disconnect, device number 5 [ 196.508165][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 196.590229][ T5915] appletouch 7-1:0.85: input: appletouch disconnected [ 196.790385][ T9941] program syz.4.1584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.979903][ T81] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 197.144562][ T81] usb 6-1: Using ep0 maxpacket: 16 [ 197.175389][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.220163][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.246144][ T81] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 197.267605][ T81] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.288816][ T81] usb 6-1: config 0 descriptor?? [ 197.515183][ T5946] IPVS: starting estimator thread 0... [ 197.522484][ T9968] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 197.630186][ T9974] IPVS: using max 41 ests per chain, 98400 per kthread [ 197.856166][ T9982] use of bytesused == 0 is deprecated and will be removed in the future, [ 197.867499][ T9982] use the actual size instead. [ 198.108035][ T81] letsketch 0003:6161:4D15.000B: Device info: ဉ [ 198.210007][ T5868] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.280700][ T5948] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 198.316634][ T81] letsketch 0003:6161:4D15.000B: Device info: á‘” [ 198.375018][ T5868] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 198.389766][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.413831][ T5868] usb 5-1: config 0 descriptor?? [ 198.439692][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 198.447055][ T5948] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 198.455627][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.466222][ T5948] usb 2-1: config 0 has no interface number 0 [ 198.472765][ T5948] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 198.486539][ T5948] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 198.497697][ T5948] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.513452][ T5948] usb 2-1: config 0 interface 52 has no altsetting 0 [ 198.522129][ T5948] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 198.532057][ T5948] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 198.540918][ T81] letsketch 0003:6161:4D15.000B: Device info: ш [ 198.547635][ T5948] usb 2-1: Manufacturer: syz [ 198.555305][ T5948] usb 2-1: config 0 descriptor?? [ 198.772395][ T5948] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 198.783923][ T81] usb 6-1: Max retries (5) exceeded reading string descriptor 1 [ 198.798014][ T5948] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 198.807878][ T81] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -71 [ 198.833281][ T81] usb 6-1: USB disconnect, device number 7 [ 199.004665][ T5948] usb 2-1: USB disconnect, device number 21 [ 199.658750][ T5868] usb 5-1: Cannot set autoneg [ 199.674693][ T5868] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 199.732996][ T5868] usb 5-1: USB disconnect, device number 12 [ 200.249760][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 200.249781][ T30] audit: type=1400 audit(1743767440.377:552): avc: denied { create } for pid=10044 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.316278][ T30] audit: type=1400 audit(1743767440.427:553): avc: denied { connect } for pid=10044 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.506438][ T30] audit: type=1400 audit(1743767440.427:554): avc: denied { bind } for pid=10044 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.547408][ T30] audit: type=1400 audit(1743767440.427:555): avc: denied { write } for pid=10044 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.612389][ T30] audit: type=1400 audit(1743767440.427:556): avc: denied { getopt } for pid=10044 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.797604][T10061] IPv6: addrconf: prefix option has invalid lifetime [ 200.826288][T10061] IPv6: addrconf: prefix option has invalid lifetime [ 200.960059][ T5868] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 201.129965][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 201.141342][ T5868] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.166411][ T5868] usb 2-1: config 0 has no interface number 0 [ 201.184276][ T5868] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 201.194133][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.205155][ T5868] usb 2-1: Product: syz [ 201.209438][ T5868] usb 2-1: Manufacturer: syz [ 201.214523][ T5868] usb 2-1: SerialNumber: syz [ 201.231158][ T5868] usb 2-1: config 0 descriptor?? [ 201.263328][ T5868] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 201.307526][T10078] overlay: filesystem on ./file1 not supported [ 201.315072][ T30] audit: type=1400 audit(1743767441.437:557): avc: denied { mounton } for pid=10075 comm="syz.6.1640" path="/36/file1/file0" dev="autofs" ino=32742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 201.645748][ T30] audit: type=1400 audit(1743767441.777:558): avc: denied { remount } for pid=10090 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 201.887810][T10103] xt_hashlimit: size too large, truncated to 1048576 [ 202.159889][ T30] audit: type=1400 audit(1743767442.277:559): avc: denied { bind } for pid=10109 comm="syz.6.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.693162][ T5868] gspca_spca1528: reg_w err -71 [ 202.698167][ T5868] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 202.726840][ T5868] usb 2-1: USB disconnect, device number 22 [ 203.183768][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1654'. [ 203.683513][T10097] pim6reg: entered allmulticast mode [ 203.688950][T10098] lo: entered allmulticast mode [ 203.694257][T10101] pim6reg: left allmulticast mode [ 203.699351][T10101] lo: left allmulticast mode [ 203.961737][ T30] audit: type=1400 audit(1743767444.097:560): avc: denied { remount } for pid=10133 comm="syz.1.1659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 204.289490][ T5868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5868 comm=kworker/0:4 [ 204.356682][T10149] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 204.921232][T10167] input: syz0 as /devices/virtual/input/input25 [ 205.527409][ T30] audit: type=1400 audit(1743767445.657:561): avc: denied { mounton } for pid=10183 comm="syz.6.1681" path=2F34362F66696C6530202864656C6574656429 dev="proc" ino=4026534283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 205.617504][ T30] audit: type=1400 audit(1743767445.747:562): avc: denied { unmount } for pid=9440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.690640][ T30] audit: type=1400 audit(1743767445.807:563): avc: denied { create } for pid=10189 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 205.729723][ T30] audit: type=1400 audit(1743767445.827:564): avc: denied { ioctl } for pid=10189 comm="syz.4.1692" path="socket:[33927]" dev="sockfs" ino=33927 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 205.895051][T10193] netlink: 'syz.3.1685': attribute type 10 has an invalid length. [ 205.985740][T10193] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.004997][T10193] bond0: (slave team0): Enslaving as an active interface with an up link [ 206.079204][T10201] netlink: 'syz.4.1688': attribute type 13 has an invalid length. [ 206.790990][T10212] Invalid ELF header magic: != ELF [ 207.045088][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.438768][T10201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.482683][T10201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.710395][T10201] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.756936][T10201] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.765577][T10201] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.774137][T10201] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.832200][T10222] syz_tun: entered allmulticast mode [ 207.860765][T10230] syz_tun: left allmulticast mode [ 209.259718][T10218] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 209.430166][T10218] usb 6-1: Using ep0 maxpacket: 8 [ 209.447667][T10218] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 209.466526][T10218] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 209.489025][T10218] usb 6-1: config 179 has no interface number 0 [ 209.507490][T10218] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 209.536486][T10218] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 209.580041][T10218] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 209.610190][T10218] usb 6-1: config 179 interface 65 has no altsetting 0 [ 209.619709][T10218] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 209.628808][T10218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.305064][T10185] Set syz1 is full, maxelem 65536 reached [ 210.699696][ T5871] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 210.861251][ T5871] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.870711][ T5949] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 210.899750][ T5871] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.910028][ T5871] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.919231][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.937260][T10291] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 210.953034][ T5871] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.063029][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 211.082904][ T5949] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 211.099907][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.116348][ T5949] usb 2-1: Product: syz [ 211.127922][ T5949] usb 2-1: Manufacturer: syz [ 211.137801][ T5949] usb 2-1: SerialNumber: syz [ 211.162540][ T5949] usb 2-1: config 0 descriptor?? [ 211.268611][ T5871] usb 4-1: USB disconnect, device number 20 [ 211.378768][ T5868] usb 6-1: USB disconnect, device number 8 [ 211.690253][ T5949] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 212.685302][ T5949] usb 2-1: USB disconnect, device number 23 [ 212.902755][ T30] audit: type=1400 audit(1743767453.037:565): avc: denied { write } for pid=10327 comm="syz.4.1729" path="socket:[33414]" dev="sockfs" ino=33414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.089785][ T5868] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 213.213847][T10335] evm: overlay not supported [ 213.249748][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 213.256307][ T30] audit: type=1400 audit(1743767453.387:566): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 213.266924][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 213.326903][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.342200][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 213.360262][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 213.374123][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 213.389278][ T5868] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 213.424272][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.433483][ T5868] usb 7-1: Product: syz [ 213.437745][ T5868] usb 7-1: Manufacturer: syz [ 213.445890][ T5868] usb 7-1: SerialNumber: syz [ 213.463829][ T5868] usb 7-1: config 0 descriptor?? [ 213.469801][T10332] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 213.493121][ T5868] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input26 [ 213.527544][ T5179] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.613534][ T5179] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.676686][T10348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 213.712504][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 213.721972][ T5820] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.734971][T10354] input: syz0 as /devices/virtual/input/input27 [ 213.747387][ T5179] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.823331][ T5179] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.856157][T10332] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.906119][ T5179] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.934271][ T5179] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.937524][T10219] usb 7-1: USB disconnect, device number 6 [ 213.944295][ C0] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.964190][T10360] batman_adv: batadv0: Adding interface: dummy0 [ 213.982194][T10360] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.018856][T10360] batman_adv: batadv0: Interface activated: dummy0 [ 214.028714][ T30] audit: type=1400 audit(1743767454.157:567): avc: denied { listen } for pid=10362 comm="syz.5.1743" lport=59662 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 214.190988][ T5868] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 214.371570][ T5868] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 214.380298][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.392723][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.403794][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.415098][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.428099][ T5868] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.437227][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.450450][ T5868] usb 2-1: config 0 descriptor?? [ 214.459114][T10363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.876249][ T5868] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 214.884814][ T5868] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 214.895387][ T5868] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 215.163432][ T5868] usb 2-1: USB disconnect, device number 24 [ 216.067156][T10393] netlink: 'syz.3.1756': attribute type 4 has an invalid length. [ 216.172216][T10393] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.1756'. [ 216.696322][T10415] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 216.760083][ T5949] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 216.792679][T10415] bond1: entered promiscuous mode [ 216.819888][T10415] bond1: entered allmulticast mode [ 216.831805][T10419] batadv1: entered promiscuous mode [ 216.837061][T10419] batadv1: entered allmulticast mode [ 216.843935][T10419] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 216.852624][T10419] bond1: (slave batadv1): making interface the new active one [ 216.862180][T10419] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 216.955426][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 216.980999][ T5949] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 217.001688][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.023692][ T5949] usb 6-1: Product: syz [ 217.028001][ T5949] usb 6-1: Manufacturer: syz [ 217.040088][ T5949] usb 6-1: SerialNumber: syz [ 217.053525][ T5949] usb 6-1: config 0 descriptor?? [ 217.072894][ T5949] gspca_main: sq930x-2.14.0 probing 2770:930c [ 217.221306][ T30] audit: type=1400 audit(1743767457.357:568): avc: denied { create } for pid=10432 comm="syz.6.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 217.275839][ T5949] gspca_sq930x: reg_r 001f failed -71 [ 217.289991][ T5949] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 217.294120][ T30] audit: type=1400 audit(1743767457.377:569): avc: denied { write } for pid=10432 comm="syz.6.1774" path="socket:[34756]" dev="sockfs" ino=34756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 217.312349][ T5949] usb 6-1: USB disconnect, device number 9 [ 217.414490][ T30] audit: type=1400 audit(1743767457.377:570): avc: denied { nlmsg_write } for pid=10432 comm="syz.6.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 217.781021][T10453] [ 217.783385][T10453] ====================================================== [ 217.790388][T10453] WARNING: possible circular locking dependency detected [ 217.797398][T10453] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 217.804133][T10453] ------------------------------------------------------ [ 217.811124][T10453] syz.4.1783/10453 is trying to acquire lock: [ 217.817164][T10453] ffffffff906963a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 217.826914][T10453] [ 217.826914][T10453] but task is already holding lock: [ 217.834266][T10453] ffff888142b4cea8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 217.845491][T10453] [ 217.845491][T10453] which lock already depends on the new lock. [ 217.845491][T10453] [ 217.855869][T10453] [ 217.855869][T10453] the existing dependency chain (in reverse order) is: [ 217.864859][T10453] [ 217.864859][T10453] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 217.873446][T10453] blk_alloc_queue+0x619/0x760 [ 217.878726][T10453] blk_mq_alloc_queue+0x179/0x290 [ 217.884251][T10453] __blk_mq_alloc_disk+0x29/0x120 [ 217.889776][T10453] loop_add+0x496/0xb70 [ 217.894433][T10453] loop_init+0x164/0x270 [ 217.899181][T10453] do_one_initcall+0x120/0x6e0 [ 217.904454][T10453] kernel_init_freeable+0x5c2/0x900 [ 217.910158][T10453] kernel_init+0x1c/0x2b0 [ 217.914997][T10453] ret_from_fork+0x45/0x80 [ 217.919922][T10453] ret_from_fork_asm+0x1a/0x30 [ 217.925191][T10453] [ 217.925191][T10453] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 217.932383][T10453] fs_reclaim_acquire+0x102/0x150 [ 217.937922][T10453] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 217.944225][T10453] __alloc_skb+0x2b2/0x380 [ 217.949145][T10453] alloc_uevent_skb+0x7d/0x210 [ 217.954417][T10453] kobject_uevent_env+0xca4/0x1870 [ 217.960035][T10453] kobject_synth_uevent+0x7d4/0x8a0 [ 217.965760][T10453] bus_uevent_store+0x3d/0x90 [ 217.970944][T10453] bus_attr_store+0x71/0xb0 [ 217.975966][T10453] sysfs_kf_write+0xef/0x150 [ 217.981063][T10453] kernfs_fop_write_iter+0x351/0x510 [ 217.986848][T10453] vfs_write+0x5ba/0x1180 [ 217.991679][T10453] ksys_write+0x12a/0x240 [ 217.996502][T10453] do_syscall_64+0xcd/0x260 [ 218.001506][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.007901][T10453] [ 218.007901][T10453] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 218.015697][T10453] __lock_acquire+0x1173/0x1ba0 [ 218.021046][T10453] lock_acquire+0x179/0x350 [ 218.026043][T10453] __mutex_lock+0x199/0xb90 [ 218.031047][T10453] kobject_uevent_env+0xb36/0x1870 [ 218.037095][T10453] loop_set_status+0x9c7/0xb90 [ 218.042358][T10453] loop_set_status_old+0x162/0x1d0 [ 218.047964][T10453] lo_ioctl+0x695/0x26d0 [ 218.052704][T10453] blkdev_ioctl+0x274/0x6d0 [ 218.057712][T10453] __x64_sys_ioctl+0x190/0x200 [ 218.062982][T10453] do_syscall_64+0xcd/0x260 [ 218.067987][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.074377][T10453] [ 218.074377][T10453] other info that might help us debug this: [ 218.074377][T10453] [ 218.084582][T10453] Chain exists of: [ 218.084582][T10453] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 218.084582][T10453] [ 218.098292][T10453] Possible unsafe locking scenario: [ 218.098292][T10453] [ 218.105717][T10453] CPU0 CPU1 [ 218.111055][T10453] ---- ---- [ 218.116395][T10453] lock(&q->q_usage_counter(io)#24); [ 218.121757][T10453] lock(fs_reclaim); [ 218.128255][T10453] lock(&q->q_usage_counter(io)#24); [ 218.136125][T10453] lock(uevent_sock_mutex); [ 218.140696][T10453] [ 218.140696][T10453] *** DEADLOCK *** [ 218.140696][T10453] [ 218.148819][T10453] 3 locks held by syz.4.1783/10453: [ 218.153986][T10453] #0: ffff888026070368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xb90 [ 218.163366][T10453] #1: ffff888142b4cea8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 218.175020][T10453] #2: ffff888142b4cee0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 218.186919][T10453] [ 218.186919][T10453] stack backtrace: [ 218.192786][T10453] CPU: 0 UID: 0 PID: 10453 Comm: syz.4.1783 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 218.192804][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.192813][T10453] Call Trace: [ 218.192818][T10453] [ 218.192824][T10453] dump_stack_lvl+0x116/0x1f0 [ 218.192845][T10453] print_circular_bug+0x275/0x350 [ 218.192869][T10453] check_noncircular+0x14c/0x170 [ 218.192890][T10453] __lock_acquire+0x1173/0x1ba0 [ 218.192914][T10453] lock_acquire+0x179/0x350 [ 218.192925][T10453] ? kobject_uevent_env+0xb36/0x1870 [ 218.192945][T10453] ? __pfx___might_resched+0x10/0x10 [ 218.192967][T10453] __mutex_lock+0x199/0xb90 [ 218.192985][T10453] ? kobject_uevent_env+0xb36/0x1870 [ 218.193003][T10453] ? kfree+0x252/0x4d0 [ 218.193024][T10453] ? kobject_uevent_env+0xb36/0x1870 [ 218.193043][T10453] ? __pfx___mutex_lock+0x10/0x10 [ 218.193060][T10453] ? __asan_memcpy+0x3c/0x60 [ 218.193081][T10453] ? kobject_get_path+0x8e/0x2a0 [ 218.193099][T10453] ? kobject_uevent_env+0xb36/0x1870 [ 218.193118][T10453] kobject_uevent_env+0xb36/0x1870 [ 218.193138][T10453] ? __asan_memcpy+0x3c/0x60 [ 218.193157][T10453] loop_set_status+0x9c7/0xb90 [ 218.193174][T10453] loop_set_status_old+0x162/0x1d0 [ 218.193187][T10453] ? __pfx_loop_set_status_old+0x10/0x10 [ 218.193205][T10453] ? find_held_lock+0x2b/0x80 [ 218.193221][T10453] ? is_bpf_text_address+0x8a/0x1a0 [ 218.193245][T10453] ? stack_trace_save+0x8e/0xc0 [ 218.193271][T10453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.193287][T10453] lo_ioctl+0x695/0x26d0 [ 218.193302][T10453] ? __lock_acquire+0x5ca/0x1ba0 [ 218.193314][T10453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.193329][T10453] ? __pfx_lo_ioctl+0x10/0x10 [ 218.193342][T10453] ? find_held_lock+0x2b/0x80 [ 218.193357][T10453] ? avc_has_extended_perms+0x33a/0x1090 [ 218.193374][T10453] ? avc_has_extended_perms+0x47c/0x1090 [ 218.193389][T10453] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 218.193402][T10453] ? kasan_quarantine_put+0x10a/0x240 [ 218.193416][T10453] ? lockdep_hardirqs_on+0x7c/0x110 [ 218.193433][T10453] ? find_held_lock+0x2b/0x80 [ 218.193451][T10453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.193464][T10453] ? blkdev_common_ioctl+0x1dd/0x2250 [ 218.193484][T10453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.193497][T10453] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 218.193515][T10453] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 218.193536][T10453] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 218.193557][T10453] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 218.193578][T10453] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 218.193600][T10453] ? __pfx_lo_ioctl+0x10/0x10 [ 218.193613][T10453] blkdev_ioctl+0x274/0x6d0 [ 218.193631][T10453] ? __pfx_blkdev_ioctl+0x10/0x10 [ 218.193648][T10453] ? selinux_file_ioctl+0x180/0x270 [ 218.193666][T10453] ? selinux_file_ioctl+0xb4/0x270 [ 218.193684][T10453] ? __pfx_blkdev_ioctl+0x10/0x10 [ 218.193702][T10453] __x64_sys_ioctl+0x190/0x200 [ 218.193721][T10453] do_syscall_64+0xcd/0x260 [ 218.193738][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.193750][T10453] RIP: 0033:0x7fd69078d169 [ 218.193764][T10453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.193777][T10453] RSP: 002b:00007fd6915e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.193789][T10453] RAX: ffffffffffffffda RBX: 00007fd6909a5fa0 RCX: 00007fd69078d169 [ 218.193797][T10453] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000003 [ 218.193805][T10453] RBP: 00007fd69080e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 218.193812][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.193820][T10453] R13: 0000000000000000 R14: 00007fd6909a5fa0 R15: 00007ffc3c5ade08 [ 218.193832][T10453]