last executing test programs: 8.532355904s ago: executing program 0 (id=361): creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 8.446971513s ago: executing program 0 (id=364): pipe2$9p(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x501000, 0x121) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='high-', 0x5) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 8.352764034s ago: executing program 0 (id=365): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4002010, 0xffffffffffffffff, 0xbef8f000) chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') 8.320742126s ago: executing program 0 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x3, 0x200, 0x0, 0x8, 0x7, 0xa}) 7.292207358s ago: executing program 2 (id=390): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 5.66158523s ago: executing program 0 (id=396): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 4.18286314s ago: executing program 2 (id=401): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x852}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x3, r1, 0x0, &(0x7f0000000300)="cb", 0x1, 0x4d8000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r1, 0x0, &(0x7f0000000340)="c3", 0x1, 0x9f}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x852, 0x280000000}) 4.053060179s ago: executing program 2 (id=403): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="02002abd"], 0x20}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4004800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.700874937s ago: executing program 3 (id=407): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x4ed, 0x100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 2.588274312s ago: executing program 2 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="b5533f67642100ac00d7df9f5ee80875215fa86d04d70af24dde0030225cceea2cb8e2d469"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.587575928s ago: executing program 0 (id=410): r0 = io_uring_setup(0x135e, &(0x7f0000000100)={0x0, 0xf43e, 0x400, 0x2, 0x1000ab}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44094}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.512136795s ago: executing program 3 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xf88c, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.128879055s ago: executing program 3 (id=413): syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.039254674s ago: executing program 2 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0x8000000, 0x8, 0x9, 0xfb, 0x9, 0x8, 0x17, 0x0, 0x2e, 0x19}, {0x60000, 0x50000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0x50000, 0x9000, 0x0, 0x4, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x10000, 0xd, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x58000, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf8, 0x8, 0x5}, {0x3000, 0x2, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0xf3, 0xc1, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0x8000000, 0x2424, 0xe, 0x8000, 0x8080000, [0x6800000000000000, 0x4, 0x61, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.741978574s ago: executing program 3 (id=415): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.518724314s ago: executing program 1 (id=417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f078f897c80741fac4424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x55}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.441505534s ago: executing program 2 (id=418): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e84", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(0x0, 0x18d03e, 0x0) r1 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000000)={0x3, 'geneve1\x00', {0x6}, 0xffff}) 1.34286787s ago: executing program 1 (id=419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x180, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 848.050613ms ago: executing program 3 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x6, 0x0, 0x0) 751.514912ms ago: executing program 1 (id=421): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 439.075825ms ago: executing program 1 (id=422): socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00", 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 195.111634ms ago: executing program 1 (id=423): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x1000, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) 178.807841ms ago: executing program 3 (id=424): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) writev(r0, &(0x7f0000001d80)=[{&(0x7f0000000000)="0300000000", 0x5}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) 0s ago: executing program 1 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0x4, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xe000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x20, 0x3, 0x5, 0x0, 0x2}, {0xeeee8000, 0x8000000, 0xb, 0x0, 0x4, 0x9, 0x81, 0x7, 0x10, 0xfe, 0x2, 0x72}, {0x42000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x21, 0x0, 0x0, 0x4, 0x84, 0x12}, {0xf000, 0x60000, 0x10, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xdddd1000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x5, 0x7, 0x7f}, {0x40000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x8, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0xd}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) kernel console output (not intermixed with test programs): [ 39.149967][ T42] audit: type=1400 audit(1785840074.503:116): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.220068][ T42] audit: type=1400 audit(1785840074.573:117): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.628873][ T42] audit: type=1400 audit(1785840074.983:118): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.680027][ T42] audit: type=1400 audit(1785840075.033:119): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.769206][ T42] audit: type=1400 audit(1785840075.123:120): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.812656][ T42] audit: type=1400 audit(1785840075.163:121): avc: denied { write } for pid=5660 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.911602][ T42] audit: type=1400 audit(1785840075.263:122): avc: denied { write } for pid=5663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:47280' (ED25519) to the list of known hosts. [ 39.982479][ T42] audit: type=1400 audit(1785840075.333:123): avc: denied { write } for pid=5667 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.027444][ T42] audit: type=1400 audit(1785840075.383:124): avc: denied { name_bind } for pid=5670 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.048438][ T42] audit: type=1400 audit(1785840075.403:125): avc: denied { write } for pid=5672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.839378][ T5673] cgroup: Unknown subsys name 'net' [ 42.989749][ T5673] cgroup: Unknown subsys name 'cpuset' [ 42.996012][ T5673] cgroup: Unknown subsys name 'rlimit' [ 43.201802][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.938342][ T5673] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.674734][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 47.674747][ T42] audit: type=1400 audit(1785840083.023:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.844718][ T42] audit: type=1400 audit(1785840083.193:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.854125][ T42] audit: type=1400 audit(1785840083.193:160): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.864154][ T42] audit: type=1400 audit(1785840083.193:161): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.874145][ T42] audit: type=1400 audit(1785840083.203:162): avc: denied { ioctl } for pid=5735 comm="syz-executor" path="socket:[6582]" dev="sockfs" ino=6582 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.893979][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.895140][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.897753][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.898429][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.899198][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.899710][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.900928][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.901494][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.901849][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.902631][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.903763][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.904291][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.904683][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.905249][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.907659][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.907760][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.909931][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.912485][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.914871][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.920679][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.938132][ T42] audit: type=1400 audit(1785840083.273:163): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.958522][ T42] audit: type=1400 audit(1785840083.273:164): avc: denied { open } for pid=5735 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.966019][ T42] audit: type=1400 audit(1785840083.283:165): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.973286][ T42] audit: type=1400 audit(1785840083.303:166): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.984638][ T42] audit: type=1400 audit(1785840083.323:167): avc: denied { sys_module } for pid=5735 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.610222][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.614554][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.618181][ T5743] bridge_slave_0: entered allmulticast mode [ 48.622369][ T5743] bridge_slave_0: entered promiscuous mode [ 48.633987][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.637094][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.640122][ T5743] bridge_slave_1: entered allmulticast mode [ 48.644134][ T5743] bridge_slave_1: entered promiscuous mode [ 48.702990][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.709065][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.787052][ T5743] team0: Port device team_slave_0 added [ 48.826900][ T5743] team0: Port device team_slave_1 added [ 48.875629][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.878587][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.881599][ T5734] bridge_slave_0: entered allmulticast mode [ 48.884475][ T5734] bridge_slave_0: entered promiscuous mode [ 48.888174][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.890567][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.892956][ T5734] bridge_slave_1: entered allmulticast mode [ 48.896029][ T5734] bridge_slave_1: entered promiscuous mode [ 48.899345][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.901692][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.904150][ T5735] bridge_slave_0: entered allmulticast mode [ 48.906947][ T5735] bridge_slave_0: entered promiscuous mode [ 48.915465][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.917711][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.925946][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.939446][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.941632][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.949872][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.954148][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.957339][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.960688][ T5735] bridge_slave_1: entered allmulticast mode [ 48.964597][ T5735] bridge_slave_1: entered promiscuous mode [ 49.023282][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.043410][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.046564][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.049550][ T5740] bridge_slave_0: entered allmulticast mode [ 49.053198][ T5740] bridge_slave_0: entered promiscuous mode [ 49.058998][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.062050][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.065175][ T5740] bridge_slave_1: entered allmulticast mode [ 49.068890][ T5740] bridge_slave_1: entered promiscuous mode [ 49.075787][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.091447][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.116631][ T5743] hsr_slave_0: entered promiscuous mode [ 49.119943][ T5743] hsr_slave_1: entered promiscuous mode [ 49.125130][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.151269][ T5734] team0: Port device team_slave_0 added [ 49.164111][ T5734] team0: Port device team_slave_1 added [ 49.167652][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.179025][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.225711][ T5735] team0: Port device team_slave_0 added [ 49.246207][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.248515][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.256947][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.261670][ T5735] team0: Port device team_slave_1 added [ 49.270551][ T5740] team0: Port device team_slave_0 added [ 49.279667][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.283195][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.294097][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.306309][ T5740] team0: Port device team_slave_1 added [ 49.336998][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.339387][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.347825][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.362160][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.365242][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.376120][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.381365][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.384182][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.392263][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.401585][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.404103][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.412711][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.473931][ T5734] hsr_slave_0: entered promiscuous mode [ 49.476380][ T5734] hsr_slave_1: entered promiscuous mode [ 49.478533][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.480665][ T5734] Cannot create hsr debugfs directory [ 49.549478][ T5740] hsr_slave_0: entered promiscuous mode [ 49.551768][ T5740] hsr_slave_1: entered promiscuous mode [ 49.553915][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 49.555817][ T5740] Cannot create hsr debugfs directory [ 49.561494][ T5735] hsr_slave_0: entered promiscuous mode [ 49.564271][ T5735] hsr_slave_1: entered promiscuous mode [ 49.566460][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.568275][ T5735] Cannot create hsr debugfs directory [ 49.715967][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.722940][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.752821][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.758175][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.778147][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.782148][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.811604][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.816974][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.896319][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.900962][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.904720][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.908708][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.911433][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.917005][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.920175][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.925544][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.946166][ T5095] Bluetooth: hci3: command tx timeout [ 49.946727][ T5739] Bluetooth: hci0: command tx timeout [ 49.946860][ T5751] Bluetooth: hci1: command tx timeout [ 49.994095][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.998542][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.001570][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.007360][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.013619][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.016312][ T5739] Bluetooth: hci2: command tx timeout [ 50.022079][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.025618][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.032087][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.104892][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.111180][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.118823][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.125328][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.131184][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.135473][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.143157][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.160836][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.167339][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.195142][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.201871][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.222269][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.224835][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.244231][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.246564][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.256448][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.281041][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.283484][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.297653][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.299924][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.306884][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.334622][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.342521][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.349947][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.352317][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.369104][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.372717][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.375069][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.380640][ T5734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.400207][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.402557][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.416847][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.419327][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.572546][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.623665][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.630657][ T5743] veth0_vlan: entered promiscuous mode [ 50.637534][ T5743] veth1_vlan: entered promiscuous mode [ 50.681885][ T5743] veth0_macvtap: entered promiscuous mode [ 50.689174][ T5743] veth1_macvtap: entered promiscuous mode [ 50.698993][ T5734] veth0_vlan: entered promiscuous mode [ 50.707035][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.718761][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.733970][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.743132][ T5734] veth1_vlan: entered promiscuous mode [ 50.748671][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.830264][ T5734] veth0_macvtap: entered promiscuous mode [ 50.833635][ T5740] veth0_vlan: entered promiscuous mode [ 50.848107][ T5734] veth1_macvtap: entered promiscuous mode [ 50.868360][ T5735] veth0_vlan: entered promiscuous mode [ 50.872899][ T5740] veth1_vlan: entered promiscuous mode [ 50.878064][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.881389][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.886033][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.902998][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.927599][ T5735] veth1_vlan: entered promiscuous mode [ 50.935923][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.940507][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.943789][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.974873][ T5735] veth0_macvtap: entered promiscuous mode [ 50.981581][ T5740] veth0_macvtap: entered promiscuous mode [ 50.996928][ T5740] veth1_macvtap: entered promiscuous mode [ 51.001650][ T5735] veth1_macvtap: entered promiscuous mode [ 51.018161][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.029022][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.043085][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.047487][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.048779][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.050069][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.060676][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.078785][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.106951][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.111800][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.145596][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.149332][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.176404][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.179524][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.185633][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.212323][ T5893] capability: warning: `syz.2.5' uses deprecated v2 capabilities in a way that may be insecure [ 51.213404][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.220599][ T5893] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 51.223961][ T5893] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 51.225208][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.228616][ T5893] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 51.235836][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.238209][ T5893] overlayfs: failed to look up (cgroup.events) for ino (-13) [ 51.239803][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.275617][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.276691][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.279844][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.282011][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.294638][ T5896] Bluetooth: MGMT ver 1.23 [ 51.308264][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.313400][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.336412][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.343855][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.375648][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.384152][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.389546][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.392677][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.395654][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.816994][ T5920] ======================================================= [ 51.816994][ T5920] WARNING: The mand mount option has been deprecated and [ 51.816994][ T5920] and is ignored by this kernel. Remove the mand [ 51.816994][ T5920] option from the mount to silence this warning. [ 51.816994][ T5920] ======================================================= [ 51.831686][ T5920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 51.836436][ T5920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 52.015465][ T5739] Bluetooth: hci3: command tx timeout [ 52.016160][ T5095] Bluetooth: hci1: command tx timeout [ 52.025829][ T5095] Bluetooth: hci0: command tx timeout [ 52.095520][ T5095] Bluetooth: hci2: command tx timeout [ 52.310259][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.469124][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.473006][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.476312][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.481176][ T5886] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.484170][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.490313][ T5886] usb 8-1: config 0 descriptor?? [ 52.685082][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 52.685100][ T42] audit: type=1400 audit(1785840088.033:233): avc: denied { create } for pid=5948 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.705475][ T42] audit: type=1400 audit(1785840088.043:234): avc: denied { setopt } for pid=5948 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.717040][ T42] audit: type=1400 audit(1785840088.043:235): avc: denied { bind } for pid=5948 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.727962][ T42] audit: type=1400 audit(1785840088.043:236): avc: denied { name_bind } for pid=5948 comm="syz.0.26" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.747984][ T42] audit: type=1400 audit(1785840088.043:237): avc: denied { node_bind } for pid=5948 comm="syz.0.26" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 52.767511][ T42] audit: type=1400 audit(1785840088.053:238): avc: denied { write } for pid=5948 comm="syz.0.26" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.776029][ T42] audit: type=1400 audit(1785840088.053:239): avc: denied { connect } for pid=5948 comm="syz.0.26" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.782646][ T42] audit: type=1400 audit(1785840088.053:240): avc: denied { name_connect } for pid=5948 comm="syz.0.26" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.790429][ T42] audit: type=1400 audit(1785840088.123:242): avc: denied { read } for pid=5954 comm="syz.0.29" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.797895][ T42] audit: type=1400 audit(1785840088.123:241): avc: denied { getattr } for pid=5952 comm="syz.1.28" path="pid:[4026532862]" dev="nsfs" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.832572][ T5959] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 52.837972][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 52.842040][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 52.873580][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 52.949262][ T5886] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 53.305475][ T5886] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.335738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 53.350210][ T5965] smpboot: CPU 1 is now offline [ 53.410498][ T5970] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 53.475184][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 53.486230][ T5886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 53.493317][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.513856][ T5886] pvrusb2: Hardware description: Terratec Grabster AV400 [ 53.527839][ T5886] pvrusb2: ********** [ 53.535090][ T5886] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 53.541000][ T5886] pvrusb2: Important functionality might not be entirely working. [ 53.545420][ T5886] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 53.551715][ T5886] pvrusb2: ********** [ 53.718934][ T2518] pvrusb2: Invalid write control endpoint [ 53.757717][ T2518] pvrusb2: Invalid write control endpoint [ 53.759707][ T2518] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 53.762739][ T2518] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 53.765606][ T2518] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 53.770527][ T2518] pvrusb2: Device being rendered inoperable [ 53.778141][ T2518] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 53.781886][ T2518] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 53.793044][ T2518] pvrusb2: Attached sub-driver cx25840 [ 53.797759][ T2518] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 53.802558][ T2518] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 54.096033][ T5095] Bluetooth: hci3: command tx timeout [ 54.096280][ T5751] Bluetooth: hci1: command tx timeout [ 54.100483][ T5739] Bluetooth: hci0: command tx timeout [ 54.137412][ C2] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 54.177706][ T5739] Bluetooth: hci2: command tx timeout [ 54.277304][ T6027] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 54.292823][ T6028] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 54.687683][ T4600] IPVS: starting estimator thread 0... [ 54.769027][ T6043] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.785494][ T6039] IPVS: using max 45 ests per chain, 108000 per kthread [ 54.795177][ T5885] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.911286][ T5843] usb 8-1: USB disconnect, device number 2 [ 54.945050][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 54.949694][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.953323][ T5885] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 54.956386][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.971541][ T6045] warning: `syz.3.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.003166][ T5885] usb 7-1: config 0 descriptor?? [ 55.225414][ T5885] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 55.440844][ T41] usb 7-1: USB disconnect, device number 2 [ 55.441965][ T6062] bridge_slave_0: invalid flags given to default FDB implementation [ 55.446497][ T6062] Zero length message leads to an empty skb [ 56.079600][ T5886] usb 5-1: USB disconnect, device number 2 [ 56.181461][ T5739] Bluetooth: hci0: command tx timeout [ 56.188377][ T5739] Bluetooth: hci3: command tx timeout [ 56.258195][ T5739] Bluetooth: hci2: command tx timeout [ 56.588240][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 57.851004][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 57.851048][ T42] audit: type=1400 audit(1785840093.203:313): avc: denied { mount } for pid=6156 comm="syz.0.86" name="/" dev="autofs" ino=12456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 57.878385][ T42] audit: type=1400 audit(1785840093.233:314): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 58.071395][ T42] audit: type=1400 audit(1785840093.423:315): avc: denied { mounton } for pid=6165 comm="syz.1.90" path="/22/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 58.071569][ T6166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.099711][ T6166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.108786][ T6166] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 58.236669][ T1044] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.386373][ T1044] usb 8-1: Using ep0 maxpacket: 16 [ 58.396623][ T1044] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 58.399709][ T1044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.402312][ T1044] usb 8-1: Product: syz [ 58.403661][ T1044] usb 8-1: Manufacturer: syz [ 58.405589][ T1044] usb 8-1: SerialNumber: syz [ 58.412592][ T1044] usb 8-1: config 0 descriptor?? [ 58.550508][ T42] audit: type=1400 audit(1785840093.903:316): avc: denied { cmd } for pid=6182 comm="iou-wrk-6183" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 58.565988][ T42] audit: type=1400 audit(1785840093.923:317): avc: denied { map } for pid=6182 comm="syz.1.95" path="/dev/ublkc0" dev="devtmpfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.575125][ T42] audit: type=1400 audit(1785840093.923:318): avc: denied { create } for pid=6182 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.582887][ T42] audit: type=1400 audit(1785840093.923:319): avc: denied { create } for pid=6182 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.605763][ T41] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 58.759464][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.763528][ T41] usb 5-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 58.767782][ T41] usb 5-1: config 100 has 0 interfaces, different from the descriptor's value: 1 [ 58.780354][ T41] usb 5-1: string descriptor 0 read error: -22 [ 58.783325][ T41] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 58.787194][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.875583][ T1044] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 58.965020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 59.008994][ T41] usb 5-1: USB disconnect, device number 3 [ 59.034507][ T1044] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 59.038143][ T1044] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 59.040716][ T1044] usb 8-1: media controller created [ 59.048289][ T1044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 59.077909][ T1044] zl10353_read_register: readreg error (reg=127, ret==0) [ 59.080211][ T1044] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 59.082796][ T1044] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 59.136228][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 59.295067][ T5739] Bluetooth: hci3: command 0x0405 tx timeout [ 59.655290][ T5822] usb 8-1: USB disconnect, device number 3 [ 59.682075][ T6196] fuse: Bad value for 'fd' [ 59.683680][ T42] audit: type=1400 audit(1785840095.033:320): avc: denied { mounton } for pid=6195 comm="syz.1.99" path="/28/file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.695615][ T5822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 60.309033][ T6227] syz_tun: entered allmulticast mode [ 60.312324][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 60.469660][ T6232] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=3440470153 (6880940306 ns) > initial count (1354806962 ns). Using initial count to start timer. [ 60.472725][ T6227] syz_tun: left allmulticast mode [ 60.516526][ T1044] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.699211][ T1044] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 60.703353][ T1044] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 60.707639][ T1044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.714566][ T6225] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.724055][ T1044] opticon 8-1:1.0: opticon converter detected [ 60.730641][ T1044] usb 8-1: opticon converter now attached to ttyUSB0 [ 60.743926][ T6244] fuse: root generation should be zero [ 60.830984][ T6250] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 60.845307][ T42] audit: type=1400 audit(1785840096.183:321): avc: denied { mount } for pid=6249 comm="syz.1.116" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.852343][ T42] audit: type=1400 audit(1785840096.193:322): avc: denied { search } for pid=6249 comm="syz.1.116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 61.055458][ T6259] syz_tun: entered allmulticast mode [ 61.058550][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 61.073978][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.190328][ T6259] syz_tun: left allmulticast mode [ 61.576924][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 61.579934][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 61.605179][ T5842] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.609802][ T5842] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.613677][ T5842] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.629505][ T5842] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.338157][ T6286] fuse: Unknown parameter '0x0000000000000003' [ 62.785056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 63.285165][ T5843] usb 8-1: USB disconnect, device number 4 [ 63.316524][ T5843] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 63.327995][ T5843] opticon 8-1:1.0: device disconnected [ 63.723450][ T6314] fuse: Unknown parameter '0x0000000000000003' [ 63.835062][ T5843] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 63.849191][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 63.849217][ T42] audit: type=1400 audit(1785840099.203:334): avc: denied { append } for pid=6321 comm="syz.0.143" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.872498][ T6322] loop5: detected capacity change from 0 to 7 [ 63.887962][ T6322] loop5: p3 p4 [ 63.890571][ T6322] loop5: partition table partially beyond EOD, truncated [ 64.523732][ T5843] usb 8-1: unable to get BOS descriptor or descriptor too short [ 64.775460][ T42] audit: type=1400 audit(1785840100.133:335): avc: denied { create } for pid=6337 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.781131][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 64.795142][ T42] audit: type=1400 audit(1785840100.133:336): avc: denied { bind } for pid=6337 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.817490][ T42] audit: type=1400 audit(1785840100.133:337): avc: denied { setopt } for pid=6337 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.844479][ T5843] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 64.847524][ T5843] usb 8-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 64.850941][ T5843] usb 8-1: config 100 has no interface number 0 [ 64.853010][ T5843] usb 8-1: config 100 interface 173 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.857305][ T5843] usb 8-1: config 100 interface 173 has no altsetting 0 [ 64.861686][ T5843] usb 8-1: string descriptor 0 read error: -22 [ 64.863783][ T5843] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 64.867724][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.874174][ T5843] metro_usb 8-1:100.173: required endpoints missing [ 64.989252][ T42] audit: type=1400 audit(1785840100.343:338): avc: denied { create } for pid=6342 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.024097][ T42] audit: type=1400 audit(1785840100.373:339): avc: denied { write } for pid=6342 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.033195][ T42] audit: type=1400 audit(1785840100.373:340): avc: denied { nlmsg_write } for pid=6342 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.035871][ T6346] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.083378][ T1044] usb 8-1: USB disconnect, device number 5 [ 65.149366][ T6355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6355 comm=syz.0.155 [ 65.155350][ T6355] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 65.157859][ T6355] netlink: 'syz.0.155': attribute type 7 has an invalid length. [ 65.160359][ T6355] netlink: 240 bytes leftover after parsing attributes in process `syz.0.155'. [ 65.395082][ T5843] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 65.446346][ T6364] fuse: Unknown parameter '0x0000000000000003' [ 66.086069][ T5843] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.090098][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.094828][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 66.100249][ T5843] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 66.103358][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.105937][ T5843] usb 7-1: Product: syz [ 66.107331][ T5843] usb 7-1: Manufacturer: syz [ 66.109057][ T5843] usb 7-1: SerialNumber: syz [ 66.112045][ T5843] usb 7-1: config 0 descriptor?? [ 66.116065][ T6357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.176519][ T5843] rc_core: IR keymap rc-streamzap not found [ 66.179150][ T5843] Registered IR keymap rc-empty [ 66.184131][ T5843] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 66.191177][ T5843] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 66.311829][ T42] audit: type=1400 audit(1785840101.663:341): avc: denied { name_bind } for pid=6382 comm="syz.0.164" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 66.575228][ T5843] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 66.676586][ T42] audit: type=1400 audit(1785840102.033:342): avc: denied { read write } for pid=6356 comm="syz.2.156" name="event4" dev="devtmpfs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.686109][ T42] audit: type=1400 audit(1785840102.033:343): avc: denied { open } for pid=6356 comm="syz.2.156" path="/dev/input/event4" dev="devtmpfs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.737353][ T5843] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.740913][ T5843] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.744733][ T5843] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.748056][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.756909][ T6374] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 66.769401][ T5843] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.970313][ T5822] usb 8-1: USB disconnect, device number 6 [ 67.022570][ T6386] evm: overlay not supported [ 67.216608][ T6390] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.230997][ T6390] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 67.815092][ T5822] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 67.968557][ T5822] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.972219][ T5822] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.977430][ T5822] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.980362][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.044189][ T6419] process 'syz.0.178' launched '/dev/fd/6' with NULL argv: empty string added [ 68.101016][ T6421] loop5: detected capacity change from 0 to 7 [ 68.106509][ T6421] loop5: p3 p4 [ 68.108235][ T6421] loop5: partition table partially beyond EOD, truncated [ 68.169270][ T5750] udevd[5750]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 68.172015][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 68.190620][ T5822] usb 6-1: GET_CAPABILITIES returned 0 [ 68.192584][ T5822] usbtmc 6-1:16.0: can't read capabilities [ 68.196405][ T1044] usb 7-1: USB disconnect, device number 3 [ 68.311687][ T6430] fuse: Unknown parameter '0x0000000000000003' [ 68.402121][ T5885] usb 6-1: USB disconnect, device number 2 [ 68.964933][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 68.964953][ T42] audit: type=1400 audit(1785840104.313:352): avc: denied { ioctl } for pid=6442 comm="syz.1.187" path="/dev/video0" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.065098][ T1044] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 69.226804][ T1044] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.231032][ T1044] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.238835][ T1044] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.242606][ T1044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.393254][ T42] audit: type=1400 audit(1785840104.743:353): avc: denied { listen } for pid=6454 comm="syz.1.192" laddr=172.20.20.170 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.418951][ T6457] fuse: Unknown parameter '0x0000000000000003' [ 69.467586][ T1044] usb 5-1: usb_control_msg returned -32 [ 69.469954][ T1044] usbtmc 5-1:16.0: can't read capabilities [ 70.067162][ T42] audit: type=1400 audit(1785840105.423:354): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.076254][ T5822] usb 5-1: USB disconnect, device number 4 [ 70.429344][ T6486] fuse: Unknown parameter 'fd0x0000000000000003' [ 70.595164][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.637894][ T42] audit: type=1400 audit(1785840105.993:355): avc: denied { create } for pid=6494 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.683230][ T42] audit: type=1400 audit(1785840106.033:356): avc: denied { write } for pid=6494 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.421620][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.428333][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.832248][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 71.852751][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.937517][ T6519] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 71.948353][ T6519] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 72.178850][ T6529] fuse: Unknown parameter 'fd0x0000000000000003' [ 72.375325][ T42] audit: type=1400 audit(1785840107.723:357): avc: denied { bind } for pid=6535 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.382206][ T42] audit: type=1400 audit(1785840107.733:358): avc: denied { read } for pid=6535 comm="syz.3.221" path="socket:[14958]" dev="sockfs" ino=14958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.478480][ T42] audit: type=1400 audit(1785840107.833:359): avc: denied { setopt } for pid=6538 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.485836][ T6539] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 72.737654][ T42] audit: type=1400 audit(1785840108.093:360): avc: denied { create } for pid=6548 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.175064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 73.234320][ T6559] fuse: Unknown parameter 'fd0x0000000000000003' [ 73.637209][ T5822] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 73.679960][ T42] audit: type=1400 audit(1785840109.033:361): avc: denied { write } for pid=6581 comm="syz.0.238" name="functions" dev="configfs" ino=7125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.680158][ T6582] Mass Storage Function, version: 2009/09/11 [ 73.689803][ T6582] LUN: removable file: (no medium) [ 73.702942][ T6582] mass_storage.0/lun.0: file too small: file0 [ 73.786488][ T5822] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 73.789929][ T5822] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.793892][ T5822] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.797232][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 73.799982][ T5822] usb 8-1: Product: syz [ 73.801378][ T5822] usb 8-1: Manufacturer: syz [ 73.802975][ T5822] usb 8-1: SerialNumber: syz [ 73.807573][ T5822] usb 8-1: config 0 descriptor?? [ 73.809899][ T6567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.815979][ T5822] usb 8-1: selecting invalid altsetting 0 [ 74.020090][ T6567] usb 8-1: BOGUS urb xfer, pipe 0 != type 3 [ 74.255592][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 74.256143][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 74.297882][ T6574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.408496][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 74.408509][ T42] audit: type=1400 audit(1785840109.763:365): avc: denied { map_create } for pid=6589 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.585039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 74.595023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 74.934843][ T42] audit: type=1400 audit(1785840110.283:366): avc: denied { write } for pid=6595 comm="syz.2.243" name="/" dev="9p" ino=76043915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.941985][ T42] audit: type=1400 audit(1785840110.283:367): avc: denied { write } for pid=6595 comm="syz.2.243" name="/" dev="9p" ino=76043915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.949985][ T42] audit: type=1400 audit(1785840110.293:368): avc: denied { remove_name } for pid=6595 comm="syz.2.243" name="file0" dev="9p" ino=76043917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.958169][ T42] audit: type=1400 audit(1785840110.293:369): avc: denied { rename } for pid=6595 comm="syz.2.243" name="file0" dev="9p" ino=76043917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.966573][ T42] audit: type=1400 audit(1785840110.293:370): avc: denied { add_name } for pid=6595 comm="syz.2.243" name="file1" dev="9p" ino=76043919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.974404][ T42] audit: type=1400 audit(1785840110.293:371): avc: denied { unlink } for pid=6595 comm="syz.2.243" name="file1" dev="9p" ino=76043919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.993781][ T42] audit: type=1400 audit(1785840110.343:372): avc: denied { prog_load } for pid=6599 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.207894][ T42] audit: type=1400 audit(1785840110.563:373): avc: denied { allowed } for pid=6606 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.243007][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.310463][ T42] audit: type=1400 audit(1785840110.663:374): avc: denied { read write } for pid=6614 comm="syz.0.251" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.400858][ T6623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.535739][ T6634] gadgetfs: bound to dummy_udc driver [ 75.775094][ T5822] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 75.779995][ C1] gadgetfs: connected [ 75.782999][ T5822] gadgetfs: disconnected [ 75.813977][ T24] usb 8-1: USB disconnect, device number 7 [ 75.935300][ C1] gadgetfs: connected [ 75.939593][ T5822] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 75.942554][ T5822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 75.945914][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.956039][ C1] gadgetfs: configuration #1 [ 76.350982][ T6634] gadgetfs: suspended from state 3 [ 76.354712][ T6634] gadgetfs: disconnected [ 76.358609][ T5843] usb 5-1: USB disconnect, device number 5 [ 76.412421][ T6649] input: syz0 as /devices/virtual/input/input6 [ 76.559764][ T6656] 9pnet_fd: p9_fd_create_unix (6656): problem creating socket [ 76.701545][ T6667] anx7411 0-002c: fail to probe typec property. [ 76.708422][ T6667] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 76.959101][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 76.963026][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 76.981405][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 76.984335][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 76.995088][ T5814] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.000960][ T5814] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.011349][ T5814] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.036947][ T5814] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.696829][ T6685] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.792569][ T5888] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 78.036367][ T5888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 78.040328][ T5888] usb 6-1: not running at top speed; connect to a high speed hub [ 78.065728][ T5888] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 78.070741][ T5888] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 78.093252][ T5888] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 78.103415][ T5888] usb 6-1: config 14 has no interface number 0 [ 78.176485][ T5888] usb 6-1: config 14 has no interface number 1 [ 78.179645][ T5888] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 78.184053][ T5888] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 78.191264][ T5888] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.196572][ T5888] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.200803][ T5888] usb 6-1: config 14 interface 57 has no altsetting 0 [ 78.203485][ T5888] usb 6-1: config 14 interface 228 has no altsetting 0 [ 78.217254][ T5888] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 78.220528][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.223806][ T5888] usb 6-1: Product: syz [ 78.226724][ T5888] usb 6-1: Manufacturer: syz [ 78.228490][ T5888] usb 6-1: SerialNumber: syz [ 78.279544][ T6707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.288'. [ 78.285213][ T6707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.288'. [ 78.343977][ T3267] cfg80211: failed to load regulatory.db [ 78.661305][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 78.777667][ T5888] legousbtower 6-1:14.57: interrupt endpoints not found [ 78.815271][ T6732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.820404][ T6732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.297'. [ 79.086057][ T5888] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 79.098051][ T5888] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 79.333399][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 79.433846][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 79.433860][ T42] audit: type=1400 audit(1785840114.783:402): avc: denied { mounton } for pid=6759 comm="syz.0.306" path="/proc/239/task" dev="proc" ino=17167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 79.649582][ T6772] usb 6-1: Couldn't submit interrupt_in_urb -90 [ 79.851701][ T41] usb 6-1: USB disconnect, device number 3 [ 79.873241][ T41] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 80.321858][ T6788] kvm: emulating exchange as write [ 80.905050][ T5886] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 81.056893][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.060632][ T5886] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 81.066400][ T5886] usb 5-1: config 100 has no interface number 0 [ 81.071021][ T5886] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 81.075478][ T5886] usb 5-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.081342][ T5886] usb 5-1: config 100 interface 173 has no altsetting 0 [ 81.088232][ T5886] usb 5-1: string descriptor 0 read error: -22 [ 81.091166][ T5886] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 81.105653][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.113230][ T6798] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.120188][ T5886] metro_usb 5-1:100.173: required endpoints missing [ 81.197229][ T42] audit: type=1400 audit(1785840116.553:403): avc: denied { unlink } for pid=6808 comm="syz.2.320" name="#10" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.333006][ T5886] usb 5-1: USB disconnect, device number 6 [ 81.412824][ T42] audit: type=1400 audit(1785840116.763:404): avc: denied { write } for pid=6815 comm="syz.2.323" name="functions" dev="configfs" ino=7125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.423019][ T42] audit: type=1400 audit(1785840116.773:405): avc: denied { write } for pid=6815 comm="syz.2.323" name="interface.ncm" dev="configfs" ino=18449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.456763][ T42] audit: type=1400 audit(1785840116.813:406): avc: denied { write } for pid=6815 comm="syz.2.323" name="functions" dev="configfs" ino=7125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.467071][ T42] audit: type=1400 audit(1785840116.813:407): avc: denied { write } for pid=6815 comm="syz.2.323" name="interface.rndis" dev="configfs" ino=18454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.477588][ T42] audit: type=1400 audit(1785840116.813:408): avc: denied { listen } for pid=6817 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.485986][ T42] audit: type=1400 audit(1785840116.813:409): avc: denied { accept } for pid=6817 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.707649][ T6847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.864204][ T6854] __nla_validate_parse: 8 callbacks suppressed [ 82.864221][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 83.105113][ T41] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 83.122149][ T42] audit: type=1400 audit(1785840118.473:410): avc: denied { write } for pid=6868 comm="syz.1.340" name="functions" dev="configfs" ino=7125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.130109][ T42] audit: type=1400 audit(1785840118.483:411): avc: denied { write } for pid=6868 comm="syz.1.340" name="c.1" dev="configfs" ino=7130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.256842][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.260163][ T41] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 83.262810][ T41] usb 5-1: config 100 has no interface number 0 [ 83.265358][ T41] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 83.268661][ T41] usb 5-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.272924][ T41] usb 5-1: config 100 interface 173 has no altsetting 0 [ 83.282283][ T41] usb 5-1: string descriptor 0 read error: -22 [ 83.286465][ T41] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 83.289991][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.299208][ T6862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.303905][ T41] metro_usb 5-1:100.173: required endpoints missing [ 83.908346][ T41] usb 5-1: USB disconnect, device number 7 [ 84.713727][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 84.978348][ T6886] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.988115][ T6888] syz_tun: entered allmulticast mode [ 85.162123][ T6890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.348'. [ 85.175735][ T6890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.348'. [ 85.223854][ T6888] syz_tun: left allmulticast mode [ 85.572192][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 85.572244][ T42] audit: type=1400 audit(1785840120.923:413): avc: denied { getopt } for pid=6908 comm="syz.3.354" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.735739][ T6921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.358'. [ 85.740821][ T6921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.358'. [ 85.751533][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 85.761147][ T42] audit: type=1400 audit(1785840121.113:414): avc: denied { read append } for pid=6922 comm="syz.2.357" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.782860][ T42] audit: type=1400 audit(1785840121.113:415): avc: denied { open } for pid=6922 comm="syz.2.357" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.839081][ T6923] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.841800][ T6923] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.868696][ T6923] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.909887][ T6923] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.919666][ T6923] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.958597][ T6923] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.962806][ T6923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.966090][ T6923] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.972405][ T6923] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.979358][ T6923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.981861][ T6923] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.999357][ T6923] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.143537][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 86.215035][ T42] audit: type=1400 audit(1785840121.563:416): avc: denied { mount } for pid=6949 comm="syz.1.371" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.221931][ T42] audit: type=1400 audit(1785840121.563:417): avc: denied { mounton } for pid=6949 comm="syz.1.371" path="/99/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 86.252484][ T42] audit: type=1400 audit(1785840121.603:418): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.268408][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 86.295150][ T3267] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.344592][ T42] audit: type=1400 audit(1785840121.693:419): avc: denied { read } for pid=6955 comm="syz.1.372" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 86.353718][ T42] audit: type=1400 audit(1785840121.693:420): avc: denied { open } for pid=6955 comm="syz.1.372" path="/100/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 86.373118][ T6961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.377173][ T6961] block device autoloading is deprecated and will be removed. [ 86.382388][ T42] audit: type=1400 audit(1785840121.733:421): avc: denied { ioctl } for pid=6955 comm="syz.1.372" path="/100/file0/file0" dev="fuse" ino=64 ioctlcmd=0x933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 86.450922][ T3267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.454831][ T3267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.458243][ T3267] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.463869][ T3267] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.467307][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.472795][ T3267] usb 5-1: config 0 descriptor?? [ 86.750284][ T6977] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.810616][ T6962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.828496][ T6962] block device autoloading is deprecated and will be removed. [ 86.896735][ T6985] tipc: Started in network mode [ 86.899496][ T6985] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 86.903616][ T3267] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 86.904106][ T6985] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 86.912968][ T6985] tipc: Enabled bearer , priority 10 [ 87.007268][ T42] audit: type=1400 audit(1785840122.363:422): avc: denied { read write } for pid=6992 comm="syz.1.387" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.315156][ T1044] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.465242][ T1044] usb 7-1: Using ep0 maxpacket: 32 [ 87.468768][ T1044] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.472145][ T1044] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.475997][ T1044] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.479407][ T1044] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.486776][ T1044] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.489750][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.492476][ T1044] usb 7-1: Product: syz [ 87.494128][ T1044] usb 7-1: Manufacturer: syz [ 87.496127][ T1044] usb 7-1: SerialNumber: syz [ 87.505780][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 87.511960][ T1044] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input7 [ 87.725097][ T1044] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 87.729725][ T1044] (id 0x00) [ 87.775152][ T1044] rc_core: IR keymap rc-imon-pad not found [ 87.778758][ T1044] Registered IR keymap rc-empty [ 87.782595][ T1044] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 87.786960][ T1044] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 87.855107][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.938596][ T1044] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 87.942909][ T1044] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input8 [ 87.945478][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.950771][ T1044] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:4> initialized [ 88.017607][ T5739] Bluetooth: hci3: command 0x0405 tx timeout [ 88.018532][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.038329][ T1044] tipc: Node number set to 1 [ 88.112659][ T1044] usb 7-1: USB disconnect, device number 4 [ 88.795219][ T5843] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 88.870300][ T5822] usb 5-1: USB disconnect, device number 8 [ 88.947199][ T5843] usb 8-1: unable to get BOS descriptor or descriptor too short [ 88.951700][ T5843] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 88.955523][ T5843] usb 8-1: config 100 has no interface number 0 [ 88.958239][ T5843] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 88.962662][ T5843] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 88.967112][ T5843] usb 8-1: config 100 interface 173 has no altsetting 0 [ 88.973191][ T5843] usb 8-1: string descriptor 0 read error: -22 [ 88.976306][ T5843] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 88.980185][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.010786][ T7015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.020796][ T5843] metro_usb 8-1:100.173: required endpoints missing [ 89.223548][ T5843] usb 8-1: USB disconnect, device number 8 [ 89.935255][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.015381][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.082319][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 90.095237][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.097344][ T5739] Bluetooth: hci3: command 0x0405 tx timeout [ 90.160617][ T7039] syz_tun: entered allmulticast mode [ 90.288996][ T7039] syz_tun: left allmulticast mode [ 91.658799][ T7017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.664611][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 91.664629][ T42] audit: type=1400 audit(1785840127.013:433): avc: denied { setopt } for pid=7053 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.739086][ T7056] loop4: detected capacity change from 0 to 7 [ 91.752595][ T7056] loop4: [ 91.753801][ T7056] loop4: partition table partially beyond EOD, truncated [ 92.015188][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.138145][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 92.175120][ T5739] Bluetooth: hci3: command 0x0405 tx timeout [ 92.177318][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.265070][ T5885] usb 5-1: device descriptor read/64, error -71 [ 92.505059][ T5885] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.655321][ T5885] usb 5-1: device descriptor read/64, error -71 [ 92.748418][ T42] audit: type=1400 audit(1785840128.103:434): avc: denied { create } for pid=7083 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.755966][ T42] audit: type=1400 audit(1785840128.103:435): avc: denied { ioctl } for pid=7083 comm="syz.1.416" path="socket:[20273]" dev="sockfs" ino=20273 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.767130][ T5885] usb usb5-port1: attempt power cycle [ 93.275077][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.460098][ T42] audit: type=1400 audit(1785840128.813:436): avc: denied { create } for pid=7091 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.695825][ T5885] usb 5-1: device descriptor read/8, error -71 [ 93.942988][ T7104] syz_tun: entered allmulticast mode [ 94.066561][ T7104] syz_tun: left allmulticast mode [ 94.268593][ T5739] Bluetooth: hci3: command 0x0405 tx timeout [ 94.650415][ T7112] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 94.657516][ T7112] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 94.660253][ T7112] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 94.663088][ T7112] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 94.665755][ T7112] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 94.681939][ T7112] pci 0000:00:01.0: Adding to iommu group 1 [ 94.693473][ T7112] pci 0000:00:01.0: vgaarb: bridge control possible [ 94.696188][ T7112] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 94.712685][ T7112] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 94.716484][ T7112] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref]: assigned [ 94.720247][ T7112] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 94.724813][ T7112] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]: assigned [ 94.731512][ T7112] virtio-pci 0000:00:01.0: enabling device (0100 -> 0102) [ 94.804307][ T7112] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 94.810850][ T7112] [drm] features: -virgl +edid -resource_blob -host_visible [ 94.810867][ T7112] [drm] features: -context_init -blob_alignment [ 94.815131][ T5885] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 94.826064][ T7112] ------------[ cut here ]------------ [ 94.828421][ T7112] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 94.830575][ T7112] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#3: syz.3.424/7112 [ 94.833788][ T7112] Modules linked in: [ 94.835864][ T7112] CPU: 3 UID: 0 PID: 7112 Comm: syz.3.424 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.839566][ T7112] Tainted: [L]=SOFTLOCKUP [ 94.840991][ T7112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.844156][ T7112] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 94.846234][ T7112] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 85 bd 5d 09 85 c0 75 e0 48 8d 3d da 34 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 05 bf 5d 09 48 85 c0 0f [ 94.852309][ T7112] RSP: 0018:ffffc90003196f58 EFLAGS: 00010246 [ 94.854250][ T7112] RAX: 0000000000000000 RBX: ffff888100e837c0 RCX: fffff52000632dc6 [ 94.856808][ T7112] RDX: 0000000000000000 RSI: ffffffff8c6f8d40 RDI: ffffffff91275dc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.859395][ T7112] RBP: ffffffff8c6f8d40 R08: 0000000000000000 R09: fffffbfff22450da [ 94.862402][ T7112] R10: ffffc90003196f58 R11: 0000000000000000 R12: 0000000000000000 [ 94.865851][ T7112] R13: ffffc90003196fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 94.868661][ T7112] FS: 00007feacc4706c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 94.871609][ T7112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.873968][ T7112] CR2: 00007f61f906c600 CR3: 000000003b430000 CR4: 0000000000352ef0 [ 94.876701][ T7112] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 94.879122][ T7112] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 94.881679][ T7112] Call Trace: [ 94.883116][ T7112] [ 94.884100][ T7112] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 94.886059][ T7112] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 94.888253][ T7112] ? vp_modern_set_queue_enable+0x43/0x90 [ 94.890336][ T7112] ? iowrite16+0x33/0xb0 [ 94.891842][ T7112] ? vp_modern_find_vqs+0xd2/0x100 [ 94.893672][ T7112] virtio_gpu_init.cold+0x51c/0x126e [ 94.895586][ T7112] ? __pfx_virtio_gpu_init+0x10/0x10 [ 94.897288][ T7112] ? __mutex_unlock_slowpath+0x35d/0x930 [ 94.899155][ T7112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.901074][ T7112] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 94.902921][ T7112] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 94.904792][ T7112] ? vga_default_device+0x9/0x20 [ 94.906412][ T7112] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 94.908660][ T7112] virtio_gpu_probe+0x21c/0x360 [ 94.910201][ T7112] virtio_dev_probe+0x6a2/0xbe0 [ 94.911756][ T7112] ? __pfx_virtio_dev_probe+0x10/0x10 [ 94.913490][ T7112] ? kernfs_create_link+0x1bd/0x240 [ 94.915239][ T7112] ? kernfs_put+0x3f/0x60 [ 94.916643][ T7112] ? sysfs_do_create_link_sd+0xbb/0x140 [ 94.918392][ T7112] ? sysfs_create_link+0x68/0xc0 [ 94.919968][ T7112] ? __pfx_virtio_dev_probe+0x10/0x10 [ 94.921672][ T7112] really_probe+0x241/0xa60 [ 94.923185][ T7112] __driver_probe_device+0x20e/0x450 [ 94.925147][ T7112] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.927041][ T7112] driver_probe_device+0x4a/0x140 [ 94.928641][ T7112] __device_attach_driver+0x1df/0x320 [ 94.930343][ T7112] ? __pfx___device_attach_driver+0x10/0x10 [ 94.932223][ T7112] bus_for_each_drv+0x159/0x1e0 [ 94.933838][ T7112] ? __pfx_bus_for_each_drv+0x10/0x10 [ 94.935904][ T7112] ? lockdep_hardirqs_on+0x78/0x100 [ 94.938228][ T7112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 94.940132][ T7112] __device_attach+0x1e4/0x4d0 [ 94.941916][ T7112] ? __pfx___device_attach+0x10/0x10 [ 94.943711][ T7112] ? do_raw_spin_unlock+0x145/0x1e0 [ 94.945628][ T7112] device_initial_probe+0xaf/0xd0 [ 94.947623][ T7112] bus_probe_device+0x64/0x160 [ 94.949387][ T7112] device_add+0x121d/0x1970 [ 94.951273][ T7112] ? __pfx_device_add+0x10/0x10 [ 94.953335][ T7112] ? __pfx___might_resched+0x10/0x10 [ 94.955661][ T7112] ? iowrite8+0x2b/0xb0 [ 94.957482][ T7112] ? iowrite8+0x2e/0xb0 [ 94.959322][ T7112] ? ioread8+0x8f/0xd0 [ 94.961058][ T7112] register_virtio_device+0x4f0/0x5d0 [ 94.963287][ T7112] ? __pfx_register_virtio_device+0x10/0x10 [ 94.965639][ T7112] ? __pfx_pcibios_set_master+0x10/0x10 [ 94.967473][ T7112] ? __raw_spin_lock_init+0x3a/0x110 [ 94.969241][ T7112] ? __pfx_virtio_pci_probe+0x10/0x10 [ 94.970971][ T7112] virtio_pci_probe+0x255/0x410 [ 94.972557][ T7112] local_pci_probe+0xdd/0x1b0 [ 94.974319][ T7112] pci_call_probe+0x176/0x800 [ 94.977102][ T7112] ? __pfx_pci_call_probe+0x10/0x10 [ 94.979205][ T7112] ? find_held_lock+0x2b/0x80 [ 94.981056][ T7112] ? pci_match_device+0x450/0x5f0 [ 94.983065][ T7112] ? pci_match_device+0x450/0x5f0 [ 94.984824][ T7112] ? pci_match_id+0x34d/0x3f0 [ 94.986522][ T7112] ? pci_match_device+0xb4/0x5f0 [ 94.988109][ T7112] pci_device_probe+0x1cd/0x370 [ 94.989640][ T7112] ? __pfx_pci_device_probe+0x10/0x10 [ 94.991448][ T7112] really_probe+0x241/0xa60 [ 94.992950][ T7112] __driver_probe_device+0x20e/0x450 [ 94.994621][ T7112] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.996567][ T7112] driver_probe_device+0x4a/0x140 [ 94.998164][ T7112] __device_attach_driver+0x1df/0x320 [ 94.999972][ T7112] ? __pfx___device_attach_driver+0x10/0x10 [ 95.002086][ T7112] bus_for_each_drv+0x159/0x1e0 [ 95.003737][ T7112] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.005502][ T7112] ? lockdep_hardirqs_on+0x78/0x100 [ 95.007222][ T7112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.009098][ T7112] __device_attach+0x1e4/0x4d0 [ 95.010644][ T7112] ? __pfx___device_attach+0x10/0x10 [ 95.012345][ T7112] ? do_raw_spin_unlock+0x145/0x1e0 [ 95.014008][ T7112] device_initial_probe+0xaf/0xd0 [ 95.015840][ T7112] pci_bus_add_device+0xc5/0x100 [ 95.017646][ T7112] pci_bus_add_devices+0x9a/0x1f0 [ 95.019550][ T7112] pci_rescan_bus+0x2a/0x40 [ 95.021062][ T7112] rescan_store+0xfb/0x130 [ 95.022851][ T7112] ? __pfx_rescan_store+0x10/0x10 [ 95.024520][ T7112] ? sysfs_file_kobj+0xe4/0x290 [ 95.026157][ T7112] ? __pfx_rescan_store+0x10/0x10 [ 95.027752][ T7112] bus_attr_store+0x74/0xb0 [ 95.029191][ T7112] ? __pfx_bus_attr_store+0x10/0x10 [ 95.030853][ T7112] sysfs_kf_write+0xf2/0x150 [ 95.032492][ T7112] kernfs_fop_write_iter+0x3e0/0x5f0 [ 95.034236][ T7112] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.036111][ T7112] vfs_write+0x6ac/0x1050 [ 95.037485][ T7112] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 95.039330][ T7112] ? __pfx_vfs_write+0x10/0x10 [ 95.041195][ T7112] ksys_write+0x12a/0x250 [ 95.042923][ T7112] ? __pfx_ksys_write+0x10/0x10 [ 95.044628][ T7112] do_syscall_64+0x115/0x870 [ 95.046373][ T7112] ? clear_bhb_loop+0x40/0x90 [ 95.047702][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.049418][ T7112] RIP: 0033:0x7feacb59e019 [ 95.050805][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.057016][ T7112] RSP: 002b:00007feacc470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.059706][ T7112] RAX: ffffffffffffffda RBX: 00007feacb826090 RCX: 00007feacb59e019 [ 95.062214][ T7112] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 95.065337][ T7112] RBP: 00007feacb63500c R08: 0000000000000000 R09: 0000000000000000 [ 95.067052][ T5885] usb 5-1: device not accepting address 12, error -71 [ 95.069148][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.071879][ T5885] usb usb5-port1: unable to enumerate USB device [ 95.073539][ T7112] R13: 00007feacb826128 R14: 00007feacb826090 R15: 00007ffee196a598 [ 95.073562][ T7112] [ 95.073572][ T7112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.073584][ T7112] CPU: 3 UID: 0 PID: 7112 Comm: syz.3.424 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.073599][ T7112] Tainted: [L]=SOFTLOCKUP [ 95.073604][ T7112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.073610][ T7112] Call Trace: [ 95.073615][ T7112] [ 95.073619][ T7112] dump_stack_lvl+0x100/0x190 [ 95.073638][ T7112] vpanic+0x552/0x970 [ 95.073649][ T7112] ? __pfx_vpanic+0x10/0x10 [ 95.073664][ T7112] panic+0xd1/0xe0 [ 95.073674][ T7112] ? __pfx_panic+0x10/0x10 [ 95.073690][ T7112] check_panic_on_warn.cold+0x19/0x34 [ 95.073702][ T7112] ? __kmem_cache_create_args+0xa6/0x420 [ 95.073720][ T7112] __warn.cold+0x191/0x318 [ 95.073732][ T7112] __report_bug+0x30f/0x440 [ 95.073750][ T7112] ? __kmem_cache_create_args+0xa6/0x420 [ 95.073768][ T7112] ? __pfx___report_bug+0x10/0x10 [ 95.073785][ T7112] ? __mutex_lock+0x26d/0x1bd0 [ 95.073799][ T7112] ? __kmem_cache_create_args+0x44/0x420 [ 95.073819][ T7112] report_bug_entry+0xe1/0x290 [ 95.073832][ T7112] ? __kmem_cache_create_args+0xa9/0x420 [ 95.073850][ T7112] handle_bug+0x1cd/0x2a0 [ 95.073866][ T7112] exc_invalid_op+0x17/0x50 [ 95.073881][ T7112] asm_exc_invalid_op+0x1a/0x20 [ 95.073892][ T7112] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 95.073910][ T7112] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 85 bd 5d 09 85 c0 75 e0 48 8d 3d da 34 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 05 bf 5d 09 48 85 c0 0f [ 95.073921][ T7112] RSP: 0018:ffffc90003196f58 EFLAGS: 00010246 [ 95.073931][ T7112] RAX: 0000000000000000 RBX: ffff888100e837c0 RCX: fffff52000632dc6 [ 95.073938][ T7112] RDX: 0000000000000000 RSI: ffffffff8c6f8d40 RDI: ffffffff91275dc0 [ 95.073945][ T7112] RBP: ffffffff8c6f8d40 R08: 0000000000000000 R09: fffffbfff22450da [ 95.073951][ T7112] R10: ffffc90003196f58 R11: 0000000000000000 R12: 0000000000000000 [ 95.073958][ T7112] R13: ffffc90003196fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 95.073971][ T7112] ? __kmem_cache_create_args+0x9b/0x420 [ 95.074004][ T7112] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 95.074016][ T7112] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 95.074036][ T7112] ? vp_modern_set_queue_enable+0x43/0x90 [ 95.074051][ T7112] ? iowrite16+0x33/0xb0 [ 95.074061][ T7112] ? vp_modern_find_vqs+0xd2/0x100 [ 95.074079][ T7112] virtio_gpu_init.cold+0x51c/0x126e [ 95.074096][ T7112] ? __pfx_virtio_gpu_init+0x10/0x10 [ 95.074111][ T7112] ? __mutex_unlock_slowpath+0x35d/0x930 [ 95.074127][ T7112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.074144][ T7112] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 95.074161][ T7112] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 95.074180][ T7112] ? vga_default_device+0x9/0x20 [ 95.074196][ T7112] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 95.074216][ T7112] virtio_gpu_probe+0x21c/0x360 [ 95.074232][ T7112] virtio_dev_probe+0x6a2/0xbe0 [ 95.074249][ T7112] ? __pfx_virtio_dev_probe+0x10/0x10 [ 95.074263][ T7112] ? kernfs_create_link+0x1bd/0x240 [ 95.074280][ T7112] ? kernfs_put+0x3f/0x60 [ 95.074291][ T7112] ? sysfs_do_create_link_sd+0xbb/0x140 [ 95.074304][ T7112] ? sysfs_create_link+0x68/0xc0 [ 95.074315][ T7112] ? __pfx_virtio_dev_probe+0x10/0x10 [ 95.074331][ T7112] really_probe+0x241/0xa60 [ 95.074347][ T7112] __driver_probe_device+0x20e/0x450 [ 95.074361][ T7112] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.074375][ T7112] driver_probe_device+0x4a/0x140 [ 95.074390][ T7112] __device_attach_driver+0x1df/0x320 [ 95.074405][ T7112] ? __pfx___device_attach_driver+0x10/0x10 [ 95.074419][ T7112] bus_for_each_drv+0x159/0x1e0 [ 95.074431][ T7112] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.074443][ T7112] ? lockdep_hardirqs_on+0x78/0x100 [ 95.074456][ T7112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.074471][ T7112] __device_attach+0x1e4/0x4d0 [ 95.074490][ T7112] ? __pfx___device_attach+0x10/0x10 [ 95.074512][ T7112] ? do_raw_spin_unlock+0x145/0x1e0 [ 95.074537][ T7112] device_initial_probe+0xaf/0xd0 [ 95.074552][ T7112] bus_probe_device+0x64/0x160 [ 95.074571][ T7112] device_add+0x121d/0x1970 [ 95.074596][ T7112] ? __pfx_device_add+0x10/0x10 [ 95.074641][ T7112] ? __pfx___might_resched+0x10/0x10 [ 95.074658][ T7112] ? iowrite8+0x2b/0xb0 [ 95.074668][ T7112] ? iowrite8+0x2e/0xb0 [ 95.074677][ T7112] ? ioread8+0x8f/0xd0 [ 95.074695][ T7112] register_virtio_device+0x4f0/0x5d0 [ 95.074710][ T7112] ? __pfx_register_virtio_device+0x10/0x10 [ 95.074726][ T7112] ? __pfx_pcibios_set_master+0x10/0x10 [ 95.074741][ T7112] ? __raw_spin_lock_init+0x3a/0x110 [ 95.074763][ T7112] ? __pfx_virtio_pci_probe+0x10/0x10 [ 95.074775][ T7112] virtio_pci_probe+0x255/0x410 [ 95.074787][ T7112] local_pci_probe+0xdd/0x1b0 [ 95.074800][ T7112] pci_call_probe+0x176/0x800 [ 95.074813][ T7112] ? __pfx_pci_call_probe+0x10/0x10 [ 95.074826][ T7112] ? find_held_lock+0x2b/0x80 [ 95.074836][ T7112] ? pci_match_device+0x450/0x5f0 [ 95.074847][ T7112] ? pci_match_device+0x450/0x5f0 [ 95.074859][ T7112] ? pci_match_id+0x34d/0x3f0 [ 95.074872][ T7112] ? pci_match_device+0xb4/0x5f0 [ 95.074886][ T7112] pci_device_probe+0x1cd/0x370 [ 95.074898][ T7112] ? __pfx_pci_device_probe+0x10/0x10 [ 95.074911][ T7112] really_probe+0x241/0xa60 [ 95.074926][ T7112] __driver_probe_device+0x20e/0x450 [ 95.074940][ T7112] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.074954][ T7112] driver_probe_device+0x4a/0x140 [ 95.074968][ T7112] __device_attach_driver+0x1df/0x320 [ 95.074983][ T7112] ? __pfx___device_attach_driver+0x10/0x10 [ 95.074997][ T7112] bus_for_each_drv+0x159/0x1e0 [ 95.075009][ T7112] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.075021][ T7112] ? lockdep_hardirqs_on+0x78/0x100 [ 95.075034][ T7112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.075048][ T7112] __device_attach+0x1e4/0x4d0 [ 95.075062][ T7112] ? __pfx___device_attach+0x10/0x10 [ 95.075077][ T7112] ? do_raw_spin_unlock+0x145/0x1e0 [ 95.075095][ T7112] device_initial_probe+0xaf/0xd0 [ 95.075110][ T7112] pci_bus_add_device+0xc5/0x100 [ 95.075127][ T7112] pci_bus_add_devices+0x9a/0x1f0 [ 95.075144][ T7112] pci_rescan_bus+0x2a/0x40 [ 95.075156][ T7112] rescan_store+0xfb/0x130 [ 95.075167][ T7112] ? __pfx_rescan_store+0x10/0x10 [ 95.075179][ T7112] ? sysfs_file_kobj+0xe4/0x290 [ 95.075206][ T7112] ? __pfx_rescan_store+0x10/0x10 [ 95.075217][ T7112] bus_attr_store+0x74/0xb0 [ 95.075234][ T7112] ? __pfx_bus_attr_store+0x10/0x10 [ 95.075250][ T7112] sysfs_kf_write+0xf2/0x150 [ 95.075268][ T7112] kernfs_fop_write_iter+0x3e0/0x5f0 [ 95.075282][ T7112] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.075299][ T7112] vfs_write+0x6ac/0x1050 [ 95.075317][ T7112] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 95.075333][ T7112] ? __pfx_vfs_write+0x10/0x10 [ 95.075359][ T7112] ksys_write+0x12a/0x250 [ 95.075368][ T7112] ? __pfx_ksys_write+0x10/0x10 [ 95.075382][ T7112] do_syscall_64+0x115/0x870 [ 95.075396][ T7112] ? clear_bhb_loop+0x40/0x90 [ 95.075409][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.075421][ T7112] RIP: 0033:0x7feacb59e019 [ 95.075431][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.075441][ T7112] RSP: 002b:00007feacc470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.075452][ T7112] RAX: ffffffffffffffda RBX: 00007feacb826090 RCX: 00007feacb59e019 [ 95.075459][ T7112] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 95.075465][ T7112] RBP: 00007feacb63500c R08: 0000000000000000 R09: 0000000000000000 [ 95.075471][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.075477][ T7112] R13: 00007feacb826128 R14: 00007feacb826090 R15: 00007ffee196a598 [ 95.075491][ T7112] [ 95.076877][ T7112] Kernel Offset: disabled