last executing test programs: 1.423077876s ago: executing program 3 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 1.300935015s ago: executing program 3 (id=744): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc02, 0x3, 0xfff, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x4}], 0x50}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x9, 0x0, 0x2080, {0x4000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.113132958s ago: executing program 3 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1.038260143s ago: executing program 0 (id=755): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="dc"], 0x20) 1.038041385s ago: executing program 0 (id=756): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x148}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 941.852873ms ago: executing program 1 (id=759): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r0, r0, 0x2e, 0x4, r0, @void, @value=r0}, 0x20) 791.17709ms ago: executing program 0 (id=760): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="dc3aea34"], 0x20) 790.84549ms ago: executing program 0 (id=761): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) 342.523216ms ago: executing program 2 (id=763): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x50) 279.086726ms ago: executing program 2 (id=764): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x39, 0x0, 0x9}, 0x28) 278.859966ms ago: executing program 2 (id=765): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x8dae, 0x0, 0x100}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [], {0x95, 0x0, 0x0, 0x2010000}}, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) 278.800617ms ago: executing program 2 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 161.849054ms ago: executing program 1 (id=767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 161.661366ms ago: executing program 0 (id=768): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf4e00000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000115ad9b8a55b3ad172085fbfc8a4cfb604c09d5a6a9bacea0876429c3bde0c3110e30dee7803bb743eb7e69538848f6059a9e89d5c0890f244e648c0391ea9fd55fa0a54603a01fda97bbd5cf530c45a680736b4704e8812642172b3fa517c3c6adcd9a9599193b0f4d37beb50e76655dbbc51f10a2daf7ead87d7b207126424a4b4a7ff5783970e61cf25d14efe03549fbd6f4766c432ab2ea601a69d25ed3d56dcf06899a3054fca8b520bce069c338dd6a87657069ab77770fd6004c541a4bd293606"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x94) 161.537995ms ago: executing program 1 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000805ffffffffffffaaaaaaaaaa020800451000140064000002015e45e5"], 0x26) 65.461898ms ago: executing program 0 (id=770): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x148}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 65.292328ms ago: executing program 3 (id=771): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x4, 0x7, 0x20000000) 65.123995ms ago: executing program 1 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5, 0xe}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x61, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x7}, {0x8, 0x42794445, 0x598d, 0x2}}}]}]}]}}]}, 0x88}}, 0x0) 65.017873ms ago: executing program 2 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000025c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x800) 64.942563ms ago: executing program 1 (id=774): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xf}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x41}}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@remote}, 0x14) 423.274µs ago: executing program 3 (id=775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) 244.408µs ago: executing program 2 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x5, 0x8000, 0xaf31, 0x81}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 106.963µs ago: executing program 3 (id=777): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/mem_sleep', 0xb883, 0xb2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x0, 0x0, 0x0, 0x36f235e2, 0x0, 0x0, 0x0, 0xf, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "3201000100861a74df2cfc06c89f3d9e234b30d5050000000000000076ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50e1fa9ed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 1 (id=778): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) kernel console output (not intermixed with test programs): [ 44.063387][ T40] audit: type=1400 audit(1770826230.076:61): avc: denied { siginh } for pid=5852 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:51893' (ED25519) to the list of known hosts. [ 45.390731][ T40] audit: type=1400 audit(1770826231.436:62): avc: denied { name_bind } for pid=5897 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.417838][ T40] audit: type=1400 audit(1770826231.456:63): avc: denied { execute } for pid=5898 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.425108][ T40] audit: type=1400 audit(1770826231.456:64): avc: denied { execute_no_trans } for pid=5898 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.694753][ T40] audit: type=1400 audit(1770826233.736:65): avc: denied { mounton } for pid=5898 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.702994][ T40] audit: type=1400 audit(1770826233.746:66): avc: denied { mount } for pid=5898 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.705251][ T5898] cgroup: Unknown subsys name 'net' [ 47.843353][ T5898] cgroup: Unknown subsys name 'cpuset' [ 47.847595][ T5898] cgroup: Unknown subsys name 'rlimit' [ 48.050225][ T5920] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.734476][ T5898] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.776112][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 51.776123][ T40] audit: type=1400 audit(1770826237.816:82): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.904754][ T40] audit: type=1400 audit(1770826237.946:83): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.916985][ T40] audit: type=1400 audit(1770826237.946:84): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.927782][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.931981][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.933349][ T40] audit: type=1400 audit(1770826237.946:85): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.936846][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.937106][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.947605][ T40] audit: type=1400 audit(1770826237.946:86): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[1971]" dev="sockfs" ino=1971 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.949807][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.959511][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.961133][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.962506][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.965471][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.967437][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.970186][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.973077][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.975292][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.977477][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.981005][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.982682][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.984652][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.986173][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.987290][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.994196][ T40] audit: type=1400 audit(1770826238.036:87): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.994590][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.014286][ T40] audit: type=1400 audit(1770826238.036:88): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.021673][ T40] audit: type=1400 audit(1770826238.036:89): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.183892][ T40] audit: type=1400 audit(1770826238.226:90): avc: denied { module_request } for pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.221217][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 52.233483][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 52.297636][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 52.356589][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.359364][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.361971][ T5938] bridge_slave_0: entered allmulticast mode [ 52.364680][ T5938] bridge_slave_0: entered promiscuous mode [ 52.371221][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.373490][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.375873][ T5938] bridge_slave_1: entered allmulticast mode [ 52.378504][ T5938] bridge_slave_1: entered promiscuous mode [ 52.427096][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.429395][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.432270][ T5929] bridge_slave_0: entered allmulticast mode [ 52.434966][ T5929] bridge_slave_0: entered promiscuous mode [ 52.442400][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.445551][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 52.454106][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.456416][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.458726][ T5937] bridge_slave_0: entered allmulticast mode [ 52.461717][ T5937] bridge_slave_0: entered promiscuous mode [ 52.464750][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.467086][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.469365][ T5929] bridge_slave_1: entered allmulticast mode [ 52.472253][ T5929] bridge_slave_1: entered promiscuous mode [ 52.487192][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.500444][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.502904][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.505254][ T5937] bridge_slave_1: entered allmulticast mode [ 52.507952][ T5937] bridge_slave_1: entered promiscuous mode [ 52.517278][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.522100][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.541565][ T5938] team0: Port device team_slave_0 added [ 52.549466][ T5938] team0: Port device team_slave_1 added [ 52.555979][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.565134][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.578963][ T5929] team0: Port device team_slave_0 added [ 52.582268][ T5929] team0: Port device team_slave_1 added [ 52.615356][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.617582][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.625791][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.630452][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.632708][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.640772][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.646826][ T5937] team0: Port device team_slave_0 added [ 52.650419][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.652681][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.660759][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.673943][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.676218][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.684455][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.688920][ T5937] team0: Port device team_slave_1 added [ 52.708121][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.710881][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.719419][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.723972][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.726259][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.734946][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.769562][ T5929] hsr_slave_0: entered promiscuous mode [ 52.771988][ T5929] hsr_slave_1: entered promiscuous mode [ 52.774393][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.777149][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.779752][ T5928] bridge_slave_0: entered allmulticast mode [ 52.782470][ T5928] bridge_slave_0: entered promiscuous mode [ 52.785675][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.788078][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.790972][ T5928] bridge_slave_1: entered allmulticast mode [ 52.793643][ T5928] bridge_slave_1: entered promiscuous mode [ 52.808436][ T5938] hsr_slave_0: entered promiscuous mode [ 52.811328][ T5938] hsr_slave_1: entered promiscuous mode [ 52.813373][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 52.815268][ T5938] Cannot create hsr debugfs directory [ 52.848588][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.858024][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.892396][ T5937] hsr_slave_0: entered promiscuous mode [ 52.894805][ T5937] hsr_slave_1: entered promiscuous mode [ 52.896830][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 52.898610][ T5937] Cannot create hsr debugfs directory [ 52.913490][ T5928] team0: Port device team_slave_0 added [ 52.919648][ T5928] team0: Port device team_slave_1 added [ 52.959204][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.961755][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.969741][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.976777][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.978972][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.987289][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.061033][ T5928] hsr_slave_0: entered promiscuous mode [ 53.063301][ T5928] hsr_slave_1: entered promiscuous mode [ 53.065479][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 53.067291][ T5928] Cannot create hsr debugfs directory [ 53.124661][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.144652][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.168234][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.172909][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.238790][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.244805][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.258498][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.262846][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.309478][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.314266][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.326685][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.331346][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.369187][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.376183][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.385871][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.390476][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.404039][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.449256][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.458468][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.468509][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.471006][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.484391][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.486700][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.502064][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.508006][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.525554][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.527838][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.539247][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.542257][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.546825][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.555883][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.558174][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.578618][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.583520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.586070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.589576][ T40] audit: type=1400 audit(1770826239.626:91): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.619750][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.629283][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.631652][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.639707][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.652131][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.654599][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.686967][ T5928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.700128][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.732334][ T5938] veth0_vlan: entered promiscuous mode [ 53.738646][ T5938] veth1_vlan: entered promiscuous mode [ 53.759776][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.766805][ T5938] veth0_macvtap: entered promiscuous mode [ 53.772392][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.778294][ T5938] veth1_macvtap: entered promiscuous mode [ 53.806547][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.818570][ T5937] veth0_vlan: entered promiscuous mode [ 53.824447][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.837447][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.841171][ T5929] veth0_vlan: entered promiscuous mode [ 53.845931][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.851993][ T5937] veth1_vlan: entered promiscuous mode [ 53.859468][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.862383][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.869599][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.874128][ T5929] veth1_vlan: entered promiscuous mode [ 53.897562][ T5937] veth0_macvtap: entered promiscuous mode [ 53.919075][ T5937] veth1_macvtap: entered promiscuous mode [ 53.928094][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.931057][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.950917][ T5929] veth0_macvtap: entered promiscuous mode [ 53.960740][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.966143][ T5928] veth0_vlan: entered promiscuous mode [ 53.973343][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.976165][ T5929] veth1_macvtap: entered promiscuous mode [ 53.976334][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.980040][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.990221][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.993966][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.999607][ T5928] veth1_vlan: entered promiscuous mode [ 54.003642][ T5936] Bluetooth: hci1: command tx timeout [ 54.003782][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.008820][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.019251][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.034126][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.045958][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.054830][ T5928] veth0_macvtap: entered promiscuous mode [ 54.058351][ T5928] veth1_macvtap: entered promiscuous mode [ 54.073572][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.076108][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.080542][ T5936] Bluetooth: hci2: command tx timeout [ 54.080834][ T5932] Bluetooth: hci3: command tx timeout [ 54.081156][ T5940] Bluetooth: hci0: command tx timeout [ 54.092238][ T1201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.095401][ T1201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.118735][ T1201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.122447][ T1201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.129309][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.132530][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.135097][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.142526][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.169739][ T1201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.174555][ T1201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.177330][ T1201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.179946][ T1201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.201942][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.204481][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.247369][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.249867][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.256350][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.261467][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.275453][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.278929][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.369675][ T6030] Zero length message leads to an empty skb [ 54.440524][ T5733] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.594291][ T5733] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.597576][ T5733] usb 5-1: config 0 has no interface number 0 [ 54.600054][ T5733] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.604482][ T5733] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.608280][ T5733] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.613597][ T5733] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 54.617141][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.623598][ T5733] usb 5-1: config 0 descriptor?? [ 54.660480][ T5995] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.810893][ T6035] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.830454][ T5995] usb 7-1: Using ep0 maxpacket: 16 [ 54.833787][ T5995] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.837138][ T5995] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.842292][ T5995] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.845155][ T5995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.847873][ T5995] usb 7-1: Product: syz [ 54.849278][ T5995] usb 7-1: Manufacturer: syz [ 54.851429][ T5995] usb 7-1: SerialNumber: syz [ 54.970555][ T6035] usb 6-1: Using ep0 maxpacket: 16 [ 54.974342][ T6035] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.978622][ T6035] usb 6-1: config 0 has no interface number 0 [ 54.981299][ T6035] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.985612][ T6035] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.989467][ T6035] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 54.993558][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.999579][ T6035] usb 6-1: config 0 descriptor?? [ 55.059473][ T5995] usb 7-1: 0:2 : does not exist [ 55.071935][ T5995] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 55.091180][ T5995] usb 7-1: USB disconnect, device number 2 [ 55.115971][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 55.248101][ T5733] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.1/0003:28BD:0042.0002/input/input5 [ 55.318777][ T5733] uclogic 0003:28BD:0042.0002: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 55.443439][ T2305] usb 5-1: USB disconnect, device number 2 [ 55.611052][ T6035] uclogic 0003:28BD:0071.0003: pen parameters not found [ 55.613853][ T6035] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 55.619221][ T6035] usb 6-1: USB disconnect, device number 2 [ 55.787583][ T6056] bridge0: port 3(veth0_to_bond) entered blocking state [ 55.790154][ T6056] bridge0: port 3(veth0_to_bond) entered disabled state [ 55.793007][ T6056] veth0_to_bond: entered allmulticast mode [ 55.796198][ T6056] veth0_to_bond: entered promiscuous mode [ 55.798403][ T6056] bridge0: port 3(veth0_to_bond) entered blocking state [ 55.800764][ T6056] bridge0: port 3(veth0_to_bond) entered forwarding state [ 55.875564][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.880065][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16'. [ 56.080540][ T5932] Bluetooth: hci1: command tx timeout [ 56.160466][ T5932] Bluetooth: hci0: command tx timeout [ 56.160603][ T5936] Bluetooth: hci2: command tx timeout [ 56.170664][ T5936] Bluetooth: hci3: command tx timeout [ 56.200457][ T841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.273517][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.276016][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.279737][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.282397][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.284830][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.287269][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.289712][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.294017][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.296573][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.299006][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: unknown main item tag 0x0 [ 56.305280][ T6013] hid-generic 0000:FFFFFFFE:0007.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 56.345392][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 56.348928][ T6082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 56.361854][ T841] usb 7-1: Using ep0 maxpacket: 16 [ 56.365281][ T841] usb 7-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 56.368689][ T841] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.372471][ T841] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 56.376520][ T841] usb 7-1: config 0 interface 0 has no altsetting 0 [ 56.378628][ T841] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 56.382694][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.386830][ T841] usb 7-1: config 0 descriptor?? [ 56.530405][ T6013] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.620505][ T6088] process 'syz.3.27' launched './file0' with NULL argv: empty string added [ 56.683692][ T841] usbhid 7-1:0.0: can't add hid device: -71 [ 56.686064][ T841] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 56.690547][ T841] usb 7-1: USB disconnect, device number 3 [ 56.700418][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 56.703405][ T6013] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.706625][ T6013] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.711101][ T6013] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.714008][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.716545][ T6013] usb 6-1: Product: syz [ 56.717913][ T6013] usb 6-1: Manufacturer: syz [ 56.719407][ T6013] usb 6-1: SerialNumber: syz [ 56.747312][ T6093] capability: warning: `syz.0.29' uses deprecated v2 capabilities in a way that may be insecure [ 56.778624][ T6095] bridge0: port 3(syz_tun) entered blocking state [ 56.783292][ T6095] bridge0: port 3(syz_tun) entered disabled state [ 56.785673][ T6095] syz_tun: entered allmulticast mode [ 56.789042][ T6095] syz_tun: entered promiscuous mode [ 56.791968][ T6095] bridge0: port 3(syz_tun) entered blocking state [ 56.794229][ T6095] bridge0: port 3(syz_tun) entered forwarding state [ 56.929034][ T6013] usb 6-1: cannot find UAC_HEADER [ 56.943716][ T6013] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 56.947834][ T6013] usb 6-1: USB disconnect, device number 3 [ 56.956700][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.089233][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 57.089245][ T40] audit: type=1400 audit(1770826243.126:132): avc: denied { create } for pid=6102 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.099502][ T40] audit: type=1400 audit(1770826243.136:133): avc: denied { bind } for pid=6102 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.103227][ T6103] kvm: kvm [6102]: vcpu4, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 57.210101][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'. [ 57.214624][ T6106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.34'. [ 57.271515][ T6110] netlink: 'syz.0.36': attribute type 27 has an invalid length. [ 57.287213][ T6110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.325058][ T40] audit: type=1400 audit(1770826243.366:134): avc: denied { read write } for pid=6112 comm="syz.0.37" name="usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.332413][ T40] audit: type=1400 audit(1770826243.366:135): avc: denied { open } for pid=6112 comm="syz.0.37" path="/dev/usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.339463][ T40] audit: type=1400 audit(1770826243.376:136): avc: denied { write } for pid=6112 comm="syz.0.37" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.414283][ T40] audit: type=1326 audit(1770826243.456:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.0.38" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b9bf79 code=0x7ffc0000 [ 57.422247][ T40] audit: type=1326 audit(1770826243.456:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.0.38" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b9bf79 code=0x7ffc0000 [ 57.429883][ T40] audit: type=1326 audit(1770826243.466:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.0.38" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b9bf79 code=0x7ffc0000 [ 57.437853][ T40] audit: type=1326 audit(1770826243.466:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.0.38" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba9b9bf79 code=0x7ffc0000 [ 57.450373][ T40] audit: type=1326 audit(1770826243.466:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.0.38" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feba9b9bf79 code=0x7ffc0000 [ 57.710549][ T6136] kvm: kvm [6135]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 57.713650][ T6136] kvm: kvm [6135]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 57.748663][ T6136] kvm: kvm [6135]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf5407 [ 57.751802][ T6136] kvm: kvm [6135]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf5b07 [ 57.770638][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.784490][ T6136] kvm: kvm [6135]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf5407 [ 57.787453][ T6136] kvm: kvm [6135]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf5b07 [ 57.920393][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 57.923601][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.927726][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.939594][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.943367][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.946982][ T24] usb 7-1: Product: syz [ 57.950460][ T24] usb 7-1: Manufacturer: syz [ 57.953553][ T24] usb 7-1: SerialNumber: syz [ 58.160448][ T5936] Bluetooth: hci1: command tx timeout [ 58.165503][ T24] usb 7-1: 0:2 : does not exist [ 58.170081][ T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 58.180004][ T24] usb 7-1: USB disconnect, device number 4 [ 58.196048][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 58.200362][ T6035] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.240371][ T5936] Bluetooth: hci0: command tx timeout [ 58.250632][ T5936] Bluetooth: hci3: command tx timeout [ 58.250643][ T5932] Bluetooth: hci2: command tx timeout [ 58.380392][ T6035] usb 8-1: Using ep0 maxpacket: 32 [ 58.383401][ T6035] usb 8-1: config 0 has an invalid interface number: 191 but max is 0 [ 58.386096][ T6035] usb 8-1: config 0 has no interface number 0 [ 58.388172][ T6035] usb 8-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 58.393333][ T6035] usb 8-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 58.396246][ T6035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.398860][ T6035] usb 8-1: Product: syz [ 58.400457][ T6035] usb 8-1: Manufacturer: syz [ 58.402304][ T6035] usb 8-1: SerialNumber: syz [ 58.407778][ T6035] usb 8-1: config 0 descriptor?? [ 58.409903][ T6151] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 58.623050][ T6151] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 58.697083][ T6164] syzkaller1: entered promiscuous mode [ 58.698959][ T6164] syzkaller1: entered allmulticast mode [ 58.790398][ T5994] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.827142][ T6035] asix 8-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 58.940469][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 58.945071][ T5994] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.948496][ T5994] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.952082][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.955767][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.959753][ T5994] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.965016][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.970723][ T5994] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.974001][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.978388][ T5994] usb 6-1: config 0 descriptor?? [ 59.031051][ T6035] asix 8-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 59.034199][ T6035] asix 8-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 59.037666][ T6035] asix 8-1:0.191: probe with driver asix failed with error -71 [ 59.045944][ T6035] usb 8-1: USB disconnect, device number 2 [ 59.050946][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.198258][ T5994] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 59.212048][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 59.216658][ T10] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 59.220107][ T10] usb 5-1: config 0 has no interface number 0 [ 59.222815][ T10] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 59.229031][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 59.232827][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.236068][ T10] usb 5-1: Product: syz [ 59.237760][ T10] usb 5-1: Manufacturer: syz [ 59.239698][ T10] usb 5-1: SerialNumber: syz [ 59.245177][ T10] usb 5-1: config 0 descriptor?? [ 59.248207][ T6168] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 59.428539][ T6170] cgroup: Unknown subsys name 'cpuset' [ 59.454599][ T6168] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 59.613470][ T5994] usb 6-1: USB disconnect, device number 4 [ 59.618390][ T5994] usblp0: removed [ 60.031006][ T6022] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.058809][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 60.062230][ T10] asix 5-1:0.188: probe with driver asix failed with error -32 [ 60.181613][ T6022] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 60.184180][ T6022] usb 8-1: config 0 has no interface number 0 [ 60.186127][ T6022] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.189501][ T6022] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.192638][ T6022] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.196605][ T6022] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 60.199616][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.203423][ T6022] usb 8-1: config 0 descriptor?? [ 60.240887][ T5936] Bluetooth: hci1: command tx timeout [ 60.330935][ T5932] Bluetooth: hci3: command tx timeout [ 60.330958][ T5940] Bluetooth: hci0: command tx timeout [ 60.334488][ T5936] Bluetooth: hci2: command tx timeout [ 60.660530][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.815877][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 60.818471][ T10] usb 7-1: config 0 has no interface number 0 [ 60.821197][ T6022] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.1/0003:28BD:0042.0005/input/input6 [ 60.825354][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.828777][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.832194][ T10] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.836927][ T10] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 60.839760][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.844407][ T10] usb 7-1: config 0 descriptor?? [ 60.895068][ T6022] uclogic 0003:28BD:0042.0005: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 60.903756][ T6022] usb 8-1: USB disconnect, device number 3 [ 60.937991][ T6186] fido_id[6186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 61.455541][ T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.1/0003:28BD:0042.0006/input/input7 [ 61.536368][ T10] uclogic 0003:28BD:0042.0006: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 61.580370][ T6022] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.658189][ T53] usb 7-1: USB disconnect, device number 5 [ 61.730521][ T6022] usb 8-1: Using ep0 maxpacket: 16 [ 61.735448][ T6022] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.738322][ T6022] usb 8-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 61.743841][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.753712][ T6022] usb 8-1: config 0 descriptor?? [ 61.767561][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'. [ 61.830851][ T29] usb 5-1: USB disconnect, device number 3 [ 61.957789][ T6205] netlink: 182 bytes leftover after parsing attributes in process `syz.0.75'. [ 62.171268][ T6022] kye 0003:0458:501A.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 62.176230][ T6022] hid_parser_main: 76 callbacks suppressed [ 62.176248][ T6022] kye 0003:0458:501A.0007: unknown main item tag 0x0 [ 62.182150][ T6022] kye 0003:0458:501A.0007: unknown main item tag 0x0 [ 62.184963][ T6022] kye 0003:0458:501A.0007: unknown main item tag 0x0 [ 62.187796][ T6022] kye 0003:0458:501A.0007: unknown main item tag 0x0 [ 62.191134][ T6022] kye 0003:0458:501A.0007: unknown main item tag 0x0 [ 62.194434][ T6022] kye 0003:0458:501A.0007: unknown main item tag 0x0 [ 62.197615][ T6022] kye 0003:0458:501A.0007: unknown main item tag 0x0 [ 62.208023][ T6022] kye 0003:0458:501A.0007: hidraw1: USB HID v0.03 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 62.218530][ T6022] kye 0003:0458:501A.0007: tablet-enabling feature report not found [ 62.221472][ T6022] kye 0003:0458:501A.0007: tablet enabling failed [ 62.226635][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 62.226644][ T40] audit: type=1400 audit(1770826248.266:175): avc: denied { append } for pid=6215 comm="syz.2.79" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.230030][ T6216] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 62.236150][ T40] audit: type=1400 audit(1770826248.266:176): avc: denied { ioctl } for pid=6215 comm="syz.2.79" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.240252][ T6216] binder: 6213:6216 ioctl 4018620d 200000000140 returned -1 [ 62.370277][ T6022] usb 8-1: USB disconnect, device number 4 [ 62.408990][ T40] audit: type=1400 audit(1770826248.446:177): avc: denied { setopt } for pid=6226 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.411938][ T6227] netlink: 'syz.2.84': attribute type 4 has an invalid length. [ 62.740518][ T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 62.880415][ T53] usb 7-1: device descriptor read/64, error -71 [ 62.917964][ T40] audit: type=1400 audit(1770826248.956:178): avc: denied { relabelfrom } for pid=6230 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.926496][ T40] audit: type=1400 audit(1770826248.956:179): avc: denied { relabelto } for pid=6230 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.130805][ T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 63.177106][ T40] audit: type=1400 audit(1770826249.216:180): avc: denied { unmount } for pid=6233 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.260769][ T53] usb 7-1: device descriptor read/64, error -71 [ 63.372880][ T53] usb usb7-port1: attempt power cycle [ 63.710426][ T53] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 63.730837][ T53] usb 7-1: device descriptor read/8, error -71 [ 63.970415][ T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 63.990874][ T53] usb 7-1: device descriptor read/8, error -71 [ 64.000476][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 64.100761][ T53] usb usb7-port1: unable to enumerate USB device [ 64.151658][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.154824][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 64.158896][ T24] usb 8-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 64.161899][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.169287][ T24] usb 8-1: config 0 descriptor?? [ 64.386675][ T40] audit: type=1400 audit(1770826250.426:181): avc: denied { load_policy } for pid=6248 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.394088][ T6249] SELinux: failed to load policy [ 64.430552][ T40] audit: type=1400 audit(1770826250.476:182): avc: denied { map } for pid=6250 comm="syz.1.91" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.434130][ T6251] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.578104][ T24] belkin 0003:050D:3201.0008: item fetching failed at offset 4/5 [ 64.580952][ T24] belkin 0003:050D:3201.0008: parse failed [ 64.582861][ T24] belkin 0003:050D:3201.0008: probe with driver belkin failed with error -22 [ 64.740476][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.777814][ T5994] usb 8-1: USB disconnect, device number 5 [ 64.850451][ T6035] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.891773][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 64.895918][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 64.901838][ T24] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 64.905469][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.909185][ T24] usb 6-1: Product: syz [ 64.911166][ T24] usb 6-1: Manufacturer: syz [ 64.913111][ T24] usb 6-1: SerialNumber: syz [ 64.916853][ T24] usb 6-1: config 0 descriptor?? [ 64.919487][ T6255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 64.922647][ T6255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 65.020409][ T6035] usb 5-1: Using ep0 maxpacket: 32 [ 65.023991][ T6035] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 65.027230][ T6035] usb 5-1: config 0 has no interface number 0 [ 65.029665][ T6035] usb 5-1: config 0 interface 184 has no altsetting 0 [ 65.034149][ T6035] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 65.037469][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.040814][ T6035] usb 5-1: Product: syz [ 65.042511][ T6035] usb 5-1: Manufacturer: syz [ 65.044357][ T6035] usb 5-1: SerialNumber: syz [ 65.047903][ T6035] usb 5-1: config 0 descriptor?? [ 65.051240][ T6035] smsc75xx v1.0.0 [ 65.052731][ T6035] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 65.056826][ T6035] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 65.129140][ T6255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 65.131769][ T6255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 65.493616][ T40] audit: type=1400 audit(1770826251.536:183): avc: denied { connect } for pid=6265 comm="syz.2.98" lport=123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.540404][ T40] audit: type=1400 audit(1770826251.576:184): avc: denied { append } for pid=6268 comm="syz.2.99" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.595569][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'. [ 65.610246][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 65.697475][ T6279] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 65.765642][ T6281] random: crng reseeded on system resumption [ 65.946436][ T24] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 65.954707][ T24] dm9601 6-1:0.0 eth2: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 72:51:6e:20:45:ee [ 65.962129][ T24] usb 6-1: USB disconnect, device number 5 [ 65.965613][ T24] dm9601 6-1:0.0 eth2: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 66.025439][ T5945] udevd[5945]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory [ 66.370076][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 66.375232][ T6299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 66.591276][ T6310] syzkaller1: entered promiscuous mode [ 66.593127][ T6310] syzkaller1: entered allmulticast mode [ 66.950551][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.970382][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 67.100405][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 67.104016][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 67.107540][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.111174][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.114250][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 67.118298][ T29] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 67.121421][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.125419][ T29] usb 6-1: config 0 descriptor?? [ 67.130585][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 67.136584][ T10] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 67.140033][ T10] usb 7-1: config 0 has no interface number 0 [ 67.142867][ T10] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 67.151372][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 67.155026][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.157626][ T10] usb 7-1: Product: syz [ 67.158976][ T10] usb 7-1: Manufacturer: syz [ 67.160778][ T10] usb 7-1: SerialNumber: syz [ 67.166013][ T10] usb 7-1: config 0 descriptor?? [ 67.169161][ T6314] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 67.293021][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 67.293034][ T40] audit: type=1400 audit(1770826253.336:195): avc: denied { read } for pid=6318 comm="syz.3.118" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.375376][ T6314] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 67.621266][ T24] usb 5-1: USB disconnect, device number 4 [ 67.836734][ T40] audit: type=1400 audit(1770826253.876:196): avc: denied { bind } for pid=6311 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.128075][ T6319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.131106][ T6319] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.135976][ T6319] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.139000][ T6319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.141070][ T6319] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.144685][ T6319] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.147607][ T6319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.149600][ T6319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.153159][ T6319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.156283][ T6319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.158505][ T6319] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.163024][ T6319] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.213436][ T6329] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 68.224578][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 68.226587][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 68.233565][ T29] usb 6-1: USB disconnect, device number 6 [ 68.383029][ T10] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 68.391830][ T10] asix 7-1:0.188: probe with driver asix failed with error -71 [ 68.398882][ T10] usb 7-1: USB disconnect, device number 10 [ 68.487111][ T6339] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 68.592861][ T40] audit: type=1400 audit(1770826254.636:197): avc: denied { create } for pid=6340 comm="syz.3.125" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.595769][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.601157][ T40] audit: type=1400 audit(1770826254.646:198): avc: denied { ioctl } for pid=6340 comm="syz.3.125" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14493 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.760513][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 68.764440][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.768209][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.773449][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.776745][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.779288][ T24] usb 5-1: Product: syz [ 68.780856][ T24] usb 5-1: Manufacturer: syz [ 68.782642][ T24] usb 5-1: SerialNumber: syz [ 68.907255][ T40] audit: type=1400 audit(1770826254.946:199): avc: denied { create } for pid=6345 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.920434][ T5994] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 68.995462][ T24] usb 5-1: 0:2 : does not exist [ 68.999869][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 69.004883][ T40] audit: type=1400 audit(1770826255.046:200): avc: denied { write } for pid=6345 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.020520][ T24] usb 5-1: USB disconnect, device number 5 [ 69.036872][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.073948][ T5994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.077497][ T5994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.083504][ T5994] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 69.086596][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.100209][ T5994] usb 8-1: config 0 descriptor?? [ 69.354907][ T40] audit: type=1400 audit(1770826255.396:201): avc: denied { write } for pid=6355 comm="syz.1.131" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.362039][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.364088][ T40] audit: type=1400 audit(1770826255.396:202): avc: denied { open } for pid=6355 comm="syz.1.131" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.371295][ T40] audit: type=1400 audit(1770826255.406:203): avc: denied { ioctl } for pid=6355 comm="syz.1.131" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.512043][ T5994] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 69.514424][ T5994] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 69.517112][ T5994] hid-steam 0003:28DE:1142.0009: item fetching failed at offset 2/5 [ 69.530010][ T5994] hid-steam 0003:28DE:1142.0009: steam_probe:parse of hid interface failed [ 69.532939][ T5994] hid-steam 0003:28DE:1142.0009: probe with driver hid-steam failed with error -22 [ 69.589046][ T40] audit: type=1400 audit(1770826255.626:204): avc: denied { write } for pid=6362 comm="syz.1.134" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.709856][ T6035] usb 8-1: USB disconnect, device number 6 [ 69.780410][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 69.930398][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 69.934286][ T10] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 69.937695][ T10] usb 7-1: config 0 has no interface number 0 [ 69.940525][ T10] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 69.946362][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 69.950580][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.953895][ T10] usb 7-1: Product: syz [ 69.955663][ T10] usb 7-1: Manufacturer: syz [ 69.957659][ T10] usb 7-1: SerialNumber: syz [ 69.962705][ T10] usb 7-1: config 0 descriptor?? [ 69.965203][ T6361] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.095100][ T6377] SELinux: failed to load policy [ 70.140503][ T5994] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 70.169365][ T6361] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.170505][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.170541][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.170584][ T5932] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.301987][ T5994] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 70.305358][ T5994] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 70.308520][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 70.314382][ T5994] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 70.318591][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 70.323627][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 70.331419][ T5994] usb 6-1: string descriptor 0 read error: -22 [ 70.334192][ T5994] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 70.338372][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.350805][ T5994] usb 6-1: config 0 descriptor?? [ 70.354861][ T5994] hub 6-1:0.0: bad descriptor, ignoring hub [ 70.357352][ T5994] hub 6-1:0.0: probe with driver hub failed with error -5 [ 70.520354][ T841] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 70.670549][ T6035] usb 6-1: USB disconnect, device number 7 [ 70.703145][ T841] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.705364][ T841] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 70.708228][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.712701][ T841] usb 8-1: config 0 descriptor?? [ 70.918706][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'. [ 70.925158][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.145'. [ 70.982817][ T10] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 70.986237][ T10] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 71.001803][ T10] asix 7-1:0.188: probe with driver asix failed with error -61 [ 71.126511][ T841] hid (null): global environment stack underflow [ 71.128979][ T841] hid (null): unknown global tag 0xc [ 71.326018][ T29] usb 8-1: USB disconnect, device number 7 [ 71.391262][ T5994] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 71.441612][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.554155][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.558129][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.562772][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.567694][ T5994] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.571102][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.579534][ T5994] usb 6-1: config 0 descriptor?? [ 71.587431][ T6396] fuse: root generation should be zero [ 71.918532][ T6401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.008290][ T5994] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 72.156638][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'. [ 72.161439][ T6413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 72.240434][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.240450][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.240479][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.269967][ T841] usb 6-1: USB disconnect, device number 8 [ 72.381365][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 72.381378][ T40] audit: type=1400 audit(1770826258.426:215): avc: denied { watch } for pid=6416 comm="syz.3.156" path="/49" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.382030][ T6418] overlayfs: failed to resolve './bus': -2 [ 72.622093][ T5994] usb 7-1: USB disconnect, device number 11 [ 72.772893][ T40] audit: type=1400 audit(1770826258.816:216): avc: denied { create } for pid=6421 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.779991][ T40] audit: type=1400 audit(1770826258.816:217): avc: denied { bind } for pid=6421 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.786870][ T40] audit: type=1400 audit(1770826258.826:218): avc: denied { setopt } for pid=6421 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.821048][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.826590][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.829775][ T6424] bridge0: port 3(veth0_to_bond) entered disabled state [ 72.942032][ T40] audit: type=1400 audit(1770826258.986:219): avc: denied { map_create } for pid=6428 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.520475][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.660374][ T40] audit: type=1400 audit(1770826259.696:220): avc: denied { map_read map_write } for pid=6433 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.920639][ T40] audit: type=1400 audit(1770826259.966:221): avc: denied { perfmon } for pid=6443 comm="syz.1.165" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.930083][ T40] audit: type=1400 audit(1770826259.966:222): avc: denied { execute } for pid=6443 comm="syz.1.165" dev="tmpfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.939706][ T40] audit: type=1400 audit(1770826259.976:223): avc: denied { execute_no_trans } for pid=6443 comm="syz.1.165" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.320509][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.330482][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.333705][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.359368][ T6448] tipc: Failed to remove unknown binding: 66,0,0/0:4287810387/4287810389 [ 74.365467][ T6448] tipc: Failed to remove unknown binding: 66,0,0/0:4287810387/4287810388 [ 74.411039][ T6452] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 74.415205][ T6452] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 74.620401][ T841] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.641454][ T6461] netlink: 64 bytes leftover after parsing attributes in process `syz.3.172'. [ 75.050391][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 75.053420][ T841] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.056054][ T841] usb 5-1: config 179 has no interface number 0 [ 75.058037][ T841] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.061536][ T841] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.065217][ T841] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.068655][ T841] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.072286][ T841] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.076477][ T841] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.079306][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.084110][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.307279][ T841] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input10 [ 75.442761][ T40] audit: type=1400 audit(1770826261.486:224): avc: denied { name_bind } for pid=6469 comm="syz.3.176" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.551710][ T6479] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 75.553888][ T6479] binder: 6449:6479 ioctl 4018620d 200000000480 returned -1 [ 75.557902][ T6479] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 75.560101][ T6479] binder: 6449:6479 ioctl 4018620d 200000004a80 returned -1 [ 75.725213][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.181'. [ 75.730881][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 76.261359][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.263815][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.276391][ T6516] random: crng reseeded on system resumption [ 77.412420][ T6035] usb 5-1: USB disconnect, device number 6 [ 77.412513][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 77.417593][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 77.452566][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 77.452577][ T40] audit: type=1400 audit(1770826263.496:228): avc: denied { ioctl } for pid=6521 comm="syz.0.194" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.731490][ T40] audit: type=1400 audit(1770826263.776:229): avc: denied { connect } for pid=6526 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.836294][ T40] audit: type=1400 audit(1770826263.876:230): avc: denied { shutdown } for pid=6526 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.494533][ T6544] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 78.498285][ T6544] binder: 6543:6544 ioctl 4018620d 200000000000 returned -1 [ 78.503964][ T6544] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 78.506728][ T6544] binder: 6543:6544 ioctl 4018620d 200000000040 returned -1 [ 78.510197][ T6544] binder: 6543:6544 ioctl c0306201 2000000003c0 returned -14 [ 78.745337][ T40] audit: type=1400 audit(1770826264.786:231): avc: denied { create } for pid=6554 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.900832][ T6558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.907108][ T40] audit: type=1400 audit(1770826264.946:232): avc: denied { setopt } for pid=6554 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.140708][ T53] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 79.162152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.243527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.246284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.248899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.251901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.254531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.257127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.259741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.260453][ T40] audit: type=1400 audit(1770826265.286:233): avc: denied { read } for pid=6567 comm="syz.3.212" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.269740][ T40] audit: type=1400 audit(1770826265.286:234): avc: denied { open } for pid=6567 comm="syz.3.212" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.303661][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.324275][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.331348][ T53] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 79.335506][ T53] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 79.339006][ T53] usb 7-1: Manufacturer: syz [ 79.343865][ T53] usb 7-1: config 0 descriptor?? [ 79.346058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.348994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.754104][ T60] cfg80211: failed to load regulatory.db [ 80.190606][ T6013] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 80.273366][ T53] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 80.277127][ T53] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 80.281261][ T53] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 80.284671][ T53] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 80.287375][ T53] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 80.292277][ T53] usb 7-1: USB disconnect, device number 12 [ 80.341714][ T6013] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 80.344501][ T6013] usb 6-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 80.348198][ T6013] usb 6-1: config 220 has no interface number 2 [ 80.351760][ T6013] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 80.356028][ T6013] usb 6-1: config 220 interface 0 has no altsetting 0 [ 80.358242][ T6013] usb 6-1: config 220 interface 76 has no altsetting 0 [ 80.360559][ T6013] usb 6-1: config 220 interface 1 has no altsetting 0 [ 80.364321][ T6013] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 80.367265][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.369918][ T6013] usb 6-1: Product: syz [ 80.372214][ T6013] usb 6-1: Manufacturer: syz [ 80.373824][ T6013] usb 6-1: SerialNumber: syz [ 80.633435][ T6013] usb 6-1: selecting invalid altsetting 0 [ 80.641342][ T6013] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 80.644492][ T6013] uvcvideo 6-1:220.0: No valid video chain found. [ 80.655216][ T6013] usb 6-1: selecting invalid altsetting 0 [ 80.657759][ T6013] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 80.664779][ T6013] usb 6-1: USB disconnect, device number 9 [ 80.835586][ T40] audit: type=1400 audit(1770826266.876:235): avc: denied { prog_run } for pid=6592 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.104524][ T40] audit: type=1400 audit(1770826267.146:236): avc: denied { mount } for pid=6596 comm="syz.2.221" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.119901][ T40] audit: type=1400 audit(1770826267.146:237): avc: denied { search } for pid=6596 comm="syz.2.221" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.130007][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 81.133372][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 81.222010][ T6605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.780393][ T60] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 81.935165][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.938984][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.943098][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.947672][ T60] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.950750][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.956247][ T60] usb 8-1: config 0 descriptor?? [ 82.365646][ T60] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 82.368565][ T60] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 82.371384][ T60] plantronics 0003:047F:FFFF.000D: usage index exceeded [ 82.373688][ T60] plantronics 0003:047F:FFFF.000D: item 0 0 2 2 parsing failed [ 82.376375][ T60] plantronics 0003:047F:FFFF.000D: parse failed [ 82.378530][ T60] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 82.565347][ T60] usb 8-1: USB disconnect, device number 8 [ 83.130721][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 83.180934][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.282005][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 83.284946][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.287750][ T24] usb 7-1: config 179 has no interface number 0 [ 83.289952][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.294424][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.298766][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.303061][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 83.307324][ T24] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.312382][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.315531][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.322240][ T6646] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.350385][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 83.353820][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.358064][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.361997][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.365732][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.370183][ T10] usb 5-1: config 0 descriptor?? [ 83.376111][ T10] hub 5-1:0.0: USB hub found [ 83.531079][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input11 [ 83.580236][ T10] hub 5-1:0.0: 1 port detected [ 83.789780][ T6013] usb 7-1: USB disconnect, device number 13 [ 83.789908][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 83.800360][ C2] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 84.190417][ T10] hub 5-1:0.0: activate --> -90 [ 84.589000][ T841] usb 5-1: USB disconnect, device number 7 [ 84.591636][ T10] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 84.594463][ T10] hub_port_connect: 2 callbacks suppressed [ 84.594472][ T10] usb 5-1-port1: connect-debounce failed [ 84.680489][ T6022] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 84.830491][ T6022] usb 7-1: Using ep0 maxpacket: 8 [ 84.834206][ T6022] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 84.837483][ T6022] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 84.841499][ T6022] usb 7-1: config 0 has no interface number 0 [ 84.845687][ T6022] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 84.849246][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.852693][ T6022] usb 7-1: Product: syz [ 84.854452][ T6022] usb 7-1: Manufacturer: syz [ 84.856355][ T6022] usb 7-1: SerialNumber: syz [ 84.861204][ T6022] usb 7-1: config 0 descriptor?? [ 85.077101][ T6022] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 85.081832][ T6022] uvcvideo 7-1:0.31: No valid video chain found. [ 85.160497][ T6701] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 85.163440][ T6701] binder: 6700:6701 ioctl 4018620d 200000000480 returned -1 [ 85.168593][ T6701] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 85.170900][ T6701] binder: 6700:6701 ioctl 4018620d 200000004a80 returned -1 [ 85.281350][ T6013] usb 7-1: USB disconnect, device number 14 [ 85.987301][ T6710] binder: 6709:6710 ioctl 40046210 0 returned -14 [ 86.150488][ T40] audit: type=1400 audit(1770826272.096:240): avc: denied { append } for pid=6706 comm="syz.2.264" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.730371][ T5733] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 86.880458][ T5733] usb 6-1: Using ep0 maxpacket: 32 [ 86.885786][ T5733] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 86.889473][ T5733] usb 6-1: config 0 has no interface number 0 [ 86.892507][ T5733] usb 6-1: config 0 interface 230 has no altsetting 0 [ 86.898070][ T5733] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 86.903451][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.906079][ T5733] usb 6-1: Product: syz [ 86.907502][ T5733] usb 6-1: Manufacturer: syz [ 86.909076][ T5733] usb 6-1: SerialNumber: syz [ 86.912290][ T5733] usb 6-1: config 0 descriptor?? [ 86.917640][ T5733] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 86.926522][ T5733] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 87.199477][ T40] audit: type=1400 audit(1770826273.236:241): avc: denied { listen } for pid=6737 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.700013][ T6746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.855503][ T6758] netlink: 'syz.2.282': attribute type 25 has an invalid length. [ 87.858011][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'. [ 87.863109][ T6758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.282'. [ 87.881416][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.282'. [ 87.886592][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.076662][ T40] audit: type=1400 audit(1770826274.116:242): avc: denied { name_bind } for pid=6774 comm="syz.0.288" path="socket:[14107]" dev="sockfs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 88.169491][ T40] audit: type=1400 audit(1770826274.206:243): avc: denied { setopt } for pid=6776 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.176313][ T40] audit: type=1400 audit(1770826274.216:244): avc: denied { create } for pid=6776 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.183747][ T40] audit: type=1400 audit(1770826274.216:245): avc: denied { write } for pid=6776 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.191027][ T40] audit: type=1400 audit(1770826274.216:246): avc: denied { nlmsg_write } for pid=6776 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.933916][ T40] audit: type=1400 audit(1770826274.976:247): avc: denied { create } for pid=6800 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.948579][ T40] audit: type=1400 audit(1770826274.986:248): avc: denied { setopt } for pid=6800 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.324769][ T5733] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 89.404088][ T5733] usb 6-1: USB disconnect, device number 10 [ 89.955107][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 90.723461][ T6834] bridge0: port 3(syz_tun) entered blocking state [ 90.728481][ T6834] bridge0: port 3(syz_tun) entered disabled state [ 90.730936][ T6834] syz_tun: entered allmulticast mode [ 90.733598][ T6834] syz_tun: entered promiscuous mode [ 90.735496][ T6834] bridge0: port 3(syz_tun) entered blocking state [ 90.737563][ T6834] bridge0: port 3(syz_tun) entered forwarding state [ 90.788144][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 90.788155][ T40] audit: type=1400 audit(1770826276.826:251): avc: denied { setopt } for pid=6835 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.810747][ T40] audit: type=1400 audit(1770826276.846:252): avc: denied { map } for pid=6837 comm="syz.0.307" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.962114][ T40] audit: type=1400 audit(1770826277.006:253): avc: denied { firmware_load } for pid=6831 comm="syz.2.304" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 91.348643][ T40] audit: type=1400 audit(1770826277.386:254): avc: denied { read } for pid=6849 comm="syz.1.310" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.521792][ T6847] syz.2.304 (6847) used greatest stack depth: 17560 bytes left [ 91.590632][ T6853] xt_hashlimit: size too large, truncated to 1048576 [ 91.806491][ T6864] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.123788][ T6872] netlink: 48 bytes leftover after parsing attributes in process `syz.2.318'. [ 93.737948][ T6902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.327'. [ 94.004327][ T6902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.327'. [ 94.373010][ T6912] binder: 6911:6912 ioctl c0306201 0 returned -14 [ 94.430903][ T40] audit: type=1400 audit(1770826280.476:255): avc: denied { create } for pid=6915 comm="syz.2.331" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.584048][ T6919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.714528][ T60] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 95.743240][ T40] audit: type=1400 audit(1770826281.701:256): avc: denied { checkpoint_restore } for pid=6949 comm="syz.3.341" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.886784][ T60] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 95.906103][ T60] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 95.906716][ T40] audit: type=1400 audit(1770826281.851:257): avc: denied { create } for pid=6952 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.909987][ T60] usb 7-1: config 220 has no interface number 2 [ 95.921663][ T60] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 95.924732][ T60] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 95.929079][ T60] usb 7-1: config 220 interface 0 has no altsetting 0 [ 95.931245][ T60] usb 7-1: config 220 interface 76 has no altsetting 0 [ 95.933542][ T60] usb 7-1: config 220 interface 1 has no altsetting 0 [ 95.937317][ T60] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 95.938986][ T40] audit: type=1400 audit(1770826281.879:258): avc: denied { connect } for pid=6952 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.941670][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.950340][ T60] usb 7-1: Product: syz [ 95.951756][ T60] usb 7-1: Manufacturer: syz [ 95.953219][ T60] usb 7-1: SerialNumber: syz [ 95.955976][ T40] audit: type=1400 audit(1770826281.879:259): avc: denied { ioctl } for pid=6952 comm="syz.1.342" path="socket:[16890]" dev="sockfs" ino=16890 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.979935][ T6957] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 95.983361][ T40] audit: type=1400 audit(1770826281.935:260): avc: denied { relabelto } for pid=6952 comm="syz.1.342" name="70" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 95.996389][ T40] audit: type=1400 audit(1770826281.935:261): avc: denied { associate } for pid=6952 comm="syz.1.342" name="70" dev="tmpfs" ino=374 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 96.181515][ T60] usb 7-1: selecting invalid altsetting 0 [ 96.183833][ T60] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 96.189848][ T60] uvcvideo 7-1:220.0: No valid video chain found. [ 96.195898][ T60] usb 7-1: selecting invalid altsetting 0 [ 96.197776][ T60] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 96.204715][ T60] usb 7-1: USB disconnect, device number 15 [ 96.744211][ T6970] xt_hashlimit: size too large, truncated to 1048576 [ 96.845890][ T6975] xt_hashlimit: size too large, truncated to 1048576 [ 97.011661][ T40] audit: type=1400 audit(1770826282.899:262): avc: denied { read write } for pid=5929 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.022809][ T40] audit: type=1400 audit(1770826282.908:263): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.033368][ T40] audit: type=1400 audit(1770826282.908:264): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.510606][ T5994] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 97.694165][ T5994] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.694365][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.354'. [ 97.697382][ T5994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 97.705850][ T5994] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.710612][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.354'. [ 97.711694][ T5994] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.716508][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.719101][ T5994] usb 7-1: Product: syz [ 97.720437][ T5994] usb 7-1: Manufacturer: syz [ 97.721930][ T5994] usb 7-1: SerialNumber: syz [ 97.728237][ T5994] cdc_mbim 7-1:1.0: skipping garbage [ 97.741145][ T6991] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.980307][ T40] audit: type=1400 audit(1770826283.797:265): avc: denied { mounton } for pid=6999 comm="syz.1.358" path="/75/file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.530184][ T7012] xt_hashlimit: size too large, truncated to 1048576 [ 98.588334][ T5994] cdc_mbim 7-1:1.0: SET_NTB_FORMAT failed [ 98.612087][ T5994] cdc_mbim 7-1:1.0: bind() failure [ 98.616173][ T5994] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 98.618456][ T5994] cdc_ncm 7-1:1.1: bind() failure [ 98.623640][ T5994] usb 7-1: USB disconnect, device number 16 [ 98.707832][ T7016] kvm: pic: non byte write [ 98.822298][ T40] audit: type=1400 audit(1770826284.582:266): avc: denied { read } for pid=7018 comm="syz.3.363" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.934345][ T7022] netlink: 72 bytes leftover after parsing attributes in process `syz.0.364'. [ 98.939102][ T7022] netlink: 72 bytes leftover after parsing attributes in process `syz.0.364'. [ 98.974703][ T7024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 99.260398][ T7036] ======================================================= [ 99.260398][ T7036] WARNING: The mand mount option has been deprecated and [ 99.260398][ T7036] and is ignored by this kernel. Remove the mand [ 99.260398][ T7036] option from the mount to silence this warning. [ 99.260398][ T7036] ======================================================= [ 99.375331][ T7037] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 100.358705][ T74] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.006428][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.169837][ T29] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 101.172441][ T29] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 101.175637][ T29] usb 5-1: config 0 has no interface number 0 [ 101.180265][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 101.183222][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.185748][ T29] usb 5-1: Product: syz [ 101.187084][ T29] usb 5-1: Manufacturer: syz [ 101.188837][ T29] usb 5-1: SerialNumber: syz [ 101.197277][ T29] usb 5-1: config 0 descriptor?? [ 101.304402][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 101.304412][ T40] audit: type=1326 audit(1770826286.902:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f19bf79 code=0x7fc00000 [ 101.315934][ T40] audit: type=1326 audit(1770826286.912:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.381" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a7f19bf79 code=0x7fc00000 [ 101.633660][ T29] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 101.637479][ T29] uvcvideo 5-1:0.64: No valid video chain found. [ 101.642285][ T29] usb 5-1: USB disconnect, device number 8 [ 102.027557][ T40] audit: type=1326 audit(1770826287.585:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7f19bf79 code=0x7fc00000 [ 102.064356][ T40] audit: type=1400 audit(1770826287.613:273): avc: denied { mount } for pid=7072 comm="syz.3.382" name="/" dev="pstore" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 102.503008][ T40] audit: type=1400 audit(1770826288.025:274): avc: denied { getopt } for pid=7083 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.513730][ T5932] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.513846][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.516372][ T5932] Bluetooth: hci4: command 0x1003 tx timeout [ 102.519581][ T7055] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 102.622952][ T40] audit: type=1400 audit(1770826288.146:275): avc: denied { listen } for pid=7089 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 102.875094][ T40] audit: type=1400 audit(1770826288.371:276): avc: denied { transfer } for pid=7099 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.882601][ T7100] binder_alloc: 7099: binder_alloc_buf, no vma [ 102.973450][ T60] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 103.008551][ T7106] kvm: pic: non byte write [ 103.144485][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 103.148277][ T60] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.151334][ T60] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.154323][ T60] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.158606][ T60] usb 7-1: config 1 interface 0 has no altsetting 0 [ 103.162524][ T60] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 103.165280][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.169657][ T60] usb 7-1: Product: syz [ 103.170986][ T60] usb 7-1: Manufacturer: syz [ 103.172568][ T60] usb 7-1: SerialNumber: syz [ 103.397629][ T60] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 103.572095][ T841] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 103.733663][ T841] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.737214][ T841] usb 8-1: config 0 interface 0 has no altsetting 0 [ 103.739895][ T841] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 103.742956][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.746878][ T841] usb 8-1: config 0 descriptor?? [ 103.891966][ T7125] TCP: tcp_parse_options: Illegal window scaling value 86 > 14 received [ 103.988155][ T40] audit: type=1400 audit(1770826289.418:277): avc: denied { ioctl } for pid=7094 comm="syz.2.390" path="/dev/usb/lp0" dev="devtmpfs" ino=2991 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 104.006135][ T7128] usblp0:failed reading printer status (-32) [ 104.011820][ T6022] usb 7-1: USB disconnect, device number 17 [ 104.019369][ T6022] usblp0: removed [ 104.303665][ T841] lenovo 0003:17EF:6009.000E: hidraw1: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 104.396226][ T29] usb 8-1: USB disconnect, device number 9 [ 104.515508][ T40] audit: type=1400 audit(1770826289.914:278): avc: denied { create } for pid=7132 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.868465][ T40] audit: type=1400 audit(1770826290.242:279): avc: denied { setopt } for pid=7144 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.966789][ T7154] evm: overlay not supported [ 105.262105][ T24] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 105.346746][ T841] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 105.422731][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.426128][ T24] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 105.430596][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.433760][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.436346][ T24] usb 8-1: Product: syz [ 105.437759][ T24] usb 8-1: Manufacturer: syz [ 105.439281][ T24] usb 8-1: SerialNumber: syz [ 105.507184][ T841] usb 6-1: Using ep0 maxpacket: 32 [ 105.510408][ T841] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 105.513196][ T841] usb 6-1: config 0 has no interface number 0 [ 105.515337][ T841] usb 6-1: config 0 interface 230 has no altsetting 0 [ 105.519352][ T841] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 105.522352][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.525174][ T841] usb 6-1: Product: syz [ 105.526645][ T841] usb 6-1: Manufacturer: syz [ 105.528194][ T841] usb 6-1: SerialNumber: syz [ 105.531286][ T841] usb 6-1: config 0 descriptor?? [ 105.534571][ T841] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 105.539378][ T841] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 105.878465][ T5733] usb 8-1: USB disconnect, device number 10 [ 106.021511][ T7173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.419'. [ 106.040699][ T7173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.419'. [ 106.064622][ T7176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7176 comm=syz.2.418 [ 107.100008][ T5994] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 107.142800][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 107.281914][ T5994] usb 7-1: Using ep0 maxpacket: 32 [ 107.286701][ T5994] usb 7-1: config index 0 descriptor too short (expected 6701, got 45) [ 107.289220][ T5994] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.292241][ T5994] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.295610][ T5994] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.298423][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 107.300696][ T5994] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 107.303454][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.307974][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 107.311724][ T5994] usb 7-1: config 0 descriptor?? [ 107.313564][ T24] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.316725][ T24] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 107.321646][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 107.324340][ T24] usb 8-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 107.327087][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.331468][ T24] usb 8-1: config 0 descriptor?? [ 107.554218][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 107.556306][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 107.563293][ T24] usb 8-1: USB disconnect, device number 11 [ 107.754368][ T5994] logitech 0003:046D:CA03.000F: unknown main item tag 0x0 [ 107.757028][ T5994] logitech 0003:046D:CA03.000F: unknown main item tag 0x0 [ 107.759416][ T5994] logitech 0003:046D:CA03.000F: unknown main item tag 0x0 [ 107.761748][ T5994] logitech 0003:046D:CA03.000F: unknown main item tag 0x0 [ 107.764203][ T5994] logitech 0003:046D:CA03.000F: unknown main item tag 0x0 [ 107.767984][ T5994] logitech 0003:046D:CA03.000F: hidraw1: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0 [ 107.772350][ T5994] logitech 0003:046D:CA03.000F: no inputs found [ 107.967709][ T10] usb 7-1: USB disconnect, device number 18 [ 108.164550][ T841] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 108.169278][ T841] usb 6-1: USB disconnect, device number 11 [ 108.394005][ T5994] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 108.526253][ T7205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.428'. [ 108.530741][ T7205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.428'. [ 108.567947][ T5994] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.571227][ T5994] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.574930][ T5994] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.578147][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.580759][ T5994] usb 8-1: SerialNumber: syz [ 108.801741][ T5994] usb 8-1: 0:2 : does not exist [ 108.810619][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 108.827058][ T5994] usb 8-1: USB disconnect, device number 12 [ 108.849621][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.968729][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 108.968742][ T40] audit: type=1400 audit(1770826294.077:281): avc: denied { create } for pid=7211 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 108.979793][ T40] audit: type=1400 audit(1770826294.086:282): avc: denied { sys_admin } for pid=7211 comm="syz.1.431" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 108.992230][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 108.999771][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 109.006103][ T24] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 109.009281][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.012403][ T24] usb 7-1: Product: syz [ 109.024321][ T24] usb 7-1: Manufacturer: syz [ 109.025800][ T24] usb 7-1: SerialNumber: syz [ 109.029907][ T24] usb 7-1: config 0 descriptor?? [ 109.036137][ T24] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 109.039228][ T24] usb 7-1: Detected FT232R [ 109.216786][ T5994] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.249445][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 109.378407][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.381099][ T40] audit: type=1400 audit(1770826294.460:283): avc: denied { getopt } for pid=7217 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.382310][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.394681][ T5994] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.398071][ T5994] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 109.401921][ T5994] usb 5-1: Manufacturer: syz [ 109.411854][ T5994] usb 5-1: config 0 descriptor?? [ 109.481010][ T24] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.567934][ T40] audit: type=1400 audit(1770826294.638:284): avc: denied { watch watch_reads } for pid=7225 comm="syz.3.438" path="/124" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.688293][ T841] usb 7-1: USB disconnect, device number 19 [ 109.696511][ T841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.702755][ T841] ftdi_sio 7-1:0.0: device disconnected [ 109.785563][ T7247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.447'. [ 109.790243][ T7247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.447'. [ 109.988209][ T40] audit: type=1400 audit(1770826295.031:285): avc: denied { setopt } for pid=7261 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.151783][ T7274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.459'. [ 110.156546][ T7274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.459'. [ 110.186749][ T40] audit: type=1400 audit(1770826295.218:286): avc: denied { prog_load } for pid=7275 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.193384][ T40] audit: type=1400 audit(1770826295.227:287): avc: denied { map_create } for pid=7275 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.199530][ T40] audit: type=1400 audit(1770826295.227:288): avc: denied { map_read map_write } for pid=7275 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.205848][ T40] audit: type=1400 audit(1770826295.227:289): avc: denied { prog_run } for pid=7275 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.279842][ T5994] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #100: -71 [ 110.282727][ T5994] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 110.285430][ T5994] uclogic 0003:256C:006D.0010: failed probing pen v1 parameters: -71 [ 110.288352][ T5994] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 110.290767][ T5994] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 110.298369][ T5994] usb 5-1: USB disconnect, device number 9 [ 110.359136][ T7289] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 110.413889][ T7293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.468'. [ 110.422636][ T7293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.468'. [ 110.965514][ T40] audit: type=1400 audit(1770826295.948:290): avc: denied { create } for pid=7341 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.116405][ T7384] __nla_validate_parse: 2 callbacks suppressed [ 112.116417][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.508'. [ 112.123194][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.508'. [ 113.180438][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 113.185013][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 114.322336][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 114.322349][ T40] audit: type=1400 audit(1770826299.081:322): avc: denied { create } for pid=7467 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.333230][ T40] audit: type=1400 audit(1770826299.100:323): avc: denied { write } for pid=7467 comm="syz.0.537" path="socket:[20111]" dev="sockfs" ino=20111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.391453][ T40] audit: type=1400 audit(1770826299.156:324): avc: denied { getopt } for pid=7467 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.139191][ T40] audit: type=1400 audit(1770826299.848:325): avc: denied { block_suspend } for pid=7490 comm="syz.3.545" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.487134][ T7513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=7513 comm=syz.1.550 [ 115.514197][ T40] audit: type=1400 audit(1770826300.204:326): avc: denied { bind } for pid=7514 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.521218][ T40] audit: type=1400 audit(1770826300.204:327): avc: denied { write } for pid=7514 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.827181][ T40] audit: type=1400 audit(1770826300.494:328): avc: denied { shutdown } for pid=7529 comm="syz.1.557" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.852330][ T40] audit: type=1400 audit(1770826300.512:329): avc: denied { execute } for pid=7531 comm="syz.1.559" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 116.865222][ T40] audit: type=1400 audit(1770826301.466:330): avc: denied { bind } for pid=7568 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.872962][ T40] audit: type=1400 audit(1770826301.476:331): avc: denied { name_bind } for pid=7568 comm="syz.3.571" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 117.632715][ T7618] netlink: 72 bytes leftover after parsing attributes in process `syz.0.592'. [ 117.636697][ T7618] netlink: 72 bytes leftover after parsing attributes in process `syz.0.592'. [ 118.188503][ T7652] netlink: 72 bytes leftover after parsing attributes in process `syz.3.603'. [ 118.198485][ T7652] netlink: 72 bytes leftover after parsing attributes in process `syz.3.603'. [ 118.583109][ T6022] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 118.758375][ T6022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.762116][ T6022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.767664][ T6022] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.772320][ T6022] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.776037][ T6022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.780514][ T6022] usb 7-1: config 0 descriptor?? [ 119.234911][ T6022] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 119.323493][ T7679] netlink: 'syz.3.613': attribute type 30 has an invalid length. [ 119.502370][ T5994] usb 7-1: USB disconnect, device number 20 [ 119.549761][ T7688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.617'. [ 119.553785][ T7688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.617'. [ 119.805243][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 119.805257][ T40] audit: type=1400 audit(1770826304.217:361): avc: denied { name_connect } for pid=7700 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 119.814020][ T40] audit: type=1400 audit(1770826304.217:362): avc: denied { listen } for pid=7700 comm="syz.1.622" lport=60798 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.821143][ T40] audit: type=1400 audit(1770826304.217:363): avc: denied { accept } for pid=7700 comm="syz.1.622" lport=60798 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.832579][ T40] audit: type=1400 audit(1770826304.217:364): avc: denied { write } for pid=7700 comm="syz.1.622" lport=60798 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 119.839836][ T40] audit: type=1400 audit(1770826304.217:365): avc: denied { setopt } for pid=7700 comm="syz.1.622" lport=60798 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 120.284484][ T7739] dummy0: entered allmulticast mode [ 120.287349][ T7738] dummy0: left allmulticast mode [ 120.456019][ T40] audit: type=1400 audit(1770826304.825:366): avc: denied { append } for pid=7744 comm="syz.0.638" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 120.709709][ T40] audit: type=1400 audit(1770826305.068:367): avc: denied { ioctl } for pid=7757 comm="syz.0.643" path="socket:[20360]" dev="sockfs" ino=20360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.718437][ T40] audit: type=1400 audit(1770826305.068:368): avc: denied { create } for pid=7757 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.806737][ T40] audit: type=1400 audit(1770826305.152:369): avc: denied { write } for pid=7762 comm="syz.2.645" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 120.917003][ T40] audit: type=1400 audit(1770826305.255:370): avc: denied { read } for pid=7766 comm="syz.0.647" laddr=172.20.20.170 lport=49139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.971940][ T7772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.649'. [ 120.976598][ T7772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.649'. [ 121.125193][ T7780] netlink: 'syz.3.652': attribute type 30 has an invalid length. [ 121.591910][ T7806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.661'. [ 121.597793][ T7806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.661'. [ 122.217300][ T7853] netlink: 'syz.0.682': attribute type 25 has an invalid length. [ 122.237325][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.356958][ T7965] __nla_validate_parse: 8 callbacks suppressed [ 124.356970][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 124.600744][ T7975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.725'. [ 124.902040][ T8000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 126.135713][ T8064] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 126.137800][ T8064] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 126.165974][ T8068] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 126.262914][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 126.386956][ T8091] [ 126.387796][ T8091] ====================================================== [ 126.390016][ T8091] WARNING: possible circular locking dependency detected [ 126.392220][ T8091] syzkaller #0 Not tainted [ 126.393801][ T8091] ------------------------------------------------------ [ 126.396009][ T8091] syz.3.777/8091 is trying to acquire lock: [ 126.397898][ T8091] ffff88801ca97220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 126.401114][ T8091] [ 126.401114][ T8091] but task is already holding lock: [ 126.403438][ T8091] ffff888103315fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 126.406916][ T8091] [ 126.406916][ T8091] which lock already depends on the new lock. [ 126.406916][ T8091] [ 126.410171][ T8091] [ 126.410171][ T8091] the existing dependency chain (in reverse order) is: [ 126.412976][ T8091] [ 126.412976][ T8091] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 126.415739][ T8091] blk_alloc_queue+0x610/0x790 [ 126.417440][ T8091] blk_mq_alloc_queue+0x174/0x290 [ 126.419213][ T8091] __blk_mq_alloc_disk+0x29/0x120 [ 126.420973][ T8091] loop_add+0x498/0xb60 [ 126.422489][ T8091] loop_init+0x1d3/0x200 [ 126.424038][ T8091] do_one_initcall+0x11d/0x690 [ 126.425740][ T8091] kernel_init_freeable+0x6e5/0x790 [ 126.427551][ T8091] kernel_init+0x1f/0x1e0 [ 126.429136][ T8091] ret_from_fork+0x754/0xd80 [ 126.430936][ T8091] ret_from_fork_asm+0x1a/0x30 [ 126.432713][ T8091] [ 126.432713][ T8091] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 126.435003][ T8091] fs_reclaim_acquire+0xc4/0x100 [ 126.436737][ T8091] kmem_cache_alloc_noprof+0x5b/0x780 [ 126.438624][ T8091] __kernfs_iattrs+0x126/0x400 [ 126.440312][ T8091] __kernfs_setattr+0x4d/0x3c0 [ 126.442004][ T8091] kernfs_iop_setattr+0xda/0x130 [ 126.443757][ T8091] notify_change+0xb25/0x1330 [ 126.445430][ T8091] do_truncate+0x1df/0x240 [ 126.447020][ T8091] path_openat+0x2a55/0x31a0 [ 126.448660][ T8091] do_file_open+0x20e/0x430 [ 126.450291][ T8091] do_sys_openat2+0x10d/0x1e0 [ 126.451951][ T8091] __x64_sys_openat+0x12d/0x210 [ 126.453667][ T8091] do_syscall_64+0x106/0xf80 [ 126.455309][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.457350][ T8091] [ 126.457350][ T8091] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 126.460009][ T8091] __lock_acquire+0x14b8/0x2630 [ 126.461786][ T8091] lock_acquire+0x17c/0x330 [ 126.463406][ T8091] down_read+0x99/0x460 [ 126.464917][ T8091] kernfs_iop_getattr+0x9c/0xf0 [ 126.466640][ T8091] vfs_getattr_nosec+0x2d4/0x430 [ 126.468367][ T8091] vfs_getattr+0x4a/0x60 [ 126.469921][ T8091] loop_query_min_dio_size.isra.0+0x117/0x250 [ 126.472015][ T8091] lo_ioctl+0x13aa/0x1bc0 [ 126.473593][ T8091] blkdev_ioctl+0x5ad/0x6f0 [ 126.475209][ T8091] __x64_sys_ioctl+0x18e/0x210 [ 126.476897][ T8091] do_syscall_64+0x106/0xf80 [ 126.478552][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.480582][ T8091] [ 126.480582][ T8091] other info that might help us debug this: [ 126.480582][ T8091] [ 126.483771][ T8091] Chain exists of: [ 126.483771][ T8091] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 126.483771][ T8091] [ 126.488219][ T8091] Possible unsafe locking scenario: [ 126.488219][ T8091] [ 126.490590][ T8091] CPU0 CPU1 [ 126.492294][ T8091] ---- ---- [ 126.494011][ T8091] lock(&q->q_usage_counter(io)#24); [ 126.495727][ T8091] lock(fs_reclaim); [ 126.497801][ T8091] lock(&q->q_usage_counter(io)#24); [ 126.500285][ T8091] rlock(&root->kernfs_iattr_rwsem); [ 126.502003][ T8091] [ 126.502003][ T8091] *** DEADLOCK *** [ 126.502003][ T8091] [ 126.504539][ T8091] 3 locks held by syz.3.777/8091: [ 126.506151][ T8091] #0: ffff888105d7d448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 126.509435][ T8091] #1: ffff888103315fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 126.513100][ T8091] #2: ffff888103315fe8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 126.516820][ T8091] [ 126.516820][ T8091] stack backtrace: [ 126.518709][ T8091] CPU: 2 UID: 0 PID: 8091 Comm: syz.3.777 Not tainted syzkaller #0 PREEMPT(full) [ 126.518722][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.518729][ T8091] Call Trace: [ 126.518733][ T8091] [ 126.518738][ T8091] dump_stack_lvl+0x100/0x190 [ 126.518756][ T8091] print_circular_bug.cold+0x178/0x1c7 [ 126.518774][ T8091] check_noncircular+0x146/0x160 [ 126.518790][ T8091] __lock_acquire+0x14b8/0x2630 [ 126.518807][ T8091] lock_acquire+0x17c/0x330 [ 126.518820][ T8091] ? kernfs_iop_getattr+0x9c/0xf0 [ 126.518835][ T8091] ? __pfx___might_resched+0x10/0x10 [ 126.518852][ T8091] down_read+0x99/0x460 [ 126.518863][ T8091] ? kernfs_iop_getattr+0x9c/0xf0 [ 126.518876][ T8091] ? find_held_lock+0x2b/0x80 [ 126.518886][ T8091] ? __pfx_down_read+0x10/0x10 [ 126.518896][ T8091] ? kernfs_root+0xee/0x2a0 [ 126.518912][ T8091] kernfs_iop_getattr+0x9c/0xf0 [ 126.518927][ T8091] vfs_getattr_nosec+0x2d4/0x430 [ 126.518940][ T8091] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 126.518954][ T8091] vfs_getattr+0x4a/0x60 [ 126.518966][ T8091] loop_query_min_dio_size.isra.0+0x117/0x250 [ 126.518979][ T8091] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 126.518996][ T8091] lo_ioctl+0x13aa/0x1bc0 [ 126.519009][ T8091] ? __pfx_lo_ioctl+0x10/0x10 [ 126.519021][ T8091] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 126.519038][ T8091] ? lockdep_hardirqs_on+0x78/0x100 [ 126.519053][ T8091] ? blk_get_meta_cap+0xd4/0x6c0 [ 126.519065][ T8091] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 126.519078][ T8091] ? blkdev_common_ioctl+0x515/0x2ba0 [ 126.519090][ T8091] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 126.519103][ T8091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.519115][ T8091] ? do_vfs_ioctl+0x226/0x13e0 [ 126.519131][ T8091] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.519146][ T8091] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.519169][ T8091] ? __fget_files+0x215/0x3d0 [ 126.519181][ T8091] ? __pfx_lo_ioctl+0x10/0x10 [ 126.519193][ T8091] blkdev_ioctl+0x5ad/0x6f0 [ 126.519206][ T8091] ? __pfx_blkdev_ioctl+0x10/0x10 [ 126.519218][ T8091] ? selinux_file_ioctl+0x139/0x290 [ 126.519232][ T8091] ? selinux_file_ioctl+0xb4/0x290 [ 126.519245][ T8091] ? __pfx_blkdev_ioctl+0x10/0x10 [ 126.519258][ T8091] __x64_sys_ioctl+0x18e/0x210 [ 126.519275][ T8091] do_syscall_64+0x106/0xf80 [ 126.519292][ T8091] ? clear_bhb_loop+0x40/0x90 [ 126.519303][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.519314][ T8091] RIP: 0033:0x7f0475d9bf79 [ 126.519324][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.519334][ T8091] RSP: 002b:00007f0476c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.519345][ T8091] RAX: ffffffffffffffda RBX: 00007f0476015fa0 RCX: 00007f0475d9bf79 [ 126.519351][ T8091] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 126.519357][ T8091] RBP: 00007f0475e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 126.519364][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.519370][ T8091] R13: 00007f0476016038 R14: 00007f0476015fa0 R15: 00007fff2b7df408 [ 126.519380][ T8091]