last executing test programs: 3m5.871721899s ago: executing program 1 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x120) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m5.669428982s ago: executing program 1 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 3m5.442707349s ago: executing program 1 (id=140): r0 = fanotify_init(0x4, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x1038, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) 3m5.239268928s ago: executing program 1 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) 3m5.142014258s ago: executing program 1 (id=145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x8}}, 0x2, 0x9}, &(0x7f00000000c0)=0x90) 3m4.841557624s ago: executing program 1 (id=149): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x9) write$dsp(r0, &(0x7f0000000240)="1bde089db4e1f558c1fac0e45331c4859ed4516b05165b37b710ff7130b8b173103d2e91bb97cefcf6cb67cc76e48d72d9a608acfa04246d8e455bc7311505c8b0", 0x41) close(r0) 3m4.54754826s ago: executing program 32 (id=149): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x9) write$dsp(r0, &(0x7f0000000240)="1bde089db4e1f558c1fac0e45331c4859ed4516b05165b37b710ff7130b8b173103d2e91bb97cefcf6cb67cc76e48d72d9a608acfa04246d8e455bc7311505c8b0", 0x41) close(r0) 2m5.149921529s ago: executing program 2 (id=864): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 2m5.089970809s ago: executing program 2 (id=865): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x6, @sdr={0x4f565559, 0x5}}) syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x220000) r1 = syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000240)) 2m5.065240647s ago: executing program 2 (id=866): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="f78d9ca38fff48f3a1619ca4be52", 0xe}, {&(0x7f0000000400)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}, {&(0x7f0000000140)="2c87bc0fd2ad98bbc172aaf084a51b0d5770486d40d7098826c07281541945ec7b6d39d375d5a25298123ec03771f8801543617df80fb4efe519a3783417f52e5b327435aabdda56650992d0c4bf7915de223d69b19be14f8ece5aaebdff0bbe8ebe002a97bb113a", 0x68}, {&(0x7f0000000540)="081d98784b6e8929c5bed1afb2551cd8ea48bca6b584c9215704d3a49cac0583d918b22d19ef4a4e34daecd3a96c8bd0ae35f0005360aa974e09cc68485b83917114d619", 0x44}], 0x4, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff9a, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/67, 0x51}, {&(0x7f00000002c0)=""/188, 0xbc}], 0x2}, 0x40010000) 2m5.011829688s ago: executing program 2 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 2m5.010998259s ago: executing program 2 (id=868): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m4.737181505s ago: executing program 2 (id=873): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 2m4.5199427s ago: executing program 33 (id=873): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 4.313392714s ago: executing program 3 (id=2146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000000c0)={0x0, 0xa, 0x70, {0x70, 0x22, "dc050000000000000056efb20ecf60ae23f3d5d53243f1ad682e0e3fe607525d4dfee22c110998bbf391f0dfbdc281bfd4fee031c468e99d4a2350dd55474a5f50824fcbc7000000000000003dd9ce5bd1bec0e671b9407c5c28203c6252050205dfee031fa794823845d5ec320f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.979414323s ago: executing program 4 (id=2164): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) unshare(0x2c020400) shutdown(r3, 0x0) 2.928199344s ago: executing program 4 (id=2165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x27, 0x0, "8a7ecb4d6b3f0cafbcf35cabb63f9e9d198114683021053c2f3bda25afeda865b263ae05982942263fef7decbccfcf7e96961f74d44a9ab0ed3c3e8b01d58bb05c429eefcbc6b655605f8babcf818706"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2.773340761s ago: executing program 4 (id=2166): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0xf04601c4a2f46e46}) 2.72344684s ago: executing program 0 (id=2167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="dccb07ef399fa77311413e3cc9adf84d8610a42dae9b113a24288a1a7f834417b381ced900f61b5f7a9cd30a51dc432a6e27e25be626f6c476", 0x39}], 0x1) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2.707503803s ago: executing program 4 (id=2168): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2.629401425s ago: executing program 6 (id=2169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1}, 0x40010000) 2.573411146s ago: executing program 3 (id=2171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0xa472, 0x3000000002, 0xfffffffffffffded]}) 2.501344745s ago: executing program 6 (id=2172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10, 0x0, 0x0, 0x0, 0x20}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.438230118s ago: executing program 0 (id=2173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb4320873656298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) sendto$inet6(r0, &(0x7f0000000380)="b1", 0x4000, 0x0, 0x0, 0x0) 2.315711935s ago: executing program 3 (id=2175): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2240, 0x100) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x3, &(0x7f00000003c0)={[{}]}) 2.20928398s ago: executing program 6 (id=2176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.153375674s ago: executing program 0 (id=2177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 2.072128743s ago: executing program 6 (id=2179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7fffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.026360475s ago: executing program 3 (id=2180): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 1.725373737s ago: executing program 3 (id=2181): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) syz_usb_connect$cdc_ncm(0x1, 0x95, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x6, 0x20, 0x6e, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d9"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0xffff}, {0x6, 0x24, 0x1a, 0xd, 0x2}, [@dmm={0x7, 0x24, 0x14, 0xe5, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xe}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xb, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x1, 0xa, 0x5, 0x7, 0x5d}, @dmm={0x7, 0x24, 0x14, 0x2, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0xc, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xeb, 0x3, 0xf, 0x40, 0x5}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000107000000f74d4a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.724509475s ago: executing program 6 (id=2191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="b8000000150001ee"], 0xb8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.660957964s ago: executing program 6 (id=2182): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0xa2e65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0xc0844123, &(0x7f0000000080)=0x5) 1.189411733s ago: executing program 0 (id=2183): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 923.812825ms ago: executing program 5 (id=2187): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000002c0), 0x0, 0x0, 0x0) 906.04152ms ago: executing program 0 (id=2188): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x18}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) 833.423416ms ago: executing program 5 (id=2189): unshare(0x6020400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 833.174916ms ago: executing program 0 (id=2190): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(r1) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 826.781156ms ago: executing program 5 (id=2192): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 594.881387ms ago: executing program 4 (id=2193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 550.364697ms ago: executing program 4 (id=2194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x1) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f00000044c0)={0x104, 0x21, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xf1, 0x138, 0x0, 0x1, [@nested={0x4, 0x112}, @generic="87baa4740d1c33fe3865c2db1d8de34ee871ca3dd265ff62e6c48902e5515860d6ffdb96d7fd1c546a9a09e5eed175c94514f3fc1da21653a77e6d92783514ec30f439be9a4f56543a1d859c62c21857382bed88d17d9c378db307ddcc432bd8ffcd4312", @generic="efbf4c3f0e24b58468e28e3f76012618309f052348cdc06325a36a4a5ef0766dc19435c0fc04b17e8ded89a2ecbc4f9ea83cf5deaa45e53f8713644ef39aed23958e7fea0f35e485b24048e45a4dfb34659927835d92543d9424254611c1a2cc33cd5d9bc90f574b9b2d77d933e3c02ce8c55ba2fcb75b316d7a90f1c58d34c31d0919281d"]}]}, 0x104}], 0x1, 0x0, 0x0, 0x3a630fc1f7620b5c}, 0x0) 526.623545ms ago: executing program 5 (id=2195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 428.179562ms ago: executing program 5 (id=2196): gettid() r0 = mq_open(&(0x7f0000002180)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86>,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9\x9dk\xe4', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x9, 0xfffffffffffff7f4}) r1 = syz_io_uring_setup(0x1a5a, &(0x7f0000000200)={0x0, 0xcd3e, 0x10100, 0x4, 0x6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x79a5, 0x2, 0x46, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 357.3141ms ago: executing program 5 (id=2197): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 0s ago: executing program 3 (id=2198): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 177.384419][ T5897] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 177.405084][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 177.443642][ T5897] hid-generic 0006:0004:0009.0019: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 177.555609][ T9206] fido_id[9206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.596949][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 177.618723][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 177.650825][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 177.810365][ T5835] udevd[5835]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 177.815524][ T5910] usb 4-1: config 0 has no interfaces? [ 177.863213][ T5910] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 177.888198][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.898639][ T5910] usb 4-1: Product: syz [ 177.902885][ T5910] usb 4-1: Manufacturer: syz [ 177.910921][ T5910] usb 4-1: SerialNumber: syz [ 177.919422][ T5910] usb 4-1: config 0 descriptor?? [ 178.106665][ T9228] 9pnet: p9_errstr2errno: server reported unknown error n [ 178.142748][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 178.169175][ T30] audit: type=1400 audit(1756617406.678:616): avc: denied { write } for pid=9229 comm="syz.4.1206" path="socket:[27597]" dev="sockfs" ino=27597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.199217][ T9233] io-wq is not configured for unbound workers [ 178.230228][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 178.360509][ T9200] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.409463][ T5897] usb 4-1: USB disconnect, device number 24 [ 178.415125][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 178.538421][ T9247] loop8: detected capacity change from 0 to 16384 [ 178.561081][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 178.714705][ T9255] loop8: detected capacity change from 16384 to 16383 [ 178.722228][ T7754] udevd[7754]: symlink '../../loop8' '/dev/disk/by-diskseq/82.tmp-b7:8' failed: Read-only file system [ 178.951098][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1219'. [ 178.969354][ T30] audit: type=1400 audit(1756617407.478:617): avc: denied { create } for pid=9262 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.046834][ T30] audit: type=1400 audit(1756617407.508:618): avc: denied { connect } for pid=9262 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.142007][ T30] audit: type=1400 audit(1756617407.518:619): avc: denied { write } for pid=9262 comm="syz.0.1218" path="socket:[28317]" dev="sockfs" ino=28317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.145781][ T9266] input: syz1 as /devices/virtual/input/input24 [ 179.165518][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.554292][ T5968] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 179.646464][ T9274] openvswitch: netlink: Multiple metadata blocks provided [ 179.748164][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 179.768818][ T5968] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 179.811529][ T5968] usb 5-1: config 0 has no interface number 0 [ 179.819192][ T5968] usb 5-1: config 0 interface 12 has no altsetting 0 [ 179.832918][ T5968] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 179.853080][ T5968] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 179.862878][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 179.887372][ T5968] usb 5-1: Product: syz [ 179.898632][ T5968] usb 5-1: Manufacturer: syz [ 179.908474][ T5968] usb 5-1: SerialNumber: syz [ 179.933494][ T5968] usb 5-1: config 0 descriptor?? [ 180.594311][ T9304] IPv4: Oversized IP packet from 127.202.26.0 [ 180.678960][ T30] audit: type=1400 audit(1756617409.188:620): avc: denied { create } for pid=9305 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 180.698616][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.772853][ T30] audit: type=1400 audit(1756617409.238:621): avc: denied { sys_admin } for pid=9305 comm="syz.3.1237" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 180.813077][ T5968] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 180.834367][ T5968] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 180.858340][ T5968] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 180.876536][ T5968] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 180.919607][ T5968] usb 5-1: USB disconnect, device number 19 [ 180.996573][ T9314] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 181.030826][ T9314] netlink: 'syz.0.1240': attribute type 4 has an invalid length. [ 181.054731][ T9314] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1240'. [ 181.188362][ T9320] overlayfs: upper fs does not support file handles, falling back to index=off. [ 181.253580][ T9320] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 181.508179][ T9329] input: syz1 as /devices/virtual/input/input25 [ 181.799611][ T1317] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.304386][ T9358] loop3: detected capacity change from 0 to 1 [ 182.331380][ T9358] Dev loop3: unable to read RDB block 1 [ 182.340049][ T9358] loop3: unable to read partition table [ 182.348241][ T9358] loop3: partition table beyond EOD, truncated [ 182.367064][ T9358] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 182.385798][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/83.tmp-b7:3' failed: Read-only file system [ 182.406546][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 182.460492][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/83.tmp-b7:3' failed: Read-only file system [ 182.502820][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/83.tmp-b7:3' failed: Read-only file system [ 182.540382][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 182.579408][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 182.662721][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 182.697502][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 182.724753][ T30] audit: type=1326 audit(1756617411.228:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe6d8ebe9 code=0x7ffc0000 [ 182.748090][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.830148][ T30] audit: type=1326 audit(1756617411.228:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe6d8ebe9 code=0x7ffc0000 [ 182.838873][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 182.900929][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 182.901771][ T30] audit: type=1326 audit(1756617411.268:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fe6d8ebe9 code=0x7ffc0000 [ 182.935191][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.000087][ T30] audit: type=1326 audit(1756617411.268:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe6d8ebe9 code=0x7ffc0000 [ 183.344180][ T5897] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 183.511250][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1275'. [ 183.514272][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 183.536118][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 183.559364][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 183.573697][ T5897] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 183.585599][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.593600][ T5897] usb 7-1: Product: syz [ 183.598122][ T5897] usb 7-1: Manufacturer: syz [ 183.602722][ T5897] usb 7-1: SerialNumber: syz [ 183.607533][ T9400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.609409][ T5897] usb 7-1: config 0 descriptor?? [ 183.632700][ T5897] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 183.642583][ T5897] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 183.689408][ T9404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.703406][ T9404] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.717182][ T9404] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 183.874555][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 183.874894][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 184.237030][ T5897] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 184.250167][ T5897] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 184.267283][ T9432] netlink: 'syz.5.1289': attribute type 1 has an invalid length. [ 184.291700][ T9432] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1289'. [ 184.463380][ T5897] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 184.482944][ T5897] em28xx 7-1:0.0: No AC97 audio processor [ 184.527664][ T5897] usb 7-1: USB disconnect, device number 8 [ 184.555777][ T5897] em28xx 7-1:0.0: Disconnecting em28xx [ 184.611842][ T5897] em28xx 7-1:0.0: Freeing device [ 185.585509][ T5924] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 185.794789][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 185.819039][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.829802][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 185.840345][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.861382][ T5924] usb 4-1: config 0 descriptor?? [ 185.890560][ T5924] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 187.109279][ T5924] gspca_vc032x: reg_w err -71 [ 187.114182][ T5924] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 187.318744][ T5924] usb 4-1: USB disconnect, device number 25 [ 187.478099][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 187.636744][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 187.636760][ T30] audit: type=1400 audit(1756617416.138:634): avc: denied { bind } for pid=9526 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.700810][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 187.877897][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 187.889226][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 188.025621][ T30] audit: type=1400 audit(1756617416.538:635): avc: denied { name_bind } for pid=9536 comm="syz.3.1333" path="socket:[29459]" dev="sockfs" ino=29459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.049267][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.068875][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 188.211060][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 188.284337][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 188.342718][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 188.446340][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 188.599218][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 188.649738][ T9558] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 189.144926][ T9569] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 189.144926][ T9569] Q&|xXX initial count (2409167910 ns). Using initial count to start timer. [ 199.154277][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 199.315858][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.335878][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 199.358083][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.384215][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.386041][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 199.409767][ T10] usb 7-1: config 0 descriptor?? [ 199.529877][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 199.651983][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 199.660467][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 199.681621][ T10] usb 7-1: USB disconnect, device number 11 [ 199.947188][ T30] audit: type=1400 audit(1756617428.458:655): avc: denied { write } for pid=9848 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.009882][ T9851] netlink: 'syz.3.1464': attribute type 29 has an invalid length. [ 200.023760][ T9851] netlink: 'syz.3.1464': attribute type 29 has an invalid length. [ 200.174155][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 200.324202][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 200.330682][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.341763][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 200.350880][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.360009][ T10] usb 7-1: config 0 descriptor?? [ 200.627639][ T30] audit: type=1400 audit(1756617429.138:656): avc: denied { append } for pid=9858 comm="syz.4.1468" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.784981][ T10] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 200.825589][ T30] audit: type=1400 audit(1756617429.338:657): avc: denied { map } for pid=9867 comm="syz.5.1472" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.851747][ T30] audit: type=1400 audit(1756617429.338:658): avc: denied { execute } for pid=9867 comm="syz.5.1472" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.004361][ T7931] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 201.194491][ T7931] usb 5-1: Using ep0 maxpacket: 8 [ 201.210245][ T7931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.227776][ T7931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.238290][ T7931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.249572][ T10] usb 7-1: USB disconnect, device number 12 [ 201.261080][ T7931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.274654][ T7931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.283759][ T7931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.535844][ T7931] usb 5-1: usb_control_msg returned -32 [ 201.544316][ T7931] usbtmc 5-1:16.0: can't read capabilities [ 201.598021][ T7931] usb 5-1: USB disconnect, device number 22 [ 201.924364][ T5924] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 202.085858][ T5924] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.104304][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.138119][ T5924] usb 4-1: config 0 descriptor?? [ 202.165552][ T5924] cp210x 4-1:0.0: cp210x converter detected [ 202.230550][ T30] audit: type=1400 audit(1756617430.738:659): avc: denied { append } for pid=9895 comm="syz.5.1484" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.280235][ T9903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9903 comm=syz.4.1485 [ 202.570091][ T5924] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 202.606456][ T5924] usb 4-1: cp210x converter now attached to ttyUSB0 [ 202.782801][ T5924] usb 4-1: USB disconnect, device number 27 [ 202.796640][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.835358][ T5924] cp210x 4-1:0.0: device disconnected [ 203.041735][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 203.163492][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 203.382748][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 203.437864][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 203.454742][ T5835] udevd[5835]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 203.485930][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 203.522435][ T9941] netlink: 'syz.6.1502': attribute type 10 has an invalid length. [ 203.536430][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.544397][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.558848][ T9941] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.566010][ T9941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.573461][ T9941] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.580607][ T9941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.592067][ T9941] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 203.691618][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 203.781845][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 203.909302][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 203.957576][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 204.055686][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 204.088170][ C1] vcan0: j1939_session_tx_dat: 0xffff8880784b0800: queue data error: -100 [ 204.098424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.106264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.114322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.122120][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.130002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.137842][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.145733][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.153540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.161467][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.169304][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.169915][ T30] audit: type=1400 audit(1756617432.658:660): avc: denied { read } for pid=5200 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 204.177208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.206923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.214835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.222658][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.230563][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.238391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.246290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.254119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.262002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.269831][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.277715][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.285545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.293405][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.301231][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.301516][ T30] audit: type=1400 audit(1756617432.658:661): avc: denied { search } for pid=5200 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.309097][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.309112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.309175][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.309189][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.309251][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.309264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.309327][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.385296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.393176][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.401001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.408866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.416694][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.424545][ T30] audit: type=1400 audit(1756617432.658:662): avc: denied { search } for pid=5200 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.424565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.453790][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.461682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.469497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.477384][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.485205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.493076][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.500913][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.508822][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.516682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.524561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.532356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.540241][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.540577][ T30] audit: type=1400 audit(1756617432.658:663): avc: denied { add_name } for pid=5200 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.548046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.548115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.548129][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.548189][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.600013][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.607897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.615716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.623571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.631416][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.639292][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.647116][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.654991][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.662785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.670663][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.678474][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.686360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.694178][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.694299][ T30] audit: type=1400 audit(1756617432.658:664): avc: denied { create } for pid=5200 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.702018][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.730394][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.738282][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.746102][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.753962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.761794][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.769665][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.777489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.785376][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.793181][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.793285][ T30] audit: type=1400 audit(1756617432.658:665): avc: denied { append open } for pid=5200 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.801045][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.801061][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.801124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.801136][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.801202][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.801215][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.801276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.878898][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.886800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.894618][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.902485][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.910329][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.918215][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.926055][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.933905][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.941733][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.949624][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.957457][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.965332][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.973127][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.981001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 204.985375][ T30] audit: type=1400 audit(1756617432.658:666): avc: denied { getattr } for pid=5200 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.988806][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.019322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.027152][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.035034][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.043703][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.051603][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.059414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.067300][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.075115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.082971][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.083138][ T30] audit: type=1400 audit(1756617433.018:667): avc: denied { map } for pid=9961 comm="syz.5.1512" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.090787][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.090858][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.090872][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.090942][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.090954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.091013][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.091027][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.091090][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.091102][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.091162][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.091175][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.200569][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.208410][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.216303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.224172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.232039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.239887][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.247782][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.255608][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.263476][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.271326][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.284800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.292616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.300517][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.308334][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.316236][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 205.324033][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 205.506845][ T9972] netlink: 'syz.4.1517': attribute type 10 has an invalid length. [ 205.544160][ T9972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1517'. [ 205.582379][ T9972] team0: Port device geneve0 added [ 205.651951][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.692316][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.734223][ T5910] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 205.749866][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.808239][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.906803][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.939645][ T5910] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 205.963188][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.995264][ T5910] usb 6-1: config 0 descriptor?? [ 206.435905][ T5910] petalynx 0003:18B1:0037.001C: item fetching failed at offset 0/2 [ 206.456487][ T5910] petalynx 0003:18B1:0037.001C: parse failed [ 206.475279][ T5910] petalynx 0003:18B1:0037.001C: probe with driver petalynx failed with error -22 [ 206.588872][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 206.652657][ T5910] usb 6-1: USB disconnect, device number 13 [ 207.054274][ T7931] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 207.174189][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 207.214288][ T7931] usb 5-1: Using ep0 maxpacket: 8 [ 207.223333][ T7931] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 207.240561][ T7931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.415128][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 207.427168][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 207.443385][ T7931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.453529][ T10] usb 4-1: config 0 has no interface number 0 [ 207.463923][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 207.470795][ T7931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.497331][ T7931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.512274][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 207.531128][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.540526][ T7931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.555914][ T10] usb 4-1: Product: syz [ 207.560127][ T7931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.570324][ T10] usb 4-1: Manufacturer: syz [ 207.576304][ T10] usb 4-1: SerialNumber: syz [ 207.594619][ T10] usb 4-1: config 0 descriptor?? [ 207.608774][ T10] smsc75xx v1.0.0 [ 207.797261][ T7931] usb 5-1: GET_CAPABILITIES returned 0 [ 207.807007][ T7931] usbtmc 5-1:16.0: can't read capabilities [ 207.923070][T10031] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1543'. [ 208.149786][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 208.171606][T10038] SELinux: failed to load policy [ 208.321898][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 208.322346][ T30] audit: type=1400 audit(1756617436.828:668): avc: denied { wake_alarm } for pid=10045 comm="syz.0.1550" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.369704][T10048] veth0_to_bridge: entered promiscuous mode [ 208.382399][T10047] veth0_to_bridge: left promiscuous mode [ 208.429796][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 208.609522][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 208.840942][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 208.851905][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 208.861673][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 208.872882][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 208.874171][ T5910] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 208.882831][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 208.900474][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 208.910229][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 208.925484][ T10] usb 4-1: USB disconnect, device number 28 [ 208.977567][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 208.990757][ T30] audit: type=1400 audit(1756617437.498:669): avc: denied { module_request } for pid=10057 comm="syz.6.1555" kmod=72746E6C2D6C696E6B2D6272696467655F736C618C65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.046907][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.059648][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.069801][ T5910] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 209.094176][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.105355][ T5910] usb 6-1: config 0 descriptor?? [ 209.115885][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 209.154402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.173346][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 209.223008][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 209.247132][T10066] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1558'. [ 209.289217][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 209.425748][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 209.735982][ T5910] hid-led 0003:27B8:01ED.001D: probe with driver hid-led failed with error -71 [ 209.772414][ T5910] usb 6-1: USB disconnect, device number 14 [ 209.856426][ T7931] usb 5-1: USB disconnect, device number 23 [ 209.957175][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 210.154803][ T30] audit: type=1400 audit(1756617438.658:670): avc: denied { setopt } for pid=10094 comm="syz.6.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 210.674399][ T7931] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 210.834178][ T7931] usb 6-1: Using ep0 maxpacket: 32 [ 210.840923][ T7931] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 210.849476][ T7931] usb 6-1: config 0 has no interface number 0 [ 210.857104][ T7931] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 210.867000][ T7931] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 210.875219][ T7931] usb 6-1: Product: syz [ 210.879562][ T7931] usb 6-1: Manufacturer: syz [ 210.887021][ T7931] usb 6-1: config 0 descriptor?? [ 211.064315][ T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 211.119666][ T7931] usb 6-1: USB disconnect, device number 15 [ 211.226516][ T10] usb 7-1: config 0 has no interfaces? [ 211.235680][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 211.258764][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.284624][ T10] usb 7-1: config 0 descriptor?? [ 211.498488][ T7931] usb 7-1: USB disconnect, device number 13 [ 211.771356][T10138] trusted_key: syz.5.1589 sent an empty control message without MSG_MORE. [ 211.864359][ T7927] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 212.047035][ T7927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.081862][ T7927] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 212.091215][ T7927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.153295][ T7927] usb 5-1: config 0 descriptor?? [ 212.164891][T10149] bridge0: entered allmulticast mode [ 212.174584][T10132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.665239][ T7927] elan 0003:04F3:0755.001E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 212.898258][ T10] usb 5-1: USB disconnect, device number 24 [ 213.006885][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 213.032285][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1602'. [ 213.189388][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 213.190179][ T5835] udevd[5835]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 213.261919][T10182] unknown channel width for channel at 909000KHz? [ 213.272251][T10182] unknown channel width for channel at 909000KHz? [ 213.338992][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 213.564396][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 213.583638][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 213.724342][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 213.739578][ T10] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 213.748254][ T10] usb 6-1: config 127 has no interface number 1 [ 213.755128][ T10] usb 6-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.788137][ T10] usb 6-1: config 127 interface 0 altsetting 10 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.803759][ T10] usb 6-1: config 127 interface 0 altsetting 10 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.817310][ T10] usb 6-1: config 127 interface 171 has no altsetting 0 [ 213.825321][ T10] usb 6-1: config 127 interface 0 has no altsetting 0 [ 213.834423][ T7931] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 213.845423][ T10] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 213.854769][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.862781][ T10] usb 6-1: Product: syz [ 213.867253][ T10] usb 6-1: Manufacturer: syz [ 213.871842][ T10] usb 6-1: SerialNumber: syz [ 213.942463][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 213.988399][ T7931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.047339][ T7931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 214.057495][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 214.109807][ T10] xr_serial 6-1:127.171: xr_serial converter detected [ 214.118569][ T7931] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 214.141695][ T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 214.157298][ T7931] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 214.174220][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 214.212217][ T7931] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.220584][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 214.242553][ T10] usb 6-1: USB disconnect, device number 16 [ 214.276370][ T7931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.286435][ T10] xr_serial 6-1:127.171: device disconnected [ 214.351039][ T7931] usb 7-1: Product: syz [ 214.382127][ T7931] usb 7-1: Manufacturer: syz [ 214.419219][ T7931] usb 7-1: SerialNumber: syz [ 214.472086][T10192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 214.491127][ T7931] cdc_mbim 7-1:1.0: skipping garbage [ 214.543981][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 214.590252][T10225] netlink: 'syz.3.1625': attribute type 4 has an invalid length. [ 214.642329][T10228] netlink: 'syz.3.1625': attribute type 4 has an invalid length. [ 214.710542][T10192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 214.735731][T10192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 214.746707][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 214.791349][ T5835] udevd[5835]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 214.858423][T10230] kvm: pic: non byte write [ 215.371670][T10192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 215.379251][T10192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 215.386653][ T7931] cdc_mbim 7-1:1.0: setting rx_max = 16384 [ 215.490670][T10239] netlink: 'syz.0.1630': attribute type 4 has an invalid length. [ 215.608989][ T7931] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 215.631684][ T7931] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 215.668634][ T7931] wwan wwan0: port wwan0mbim0 attached [ 215.713705][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 215.722831][ T7931] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 9e:0b:ee:0f:76:ec [ 215.787781][ T7931] usb 7-1: USB disconnect, device number 14 [ 215.808820][ T7931] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 215.843120][ T30] audit: type=1400 audit(1756617444.348:671): avc: denied { create } for pid=10247 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 215.933856][ T30] audit: type=1400 audit(1756617444.378:672): avc: denied { read } for pid=10247 comm="syz.3.1634" path="socket:[35442]" dev="sockfs" ino=35442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 216.004909][ T7931] wwan wwan0: port wwan0mbim0 disconnected [ 216.280466][ T5897] delete_channel: no stack [ 216.611948][T10265] tipc: Started in network mode [ 216.621050][T10265] tipc: Node identity 1a2edd3bc523, cluster identity 4711 [ 216.633271][T10265] tipc: Enabled bearer , priority 0 [ 216.656469][T10265] tipc: Disabling bearer [ 216.992266][ T30] audit: type=1400 audit(1756617445.498:673): avc: denied { write } for pid=10273 comm="syz.5.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.011977][ T30] audit: type=1400 audit(1756617445.498:674): avc: denied { read } for pid=10273 comm="syz.5.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.121197][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1646'. [ 217.300418][ T1317] nci: nci_ntf_packet: unknown ntf opcode 0x125 [ 218.235957][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 218.364284][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 218.524750][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 218.568554][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 218.790142][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 218.868379][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 218.939262][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 219.017840][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 219.047474][T10329] block nbd3: shutting down sockets [ 219.201621][ T7615] udevd[7615]: symlink '../../nbd3' '/dev/disk/by-diskseq/94.tmp-b43:96' failed: Read-only file system [ 219.361521][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 219.944140][T10367] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.284507][ T5910] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 222.470689][T10407] input: syz1 as /devices/virtual/input/input28 [ 222.507732][ T30] audit: type=1400 audit(1756617451.018:675): avc: denied { map } for pid=10408 comm="syz.3.1687" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 222.531320][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.613448][ T30] audit: type=1400 audit(1756617451.018:676): avc: denied { execute } for pid=10408 comm="syz.3.1687" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 222.624131][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 222.695205][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.724900][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.773723][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.804047][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.837942][ T5910] usb 5-1: config 0 descriptor?? [ 222.868005][ T5910] hub 5-1:0.0: USB hub found [ 222.879886][ T30] audit: type=1400 audit(1756617451.388:677): avc: denied { read write } for pid=10414 comm="syz.3.1690" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.967226][ T30] audit: type=1400 audit(1756617451.418:678): avc: denied { open } for pid=10414 comm="syz.3.1690" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.074866][ T5910] hub 5-1:0.0: 1 port detected [ 223.074989][ T30] audit: type=1400 audit(1756617451.438:679): avc: denied { map } for pid=10414 comm="syz.3.1690" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.121287][T10422] loop6: detected capacity change from 0 to 2576 [ 223.130192][T10422] buffer_io_error: 7 callbacks suppressed [ 223.130205][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.174664][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.235599][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.243546][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.312694][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.342524][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.364956][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.393309][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.429830][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 223.454031][T10422] ldm_validate_partition_table(): Disk read failed. [ 223.482265][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.501669][T10422] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.538056][T10422] Dev loop6: unable to read RDB block 0 [ 223.581592][T10422] loop6: unable to read partition table [ 223.601824][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 223.698368][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 223.754186][T10422] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 223.903003][ T5910] hub 5-1:0.0: activate --> -90 [ 224.232962][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 224.312248][ T7931] usb 5-1: USB disconnect, device number 25 [ 224.384192][ T5910] usb 5-1-port1: cannot reset (err = -71) [ 224.390942][ T5910] usb 5-1-port1: attempt power cycle [ 224.403134][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 224.424156][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 224.446680][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 224.544379][ T5968] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 224.639167][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 224.731032][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 224.753208][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 224.779724][ T5968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.821526][ T5968] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 224.896715][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 224.956245][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 225.024302][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 225.046677][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 225.076476][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 225.115922][ T5968] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.144929][ T30] audit: type=1400 audit(1756617453.638:680): avc: denied { connect } for pid=10458 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.164424][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.181197][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 225.359950][ T30] audit: type=1400 audit(1756617453.648:681): avc: denied { read } for pid=10458 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.423951][T10461] sctp: [Deprecated]: syz.0.1705 (pid 10461) Use of int in max_burst socket option. [ 225.423951][T10461] Use struct sctp_assoc_value instead [ 225.444712][ T5968] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 225.453783][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.491630][ T30] audit: type=1400 audit(1756617453.998:682): avc: denied { name_bind 0x1000000 } for pid=10462 comm="syz.6.1706" path="socket:[37168]" dev="sockfs" ino=37168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 225.495668][ T5968] usb 4-1: Product: syz [ 225.516747][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.524234][T10464] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 225.594124][ T5968] usb 4-1: Manufacturer: syz [ 225.606443][ T5968] usb 4-1: SerialNumber: syz [ 225.632772][ T5968] usb 4-1: config 0 descriptor?? [ 225.701928][T10438] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.753383][ T5968] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 225.808975][ T5968] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5 [ 225.852321][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1712'. [ 226.028986][ T5968] usb 4-1: USB disconnect, device number 29 [ 226.054992][ T5910] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 226.245865][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.264180][ T5910] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 226.285933][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.315086][ T5910] usb 5-1: config 0 descriptor?? [ 226.662776][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 226.748432][ T5910] holtek 0003:1241:5015.001F: item fetching failed at offset 1/5 [ 226.779926][ T5910] holtek 0003:1241:5015.001F: parse failed [ 226.804933][ T5910] holtek 0003:1241:5015.001F: probe with driver holtek failed with error -22 [ 226.819886][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 226.924622][ T5967] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 226.962681][ T5968] usb 5-1: USB disconnect, device number 30 [ 227.104138][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 227.124412][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.147419][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.185836][ T5967] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.220396][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.253241][ T5967] usb 7-1: config 0 descriptor?? [ 227.269730][ T5967] hub 7-1:0.0: USB hub found [ 227.503691][ T5967] hub 7-1:0.0: 1 port detected [ 228.122532][ T5967] hub 7-1:0.0: activate --> -90 [ 228.394249][ T7927] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 228.534371][ T5910] usb 7-1: USB disconnect, device number 15 [ 228.536652][ T5967] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 228.548675][ T7927] usb 6-1: Using ep0 maxpacket: 16 [ 228.565251][ T5967] usb 7-1-port1: connect-debounce failed [ 228.566552][ T7927] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 228.601897][ T7927] usb 6-1: config 0 has no interface number 0 [ 228.611260][ T7927] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 228.622788][ T7927] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 228.642397][ T7927] usb 6-1: config 0 interface 41 has no altsetting 0 [ 228.651309][ T7927] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 228.660657][ T7927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.672273][ T7927] usb 6-1: Product: syz [ 228.677633][ T7927] usb 6-1: Manufacturer: syz [ 228.682337][ T7927] usb 6-1: SerialNumber: syz [ 228.693031][ T7927] usb 6-1: config 0 descriptor?? [ 228.704816][T10564] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 228.712159][T10564] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 228.917943][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 228.957981][T10564] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 228.974588][T10564] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 229.088355][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 229.151338][T10579] netlink: set zone limit has 4 unknown bytes [ 229.191792][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 229.375087][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 229.404468][ T7927] Error reading MAC address [ 229.410500][T10564] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 229.410529][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 229.424213][T10564] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 229.440699][ T5835] udevd[5835]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 229.610233][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 229.650860][ T5963] udevd[5963]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 229.656508][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'. [ 229.688777][ T7927] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 229.710858][T10602] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1759'. [ 229.727300][ T7927] usb 6-1: USB disconnect, device number 17 [ 229.796653][ T5835] udevd[5835]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 229.825991][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 229.851294][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 229.856490][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 229.930827][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 229.991114][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 230.319960][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 230.412239][T10634] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 230.591981][T10634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.601815][T10634] bond1: (slave bond2): making interface the new active one [ 230.611371][T10634] bond1: (slave bond2): Enslaving as an active interface with an up link [ 230.804326][ T5897] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 230.980221][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.042473][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.073959][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.114662][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.162303][ T5897] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.208537][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1784'. [ 231.220046][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.230896][ T5897] usb 6-1: config 0 descriptor?? [ 231.311154][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 231.670719][ T5897] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max [ 231.703221][ T5897] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 231.916584][ T10] usb 6-1: USB disconnect, device number 18 [ 232.419525][ T30] audit: type=1400 audit(1756617460.928:683): avc: denied { map } for pid=10684 comm="syz.6.1794" path="socket:[41126]" dev="sockfs" ino=41126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 233.342692][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 233.361721][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 233.674530][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 233.680629][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 233.833438][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 233.978997][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 234.055671][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 234.137801][T10704] ceph: No mds server is up or the cluster is laggy [ 234.158691][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 234.182355][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 234.207889][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 234.213954][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 234.390268][ T1317] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 234.402382][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 234.510879][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 234.601510][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 234.740887][ T30] audit: type=1400 audit(1756617463.248:684): avc: denied { write } for pid=10764 comm="syz.4.1822" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 234.808955][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 234.843595][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 234.942696][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 235.112827][T10774] netlink: 'syz.5.1826': attribute type 3 has an invalid length. [ 235.120975][ T5967] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 235.134024][T10774] netlink: 'syz.5.1826': attribute type 1 has an invalid length. [ 235.162474][T10774] netlink: 'syz.5.1826': attribute type 2 has an invalid length. [ 235.184450][T10774] netlink: 'syz.5.1826': attribute type 8 has an invalid length. [ 235.214177][T10774] netlink: 'syz.5.1826': attribute type 10 has an invalid length. [ 235.228083][ T30] audit: type=1400 audit(1756617463.738:685): avc: denied { setopt } for pid=10778 comm="syz.0.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.262104][T10774] netlink: 'syz.5.1826': attribute type 11 has an invalid length. [ 235.280766][T10774] netlink: 198236 bytes leftover after parsing attributes in process `syz.5.1826'. [ 235.298577][ T5967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.329074][ T5967] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.352259][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.379663][ T5967] usb 4-1: config 0 descriptor?? [ 235.395322][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 235.801259][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 235.818596][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 235.825777][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 235.831540][T10800] binder: 10799:10800 ioctl c0306201 200000000640 returned -22 [ 236.033899][ T5967] pwc: recv_control_msg error -71 req 04 val 1300 [ 236.041053][ T5967] pwc: recv_control_msg error -71 req 04 val 1400 [ 236.056177][ T5967] pwc: recv_control_msg error -71 req 02 val 2000 [ 236.067111][ T30] audit: type=1400 audit(1756617464.578:686): avc: denied { watch_sb } for pid=10810 comm="syz.4.1841" path="/399/file0" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 236.090707][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 236.098107][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 236.105661][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 236.121824][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 236.133194][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.144713][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.156021][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.195431][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.205614][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 236.238336][ T5967] pwc: Registered as video103. [ 236.253160][T10814] kvm: Disabled LAPIC found during irq injection [ 236.265556][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 236.311775][ T5967] usb 4-1: USB disconnect, device number 30 [ 236.672592][ T30] audit: type=1400 audit(1756617465.178:687): avc: denied { write } for pid=10826 comm="syz.5.1846" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 236.882459][ T30] audit: type=1400 audit(1756617465.388:688): avc: denied { getopt } for pid=10829 comm="syz.5.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.947984][ T30] audit: type=1400 audit(1756617465.388:689): avc: denied { ioctl } for pid=10829 comm="syz.5.1849" path="socket:[39766]" dev="sockfs" ino=39766 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.544480][ T5897] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 237.754197][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 237.772359][ T5897] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.809909][ T5897] usb 7-1: config 0 has no interface number 0 [ 237.859662][ T5897] usb 7-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 237.894145][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.973249][ T5897] usb 7-1: Product: syz [ 237.997797][ T5897] usb 7-1: Manufacturer: syz [ 238.002422][ T5897] usb 7-1: SerialNumber: syz [ 238.051577][ T5897] usb 7-1: config 0 descriptor?? [ 238.080203][ T5897] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.229160][ T5897] snd-usb-audio 7-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 238.385487][ T5897] usb 7-1: USB disconnect, device number 16 [ 238.678268][T10894] syzkaller1: entered promiscuous mode [ 238.687911][T10894] syzkaller1: entered allmulticast mode [ 238.799658][ T5924] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 238.984188][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 239.006610][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 239.046374][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.066851][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.082892][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 239.102152][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 239.147987][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.187976][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.204117][ T5924] usb 5-1: Product: syz [ 239.214413][ T5924] usb 5-1: Manufacturer: syz [ 239.229363][ T5924] usb 5-1: SerialNumber: syz [ 239.352407][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 239.460565][T10695] udevd[10695]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 239.475155][ T30] audit: type=1400 audit(1756617467.958:690): avc: denied { watch } for pid=10919 comm="syz.6.1873" path="/178/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 239.500108][T10924] netlink: 'syz.5.1875': attribute type 9 has an invalid length. [ 239.524566][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1875'. [ 239.579465][T10924] netlink: 'syz.5.1875': attribute type 9 has an invalid length. [ 239.587395][ T1339] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.599243][ T7754] udevd[7754]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 239.636954][ T1339] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.649970][T10695] udevd[10695]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 239.664241][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1875'. [ 239.671616][ T5924] usb 5-1: 0:2 : does not exist [ 239.701522][ T1339] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.718896][ T1339] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.750553][ T30] audit: type=1400 audit(1756617468.258:691): avc: denied { setattr } for pid=10929 comm="syz.6.1876" name="/" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.785082][ T5924] usb 5-1: USB disconnect, device number 31 [ 239.838936][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 239.888032][ T7615] udevd[7615]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.943246][T10695] udevd[10695]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 239.970462][T10940] netdevsim netdevsim6: Direct firmware load for lookup_extent_enter failed with error -2 [ 239.997999][T10940] netdevsim netdevsim6: Falling back to sysfs fallback for: lookup_extent_enter [ 240.008283][ T30] audit: type=1400 audit(1756617468.508:692): avc: denied { firmware_load } for pid=10939 comm="syz.6.1881" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 240.477510][ T30] audit: type=1326 audit(1756617468.988:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4886f8ebe9 code=0x7ffc0000 [ 240.542504][ T30] audit: type=1326 audit(1756617468.988:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4886f2adb9 code=0x7ffc0000 [ 240.544400][T10957] block nbd0: server does not support multiple connections per device. [ 240.587129][ T30] audit: type=1326 audit(1756617468.988:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4886f2adb9 code=0x7ffc0000 [ 240.613732][T10957] block nbd0: shutting down sockets [ 240.663206][ T30] audit: type=1326 audit(1756617468.988:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4886f2adb9 code=0x7ffc0000 [ 240.780880][ T30] audit: type=1326 audit(1756617468.988:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4886f2adb9 code=0x7ffc0000 [ 240.851475][ T30] audit: type=1326 audit(1756617468.988:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4886f2adb9 code=0x7ffc0000 [ 240.876725][ T30] audit: type=1326 audit(1756617468.988:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4886f2adb9 code=0x7ffc0000 [ 240.904300][ T30] audit: type=1326 audit(1756617468.988:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4886f2adb9 code=0x7ffc0000 [ 241.334226][ T5924] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 241.506251][ T5924] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 241.518925][ T5924] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 241.530278][ T5924] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 241.541312][ T5924] usb 7-1: config 220 has no interface number 2 [ 241.547856][ T5924] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 241.561007][ T5924] usb 7-1: config 220 interface 0 has no altsetting 0 [ 241.568192][ T5924] usb 7-1: config 220 interface 76 has no altsetting 0 [ 241.575232][ T5924] usb 7-1: config 220 interface 1 has no altsetting 0 [ 241.583457][ T5924] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 241.584288][ T5967] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 241.592762][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.608202][ T5924] usb 7-1: Product: syz [ 241.612350][ T5924] usb 7-1: Manufacturer: syz [ 241.616961][ T5924] usb 7-1: SerialNumber: syz [ 241.630278][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 241.755451][ T5967] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 241.765731][ T5967] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 241.777476][ T5967] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 241.789921][ T5967] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 241.799218][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.807311][ T5967] usb 6-1: Product: syz [ 241.811461][ T5967] usb 6-1: Manufacturer: syz [ 241.816292][ T5967] usb 6-1: SerialNumber: syz [ 241.822469][ T5967] usb 6-1: config 0 descriptor?? [ 241.828693][T10993] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 241.837793][T10993] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 241.846533][ T5967] usb 6-1: ucan: probing device on interface #0 [ 241.846982][ T5924] usb 7-1: selecting invalid altsetting 0 [ 241.861502][ T5924] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 241.869133][ T5924] usb 7-1: No valid video chain found. [ 241.880430][ T5924] usb 7-1: selecting invalid altsetting 0 [ 241.886387][ T5924] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 241.898067][ T5924] usb 7-1: USB disconnect, device number 17 [ 242.254743][ T5967] usb 6-1: ucan: failed to retrieve device info [ 242.261085][ T5967] usb 6-1: ucan: probe failed; try to update the device firmware [ 242.444586][T11010] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 242.451698][T11010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 242.466766][T11010] vhci_hcd vhci_hcd.0: Device attached [ 242.495943][T11011] vhci_hcd: cannot find the pending unlink 1025 [ 242.503288][T11011] vhci_hcd: connection closed [ 242.506739][ T1317] vhci_hcd: stop threads [ 242.517287][ T1317] vhci_hcd: release socket [ 242.521730][ T1317] vhci_hcd: disconnect device [ 243.936400][ T5967] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 244.094260][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 244.101761][ T5967] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 244.115169][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.132081][ T5967] usb 4-1: config 0 descriptor?? [ 244.153559][ T5967] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 244.434261][ T7931] usb 6-1: USB disconnect, device number 19 [ 244.460490][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 244.546849][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 244.557770][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 244.934551][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 245.055663][ T5968] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 245.129462][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 245.199350][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 245.224828][ T5968] usb 6-1: Using ep0 maxpacket: 16 [ 245.231308][ T5968] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 245.241805][ T5968] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.252842][ T5968] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.262850][ T5968] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.275928][ T5968] usb 6-1: config 7 interface 0 has no altsetting 0 [ 245.282576][ T5968] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 245.291768][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.414486][ T5967] gspca_vc032x: reg_w err -71 [ 245.419786][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.425187][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.430692][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.436212][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.441512][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.447000][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.452288][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.457786][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.463079][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.468670][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.473957][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.479489][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.484809][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.490107][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.495697][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.500977][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.506354][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.511771][ T5967] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.517254][ T5967] gspca_vc032x: Unknown sensor... [ 245.522320][ T5967] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 245.533283][ T5967] usb 4-1: USB disconnect, device number 31 [ 245.727845][ T5968] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0021/input/input31 [ 245.757393][ T5968] kye 0003:0458:5010.0021: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 245.805281][ T5963] udevd[5963]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 245.941887][ T5968] usb 6-1: USB disconnect, device number 20 [ 245.956605][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 246.032150][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 246.168552][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 246.243460][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 246.265240][ T5924] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 246.412319][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 246.450137][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.474588][ T5924] usb 7-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 246.504254][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.544682][ T5924] usb 7-1: config 0 descriptor?? [ 246.760402][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.775888][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.002931][ T5924] logitech-djreceiver 0003:046D:C52F.0022: item fetching failed at offset 0/6 [ 247.027670][ T5924] logitech-djreceiver 0003:046D:C52F.0022: logi_dj_probe: parse failed [ 247.049610][ T5924] logitech-djreceiver 0003:046D:C52F.0022: probe with driver logitech-djreceiver failed with error -22 [ 247.212355][ T5967] usb 7-1: USB disconnect, device number 18 [ 247.459389][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 247.459406][ T30] audit: type=1400 audit(1756617475.968:758): avc: denied { attach_queue } for pid=11125 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 248.003207][T11145] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 248.078299][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.087211][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.099677][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.109591][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.119948][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.137385][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.168642][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.183716][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.193969][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.209897][ T5968] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 248.224726][ T5924] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 248.227189][ T5968] hid-generic 0003:0004:0000.0023: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 248.304557][T11162] fido_id[11162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.415632][ T5924] usb 7-1: config 0 has an invalid interface number: 199 but max is 1 [ 248.428639][ T5924] usb 7-1: config 0 has no interface number 1 [ 248.440647][ T5924] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 248.451099][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.463809][ T5924] usb 7-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 248.473959][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.485449][ T5924] usb 7-1: SerialNumber: syz [ 248.497523][ T5924] usb 7-1: config 0 descriptor?? [ 248.512607][ T5924] usb 7-1: Found UVC 0.00 device (0002:0000) [ 248.534768][ T5924] usb 7-1: No valid video chain found. [ 248.761706][ T5924] usb 7-1: USB disconnect, device number 19 [ 248.984145][ T5968] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 249.156060][ T5968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.179762][ T5968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.190226][ T5968] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.200299][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.208687][ T5968] usb 6-1: SerialNumber: syz [ 249.448156][ T5968] usb 6-1: 0:2 : does not exist [ 249.464854][ T5968] usb 6-1: USB disconnect, device number 21 [ 249.623146][ T30] audit: type=1326 audit(1756617478.128:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.3.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a2d8ebe9 code=0x7fc00000 [ 250.058958][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 250.219564][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 250.297378][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 250.348786][ T30] audit: type=1326 audit(1756617478.858:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.3.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a2d2adb9 code=0x7fc00000 [ 250.417648][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 250.460420][ T7754] udevd[7754]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 250.525852][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 250.549722][ T7754] udevd[7754]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 250.590132][T11218] netlink: 'syz.6.2001': attribute type 1 has an invalid length. [ 250.603839][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 250.668434][ T7615] udevd[7615]: symlink '../../loop5' '/dev/disk/by-diskseq/89.tmp-b7:5' failed: Read-only file system [ 250.730893][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 251.224242][ T5968] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 251.387727][ T5968] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.427639][ T5968] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.464348][ T5968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.497761][ T5968] usb 7-1: config 0 descriptor?? [ 251.524048][ T5968] pwc: Askey VC010 type 2 USB webcam detected. [ 251.555263][ T30] audit: type=1326 audit(1756617480.058:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7b8ebe9 code=0x7fc00000 [ 251.563111][T11253] loop2: detected capacity change from 0 to 7 [ 251.594653][ T30] audit: type=1326 audit(1756617480.058:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49a7b8ebe9 code=0x7fc00000 [ 251.618964][ T7615] Dev loop2: unable to read RDB block 7 [ 251.636217][ T7615] loop2: unable to read partition table [ 251.642032][ T7615] loop2: partition table beyond EOD, truncated [ 251.662302][ T30] audit: type=1326 audit(1756617480.058:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7b8ebe9 code=0x7fc00000 [ 251.691352][T11253] Dev loop2: unable to read RDB block 7 [ 251.704417][T11253] loop2: unable to read partition table [ 251.724507][T11253] loop2: partition table beyond EOD, truncated [ 251.749206][T11258] could not open pipe file descriptor [ 251.755226][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'. [ 251.756310][T11253] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 251.780577][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2018'. [ 251.789932][ T30] audit: type=1326 audit(1756617480.058:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7b8ebe9 code=0x7fc00000 [ 251.789980][ T30] audit: type=1326 audit(1756617480.058:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7b8ebe9 code=0x7fc00000 [ 251.790066][ T30] audit: type=1326 audit(1756617480.058:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7b8ebe9 code=0x7fc00000 [ 251.881509][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'. [ 251.894513][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2018'. [ 251.977437][ T5968] pwc: recv_control_msg error -32 req 02 val 2b00 [ 251.985635][ T5968] pwc: recv_control_msg error -32 req 02 val 2700 [ 252.003817][ T5968] pwc: recv_control_msg error -32 req 02 val 2c00 [ 252.213803][ T5968] pwc: recv_control_msg error -71 req 04 val 1300 [ 252.233261][ T5968] pwc: recv_control_msg error -71 req 04 val 1400 [ 252.260280][ T5968] pwc: recv_control_msg error -71 req 02 val 2000 [ 252.273491][ T5968] pwc: recv_control_msg error -71 req 02 val 2100 [ 252.293270][ T5968] pwc: recv_control_msg error -71 req 04 val 1500 [ 252.311801][ T5968] pwc: recv_control_msg error -71 req 02 val 2500 [ 252.321906][ T5968] pwc: recv_control_msg error -71 req 02 val 2400 [ 252.338181][ T5968] pwc: recv_control_msg error -71 req 02 val 2600 [ 252.364267][ T5968] pwc: recv_control_msg error -71 req 02 val 2900 [ 252.381387][ T5968] pwc: recv_control_msg error -71 req 02 val 2800 [ 252.397712][ T5968] pwc: recv_control_msg error -71 req 04 val 1100 [ 252.415629][ T5968] pwc: recv_control_msg error -71 req 04 val 1200 [ 252.441811][ T5968] pwc: Registered as video103. [ 252.472232][ T5968] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 252.498710][ T5968] usb 7-1: USB disconnect, device number 20 [ 252.975605][ T5924] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 253.001369][T11310] syzkaller1: entered promiscuous mode [ 253.008337][T11310] syzkaller1: entered allmulticast mode [ 253.017583][T11310] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 253.120787][ T30] audit: type=1400 audit(1756617481.628:767): avc: denied { map } for pid=11314 comm="syz.3.2042" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 253.184413][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 253.191088][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 253.210261][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.228801][ T5924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.248423][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 253.274133][ T5924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 253.294182][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 253.303234][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.342686][ T5924] usb 5-1: config 0 descriptor?? [ 253.389188][ T5856] Bluetooth: hci5: urb ffff888033726000 submission failed (90) [ 253.628992][ T5968] usb 5-1: USB disconnect, device number 32 [ 253.746743][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 254.056605][ T5967] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 254.214953][ T5967] usb 4-1: Using ep0 maxpacket: 16 [ 254.223681][ T5967] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.238793][ T5967] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.249878][ T5967] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.278558][ T5967] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.285735][ T5967] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 254.296226][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.305877][ T5967] usb 4-1: config 0 descriptor?? [ 254.516635][ T5924] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 254.674258][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 254.680830][ T5924] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 254.689083][ T5924] usb 5-1: config 0 has no interface number 0 [ 254.697273][ T5924] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 254.706446][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.715056][ T5924] usb 5-1: Product: syz [ 254.719292][ T5924] usb 5-1: Manufacturer: syz [ 254.723872][ T5924] usb 5-1: SerialNumber: syz [ 254.730464][ T5924] usb 5-1: config 0 descriptor?? [ 254.731165][ T5967] hid (null): nested delimiters [ 254.741501][ T5924] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 254.743867][ T5967] hid (null): nested delimiters [ 254.763520][ T5967] hid (null): nested delimiters [ 254.814647][ T5968] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 254.984229][ T5968] usb 6-1: Using ep0 maxpacket: 16 [ 254.984635][ T5924] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 255.003961][ T5968] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 255.028937][ T5968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.039808][ T7931] usb 4-1: USB disconnect, device number 32 [ 255.040117][ T5924] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 255.068845][ T5968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.111762][ T5968] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.133403][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.141514][ T5968] usb 6-1: Product: syz [ 255.150452][ T5968] usb 6-1: Manufacturer: syz [ 255.161309][T10695] udevd[10695]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 255.180317][ T5968] usb 6-1: SerialNumber: syz [ 255.240482][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.246891][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.324219][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 255.421257][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 255.506629][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 255.507089][ T5967] usb 5-1: USB disconnect, device number 33 [ 255.557695][ T5967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 255.566480][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 255.605293][ T5967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 255.617948][ T5968] usb 6-1: 0:2 : does not exist [ 255.629710][ T5967] quatech2 5-1:0.51: device disconnected [ 255.639609][ T5963] udevd[5963]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 255.802722][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 255.953693][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 256.000729][T10695] udevd[10695]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 256.156707][T11386] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 256.210571][T11386] SELinux: failed to load policy [ 256.274406][ T5967] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 256.456459][ T5967] usb 7-1: unable to get BOS descriptor or descriptor too short [ 256.467045][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 256.479648][ T5897] usb 6-1: USB disconnect, device number 22 [ 256.490228][ T5967] usb 7-1: not running at top speed; connect to a high speed hub [ 256.516431][ T5967] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 256.530242][ T5924] IPVS: starting estimator thread 0... [ 256.544311][ T5967] usb 7-1: config 1 has no interface number 0 [ 256.550511][ T5967] usb 7-1: config 1 interface 138 has no altsetting 0 [ 256.583266][ T5967] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 256.599764][ T5967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.623677][ T5967] usb 7-1: Product: syz [ 256.635359][ T5967] usb 7-1: Manufacturer: syz [ 256.644871][ T5967] usb 7-1: SerialNumber: syz [ 256.654379][T11395] IPVS: using max 44 ests per chain, 105600 per kthread [ 256.670766][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system [ 256.855893][ T7931] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 256.909223][ T5967] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.958108][ T5967] usb 7-1: USB disconnect, device number 21 [ 257.027699][ T7931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.042586][ T7931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.068264][ T7931] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.077943][ T7931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.091557][ T7931] usb 5-1: SerialNumber: syz [ 257.325565][ T7931] usb 5-1: 0:2 : does not exist [ 257.330612][ T7931] usb 5-1: usbmixer: too many channels (61) in unit 5 [ 257.365674][ T7931] usb 5-1: USB disconnect, device number 34 [ 257.672082][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2092'. [ 257.672298][T11433] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 257.889366][ T30] audit: type=1400 audit(1756617486.398:768): avc: denied { read } for pid=11438 comm="syz.6.2094" path="socket:[44573]" dev="sockfs" ino=44573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.023871][T11444] netlink: 'syz.4.2096': attribute type 1 has an invalid length. [ 258.198371][T11444] bond3: entered promiscuous mode [ 258.203807][T11444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.283800][T11450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.293300][T11450] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 258.303713][T11450] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 258.325794][T11450] bond3: (slave vcan1): making interface the new active one [ 258.342022][T11450] vcan1: entered promiscuous mode [ 258.357712][T11450] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 258.568968][T11465] netlink: 'syz.3.2104': attribute type 11 has an invalid length. [ 258.597979][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 258.633934][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.642164][T11468] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 258.642164][T11468] Q&|xXX SOFTIRQ-unsafe lock order detected [ 266.238843][T11744] syzkaller #0 Not tainted [ 266.243230][T11744] ----------------------------------------------------- [ 266.250131][T11744] syz.3.2198/11744 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 266.257828][T11744] ffff888034d202b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 266.266527][T11744] [ 266.266527][T11744] and this task is already holding: [ 266.273867][T11744] ffff888074b99028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 266.283675][T11744] which would create a new lock dependency: [ 266.289535][T11744] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 266.297605][T11744] [ 266.297605][T11744] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 266.307040][T11744] (&dev->event_lock#2){..-.}-{3:3} [ 266.307067][T11744] [ 266.307067][T11744] ... which became SOFTIRQ-irq-safe at: [ 266.319909][T11744] lock_acquire+0x179/0x350 [ 266.324489][T11744] _raw_spin_lock_irqsave+0x3a/0x60 [ 266.329749][T11744] input_event+0x74/0xd0 [ 266.334061][T11744] hidinput_hid_event+0x1d65/0x2410 [ 266.339329][T11744] hid_process_event+0x4b7/0x5e0 [ 266.344328][T11744] hid_report_raw_event+0xa0a/0x1290 [ 266.349672][T11744] __hid_input_report.constprop.0+0x33f/0x450 [ 266.355804][T11744] hid_irq_in+0x35e/0x870 [ 266.360210][T11744] __usb_hcd_giveback_urb+0x38b/0x610 [ 266.365659][T11744] usb_hcd_giveback_urb+0x39b/0x450 [ 266.370935][T11744] dummy_timer+0x1814/0x3a30 [ 266.375595][T11744] __hrtimer_run_queues+0x1ff/0xad0 [ 266.380861][T11744] hrtimer_run_softirq+0x17d/0x350 [ 266.386036][T11744] handle_softirqs+0x216/0x8e0 [ 266.390866][T11744] __irq_exit_rcu+0x109/0x170 [ 266.395613][T11744] irq_exit_rcu+0x9/0x30 [ 266.399938][T11744] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 266.405633][T11744] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.411677][T11744] kcov_remote_stop+0x1c9/0x5f0 [ 266.416591][T11744] hub_event+0xcad/0x4fe0 [ 266.420989][T11744] process_one_work+0x9cf/0x1b70 [ 266.425991][T11744] worker_thread+0x6c8/0xf10 [ 266.430644][T11744] kthread+0x3c5/0x780 [ 266.434772][T11744] ret_from_fork+0x5d4/0x6f0 [ 266.439425][T11744] ret_from_fork_asm+0x1a/0x30 [ 266.444253][T11744] [ 266.444253][T11744] to a SOFTIRQ-irq-unsafe lock: [ 266.451243][T11744] (tasklist_lock){.+.+}-{3:3} [ 266.451264][T11744] [ 266.451264][T11744] ... which became SOFTIRQ-irq-unsafe at: [ 266.463845][T11744] ... [ 266.463851][T11744] lock_acquire+0x179/0x350 [ 266.470975][T11744] _raw_read_lock+0x5f/0x70 [ 266.475541][T11744] __do_wait+0x105/0x890 [ 266.479852][T11744] do_wait+0x21e/0x5a0 [ 266.483988][T11744] kernel_wait+0x9f/0x160 [ 266.488376][T11744] call_usermodehelper_exec_work+0xf1/0x170 [ 266.494346][T11744] process_one_work+0x9cf/0x1b70 [ 266.499346][T11744] worker_thread+0x6c8/0xf10 [ 266.503996][T11744] kthread+0x3c5/0x780 [ 266.508125][T11744] ret_from_fork+0x5d4/0x6f0 [ 266.512776][T11744] ret_from_fork_asm+0x1a/0x30 [ 266.517604][T11744] [ 266.517604][T11744] other info that might help us debug this: [ 266.517604][T11744] [ 266.527802][T11744] Chain exists of: [ 266.527802][T11744] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 266.527802][T11744] [ 266.541335][T11744] Possible interrupt unsafe locking scenario: [ 266.541335][T11744] [ 266.549623][T11744] CPU0 CPU1 [ 266.554959][T11744] ---- ---- [ 266.560297][T11744] lock(tasklist_lock); [ 266.564516][T11744] local_irq_disable(); [ 266.571241][T11744] lock(&dev->event_lock#2); [ 266.578415][T11744] lock(&client->buffer_lock); [ 266.585767][T11744] [ 266.589192][T11744] lock(&dev->event_lock#2); [ 266.594019][T11744] [ 266.594019][T11744] *** DEADLOCK *** [ 266.594019][T11744] [ 266.602135][T11744] 7 locks held by syz.3.2198/11744: [ 266.607303][T11744] #0: ffff88802b384118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 266.616424][T11744] #1: ffff8881452f9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 266.626498][T11744] #2: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 266.636132][T11744] #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 266.645677][T11744] #4: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 266.654790][T11744] #5: ffff888074b99028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 266.665035][T11744] #6: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 266.674075][T11744] [ 266.674075][T11744] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 266.684455][T11744] -> (&dev->event_lock#2){..-.}-{3:3} { [ 266.690078][T11744] IN-SOFTIRQ-W at: [ 266.694117][T11744] lock_acquire+0x179/0x350 [ 266.700426][T11744] _raw_spin_lock_irqsave+0x3a/0x60 [ 266.707444][T11744] input_event+0x74/0xd0 [ 266.713489][T11744] hidinput_hid_event+0x1d65/0x2410 [ 266.720491][T11744] hid_process_event+0x4b7/0x5e0 [ 266.727246][T11744] hid_report_raw_event+0xa0a/0x1290 [ 266.734340][T11744] __hid_input_report.constprop.0+0x33f/0x450 [ 266.742213][T11744] hid_irq_in+0x35e/0x870 [ 266.748353][T11744] __usb_hcd_giveback_urb+0x38b/0x610 [ 266.755537][T11744] usb_hcd_giveback_urb+0x39b/0x450 [ 266.762544][T11744] dummy_timer+0x1814/0x3a30 [ 266.768937][T11744] __hrtimer_run_queues+0x1ff/0xad0 [ 266.775939][T11744] hrtimer_run_softirq+0x17d/0x350 [ 266.782852][T11744] handle_softirqs+0x216/0x8e0 [ 266.789416][T11744] __irq_exit_rcu+0x109/0x170 [ 266.795906][T11744] irq_exit_rcu+0x9/0x30 [ 266.801953][T11744] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 266.809384][T11744] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.817161][T11744] kcov_remote_stop+0x1c9/0x5f0 [ 266.823811][T11744] hub_event+0xcad/0x4fe0 [ 266.829941][T11744] process_one_work+0x9cf/0x1b70 [ 266.836680][T11744] worker_thread+0x6c8/0xf10 [ 266.843077][T11744] kthread+0x3c5/0x780 [ 266.848943][T11744] ret_from_fork+0x5d4/0x6f0 [ 266.855330][T11744] ret_from_fork_asm+0x1a/0x30 [ 266.861894][T11744] INITIAL USE at: [ 266.865848][T11744] lock_acquire+0x179/0x350 [ 266.872074][T11744] _raw_spin_lock_irqsave+0x3a/0x60 [ 266.878982][T11744] input_inject_event+0x9f/0x3b0 [ 266.885637][T11744] led_set_brightness+0x217/0x290 [ 266.892375][T11744] kbd_led_trigger_activate+0xcb/0x110 [ 266.899547][T11744] led_trigger_set+0x59a/0xc50 [ 266.906030][T11744] led_trigger_set_default+0x1e0/0x2e0 [ 266.913210][T11744] led_classdev_register_ext+0x7b8/0xa10 [ 266.920573][T11744] input_leds_connect+0x552/0x8e0 [ 266.927320][T11744] input_attach_handler.isra.0+0x173/0x250 [ 266.934850][T11744] input_register_device+0xab9/0x1180 [ 266.941943][T11744] atkbd_connect+0x5f8/0xa40 [ 266.948248][T11744] serio_driver_probe+0x7f/0xd0 [ 266.954820][T11744] really_probe+0x241/0xa90 [ 266.961036][T11744] __driver_probe_device+0x1de/0x440 [ 266.968034][T11744] driver_probe_device+0x4c/0x1b0 [ 266.974770][T11744] __driver_attach+0x283/0x580 [ 266.981246][T11744] bus_for_each_dev+0x13e/0x1d0 [ 266.987818][T11744] serio_handle_event+0x335/0xc30 [ 266.994557][T11744] process_one_work+0x9cf/0x1b70 [ 267.001219][T11744] worker_thread+0x6c8/0xf10 [ 267.007520][T11744] kthread+0x3c5/0x780 [ 267.013299][T11744] ret_from_fork+0x5d4/0x6f0 [ 267.019602][T11744] ret_from_fork_asm+0x1a/0x30 [ 267.026087][T11744] } [ 267.028644][T11744] ... key at: [] __key.7+0x0/0x40 [ 267.035823][T11744] -> (&client->buffer_lock){....}-{3:3} { [ 267.041531][T11744] INITIAL USE at: [ 267.045396][T11744] lock_acquire+0x179/0x350 [ 267.051444][T11744] _raw_spin_lock+0x2e/0x40 [ 267.057494][T11744] evdev_pass_values+0x10e/0x9b0 [ 267.063974][T11744] evdev_events+0x1bb/0x390 [ 267.070020][T11744] input_pass_values+0x74b/0x880 [ 267.076499][T11744] input_handle_event+0xf00/0x14d0 [ 267.083155][T11744] input_inject_event+0x1e8/0x3b0 [ 267.089720][T11744] evdev_write+0x457/0x750 [ 267.095679][T11744] vfs_write+0x29d/0x11d0 [ 267.101545][T11744] ksys_write+0x1f8/0x250 [ 267.107412][T11744] do_syscall_64+0xcd/0x4c0 [ 267.113454][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.120884][T11744] } [ 267.123355][T11744] ... key at: [] __key.1+0x0/0x40 [ 267.130444][T11744] ... acquired at: [ 267.134219][T11744] _raw_spin_lock+0x2e/0x40 [ 267.138882][T11744] evdev_pass_values+0x10e/0x9b0 [ 267.143973][T11744] evdev_events+0x1bb/0x390 [ 267.148629][T11744] input_pass_values+0x74b/0x880 [ 267.153719][T11744] input_handle_event+0xf00/0x14d0 [ 267.158986][T11744] input_inject_event+0x1e8/0x3b0 [ 267.164163][T11744] evdev_write+0x457/0x750 [ 267.168734][T11744] vfs_write+0x29d/0x11d0 [ 267.173209][T11744] ksys_write+0x1f8/0x250 [ 267.177686][T11744] do_syscall_64+0xcd/0x4c0 [ 267.182339][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.188379][T11744] [ 267.190675][T11744] [ 267.190675][T11744] the dependencies between the lock to be acquired [ 267.190682][T11744] and SOFTIRQ-irq-unsafe lock: [ 267.204151][T11744] -> (tasklist_lock){.+.+}-{3:3} { [ 267.209425][T11744] HARDIRQ-ON-R at: [ 267.213550][T11744] lock_acquire+0x179/0x350 [ 267.220034][T11744] _raw_read_lock+0x5f/0x70 [ 267.226510][T11744] __do_wait+0x105/0x890 [ 267.232732][T11744] do_wait+0x21e/0x5a0 [ 267.238780][T11744] kernel_wait+0x9f/0x160 [ 267.245079][T11744] call_usermodehelper_exec_work+0xf1/0x170 [ 267.252948][T11744] process_one_work+0x9cf/0x1b70 [ 267.259858][T11744] worker_thread+0x6c8/0xf10 [ 267.266423][T11744] kthread+0x3c5/0x780 [ 267.272461][T11744] ret_from_fork+0x5d4/0x6f0 [ 267.279023][T11744] ret_from_fork_asm+0x1a/0x30 [ 267.285761][T11744] SOFTIRQ-ON-R at: [ 267.289888][T11744] lock_acquire+0x179/0x350 [ 267.296369][T11744] _raw_read_lock+0x5f/0x70 [ 267.302842][T11744] __do_wait+0x105/0x890 [ 267.309062][T11744] do_wait+0x21e/0x5a0 [ 267.315110][T11744] kernel_wait+0x9f/0x160 [ 267.321409][T11744] call_usermodehelper_exec_work+0xf1/0x170 [ 267.329277][T11744] process_one_work+0x9cf/0x1b70 [ 267.336188][T11744] worker_thread+0x6c8/0xf10 [ 267.342751][T11744] kthread+0x3c5/0x780 [ 267.348790][T11744] ret_from_fork+0x5d4/0x6f0 [ 267.355352][T11744] ret_from_fork_asm+0x1a/0x30 [ 267.362091][T11744] INITIAL USE at: [ 267.366130][T11744] lock_acquire+0x179/0x350 [ 267.372524][T11744] _raw_write_lock_irq+0x36/0x50 [ 267.379348][T11744] copy_process+0x4caf/0x7690 [ 267.385916][T11744] kernel_clone+0xfc/0x930 [ 267.392220][T11744] user_mode_thread+0xc7/0x110 [ 267.398874][T11744] rest_init+0x23/0x2b0 [ 267.404921][T11744] start_kernel+0x3ee/0x4d0 [ 267.411309][T11744] x86_64_start_reservations+0x18/0x30 [ 267.418650][T11744] x86_64_start_kernel+0x130/0x190 [ 267.425646][T11744] common_startup_64+0x13e/0x148 [ 267.432470][T11744] INITIAL READ USE at: [ 267.436945][T11744] lock_acquire+0x179/0x350 [ 267.443775][T11744] _raw_read_lock+0x5f/0x70 [ 267.450603][T11744] __do_wait+0x105/0x890 [ 267.457183][T11744] do_wait+0x21e/0x5a0 [ 267.463587][T11744] kernel_wait+0x9f/0x160 [ 267.470245][T11744] call_usermodehelper_exec_work+0xf1/0x170 [ 267.478470][T11744] process_one_work+0x9cf/0x1b70 [ 267.485733][T11744] worker_thread+0x6c8/0xf10 [ 267.492644][T11744] kthread+0x3c5/0x780 [ 267.499032][T11744] ret_from_fork+0x5d4/0x6f0 [ 267.505943][T11744] ret_from_fork_asm+0x1a/0x30 [ 267.513030][T11744] } [ 267.515676][T11744] ... key at: [] tasklist_lock+0x18/0x40 [ 267.523546][T11744] ... acquired at: [ 267.527495][T11744] _raw_read_lock+0x5f/0x70 [ 267.532145][T11744] send_sigurg+0xed/0xc80 [ 267.536630][T11744] sk_send_sigurg+0x76/0x360 [ 267.541370][T11744] unix_stream_sendmsg+0xfa5/0x1340 [ 267.546730][T11744] ____sys_sendmsg+0xa98/0xc70 [ 267.551647][T11744] ___sys_sendmsg+0x134/0x1d0 [ 267.556474][T11744] __sys_sendmmsg+0x200/0x420 [ 267.561299][T11744] __x64_sys_sendmmsg+0x9c/0x100 [ 267.566388][T11744] do_syscall_64+0xcd/0x4c0 [ 267.571042][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.577085][T11744] [ 267.579383][T11744] -> (&f_owner->lock){....}-{3:3} { [ 267.584656][T11744] INITIAL USE at: [ 267.588607][T11744] lock_acquire+0x179/0x350 [ 267.594829][T11744] _raw_write_lock_irq+0x36/0x50 [ 267.601477][T11744] __f_setown+0x61/0x3c0 [ 267.607436][T11744] generic_setlease+0xeef/0x1300 [ 267.614087][T11744] kernel_setlease+0x106/0x140 [ 267.620563][T11744] vfs_setlease+0x258/0x2d0 [ 267.626781][T11744] fcntl_setlease+0x3ed/0x5a0 [ 267.633182][T11744] do_fcntl+0x751/0x15a0 [ 267.639145][T11744] __x64_sys_fcntl+0x163/0x200 [ 267.645632][T11744] do_syscall_64+0xcd/0x4c0 [ 267.651859][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.659469][T11744] INITIAL READ USE at: [ 267.663862][T11744] lock_acquire+0x179/0x350 [ 267.670519][T11744] _raw_read_lock_irqsave+0x74/0x90 [ 267.677866][T11744] send_sigio+0x31/0x3e0 [ 267.684283][T11744] dnotify_handle_event+0x15e/0x2b0 [ 267.691647][T11744] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 267.700215][T11744] fsnotify+0x13d6/0x1dc0 [ 267.706694][T11744] fsnotify_move+0x191/0x740 [ 267.713443][T11744] vfs_rename+0x7dc/0x22c0 [ 267.720014][T11744] do_renameat2+0x7f9/0xc50 [ 267.726667][T11744] __x64_sys_renameat2+0xe7/0x130 [ 267.733850][T11744] do_syscall_64+0xcd/0x4c0 [ 267.740519][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.748563][T11744] } [ 267.751129][T11744] ... key at: [] __key.1+0x0/0x40 [ 267.758308][T11744] ... acquired at: [ 267.762173][T11744] _raw_read_lock_irqsave+0x74/0x90 [ 267.767518][T11744] send_sigio+0x31/0x3e0 [ 267.771915][T11744] kill_fasync+0x214/0x510 [ 267.776485][T11744] lease_break_callback+0x23/0x30 [ 267.781665][T11744] __break_lease+0x674/0x1810 [ 267.786489][T11744] do_dentry_open+0x91f/0x1530 [ 267.791402][T11744] vfs_open+0x82/0x3f0 [ 267.795623][T11744] path_openat+0x1de4/0x2cb0 [ 267.800363][T11744] do_filp_open+0x20b/0x470 [ 267.805016][T11744] do_sys_openat2+0x11b/0x1d0 [ 267.809848][T11744] __x64_sys_openat+0x174/0x210 [ 267.814853][T11744] do_syscall_64+0xcd/0x4c0 [ 267.819508][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.825550][T11744] [ 267.827850][T11744] -> (&new->fa_lock){....}-{3:3} { [ 267.832949][T11744] INITIAL USE at: [ 267.836816][T11744] lock_acquire+0x179/0x350 [ 267.842862][T11744] _raw_write_lock_irq+0x36/0x50 [ 267.849337][T11744] fasync_remove_entry+0xb2/0x1e0 [ 267.855909][T11744] fasync_helper+0xaf/0xd0 [ 267.861870][T11744] lease_modify+0x232/0x500 [ 267.867925][T11744] locks_remove_file+0x29e/0x5c0 [ 267.874404][T11744] __fput+0x351/0xb70 [ 267.879930][T11744] task_work_run+0x14d/0x240 [ 267.886058][T11744] exit_to_user_mode_loop+0xeb/0x110 [ 267.892880][T11744] do_syscall_64+0x3f6/0x4c0 [ 267.899010][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.906446][T11744] INITIAL READ USE at: [ 267.910747][T11744] lock_acquire+0x179/0x350 [ 267.917235][T11744] _raw_read_lock_irqsave+0x74/0x90 [ 267.924405][T11744] kill_fasync+0x138/0x510 [ 267.930798][T11744] snd_fasync_work_fn+0x1ac/0x240 [ 267.937797][T11744] process_one_work+0x9cf/0x1b70 [ 267.944708][T11744] worker_thread+0x6c8/0xf10 [ 267.951287][T11744] kthread+0x3c5/0x780 [ 267.957329][T11744] ret_from_fork+0x5d4/0x6f0 [ 267.963892][T11744] ret_from_fork_asm+0x1a/0x30 [ 267.970631][T11744] } [ 267.973103][T11744] ... key at: [] __key.0+0x0/0x40 [ 267.980191][T11744] ... acquired at: [ 267.983968][T11744] lock_acquire+0x179/0x350 [ 267.988627][T11744] _raw_read_lock_irqsave+0x74/0x90 [ 267.993986][T11744] kill_fasync+0x138/0x510 [ 267.998556][T11744] evdev_pass_values+0x619/0x9b0 [ 268.003657][T11744] evdev_events+0x1bb/0x390 [ 268.008315][T11744] input_pass_values+0x74b/0x880 [ 268.013407][T11744] input_handle_event+0xf00/0x14d0 [ 268.018672][T11744] input_inject_event+0x1e8/0x3b0 [ 268.023851][T11744] evdev_write+0x457/0x750 [ 268.028421][T11744] vfs_write+0x29d/0x11d0 [ 268.032900][T11744] ksys_write+0x1f8/0x250 [ 268.037378][T11744] do_syscall_64+0xcd/0x4c0 [ 268.042031][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.048083][T11744] [ 268.050381][T11744] [ 268.050381][T11744] stack backtrace: [ 268.056247][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.3.2198 Not tainted syzkaller #0 PREEMPT(full) [ 268.056264][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.056278][T11744] Call Trace: [ 268.056283][T11744] [ 268.056289][T11744] dump_stack_lvl+0x116/0x1f0 [ 268.056304][T11744] check_irq_usage+0x7dc/0x920 [ 268.056325][T11744] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 268.056345][T11744] ? check_path.constprop.0+0x24/0x50 [ 268.056366][T11744] ? __lock_acquire+0x12bc/0x1ce0 [ 268.056386][T11744] __lock_acquire+0x12bc/0x1ce0 [ 268.056410][T11744] lock_acquire+0x179/0x350 [ 268.056430][T11744] ? kill_fasync+0x138/0x510 [ 268.056451][T11744] _raw_read_lock_irqsave+0x74/0x90 [ 268.056465][T11744] ? kill_fasync+0x138/0x510 [ 268.056483][T11744] kill_fasync+0x138/0x510 [ 268.056502][T11744] evdev_pass_values+0x619/0x9b0 [ 268.056523][T11744] evdev_events+0x1bb/0x390 [ 268.056542][T11744] input_pass_values+0x74b/0x880 [ 268.056561][T11744] input_handle_event+0xf00/0x14d0 [ 268.056580][T11744] ? _copy_from_user+0x59/0xd0 [ 268.056599][T11744] input_inject_event+0x1e8/0x3b0 [ 268.056619][T11744] evdev_write+0x457/0x750 [ 268.056638][T11744] ? __pfx_evdev_write+0x10/0x10 [ 268.056658][T11744] ? bpf_lsm_file_permission+0x9/0x10 [ 268.056675][T11744] ? security_file_permission+0x71/0x210 [ 268.056697][T11744] ? rw_verify_area+0xcf/0x6c0 [ 268.056717][T11744] ? __pfx_evdev_write+0x10/0x10 [ 268.056736][T11744] vfs_write+0x29d/0x11d0 [ 268.056750][T11744] ? __pfx_vfs_write+0x10/0x10 [ 268.056763][T11744] ? find_held_lock+0x2b/0x80 [ 268.056778][T11744] ? __fget_files+0x204/0x3c0 [ 268.056795][T11744] ? __fget_files+0x20e/0x3c0 [ 268.056811][T11744] ksys_write+0x1f8/0x250 [ 268.056824][T11744] ? __pfx_ksys_write+0x10/0x10 [ 268.056840][T11744] do_syscall_64+0xcd/0x4c0 [ 268.056856][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.056870][T11744] RIP: 0033:0x7f86a2d8ebe9 [ 268.056881][T11744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.056895][T11744] RSP: 002b:00007f86a3c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.056909][T11744] RAX: ffffffffffffffda RBX: 00007f86a2fc5fa0 RCX: 00007f86a2d8ebe9 [ 268.056918][T11744] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 268.056926][T11744] RBP: 00007f86a2e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.056935][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.056943][T11744] R13: 00007f86a2fc6038 R14: 00007f86a2fc5fa0 R15: 00007ffe135d22a8 [ 268.056956][T11744] [ 268.315753][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 268.347339][ T7615] udevd[7615]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 268.874028][ T7615] udevd[7615]: symlink '../../loop3' '/dev/disk/by-diskseq/84.tmp-b7:3' failed: Read-only file system