last executing test programs: 10.803673208s ago: executing program 0 (id=625): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x23, 0x5, {0x5, 0x4, "10150f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="851ef3b6d6436c0c7c3669a19268f20807bbe9445041a7ccaf19", 0x1a}], 0x1) 6.896991397s ago: executing program 0 (id=649): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) rename(&(0x7f0000000240)='./file2/file0\x00', 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="2015d500"], 0x0, 0x0}) 4.250451484s ago: executing program 4 (id=664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) 3.993954199s ago: executing program 0 (id=665): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x1, 0x0, 0xfe, 0x5, 0x2, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.881553713s ago: executing program 4 (id=666): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) 3.829992466s ago: executing program 0 (id=667): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) 3.629324549s ago: executing program 4 (id=669): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, 0x0) 3.507708022s ago: executing program 4 (id=672): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.357354451s ago: executing program 4 (id=673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) shutdown(r0, 0x1) 2.801414178s ago: executing program 4 (id=677): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0xa, "19"}, @global=@item_012={0x1, 0x1, 0x0, "a3"}, @global=@item_4={0x3, 0x1, 0x6, "67dbe7d1"}, @global=@item_4={0x3, 0x1, 0x5, "edc4b624"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) 1.622584473s ago: executing program 0 (id=688): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000319021508fd070100e56a01"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_usb_connect(0x1, 0xf6, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0xb7, 0x81, 0x9f, 0x40, 0x403, 0x6006, 0x6c90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x1, 0x8, 0x7, 0xe0, 0xe, [{{0x9, 0x4, 0x99, 0x8, 0x3, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0x1, 0x8, 0x20, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0x2, 0xe}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xf7, 0x80, 0x1, [@generic={0x89, 0x22, "5aff87842fefdf65b298ba586a94e4459609b430ed8afef380965239f231229f36995c8426a59e90ac3f6c7ad128d5ebe9109e9e2270c89b8cd2666cc72644a7a4a604af2f222b9df9f3121d87a61e2a01e7b60c5d233fc32cc2df2ec02f9e75027977e7e9db80ea2de12aa64106ac7d535f2751251c2bc3fea0d7972fab3c4ff56291547730a7"}, @generic={0x20, 0xb, "1d32dd645c7a729eb13e3d4c32a84a149dadf92526cd7cc0e94b8d37b002"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0x3, 0x5, 0x10}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "7aad0edeb2225557d2f352cb88c79770"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x4e, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x5, 0x2b, 0x5, 0x5}]}, 0x1, [{0x1f, &(0x7f0000000b00)=@string={0x1f, 0x3, "b4cedeec40d14be1eaf70909c29996ae3f4765ec4ec41c9530c3b4e921"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.521355066s ago: executing program 2 (id=689): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 1.484349444s ago: executing program 3 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x12, 0xa01, 0x100, 0x0, {0x1c, 0x2}, [@typed={0x8, 0x39, 0x0, 0x0, @u32=0x9}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.055905958s ago: executing program 1 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x8000}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) 801.340919ms ago: executing program 3 (id=692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 795.778085ms ago: executing program 1 (id=693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x4c044) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x40c0}, 0x40040) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xb000, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 685.794785ms ago: executing program 3 (id=694): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, 0x0, &(0x7f00000002c0)) 565.864488ms ago: executing program 3 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xa78515f07fab7860}, 0x4) 564.805237ms ago: executing program 2 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, &(0x7f0000000040)="0f21b10f20c06635000000400f22c0660fc7b500000f009b08000f01c465660f3882b636ad0fc72c66b9d00a000066b80600000066ba000000000f300f01dfbad004ec", 0x43}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 525.324972ms ago: executing program 1 (id=697): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 514.625324ms ago: executing program 3 (id=698): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "fe79ca3351f25129c1ca0c4b310f855c55392fde21c7d98aef39b24985c9c778", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x5, r5, 0x0, 0x0, 0xf}]) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) 373.671403ms ago: executing program 1 (id=699): io_setup(0xff, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000006, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x7, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 291.944761ms ago: executing program 3 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000000000000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x55d, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x48}}, 0x440088c4) 240.537187ms ago: executing program 2 (id=701): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)=ANY=[], 0x0) 129.592582ms ago: executing program 2 (id=702): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0xc, 0x5, '\x00', 0x8, 0x8}) 129.414938ms ago: executing program 0 (id=703): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0xb) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x4, 0xe3f, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500640bd3fe3955800cad3d0099cebdc25f570659f6b222831aaf904ab1f010000000400", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 94.660558ms ago: executing program 1 (id=704): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0xa5d7, 0x0) 60.366763ms ago: executing program 2 (id=705): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x70bd23, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) 856.446µs ago: executing program 1 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=707): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42441, 0x0) io_setup(0xbf, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r2 = fanotify_init(0x0, 0x2) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) kernel console output (not intermixed with test programs): 185][ T6193] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 90.145973][ T6198] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 90.147772][ T6193] lo speed is unknown, defaulting to 1000 [ 90.161557][ T6193] lo speed is unknown, defaulting to 1000 [ 90.168813][ T6193] lo speed is unknown, defaulting to 1000 [ 90.180300][ T6193] lo speed is unknown, defaulting to 1000 [ 90.187371][ T6193] lo speed is unknown, defaulting to 1000 [ 90.210414][ T6196] netlink: 'syz.4.70': attribute type 10 has an invalid length. [ 90.456801][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.495956][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.505967][ T6196] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 90.647865][ T24] usb 4-1: device descriptor read/64, error -71 [ 90.839347][ T6196] syz_tun: entered allmulticast mode [ 91.040114][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.316737][ T792] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 91.388776][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 91.401158][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 91.445055][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 91.445069][ T29] audit: type=1400 audit(1770903762.378:212): avc: denied { read } for pid=6205 comm="syz.1.77" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 91.477258][ T29] audit: type=1400 audit(1770903762.416:213): avc: denied { open } for pid=6205 comm="syz.1.77" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 91.489264][ T6215] netlink: 'syz.4.79': attribute type 39 has an invalid length. [ 91.503795][ T29] audit: type=1400 audit(1770903762.416:214): avc: denied { ioctl } for pid=6205 comm="syz.1.77" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 91.567338][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.596947][ T24] usb 4-1: device descriptor read/64, error -71 [ 91.648425][ T792] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 91.685905][ T792] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.705050][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.714939][ T24] usb usb4-port1: attempt power cycle [ 91.718281][ T792] usb 3-1: config 0 descriptor?? [ 91.801312][ T6219] netlink: 'syz.0.80': attribute type 2 has an invalid length. [ 91.981341][ T29] audit: type=1400 audit(1770903762.874:215): avc: denied { create } for pid=6201 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.006174][ T792] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 92.481468][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.555935][ T792] usb 3-1: USB disconnect, device number 3 [ 92.595882][ T29] audit: type=1400 audit(1770903763.155:216): avc: denied { connect } for pid=6201 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.646804][ T24] usb 4-1: device descriptor read/8, error -71 [ 92.740313][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.755459][ T6225] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 92.821173][ T29] audit: type=1400 audit(1770903763.669:217): avc: denied { setopt } for pid=6226 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 92.900736][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 93.182632][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 93.204107][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.230880][ T9] usb 5-1: Product: syz [ 93.242602][ T9] usb 5-1: Manufacturer: syz [ 93.255136][ T9] usb 5-1: SerialNumber: syz [ 93.279611][ T9] usb 5-1: config 0 descriptor?? [ 94.522346][ T29] audit: type=1400 audit(1770903765.250:218): avc: denied { bind } for pid=6242 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.710805][ T29] audit: type=1400 audit(1770903765.259:219): avc: denied { node_bind } for pid=6242 comm="syz.2.88" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.785546][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 94.819851][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.836715][ T29] audit: type=1400 audit(1770903765.297:220): avc: denied { name_bind } for pid=6242 comm="syz.2.88" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 94.861440][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 95.015352][ T29] audit: type=1400 audit(1770903765.306:221): avc: denied { node_bind } for pid=6242 comm="syz.2.88" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 95.561701][ T9] usb 5-1: media controller created [ 95.793010][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.077113][ T6257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.097662][ T6259] Bluetooth: MGMT ver 1.23 [ 96.202839][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 96.397025][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 96.455034][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 96.500020][ T9] usb 5-1: USB disconnect, device number 7 [ 96.542994][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.622973][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 96.738557][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 96.747670][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.798261][ T6274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.97'. [ 96.807777][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.820807][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 96.820821][ T29] audit: type=1400 audit(1770903767.383:227): avc: denied { create } for pid=6269 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.822520][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.834831][ T29] audit: type=1400 audit(1770903767.392:228): avc: denied { write } for pid=6269 comm="syz.3.97" path="socket:[10763]" dev="sockfs" ino=10763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.921849][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.030636][ T792] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.040283][ T10] usb 2-1: Product: syz [ 97.045447][ T10] usb 2-1: Manufacturer: syz [ 97.101101][ T10] usb 2-1: SerialNumber: syz [ 97.168257][ T10] usb 2-1: config 0 descriptor?? [ 97.189963][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.232124][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.246389][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 97.255110][ T792] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.281783][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.302052][ T792] usb 3-1: config 0 descriptor?? [ 97.325920][ T6279] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.342222][ T792] pwc: Askey VC010 type 2 USB webcam detected. [ 98.028172][ T10] em28xx 2-1:0.0: chip ID is em2874 [ 98.036018][ T792] pwc: recv_control_msg error -71 req 02 val 2700 [ 98.042723][ T792] pwc: recv_control_msg error -71 req 02 val 2c00 [ 98.059707][ T792] pwc: recv_control_msg error -71 req 04 val 1000 [ 98.070225][ T792] pwc: recv_control_msg error -71 req 04 val 1300 [ 98.077224][ T792] pwc: recv_control_msg error -71 req 04 val 1400 [ 98.084016][ T792] pwc: recv_control_msg error -71 req 02 val 2000 [ 98.093455][ T792] pwc: recv_control_msg error -71 req 02 val 2100 [ 98.102458][ T792] pwc: recv_control_msg error -71 req 04 val 1500 [ 98.114427][ T792] pwc: recv_control_msg error -71 req 02 val 2500 [ 98.128201][ T792] pwc: recv_control_msg error -71 req 02 val 2400 [ 98.269067][ T792] pwc: recv_control_msg error -71 req 02 val 2600 [ 98.327558][ T792] pwc: recv_control_msg error -71 req 02 val 2900 [ 98.370524][ T792] pwc: recv_control_msg error -71 req 02 val 2800 [ 98.511812][ T792] pwc: recv_control_msg error -71 req 04 val 1100 [ 98.531025][ T792] pwc: recv_control_msg error -71 req 04 val 1200 [ 98.544432][ T10] usb 2-1: USB disconnect, device number 2 [ 98.552018][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 98.562592][ T792] pwc: Registered as video103. [ 98.570121][ T10] em28xx 2-1:0.0: Freeing device [ 98.577103][ T792] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 98.635135][ T792] usb 3-1: USB disconnect, device number 4 [ 98.998124][ T29] audit: type=1400 audit(1770903769.450:229): avc: denied { create } for pid=6298 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.073673][ T29] audit: type=1400 audit(1770903769.459:230): avc: denied { setopt } for pid=6298 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.154966][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 99.156198][ T29] audit: type=1400 audit(1770903769.459:231): avc: denied { write } for pid=6298 comm="syz.4.102" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.223532][ T29] audit: type=1400 audit(1770903769.459:232): avc: denied { ioctl } for pid=6298 comm="syz.4.102" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.360251][ T29] audit: type=1400 audit(1770903769.590:233): avc: denied { setopt } for pid=6304 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.380894][ T29] audit: type=1400 audit(1770903769.590:234): avc: denied { setopt } for pid=6304 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.400398][ T29] audit: type=1400 audit(1770903769.590:235): avc: denied { bind } for pid=6304 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.419907][ T29] audit: type=1400 audit(1770903769.674:236): avc: denied { read } for pid=6309 comm="syz.3.105" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.673453][ T6313] fuse: Unknown parameter 'user_i00000000000000000000' [ 99.927061][ T5921] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 100.053230][ T6328] syz.4.109 uses obsolete (PF_INET,SOCK_PACKET) [ 100.118332][ T5921] usb 4-1: config 0 has no interfaces? [ 100.125786][ T5921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.135318][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.144488][ T5921] usb 4-1: Product: syz [ 100.148778][ T5921] usb 4-1: Manufacturer: syz [ 100.153636][ T5921] usb 4-1: SerialNumber: syz [ 100.165269][ T5921] usb 4-1: config 0 descriptor?? [ 100.935120][ T6351] loop2: detected capacity change from 0 to 7 [ 100.975046][ T6351] Dev loop2: unable to read RDB block 7 [ 100.981995][ T6351] loop2: unable to read partition table [ 100.993748][ T6351] loop2: partition table beyond EOD, truncated [ 101.000124][ T6351] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 101.081774][ T6354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.116'. [ 101.623566][ T6368] 9pnet_virtio: no channels available for device syz [ 101.645300][ T6368] ======================================================= [ 101.645300][ T6368] WARNING: The mand mount option has been deprecated and [ 101.645300][ T6368] and is ignored by this kernel. Remove the mand [ 101.645300][ T6368] option from the mount to silence this warning. [ 101.645300][ T6368] ======================================================= [ 101.693514][ T6368] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.635957][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 102.635974][ T29] audit: type=1400 audit(1770903771.957:248): avc: denied { mount } for pid=6362 comm="syz.2.120" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.869409][ T29] audit: type=1400 audit(1770903773.070:249): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.940316][ T29] audit: type=1400 audit(1770903773.070:250): avc: denied { setopt } for pid=6372 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.415997][ T5921] usb 4-1: USB disconnect, device number 6 [ 103.458040][ T6380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.740941][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.030631][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 104.035934][ T29] audit: type=1400 audit(1770903774.155:251): avc: denied { read write } for pid=6393 comm="syz.1.127" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.071383][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 104.087495][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.099950][ T29] audit: type=1400 audit(1770903774.155:252): avc: denied { open } for pid=6393 comm="syz.1.127" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.134445][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.181843][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.214890][ T24] usb 1-1: Product: syz [ 104.228572][ T6401] fuse: Unknown parameter 'user_i00000000000000000000' [ 104.239128][ T24] usb 1-1: Manufacturer: syz [ 104.244092][ T29] audit: type=1400 audit(1770903774.314:253): avc: denied { create } for pid=6398 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.270119][ T24] usb 1-1: SerialNumber: syz [ 104.292792][ T24] usb 1-1: config 0 descriptor?? [ 104.312758][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.328635][ T29] audit: type=1400 audit(1770903774.398:254): avc: denied { write } for pid=6398 comm="syz.4.128" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.353028][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 104.365729][ T29] audit: type=1400 audit(1770903774.398:255): avc: denied { setopt } for pid=6398 comm="syz.4.128" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.402561][ T29] audit: type=1400 audit(1770903774.398:256): avc: denied { name_connect } for pid=6398 comm="syz.4.128" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.455067][ T29] audit: type=1400 audit(1770903774.548:257): avc: denied { create } for pid=6406 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.580268][ T6412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.133'. [ 104.979164][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (32) [ 105.202205][ T24] em28xx 1-1:0.0: Config register raw data: 0x20 [ 105.225153][ T24] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 105.234459][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 105.425256][ T24] usb 1-1: USB disconnect, device number 4 [ 105.593688][ T6432] fuse: Unknown parameter 'user_id00000000000000000000' [ 106.438501][ T6455] netlink: 48 bytes leftover after parsing attributes in process `syz.4.149'. [ 106.520574][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 106.739392][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.787905][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 106.803486][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 106.822594][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.862656][ T24] usb 3-1: config 0 descriptor?? [ 106.871028][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 106.878285][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 106.895292][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 106.904409][ T6462] fuse: Unknown parameter 'user_id00000000000000000000' [ 106.919853][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 106.933176][ T24] usb 3-1: media controller created [ 106.968073][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.001939][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 107.007861][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 107.063073][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 107.157835][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 107.164999][ T792] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.206789][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 107.253625][ T6469] xt_cgroup: invalid path, errno=-2 [ 107.272383][ T24] usb 3-1: USB disconnect, device number 5 [ 107.371265][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 107.438498][ T792] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 107.474433][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.514013][ T792] pwc: Logitech ViewPort AV 100 webcam detected. [ 107.737139][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.750130][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.859980][ T792] pwc: Failed to set LED on/off time (-71) [ 107.897678][ T792] pwc: send_video_command error -71 [ 107.907574][ T792] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 107.934440][ T792] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71 [ 107.976740][ T792] usb 5-1: USB disconnect, device number 8 [ 108.099537][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 108.099559][ T29] audit: type=1400 audit(1770903777.953:270): avc: denied { execute } for pid=6488 comm="syz.3.160" path="/29/cpu.stat" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.232933][ T6491] QAT: failed to copy from user cfg_data. [ 108.245780][ T29] audit: type=1400 audit(1770903778.028:271): avc: denied { cmd } for pid=6488 comm="syz.3.160" path="socket:[12028]" dev="sockfs" ino=12028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.363846][ T6495] netlink: 48 bytes leftover after parsing attributes in process `syz.3.162'. [ 108.594751][ T29] audit: type=1400 audit(1770903778.093:272): avc: denied { mount } for pid=6490 comm="syz.2.161" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.681619][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 108.902020][ T29] audit: type=1400 audit(1770903778.608:273): avc: denied { bind } for pid=6497 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.031201][ T6503] fuse: Unknown parameter 'user_id00000000000000000000' [ 109.281280][ T29] audit: type=1400 audit(1770903779.019:274): avc: denied { listen } for pid=6508 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.380548][ T29] audit: type=1400 audit(1770903779.159:275): avc: denied { getopt } for pid=6512 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.380673][ T6513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.169'. [ 109.412962][ T6513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.169'. [ 109.669960][ T6520] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.176820][ T29] audit: type=1400 audit(1770903779.898:276): avc: denied { bind } for pid=6522 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.229842][ T29] audit: type=1400 audit(1770903779.926:277): avc: denied { write } for pid=6522 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.249622][ T29] audit: type=1400 audit(1770903779.926:278): avc: denied { map } for pid=6522 comm="syz.4.171" path="socket:[12075]" dev="sockfs" ino=12075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.606069][ T29] audit: type=1400 audit(1770903779.926:279): avc: denied { read } for pid=6522 comm="syz.4.171" path="socket:[12075]" dev="sockfs" ino=12075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.699967][ T6531] Malformed UNC in devname [ 110.699967][ T6531] [ 110.821946][ T6531] CIFS: VFS: Malformed UNC in devname [ 110.967762][ T6537] netlink: 'syz.1.178': attribute type 39 has an invalid length. [ 111.269369][ T792] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.425420][ T6551] can0: slcan on ttyS3. [ 111.666995][ T6560] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.835194][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.846136][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.858604][ T792] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 111.867900][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.888197][ T792] usb 1-1: config 0 descriptor?? [ 112.677895][ T6541] can0 (unregistered): slcan off ttyS3. [ 112.857001][ T6578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.690194][ T6592] netlink: 'syz.1.191': attribute type 39 has an invalid length. [ 114.046610][ C0] hrtimer: interrupt took 19022 ns [ 114.314736][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 114.375547][ T6603] Malformed UNC in devname [ 114.375547][ T6603] [ 114.382454][ T6603] CIFS: VFS: Malformed UNC in devname [ 114.588401][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 114.743080][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 114.743095][ T29] audit: type=1400 audit(1770903784.164:295): avc: denied { add_name } for pid=6567 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.781588][ T792] usb 1-1: USB disconnect, device number 5 [ 114.877896][ T29] audit: type=1400 audit(1770903784.211:296): avc: denied { create } for pid=6567 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.967759][ T6624] netlink: 'syz.4.197': attribute type 2 has an invalid length. [ 115.101744][ T29] audit: type=1400 audit(1770903784.211:297): avc: denied { write } for pid=6567 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.239904][ T6626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.416015][ T29] audit: type=1400 audit(1770903784.211:298): avc: denied { append } for pid=6567 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.671849][ T791] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.767455][ T29] audit: type=1400 audit(1770903784.407:299): avc: denied { create } for pid=6618 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.974728][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 116.002063][ T791] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 116.044245][ T29] audit: type=1400 audit(1770903785.099:300): avc: denied { remove_name } for pid=6623 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.099942][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.270113][ T791] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.406286][ T29] audit: type=1400 audit(1770903785.099:301): avc: denied { unlink } for pid=6623 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.459016][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.518190][ T791] usb 3-1: Product: syz [ 116.522390][ T791] usb 3-1: Manufacturer: syz [ 116.552428][ T791] usb 3-1: SerialNumber: syz [ 116.603382][ T791] usb 3-1: config 0 descriptor?? [ 116.627751][ T791] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 116.644638][ T791] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 116.669790][ T6653] netlink: 'syz.3.204': attribute type 39 has an invalid length. [ 116.937653][ T6662] program syz.1.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.969292][ T29] audit: type=1400 audit(1770903786.259:302): avc: denied { wake_alarm } for pid=6661 comm="syz.1.206" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.135115][ T29] audit: type=1400 audit(1770903786.409:303): avc: denied { mount } for pid=6666 comm="syz.4.207" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 117.158213][ T29] audit: type=1400 audit(1770903786.409:304): avc: denied { override_creds } for pid=6666 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 117.221964][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.349572][ T791] em28xx 3-1:0.0: chip ID is em2874 [ 117.403493][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 117.416594][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.428130][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.457998][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 117.470876][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.495583][ T9] usb 2-1: config 1 interface 2 has no altsetting 0 [ 117.509386][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.521973][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.530055][ T9] usb 2-1: Product: syz [ 117.535194][ T9] usb 2-1: Manufacturer: syz [ 117.540048][ T9] usb 2-1: SerialNumber: syz [ 117.617349][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 117.674907][ T791] usb 3-1: USB disconnect, device number 6 [ 117.683513][ T24] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.133784][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.151969][ T24] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 118.161024][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.169835][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 118.189169][ T9] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 118.199759][ T9] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 118.208333][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 118.216275][ T9] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 118.224812][ T9] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 118.233505][ T791] em28xx 3-1:0.0: Disconnecting em28xx [ 118.234440][ T9] usb 2-1: selecting invalid altsetting 0 [ 118.239692][ T24] usb 5-1: config 0 descriptor?? [ 118.246398][ T9] usb 2-1: selecting invalid altsetting 0 [ 118.259910][ T791] em28xx 3-1:0.0: Freeing device [ 118.366282][ T9] usb 2-1: USB disconnect, device number 3 [ 118.580892][ T6686] netlink: 'syz.2.211': attribute type 2 has an invalid length. [ 118.978241][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.297872][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 119.303866][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.316532][ T24] usb 5-1: USB disconnect, device number 9 [ 119.326890][ T6694] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.456866][ T6703] fuse: Bad value for 'fd' [ 119.688554][ T6711] netlink: 'syz.2.218': attribute type 39 has an invalid length. [ 120.179481][ T6717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.576466][ T29] audit: type=1400 audit(1770903789.627:305): avc: denied { firmware_load } for pid=6704 comm="syz.1.216" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 120.852170][ T6705] syz.1.216 (6705) used greatest stack depth: 18392 bytes left [ 121.595211][ T6735] lo speed is unknown, defaulting to 1000 [ 121.712619][ T6739] Illegal XDP return value 68 on prog (id 12) dev N/A, expect packet loss! [ 121.816216][ T29] audit: type=1400 audit(1770903790.786:306): avc: denied { bind } for pid=6734 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.968528][ T29] audit: type=1400 audit(1770903790.815:307): avc: denied { setopt } for pid=6734 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.108269][ T6751] netlink: 'syz.0.229': attribute type 39 has an invalid length. [ 122.301648][ T5911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.459371][ T29] audit: type=1400 audit(1770903791.376:308): avc: denied { write } for pid=6758 comm="syz.1.232" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.513640][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 122.532412][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 122.556683][ T5911] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 122.566947][ T29] audit: type=1400 audit(1770903791.394:309): avc: denied { read } for pid=6758 comm="syz.1.232" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.599719][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.618613][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.630365][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.638575][ T5911] usb 5-1: Product: syz [ 122.648706][ T5911] usb 5-1: Manufacturer: syz [ 122.654006][ T5911] usb 5-1: SerialNumber: syz [ 122.759586][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 123.323925][ T24] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 123.332966][ T24] usb 1-1: config 0 has no interface number 0 [ 123.357390][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=31.99 [ 123.371540][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.391711][ T24] usb 1-1: Product: syz [ 123.405262][ T24] usb 1-1: Manufacturer: syz [ 123.414528][ T24] usb 1-1: SerialNumber: syz [ 123.437048][ T24] usb 1-1: config 0 descriptor?? [ 123.812956][ T5911] usb 5-1: 0:2 : does not exist [ 123.841922][ T6761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.949091][ T6761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.187013][ T29] audit: type=1400 audit(1770903792.985:310): avc: denied { map } for pid=6760 comm="syz.0.231" path="socket:[13861]" dev="sockfs" ino=13861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 124.292726][ T24] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 125.504683][ T24] cxusb: set interface failed [ 125.509721][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 125.612916][ T6785] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 126.169812][ T5911] usb 5-1: USB disconnect, device number 10 [ 126.221311][ T6793] 9p: Bad value for 'wfdno' [ 126.239123][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 126.283264][ T6795] netlink: 'syz.0.241': attribute type 39 has an invalid length. [ 126.375366][ T6789] netlink: 'syz.4.239': attribute type 2 has an invalid length. [ 126.786018][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) error while loading driver (-19) [ 126.797098][ T24] dvb_usb_cxusb 1-1:0.205: probe with driver dvb_usb_cxusb failed with error -22 [ 126.813645][ T24] usb 1-1: USB disconnect, device number 6 [ 126.831799][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.139280][ T24] IPVS: starting estimator thread 0... [ 127.168774][ T6806] tipc: Started in network mode [ 127.173676][ T6806] tipc: Node identity ac1414aa, cluster identity 4711 [ 127.187174][ T6806] tipc: Enabled bearer , priority 10 [ 127.347478][ T6808] IPVS: using max 81 ests per chain, 194400 per kthread [ 128.384705][ T24] tipc: Node number set to 2886997162 [ 129.602345][ T29] audit: type=1400 audit(1770903798.083:311): avc: denied { create } for pid=6798 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 129.783824][ T29] audit: type=1400 audit(1770903798.251:312): avc: denied { create } for pid=6825 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.869406][ T29] audit: type=1400 audit(1770903798.251:313): avc: denied { getopt } for pid=6825 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.980203][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 130.026121][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.034485][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.273378][ T6839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.676331][ T29] audit: type=1400 audit(1770903799.074:314): avc: denied { ioctl } for pid=6841 comm="syz.4.254" path="socket:[14013]" dev="sockfs" ino=14013 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.260941][ T6850] netlink: 'syz.4.255': attribute type 2 has an invalid length. [ 132.319192][ T6864] fuse: Unknown parameter '0x0000000000000003' [ 132.385602][ T6866] overlayfs: overlapping lowerdir path [ 132.423832][ T5911] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.450961][ T29] audit: type=1400 audit(1770903800.730:315): avc: denied { create } for pid=6867 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.693486][ T29] audit: type=1400 audit(1770903800.730:316): avc: denied { read } for pid=6867 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.862612][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 132.874720][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.359600][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.371714][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.382680][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.392021][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.400366][ T5911] usb 5-1: Product: syz [ 133.404523][ T5911] usb 5-1: Manufacturer: syz [ 133.409388][ T5911] usb 5-1: SerialNumber: syz [ 134.147389][ T5911] usb 5-1: 0:2 : does not exist [ 134.508710][ T29] audit: type=1400 audit(1770903802.554:317): avc: denied { read write } for pid=6859 comm="syz.4.257" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 134.907096][ T29] audit: type=1400 audit(1770903802.591:318): avc: denied { open } for pid=6859 comm="syz.4.257" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 135.111223][ T6890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.128785][ T29] audit: type=1400 audit(1770903802.965:319): avc: denied { block_suspend } for pid=6859 comm="syz.4.257" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.183019][ T30] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 135.315917][ T5911] usb 5-1: USB disconnect, device number 11 [ 135.344472][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.364304][ T30] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 135.375836][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.401204][ T30] usb 3-1: config 0 descriptor?? [ 135.413055][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.419494][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.439071][ T791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.609770][ T791] usb 2-1: Using ep0 maxpacket: 16 [ 135.630135][ T791] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 135.643929][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.661024][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 135.681107][ T29] audit: type=1400 audit(1770903803.742:320): avc: denied { write } for pid=6887 comm="syz.2.265" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.710801][ T29] audit: type=1400 audit(1770903803.742:321): avc: denied { map } for pid=6887 comm="syz.2.265" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.764712][ T791] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.788789][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.804431][ T791] usb 2-1: Product: syz [ 135.808632][ T791] usb 2-1: Manufacturer: syz [ 135.813819][ T29] audit: type=1400 audit(1770903803.742:322): avc: denied { ioctl } for pid=6887 comm="syz.2.265" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.838930][ T791] usb 2-1: SerialNumber: syz [ 135.893698][ T6898] netlink: 'syz.0.268': attribute type 2 has an invalid length. [ 136.013912][ T30] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 136.067389][ T791] usb 2-1: config 0 descriptor?? [ 136.142420][ T791] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.196097][ T29] audit: type=1400 audit(1770903803.994:323): avc: denied { ioctl } for pid=6894 comm="syz.3.267" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.233117][ T791] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 136.767302][ T791] em28xx 2-1:0.0: unknown em28xx chip ID (32) [ 136.981505][ T791] em28xx 2-1:0.0: Config register raw data: 0x20 [ 136.987947][ T791] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 136.994335][ T791] em28xx 2-1:0.0: No AC97 audio processor [ 137.010195][ T5921] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 137.207438][ T791] usb 2-1: USB disconnect, device number 4 [ 137.260143][ T6911] fuse: Unknown parameter '0x0000000000000003' [ 137.345910][ T5921] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 137.362884][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.371895][ T5921] usb 1-1: Product: syz [ 137.376571][ T5921] usb 1-1: Manufacturer: syz [ 137.383984][ T5921] usb 1-1: SerialNumber: syz [ 137.402972][ T5921] usb 1-1: config 0 descriptor?? [ 137.420638][ T5921] gspca_main: sq930x-2.14.0 probing 2770:930c [ 138.199653][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.225451][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.263103][ T30] [drm:udl_init] *ERROR* Selecting channel failed [ 138.656188][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.715657][ T30] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 138.728250][ T30] [drm] Initialized udl on minor 2 [ 138.750352][ T30] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.753096][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.876829][ T6928] sp0: Synchronizing with TNC [ 138.977193][ T5921] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 139.051304][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 139.060564][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 139.143870][ T30] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 139.176469][ T791] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.212517][ T5921] gspca_sq930x: Sensor ov9630 not yet treated [ 139.230672][ T5921] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 139.243601][ T791] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 139.251289][ T30] usb 3-1: USB disconnect, device number 7 [ 139.282064][ T5921] usb 1-1: USB disconnect, device number 7 [ 139.350993][ T6932] netlink: 'syz.1.278': attribute type 39 has an invalid length. [ 139.630450][ T6939] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 139.665887][ T791] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.549975][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 140.608903][ T29] audit: type=1400 audit(1770903808.372:324): avc: denied { mount } for pid=6930 comm="syz.3.277" name="/" dev="autofs" ino=14217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.942322][ T6957] overlayfs: overlapping lowerdir path [ 141.141817][ T6960] ipvlan1: entered promiscuous mode [ 141.512516][ T6963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 141.685844][ T6963] fuse: Bad value for 'fd' [ 141.927178][ T6966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.942942][ T6966] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 142.045440][ T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.088309][ T29] audit: type=1400 audit(1770903809.747:325): avc: denied { write } for pid=6972 comm="syz.1.288" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.158875][ T6975] netlink: 'syz.0.290': attribute type 39 has an invalid length. [ 142.177900][ T29] audit: type=1400 audit(1770903809.794:326): avc: denied { ioctl } for pid=6972 comm="syz.1.288" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.250927][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.277892][ T29] audit: type=1400 audit(1770903809.925:327): avc: denied { mount } for pid=6976 comm="syz.4.291" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 142.289046][ T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.343855][ T30] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.353242][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.355148][ T29] audit: type=1400 audit(1770903809.925:328): avc: denied { mounton } for pid=6976 comm="syz.4.291" path="/54/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 142.370696][ T30] usb 3-1: SerialNumber: syz [ 142.387001][ T29] audit: type=1400 audit(1770903809.981:329): avc: denied { mounton } for pid=6979 comm="syz.0.292" path="/53/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.454352][ T29] audit: type=1400 audit(1770903810.037:330): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 142.619241][ T791] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.627173][ T29] audit: type=1400 audit(1770903810.243:331): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 142.672575][ T791] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 142.831630][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 142.933937][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 142.944264][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 142.953772][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 143.117040][ T791] usb 4-1: can't read configurations, error -71 [ 143.154719][ T29] audit: type=1400 audit(1770903810.411:332): avc: denied { accept } for pid=6986 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.191782][ T30] usb 3-1: 0:2 : does not exist [ 143.196814][ T29] audit: type=1400 audit(1770903810.449:333): avc: denied { ioctl } for pid=6986 comm="syz.4.293" path="socket:[14300]" dev="sockfs" ino=14300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.225624][ T6995] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 143.328814][ T6995] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.331897][ T30] usb 3-1: USB disconnect, device number 8 [ 143.469140][ T7003] overlayfs: overlapping lowerdir path [ 143.624828][ T7009] netlink: 104 bytes leftover after parsing attributes in process `syz.0.300'. [ 143.741521][ T7012] Malformed UNC in devname [ 143.741521][ T7012] [ 143.748254][ T7012] CIFS: VFS: Malformed UNC in devname [ 143.937918][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.087525][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.199839][ T7019] netlink: 'syz.3.302': attribute type 39 has an invalid length. [ 144.237361][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 144.244290][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 144.256650][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 144.267614][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 144.277479][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.287336][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.309230][ T5921] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 144.450823][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 145.314788][ T30] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 145.338200][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.352283][ T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.361280][ T5921] usb 5-1: Product: syz [ 145.365429][ T5921] usb 5-1: Manufacturer: syz [ 145.370011][ T5921] usb 5-1: SerialNumber: syz [ 145.376647][ T30] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.387941][ T5921] usb 5-1: config 0 descriptor?? [ 145.392962][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.401217][ T30] usb 2-1: Product: syz [ 145.405941][ T30] usb 2-1: Manufacturer: syz [ 145.412205][ T5921] port100 5-1:0.0: NFC: Could not get supported command types [ 145.419857][ T30] usb 2-1: SerialNumber: syz [ 145.794170][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.999422][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.030017][ T5921] usb 5-1: USB disconnect, device number 12 [ 146.137376][ T7007] smc: net device bond0 applied user defined pnetid SYZ2 [ 146.197348][ T7007] netlink: 14 bytes leftover after parsing attributes in process `syz.1.298'. [ 146.269801][ T7007] smc: removing net device bond0 with user defined pnetid SYZ2 [ 146.274835][ T7036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.322066][ T7036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.332843][ T7007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.372083][ T7007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.434823][ T7007] bond0 (unregistering): Released all slaves [ 146.568260][ T30] usb 2-1: 0:2 : does not exist [ 146.588188][ T30] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 146.631961][ T30] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 146.667021][ T7047] overlayfs: overlapping lowerdir path [ 146.826118][ T30] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 146.845868][ T30] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 146.940904][ T30] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 146.999841][ T30] usb 2-1: USB disconnect, device number 5 [ 147.026580][ T7057] Malformed UNC in devname [ 147.026580][ T7057] [ 147.068947][ T7057] CIFS: VFS: Malformed UNC in devname [ 147.086239][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.394028][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 147.402894][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'. [ 147.943534][ T7066] netlink: 'syz.0.316': attribute type 39 has an invalid length. [ 148.058209][ T7070] netlink: 'syz.2.319': attribute type 25 has an invalid length. [ 149.521285][ T7086] netlink: 'syz.1.322': attribute type 2 has an invalid length. [ 150.181431][ T7099] netlink: 'syz.1.326': attribute type 16 has an invalid length. [ 150.244033][ T7099] netlink: 'syz.1.326': attribute type 17 has an invalid length. [ 150.428322][ T7099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.446133][ T5921] lo speed is unknown, defaulting to 1000 [ 150.582435][ T7122] FAULT_INJECTION: forcing a failure. [ 150.582435][ T7122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.677348][ T7122] CPU: 0 UID: 0 PID: 7122 Comm: syz.0.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.677375][ T7122] Tainted: [L]=SOFTLOCKUP [ 150.677380][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 150.677388][ T7122] Call Trace: [ 150.677394][ T7122] [ 150.677400][ T7122] dump_stack_lvl+0x100/0x190 [ 150.677432][ T7122] should_fail_ex.cold+0x5/0xa [ 150.677454][ T7122] _copy_from_user+0x2e/0xd0 [ 150.677488][ T7122] copy_msghdr_from_user+0x9f/0x4f0 [ 150.677515][ T7122] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 150.677551][ T7122] ___sys_sendmsg+0x106/0x1e0 [ 150.677577][ T7122] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.677621][ T7122] __sys_sendmsg+0x170/0x220 [ 150.677634][ T7122] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.677654][ T7122] do_syscall_64+0x106/0xf80 [ 150.677664][ T7122] ? clear_bhb_loop+0x40/0x90 [ 150.677677][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.677688][ T7122] RIP: 0033:0x7f32ae19bf79 [ 150.677697][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.677708][ T7122] RSP: 002b:00007f32af026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.677719][ T7122] RAX: ffffffffffffffda RBX: 00007f32ae415fa0 RCX: 00007f32ae19bf79 [ 150.677727][ T7122] RDX: 0000000000000004 RSI: 0000200000000680 RDI: 0000000000000004 [ 150.677734][ T7122] RBP: 00007f32af026090 R08: 0000000000000000 R09: 0000000000000000 [ 150.677740][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.677746][ T7122] R13: 00007f32ae416038 R14: 00007f32ae415fa0 R15: 00007ffc49411108 [ 150.677759][ T7122] [ 150.907894][ T5921] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.145846][ T5921] usb 5-1: device descriptor read/64, error -71 [ 151.153034][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 151.153063][ T29] audit: type=1400 audit(1770903818.203:336): avc: denied { mount } for pid=7127 comm="syz.3.331" name="/" dev="rpc_pipefs" ino=14969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 151.436797][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.464329][ T791] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.593513][ T29] audit: type=1400 audit(1770903818.652:337): avc: denied { read } for pid=7133 comm="syz.1.334" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.624975][ T5921] usb 5-1: device descriptor read/64, error -71 [ 151.650241][ T791] usb 4-1: device descriptor read/64, error -71 [ 151.797152][ T5921] usb usb5-port1: attempt power cycle [ 151.853718][ T29] audit: type=1400 audit(1770903818.652:338): avc: denied { open } for pid=7133 comm="syz.1.334" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.881838][ T29] audit: type=1400 audit(1770903818.652:339): avc: denied { ioctl } for pid=7133 comm="syz.1.334" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.890427][ T7136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.971073][ T7134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.009062][ T791] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.080613][ T29] audit: type=1400 audit(1770903819.101:340): avc: denied { lock } for pid=7133 comm="syz.1.334" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 152.661368][ T791] usb 4-1: device descriptor read/64, error -71 [ 152.667917][ T5921] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 152.694500][ T5921] usb 5-1: device descriptor read/8, error -71 [ 152.779567][ T791] usb usb4-port1: attempt power cycle [ 152.971896][ T5921] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 152.979589][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.004219][ T5921] usb 5-1: device descriptor read/8, error -71 [ 153.106168][ T29] audit: type=1400 audit(1770903820.055:341): avc: denied { append } for pid=7148 comm="syz.1.337" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.108468][ T7153] block nbd1: NBD_DISCONNECT [ 153.159035][ T5921] usb usb5-port1: unable to enumerate USB device [ 153.174333][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 153.206512][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.225713][ T24] usb 1-1: config 0 has an invalid interface number: 36 but max is 0 [ 153.236629][ T791] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.257394][ T24] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 153.271349][ T24] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 153.280299][ T24] usb 1-1: config 0 has no interface number 0 [ 153.298267][ T791] usb 4-1: device descriptor read/8, error -71 [ 153.308732][ T24] usb 1-1: config 0 has no interface number 1 [ 153.315165][ T24] usb 1-1: config 0 interface 36 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 153.326122][ T24] usb 1-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30 [ 153.337579][ T24] usb 1-1: config 0 interface 5 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 153.356018][ T24] usb 1-1: config 0 interface 36 has no altsetting 0 [ 153.362710][ T24] usb 1-1: config 0 interface 5 has no altsetting 0 [ 153.390778][ T24] usb 1-1: string descriptor 0 read error: -22 [ 153.397045][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 153.421527][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.431770][ T24] usb 1-1: config 0 descriptor?? [ 153.441709][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.570081][ T791] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.613180][ T791] usb 4-1: device descriptor read/8, error -71 [ 153.613868][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 153.654272][ T9] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 153.662744][ T30] usb 1-1: USB disconnect, device number 8 [ 153.662961][ T9] usb 2-1: config 0 has no interface number 0 [ 153.681544][ T9] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.695829][ T9] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 153.710532][ T9] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 153.725884][ T9] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 153.734076][ T791] usb usb4-port1: unable to enumerate USB device [ 153.737943][ T9] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.742714][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.760131][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 153.831649][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.840010][ T9] usb 2-1: Product: syz [ 153.865853][ T9] usb 2-1: Manufacturer: syz [ 153.884056][ T9] usb 2-1: SerialNumber: syz [ 153.907863][ T9] usb 2-1: config 0 descriptor?? [ 153.915604][ T7153] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 153.938766][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input8 [ 153.968445][ T5162] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 153.971986][ T24] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 154.002770][ T24] usb 3-1: config 0 has no interface number 0 [ 154.019248][ T24] usb 3-1: config 0 interface 175 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 154.034163][ T7160] overlayfs: overlapping lowerdir path [ 154.055230][ T24] usb 3-1: config 0 interface 175 has no altsetting 0 [ 154.118679][ T24] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 154.130220][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.196538][ T24] usb 3-1: Product: syz [ 154.200804][ T24] usb 3-1: Manufacturer: syz [ 154.205431][ T24] usb 3-1: SerialNumber: syz [ 154.212374][ T24] usb 3-1: config 0 descriptor?? [ 154.274829][ T29] audit: type=1400 audit(1770903821.150:342): avc: denied { create } for pid=7162 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.348836][ T29] audit: type=1400 audit(1770903821.168:343): avc: denied { write } for pid=7162 comm="syz.0.342" path="socket:[16072]" dev="sockfs" ino=16072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.456576][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 154.571723][ T7173] xt_hashlimit: size too large, truncated to 1048576 [ 154.621249][ T29] audit: type=1400 audit(1770903821.477:344): avc: denied { connect } for pid=7170 comm="syz.0.344" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.652842][ T24] hub 3-1:0.175: bad descriptor, ignoring hub [ 154.677185][ T24] hub 3-1:0.175: probe with driver hub failed with error -5 [ 154.687310][ T24] usbsevseg 3-1:0.175: USB 7 Segment device now attached [ 154.734232][ T24] usb 3-1: USB disconnect, device number 9 [ 154.746597][ T24] usbsevseg 3-1:0.175: USB 7 Segment now disconnected [ 154.925268][ T29] audit: type=1400 audit(1770903821.758:345): avc: denied { sqpoll } for pid=7176 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.993128][ T5911] usb 2-1: USB disconnect, device number 6 [ 157.170602][ T29] audit: type=1400 audit(1770903823.862:346): avc: denied { write } for pid=7207 comm="syz.0.352" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.733986][ T29] audit: type=1400 audit(1770903824.349:347): avc: denied { bind } for pid=7219 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.927747][ T29] audit: type=1400 audit(1770903824.536:348): avc: denied { name_connect } for pid=7216 comm="syz.1.353" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 158.225299][ T7233] netlink: 'syz.0.356': attribute type 2 has an invalid length. [ 159.273230][ T29] audit: type=1400 audit(1770903825.808:349): avc: denied { getopt } for pid=7238 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.172787][ T7254] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.294881][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 160.443371][ T29] audit: type=1400 audit(1770903826.921:350): avc: denied { connect } for pid=7265 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.246636][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 161.667052][ T29] audit: type=1400 audit(1770903828.072:351): avc: denied { read } for pid=7289 comm="syz.2.371" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.064131][ T29] audit: type=1400 audit(1770903828.072:352): avc: denied { open } for pid=7289 comm="syz.2.371" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.102846][ T29] audit: type=1400 audit(1770903828.193:353): avc: denied { ioctl } for pid=7289 comm="syz.2.371" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.219217][ T29] audit: type=1400 audit(1770903828.539:354): avc: denied { ioctl } for pid=7303 comm="syz.3.375" path="socket:[16548]" dev="sockfs" ino=16548 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.312184][ T29] audit: type=1400 audit(1770903828.549:355): avc: denied { write } for pid=7303 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 162.412970][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 162.423907][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 162.779670][ T7320] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.689304][ T7335] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.798980][ T29] audit: type=1400 audit(1770903830.055:356): avc: denied { write } for pid=7336 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.339491][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 164.344429][ T29] audit: type=1400 audit(1770903830.569:357): avc: denied { create } for pid=7357 comm="syz.0.388" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 164.453923][ T29] audit: type=1400 audit(1770903830.597:358): avc: denied { map } for pid=7357 comm="syz.0.388" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.827559][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.150031][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 165.160791][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.173646][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.185002][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.197946][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.208004][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.224317][ T24] usb 1-1: config 0 descriptor?? [ 165.263319][ T29] audit: type=1400 audit(1770903831.430:359): avc: denied { getopt } for pid=7369 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.456161][ T7374] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.791202][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input10 [ 165.915247][ T29] audit: type=1400 audit(1770903832.028:360): avc: denied { mounton } for pid=7357 comm="syz.0.388" path="/79/file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.105228][ T24] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 166.750276][ T7382] binder: 7381:7382 unknown command 0 [ 166.755954][ T7382] binder: 7381:7382 ioctl c0306201 200000000080 returned -22 [ 166.773233][ T29] audit: type=1400 audit(1770903832.842:361): avc: denied { map } for pid=7381 comm="syz.1.395" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.861362][ T29] audit: type=1400 audit(1770903832.870:362): avc: denied { call } for pid=7381 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 166.948156][ T29] audit: type=1400 audit(1770903832.879:363): avc: denied { transfer } for pid=7381 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.370755][ T7384] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 167.380850][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.388954][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.524298][ T10] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 167.722680][ T7392] netlink: 'syz.3.397': attribute type 2 has an invalid length. [ 167.797654][ T7391] netlink: 512 bytes leftover after parsing attributes in process `syz.2.398'. [ 168.415105][ T9] usb 1-1: USB disconnect, device number 10 [ 168.630473][ T7396] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 168.740316][ T7401] overlayfs: overlapping lowerdir path [ 169.310044][ T7419] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.594582][ T29] audit: type=1400 audit(1770903835.480:364): avc: denied { mounton } for pid=7417 comm="syz.1.406" path="/77/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 169.620926][ T7418] fuseblk: Bad value for 'group_id' [ 169.631065][ T7418] fuseblk: Bad value for 'group_id' [ 169.670452][ T7422] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.959361][ T7426] Malformed UNC in devname [ 169.959361][ T7426] [ 169.981570][ T7426] CIFS: VFS: Malformed UNC in devname [ 171.057846][ T7443] netlink: 100 bytes leftover after parsing attributes in process `syz.4.410'. [ 171.072301][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.410'. [ 171.530654][ T29] audit: type=1400 audit(1770903837.276:365): avc: denied { read write } for pid=7432 comm="syz.0.409" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.721018][ T29] audit: type=1400 audit(1770903837.285:366): avc: denied { open } for pid=7432 comm="syz.0.409" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.783857][ T29] audit: type=1400 audit(1770903837.295:367): avc: denied { ioctl } for pid=7432 comm="syz.0.409" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.783895][ T29] audit: type=1400 audit(1770903837.482:368): avc: denied { read append } for pid=7444 comm="syz.4.412" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.783916][ T29] audit: type=1400 audit(1770903837.482:369): avc: denied { open } for pid=7444 comm="syz.4.412" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.783938][ T29] audit: type=1400 audit(1770903837.491:370): avc: denied { ioctl } for pid=7444 comm="syz.4.412" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.917318][ T7451] overlayfs: overlapping lowerdir path [ 172.245588][ T29] audit: type=1400 audit(1770903837.959:371): avc: denied { connect } for pid=7457 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.804588][ T7468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.144366][ T5911] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 173.663196][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 174.804701][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.422'. [ 174.966495][ T7479] netlink: 'syz.2.422': attribute type 39 has an invalid length. [ 175.011649][ T29] audit: type=1400 audit(1770903839.545:372): avc: denied { module_request } for pid=7480 comm="syz.1.423" kmod=6E65746465762D01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 175.718576][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.731565][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 175.740606][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.825998][ T5911] usb 4-1: config 0 descriptor?? [ 175.831425][ T5911] usb 4-1: can't set config #0, error -71 [ 175.842403][ T5911] usb 4-1: USB disconnect, device number 13 [ 175.959464][ T29] audit: type=1400 audit(1770903840.433:373): avc: denied { create } for pid=7487 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 175.980959][ T7496] comedi comedi0: comedi_config --init_data is deprecated [ 176.127074][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.448923][ T29] audit: type=1400 audit(1770903840.433:374): avc: denied { bind } for pid=7487 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 176.517758][ T7501] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 176.600903][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.610327][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.618334][ T24] usb 3-1: Product: syz [ 176.622570][ T24] usb 3-1: Manufacturer: syz [ 176.627179][ T24] usb 3-1: SerialNumber: syz [ 176.832940][ T29] audit: type=1400 audit(1770903841.247:375): avc: denied { read write } for pid=7506 comm="syz.0.433" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 176.884882][ T5911] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.896181][ T29] audit: type=1400 audit(1770903841.247:376): avc: denied { open } for pid=7506 comm="syz.0.433" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 177.078119][ T7511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.886914][ T5911] usb 2-1: device descriptor read/64, error -71 [ 178.048197][ T7522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.088754][ T7525] bridge0: entered allmulticast mode [ 178.174983][ T5911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.237552][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 178.244401][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 178.251849][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 178.457347][ T24] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 178.457574][ T5911] usb 2-1: device descriptor read/64, error -71 [ 178.489922][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 178.501060][ T7529] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 786440, id = 0 [ 178.508836][ T24] usb 3-1: USB disconnect, device number 10 [ 178.519912][ T29] audit: type=1400 audit(1770903842.828:377): avc: denied { mount } for pid=7527 comm="syz.4.439" name="/" dev="hugetlbfs" ino=17998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 178.545397][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 178.560715][ T29] audit: type=1400 audit(1770903842.828:378): avc: denied { execute } for pid=7527 comm="syz.4.439" path="/file0" dev="hugetlbfs" ino=17999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 178.606061][ T5911] usb usb2-port1: attempt power cycle [ 178.946357][ T29] audit: type=1400 audit(1770903843.230:379): avc: denied { write } for pid=7530 comm="syz.4.440" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 178.979192][ T29] audit: type=1400 audit(1770903843.230:380): avc: denied { open } for pid=7530 comm="syz.4.440" path="/81/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 179.004179][ T29] audit: type=1400 audit(1770903843.258:381): avc: denied { ioctl } for pid=7530 comm="syz.4.440" path="/81/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 179.187381][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 179.205409][ T7542] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 179.205409][ T7542] The task syz.0.441 (7542) triggered the difference, watch for misbehavior. [ 179.232918][ T5911] usb 2-1: device descriptor read/8, error -71 [ 179.904881][ T7547] FAULT_INJECTION: forcing a failure. [ 179.904881][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 180.036943][ T7547] CPU: 0 UID: 0 PID: 7547 Comm: syz.4.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.036969][ T7547] Tainted: [L]=SOFTLOCKUP [ 180.036975][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.036984][ T7547] Call Trace: [ 180.036990][ T7547] [ 180.036996][ T7547] dump_stack_lvl+0x100/0x190 [ 180.037027][ T7547] should_fail_ex.cold+0x5/0xa [ 180.037047][ T7547] ? tomoyo_realpath_from_path+0xb6/0x690 [ 180.037070][ T7547] should_failslab+0xc2/0x120 [ 180.037089][ T7547] __kmalloc_noprof+0xe0/0x850 [ 180.037111][ T7547] tomoyo_realpath_from_path+0xb6/0x690 [ 180.037139][ T7547] tomoyo_path_perm+0x276/0x460 [ 180.037157][ T7547] ? tomoyo_path_perm+0x262/0x460 [ 180.037178][ T7547] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 180.037220][ T7547] ? __d_lookup+0x25c/0x4a0 [ 180.037245][ T7547] tomoyo_path_rmdir+0x91/0xe0 [ 180.037269][ T7547] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 180.037294][ T7547] ? lookup_dcache+0x66/0x170 [ 180.037320][ T7547] security_path_rmdir+0x145/0x2b0 [ 180.037340][ T7547] filename_rmdir+0x29d/0x5c0 [ 180.037361][ T7547] ? __pfx_filename_rmdir+0x10/0x10 [ 180.037390][ T7547] ? do_getname+0x191/0x390 [ 180.037413][ T7547] __x64_sys_rmdir+0x46/0x70 [ 180.037433][ T7547] do_syscall_64+0x106/0xf80 [ 180.037448][ T7547] ? clear_bhb_loop+0x40/0x90 [ 180.037469][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.037486][ T7547] RIP: 0033:0x7fc50c99bf79 [ 180.037499][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.037522][ T7547] RSP: 002b:00007fc50d8d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 180.037539][ T7547] RAX: ffffffffffffffda RBX: 00007fc50cc16090 RCX: 00007fc50c99bf79 [ 180.037550][ T7547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 180.037560][ T7547] RBP: 00007fc50d8d4090 R08: 0000000000000000 R09: 0000000000000000 [ 180.037569][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.037578][ T7547] R13: 00007fc50cc16128 R14: 00007fc50cc16090 R15: 00007fff5fd6c828 [ 180.037601][ T7547] [ 180.038440][ T7547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.492608][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.993077][ T7559] netlink: 'syz.3.446': attribute type 2 has an invalid length. [ 181.119560][ T5911] usb 2-1: device not accepting address 10, error -71 [ 181.308360][ T7562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.853343][ T7565] FAULT_INJECTION: forcing a failure. [ 181.853343][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.889762][ T7565] CPU: 1 UID: 0 PID: 7565 Comm: syz.1.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.889786][ T7565] Tainted: [L]=SOFTLOCKUP [ 181.889790][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.889796][ T7565] Call Trace: [ 181.889800][ T7565] [ 181.889805][ T7565] dump_stack_lvl+0x100/0x190 [ 181.889825][ T7565] should_fail_ex.cold+0x5/0xa [ 181.889839][ T7565] strncpy_from_user+0x3b/0x2d0 [ 181.889859][ T7565] do_getname+0x78/0x390 [ 181.889875][ T7565] do_sys_openat2+0xc5/0x1e0 [ 181.889890][ T7565] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.889910][ T7565] __x64_sys_openat+0x12d/0x210 [ 181.889925][ T7565] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.889940][ T7565] ? __pfx___schedule+0x10/0x10 [ 181.889961][ T7565] do_syscall_64+0x106/0xf80 [ 181.889971][ T7565] ? clear_bhb_loop+0x40/0x90 [ 181.889984][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.889995][ T7565] RIP: 0033:0x7f2ebbd9bf79 [ 181.890004][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.890015][ T7565] RSP: 002b:00007f2ebcc29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.890026][ T7565] RAX: ffffffffffffffda RBX: 00007f2ebc016180 RCX: 00007f2ebbd9bf79 [ 181.890033][ T7565] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 181.890039][ T7565] RBP: 00007f2ebcc29090 R08: 0000000000000000 R09: 0000000000000000 [ 181.890046][ T7565] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 181.890052][ T7565] R13: 00007f2ebc016218 R14: 00007f2ebc016180 R15: 00007ffc1032ea28 [ 181.890066][ T7565] [ 182.221382][ T5911] usb usb2-port1: unable to enumerate USB device [ 182.664666][ T7588] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.720932][ T7592] Malformed UNC in devname [ 182.720932][ T7592] [ 182.727888][ T7592] CIFS: VFS: Malformed UNC in devname [ 183.290357][ T7600] xt_TPROXY: Can be used only with -p tcp or -p udp [ 183.450158][ T30] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 183.668245][ T5911] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.708009][ T30] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 183.717092][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.726626][ T30] usb 4-1: config 0 descriptor?? [ 183.734567][ T30] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 183.813614][ T5911] usb 5-1: device descriptor read/64, error -71 [ 184.294092][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 184.294107][ T29] audit: type=1400 audit(1770903848.235:386): avc: denied { write } for pid=7598 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.294672][ T5911] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.347577][ T29] audit: type=1400 audit(1770903848.272:387): avc: denied { read } for pid=7598 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.479545][ T5911] usb 5-1: device descriptor read/64, error -71 [ 184.605886][ T5911] usb usb5-port1: attempt power cycle [ 184.626133][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.841175][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 184.856270][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.867110][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 184.889056][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 184.899270][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 184.909309][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.924934][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 184.934691][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.938701][ T7619] trusted_key: syz.1.465 sent an empty control message without MSG_MORE. [ 184.943403][ T24] usb 1-1: Product: syz [ 184.956137][ T24] usb 1-1: Manufacturer: syz [ 184.962240][ T24] usb 1-1: SerialNumber: syz [ 184.979415][ T5911] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 184.982261][ T24] usb 1-1: config 0 descriptor?? [ 185.002749][ T24] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 185.011507][ T5911] usb 5-1: device descriptor read/8, error -71 [ 185.134684][ T29] audit: type=1400 audit(1770903849.020:388): avc: denied { append } for pid=7622 comm="syz.1.467" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.228697][ T24] usb 1-1: USB disconnect, device number 11 [ 185.267955][ T5911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 185.699530][ T5911] usb 5-1: device descriptor read/8, error -71 [ 186.128767][ T30] gp8psk: usb out operation failed. [ 186.171590][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.280757][ T30] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 186.370066][ T30] usb 4-1: media controller created [ 186.802266][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.098771][ T30] gp8psk_fe: Frontend attached [ 187.103759][ T30] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 187.162841][ T30] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 187.194066][ T5911] usb usb5-port1: unable to enumerate USB device [ 187.441663][ T7638] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.461936][ T30] gp8psk: usb in 138 operation failed. [ 187.468341][ T30] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 187.478285][ T30] gp8psk: found Genpix USB device pID = 203 (hex) [ 187.627031][ T7641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.946594][ T30] usb 4-1: USB disconnect, device number 14 [ 188.020330][ T30] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 188.323713][ T7653] netlink: 'syz.4.474': attribute type 2 has an invalid length. [ 188.408099][ T29] audit: type=1400 audit(1770903852.051:389): avc: denied { accept } for pid=7647 comm="syz.1.475" path="socket:[18414]" dev="sockfs" ino=18414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 190.160810][ T7676] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 190.694547][ T29] audit: type=1400 audit(1770903854.193:390): avc: denied { remount } for pid=7685 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.930623][ T29] audit: type=1400 audit(1770903854.296:391): avc: denied { setopt } for pid=7687 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 191.128369][ T7694] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.467629][ T29] audit: type=1400 audit(1770903854.296:392): avc: denied { write } for pid=7687 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 191.521506][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.660691][ T10] usb 4-1: device descriptor read/64, error -71 [ 192.034663][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 192.259709][ T10] usb 4-1: device descriptor read/64, error -71 [ 192.292057][ T29] audit: type=1400 audit(1770903855.718:393): avc: denied { getopt } for pid=7719 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.366256][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 192.368788][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 192.372342][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 192.384565][ T10] usb usb4-port1: attempt power cycle [ 192.468520][ T7725] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 192.526428][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.761633][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 192.783143][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 192.793818][ T10] usb 4-1: device descriptor read/8, error -71 [ 192.802816][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.813332][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.823260][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.833598][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.863702][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.873481][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.061035][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 193.117685][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 193.123198][ T9] usbtmc 2-1:16.0: can't read capabilities [ 193.131089][ T10] usb 4-1: device descriptor read/8, error -71 [ 193.307106][ T7736] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.627426][ T10] usb usb4-port1: unable to enumerate USB device [ 193.657888][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.667635][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.676695][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.685730][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.694755][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.704595][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.713637][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.722666][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.731686][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.740728][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.749745][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.758763][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.767810][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.806897][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.815967][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.825012][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 193.848816][ T10] usb 2-1: USB disconnect, device number 11 [ 194.038630][ T7743] netlink: 'syz.0.500': attribute type 2 has an invalid length. [ 194.182007][ T29] audit: type=1400 audit(1770903857.411:394): avc: denied { bind } for pid=7738 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 194.337828][ T29] audit: type=1400 audit(1770903857.411:395): avc: denied { write } for pid=7738 comm="syz.4.499" path="socket:[18608]" dev="sockfs" ino=18608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 195.029426][ T7746] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.407259][ T29] audit: type=1400 audit(1770903858.618:396): avc: denied { write } for pid=7753 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.849769][ T7775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.183037][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.385803][ T10] usb 2-1: device descriptor read/64, error -71 [ 196.396870][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.510718][ T29] audit: type=1400 audit(1770903859.665:397): avc: denied { setopt } for pid=7785 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.556984][ T24] usb 4-1: device descriptor read/64, error -71 [ 196.565822][ T29] audit: type=1400 audit(1770903859.665:398): avc: denied { accept } for pid=7785 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.629470][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 196.653073][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.745642][ T7793] netlink: 48 bytes leftover after parsing attributes in process `syz.0.516'. [ 196.773258][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 196.838666][ T10] usb 2-1: device descriptor read/64, error -71 [ 196.845667][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 197.007214][ T10] usb usb2-port1: attempt power cycle [ 197.018445][ T24] usb 4-1: device descriptor read/64, error -71 [ 197.069948][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.148126][ T24] usb usb4-port1: attempt power cycle [ 197.165938][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 197.187119][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 197.275584][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 197.287674][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.305591][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 197.318896][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34494, setting to 1024 [ 197.336128][ T5882] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 197.345663][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 197.354675][ T5882] usb 3-1: Product: syz [ 197.359184][ T5882] usb 3-1: Manufacturer: syz [ 197.363822][ T5882] usb 3-1: SerialNumber: syz [ 197.371246][ T5882] usb 3-1: config 0 descriptor?? [ 197.380868][ T7792] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 197.392134][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.423339][ T10] usb 2-1: device descriptor read/8, error -71 [ 197.476209][ T5911] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 197.478557][ T5882] rc_core: IR keymap rc-imon-rsc not found [ 197.499251][ T5882] Registered IR keymap rc-empty [ 197.514314][ T5882] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 197.546704][ T5882] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 197.556506][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 197.589624][ T24] usb 4-1: device descriptor read/8, error -71 [ 197.647480][ T5911] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 197.722089][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 197.755485][ T5911] usb 1-1: config 1 has no interface number 1 [ 197.761619][ T5911] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 197.784295][ T10] usb 2-1: device descriptor read/8, error -71 [ 197.810347][ T9] usb 3-1: USB disconnect, device number 11 [ 197.853073][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.873673][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 197.879729][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.914146][ T5911] usb 1-1: Product: syz [ 197.914949][ T24] usb 4-1: device descriptor read/8, error -71 [ 197.918681][ T10] usb usb2-port1: unable to enumerate USB device [ 197.939247][ T5911] usb 1-1: Manufacturer: syz [ 197.943852][ T5911] usb 1-1: SerialNumber: syz [ 198.043082][ T24] usb usb4-port1: unable to enumerate USB device [ 198.192644][ T5911] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 198.200474][ T5911] usb 1-1: 2:1 : unknown format tag 0x1006 is detected. processed as MPEG. [ 198.262676][ T5911] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 198.285980][ T5911] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 198.363343][ T5911] usb 1-1: USB disconnect, device number 12 [ 198.446347][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.358345][ T7839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.603113][ T7843] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.096433][ T7839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.133036][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 200.295344][ T29] audit: type=1400 audit(1770903863.192:399): avc: denied { watch_reads } for pid=7848 comm="syz.0.526" path="/113" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 200.448478][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 200.461854][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.471301][ T9] usb 2-1: config 1 has no interface number 1 [ 200.618955][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.649652][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.663486][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.685565][ T9] usb 2-1: Product: syz [ 200.694159][ T9] usb 2-1: Manufacturer: syz [ 200.704920][ T9] usb 2-1: SerialNumber: syz [ 200.739641][ T7839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.796031][ T7839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.837000][ T29] audit: type=1400 audit(1770903863.716:400): avc: denied { write } for pid=7852 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.866423][ T7854] syzkaller0: entered promiscuous mode [ 200.871919][ T7854] syzkaller0: entered allmulticast mode [ 201.077559][ T29] audit: type=1400 audit(1770903863.931:401): avc: denied { read } for pid=7861 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.099518][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.099584][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.919968][ T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 201.953311][ T9] usb 2-1: 2:1 : invalid channels 0 [ 201.970223][ T7110] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.014733][ T7110] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.050978][ T7110] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.069814][ T9] usb 2-1: USB disconnect, device number 16 [ 202.076215][ T7110] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.118910][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.287001][ T5882] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.342165][ T7885] Malformed UNC in devname [ 202.342165][ T7885] [ 202.349401][ T7885] CIFS: VFS: Malformed UNC in devname [ 202.703304][ T5882] usb 3-1: device descriptor read/64, error -71 [ 203.003732][ T7897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.388234][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.441710][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 203.548478][ T5882] usb 3-1: device descriptor read/64, error -71 [ 203.567383][ T7887] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 203.657183][ T7888] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 203.673802][ T7877] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 203.683985][ T5882] usb usb3-port1: attempt power cycle [ 203.691292][ T7877] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 203.701287][ T7877] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 203.711888][ T7877] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 203.733348][ T7877] netlink: 'syz.4.533': attribute type 29 has an invalid length. [ 203.773021][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 203.774379][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 203.774407][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 203.774430][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 203.774450][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 203.776162][ T9] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 203.776192][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.776210][ T9] usb 5-1: Product: syz [ 203.776223][ T9] usb 5-1: Manufacturer: syz [ 203.776236][ T9] usb 5-1: SerialNumber: syz [ 203.781248][ T9] usb 5-1: config 0 descriptor?? [ 203.786257][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 204.301384][ T29] audit: type=1400 audit(1770903866.933:402): avc: denied { setopt } for pid=7900 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.416683][ T5882] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.440109][ T5882] usb 3-1: device descriptor read/8, error -71 [ 204.441404][ T791] usb 5-1: USB disconnect, device number 21 [ 204.692484][ T5882] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 204.758577][ T5882] usb 3-1: device descriptor read/8, error -71 [ 204.993383][ T5882] usb usb3-port1: unable to enumerate USB device [ 205.143489][ T29] audit: type=1400 audit(1770903867.691:403): avc: denied { getopt } for pid=7913 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.206012][ T7922] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.077803][ T7962] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 207.162162][ T5882] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 207.347528][ T5882] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 207.356794][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.367850][ T5882] usb 4-1: Product: syz [ 207.404074][ T5882] usb 4-1: Manufacturer: syz [ 207.423990][ T5882] usb 4-1: SerialNumber: syz [ 207.483963][ T791] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 207.654410][ T791] usb 1-1: Using ep0 maxpacket: 16 [ 207.661370][ T791] usb 1-1: config 0 has no interfaces? [ 207.669691][ T791] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 207.682356][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.894676][ T791] usb 1-1: Product: syz [ 207.901169][ T791] usb 1-1: Manufacturer: syz [ 207.906059][ T791] usb 1-1: SerialNumber: syz [ 207.939942][ T791] usb 1-1: config 0 descriptor?? [ 208.105714][ T5882] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 208.344234][ T5882] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 208.420566][ T7971] 9p: Bad value for 'rfdno' [ 209.689293][ T7983] tipc: Started in network mode [ 209.698470][ T7983] tipc: Node identity a26d4930695c, cluster identity 4711 [ 209.715021][ T7983] tipc: Enabled bearer , priority 0 [ 209.778696][ T7983] syzkaller0: entered promiscuous mode [ 209.784458][ T7983] syzkaller0: entered allmulticast mode [ 209.794256][ T7983] tipc: Resetting bearer [ 209.859038][ T7987] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 209.867832][ T7987] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 210.613817][ T29] audit: type=1400 audit(1770903872.845:404): avc: denied { setopt } for pid=7995 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.060247][ T5882] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 211.073625][ T5882] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.086662][ T5882] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.110042][ T7982] tipc: Resetting bearer [ 211.118282][ T5882] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 211.142248][ T791] usb 1-1: USB disconnect, device number 13 [ 211.379075][ T8001] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'. [ 212.003550][ T8015] fuse: root generation should be zero [ 212.340811][ T791] usb 4-1: USB disconnect, device number 23 [ 213.486994][ T8051] input: syz0 as /devices/virtual/input/input14 [ 213.599064][ T8055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.630354][ T29] audit: type=1400 audit(1770903875.670:405): avc: denied { name_bind } for pid=8054 comm="syz.2.580" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 214.845169][ T7982] tipc: Disabling bearer [ 214.853073][ T5911] tipc: Node number set to 3409004848 [ 214.861462][ T8021] wg1: entered promiscuous mode [ 214.867346][ T8021] wg1: entered allmulticast mode [ 215.050973][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.587'. [ 215.151184][ T8079] af_packet: tpacket_rcv: packet too big, clamped from 116 to 4294967272. macoff=96 [ 215.321508][ T8087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.425718][ T791] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 215.441253][ T29] audit: type=1400 audit(1770903877.372:406): avc: denied { write } for pid=8090 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 215.462171][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 215.521947][ T5882] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 215.531629][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 215.607457][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 215.613754][ T791] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.622187][ T791] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 215.632907][ T791] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 215.641667][ T791] usb 5-1: Product: syz [ 215.645820][ T791] usb 5-1: Manufacturer: syz [ 215.650643][ T791] usb 5-1: SerialNumber: syz [ 215.657296][ T791] usb 5-1: config 0 descriptor?? [ 215.694101][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.706337][ T5882] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 215.716887][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.730893][ T5882] usb 1-1: config 0 descriptor?? [ 215.903969][ T791] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 215.927875][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.192839][ T5882] cherry 0003:046A:0023.0003: hidraw0: USB HID v10.00 Device [HID 046a:0023] on usb-dummy_hcd.0-1/input0 [ 216.385245][ T29] audit: type=1400 audit(1770903878.252:407): avc: denied { name_bind 0x1000000 } for pid=8102 comm="syz.1.599" path="socket:[20469]" dev="sockfs" ino=20469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 216.468461][ T29] audit: type=1400 audit(1770903878.336:408): avc: denied { nlmsg_read } for pid=8105 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.492978][ T8106] netlink: 164 bytes leftover after parsing attributes in process `syz.2.601'. [ 216.610810][ T29] audit: type=1400 audit(1770903878.457:409): avc: denied { write } for pid=8111 comm="syz.1.604" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.643462][ T29] audit: type=1400 audit(1770903878.457:410): avc: denied { ioctl } for pid=8111 comm="syz.1.604" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.737342][ T29] audit: type=1400 audit(1770903878.579:411): avc: denied { write } for pid=8119 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.770471][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.779266][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.791435][ T29] audit: type=1400 audit(1770903878.635:412): avc: denied { read } for pid=8119 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.922411][ T5882] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 217.018644][ T791] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 217.088206][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.097419][ T5882] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 217.107480][ T5882] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 217.117618][ T5882] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.127752][ T5882] usb 3-1: config 1 interface 0 has no altsetting 0 [ 217.137654][ T5882] usb 3-1: string descriptor 0 read error: -22 [ 217.143925][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 217.153002][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.164656][ T8116] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 217.180533][ T791] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 217.190013][ T791] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 217.200389][ T791] usb 2-1: config 0 has no interface number 0 [ 217.210909][ T791] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 217.220131][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.228211][ T791] usb 2-1: Product: syz [ 217.232385][ T791] usb 2-1: Manufacturer: syz [ 217.236963][ T791] usb 2-1: SerialNumber: syz [ 217.242949][ T791] usb 2-1: config 0 descriptor?? [ 217.399233][ T5882] usb 3-1: USB disconnect, device number 16 [ 217.679245][ T791] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 217.697036][ T791] uvcvideo 2-1:0.64: No valid video chain found. [ 217.701510][ T29] audit: type=1400 audit(1770903879.486:413): avc: denied { bind } for pid=8127 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.905627][ T10] usb 2-1: USB disconnect, device number 17 [ 218.013392][ T791] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 218.185259][ T791] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 218.201394][ T791] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 218.219512][ T791] usb 4-1: config 220 interface 0 has no altsetting 0 [ 218.239723][ T791] usb 4-1: New USB device found, idVendor=8086, idProduct=0507, bcdDevice=6c.00 [ 218.249088][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.258177][ T791] usb 4-1: Product: syz [ 218.262618][ T791] usb 4-1: Manufacturer: syz [ 218.267211][ T791] usb 4-1: SerialNumber: syz [ 218.350683][ T5882] usb 5-1: USB disconnect, device number 22 [ 218.420735][ T29] audit: type=1400 audit(1770903880.160:414): avc: denied { load_policy } for pid=8146 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 218.421061][ T8147] SELinux: ebitmap: map size 1701995264 does not match my size 64 (high bit was 191198305) [ 218.452151][ T8147] SELinux: failed to load policy [ 218.474245][ T9] usb 1-1: USB disconnect, device number 14 [ 218.520154][ T791] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0507) [ 218.547781][ T791] uvcvideo 4-1:220.0: No valid video chain found. [ 218.559909][ T791] usb 4-1: USB disconnect, device number 24 [ 218.865964][ T8167] input: syz1 as /devices/virtual/input/input15 [ 218.885706][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 219.017496][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 219.549270][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 219.620593][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.641691][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 219.653543][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.662669][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.673615][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 219.685297][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.698057][ T10] usb 1-1: config 0 descriptor?? [ 219.719048][ T8157] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.736704][ T9] usb 2-1: SerialNumber: syz [ 219.983361][ T9] usb 2-1: 0:2 : does not exist [ 220.003805][ T9] usb 2-1: unit 200 not found! [ 220.076712][ T9] usb 2-1: USB disconnect, device number 18 [ 220.282337][ T10] elan 0003:04F3:0755.0004: unknown main item tag 0x1 [ 220.307075][ T10] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 221.009878][ T8192] warning: `syz.4.638' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 222.157401][ T29] audit: type=1400 audit(1770903883.649:415): avc: denied { read append } for pid=8198 comm="syz.3.642" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.398172][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.639'. [ 223.682020][ T791] usb 1-1: USB disconnect, device number 15 [ 223.784569][ T8232] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'. [ 223.832827][ T791] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 224.031662][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 224.065067][ T791] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 224.074669][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.085128][ T791] usb 1-1: config 0 descriptor?? [ 224.103003][ T791] cp210x 1-1:0.0: cp210x converter detected [ 224.215150][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 224.222383][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.242930][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.260257][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.272642][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.291346][ T10] usb 3-1: config 0 descriptor?? [ 224.527354][ T791] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 224.545364][ T791] usb 1-1: cp210x converter now attached to ttyUSB0 [ 224.610133][ T8205] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 224.739475][ T10] microsoft 0003:045E:07DA.0005: item 0 4 0 8 parsing failed [ 224.747237][ T10] microsoft 0003:045E:07DA.0005: parse failed [ 224.753523][ T10] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 224.772592][ T791] usb 1-1: USB disconnect, device number 16 [ 224.784907][ T791] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.796459][ T791] cp210x 1-1:0.0: device disconnected [ 224.919257][ T29] audit: type=1400 audit(1770903886.240:416): avc: denied { audit_write } for pid=8251 comm="syz.3.663" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.930899][ T5882] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 225.067707][ T30] usb 3-1: USB disconnect, device number 17 [ 225.155793][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.170487][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.186308][ T5882] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 225.207763][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.224575][ T5882] usb 2-1: config 0 descriptor?? [ 225.462715][ T8256] binder: 8255:8256 ioctl 400c620e 0 returned -14 [ 225.934842][ T5882] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 225.941935][ T5882] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 225.968182][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 225.986604][ T5882] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 225.999783][ T5882] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 226.016758][ T5882] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 226.175128][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 226.188668][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.221702][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.246113][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 226.281212][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 226.309972][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 226.319029][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.346909][ T10] usb 1-1: config 0 descriptor?? [ 226.359581][ T5882] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 226.375532][ T29] audit: type=1400 audit(1770903887.606:417): avc: denied { watch watch_reads } for pid=8275 comm="syz.2.674" path="/proc/441/net/ip6_tables_targets" dev="proc" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 226.433935][ T5882] usb 2-1: USB disconnect, device number 19 [ 226.818472][ T10] hid (null): invalid report_count -1215181872 [ 226.841210][ T29] audit: type=1400 audit(1770903888.036:418): avc: denied { mounton } for pid=8286 comm="syz.2.680" path="/proc/449/task" dev="proc" ino=21785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 227.025235][ T5882] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 227.032602][ T10] usb 1-1: USB disconnect, device number 17 [ 227.188270][ T29] audit: type=1400 audit(1770903888.363:419): avc: denied { read } for pid=8297 comm="syz.2.684" path="socket:[21011]" dev="sockfs" ino=21011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.785048][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.811561][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.830875][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.877896][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.893885][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.916018][ T5882] usb 5-1: config 0 descriptor?? [ 228.479002][ T791] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 228.660706][ T791] usb 1-1: Using ep0 maxpacket: 8 [ 228.680421][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.696565][ T5882] plantronics 0003:047F:FFFF.0008: unbalanced collection at end of report description [ 228.712693][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.728196][ T791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.738426][ T5882] plantronics 0003:047F:FFFF.0008: parse failed [ 228.744773][ T5882] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 228.754978][ T791] usb 1-1: no configurations [ 228.766913][ T791] usb 1-1: can't read configurations, error -22 [ 228.815835][ T29] audit: type=1400 audit(1770903889.879:420): avc: denied { getopt } for pid=8325 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.930304][ T5882] usb 5-1: USB disconnect, device number 23 [ 229.038924][ T8335] SELinux: failed to load policy [ 229.139600][ T8337] kvm: pic: non byte write [ 229.349775][ T8347] loop7: detected capacity change from 0 to 7 [ 229.367236][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.384932][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.393192][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.414462][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.477320][ T8352] [ 229.479668][ T8352] ====================================================== [ 229.486678][ T8352] WARNING: possible circular locking dependency detected [ 229.493688][ T8352] syzkaller #0 Tainted: G L [ 229.499637][ T8352] ------------------------------------------------------ [ 229.506624][ T8352] syz.0.703/8352 is trying to acquire lock: [ 229.512485][ T8352] ffff88801cab8220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 229.515964][ T29] audit: type=1400 audit(1770903890.515:421): avc: denied { watch watch_reads } for pid=8357 comm="syz.2.707" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 229.522642][ T8352] [ 229.522642][ T8352] but task is already holding lock: [ 229.522649][ T8352] ffff8880267bf2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 229.565889][ T8352] [ 229.565889][ T8352] which lock already depends on the new lock. [ 229.565889][ T8352] [ 229.576267][ T8352] [ 229.576267][ T8352] the existing dependency chain (in reverse order) is: [ 229.585255][ T8352] [ 229.585255][ T8352] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 229.593838][ T8352] blk_alloc_queue+0x610/0x790 [ 229.599104][ T8352] blk_mq_alloc_queue+0x174/0x290 [ 229.604630][ T8352] __blk_mq_alloc_disk+0x29/0x120 [ 229.610155][ T8352] loop_add+0x498/0xb60 [ 229.614816][ T8352] loop_init+0x1d3/0x200 [ 229.619559][ T8352] do_one_initcall+0x11d/0x690 [ 229.624822][ T8352] kernel_init_freeable+0x6e5/0x790 [ 229.630523][ T8352] kernel_init+0x1f/0x1e0 [ 229.635353][ T8352] ret_from_fork+0x754/0xd80 [ 229.640447][ T8352] ret_from_fork_asm+0x1a/0x30 [ 229.645710][ T8352] [ 229.645710][ T8352] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 229.652909][ T8352] fs_reclaim_acquire+0xc4/0x100 [ 229.658348][ T8352] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 229.664217][ T8352] __kernfs_iattrs+0x126/0x400 [ 229.669482][ T8352] __kernfs_setattr+0x4d/0x3c0 [ 229.674747][ T8352] kernfs_iop_setattr+0xda/0x130 [ 229.680187][ T8352] notify_change+0xb25/0x1330 [ 229.685363][ T8352] do_truncate+0x1df/0x240 [ 229.690279][ T8352] path_openat+0x2a55/0x31a0 [ 229.695367][ T8352] do_file_open+0x20e/0x430 [ 229.700369][ T8352] do_sys_openat2+0x10d/0x1e0 [ 229.705546][ T8352] __x64_sys_openat+0x12d/0x210 [ 229.710899][ T8352] do_syscall_64+0x106/0xf80 [ 229.715999][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.722405][ T8352] [ 229.722405][ T8352] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 229.730891][ T8352] __lock_acquire+0x14b8/0x2630 [ 229.736243][ T8352] lock_acquire+0x17c/0x330 [ 229.741247][ T8352] down_read+0x99/0x460 [ 229.745901][ T8352] kernfs_iop_getattr+0x9c/0xf0 [ 229.751254][ T8352] vfs_getattr_nosec+0x2d4/0x430 [ 229.756693][ T8352] vfs_getattr+0x4a/0x60 [ 229.761437][ T8352] loop_query_min_dio_size.isra.0+0x117/0x250 [ 229.768010][ T8352] lo_ioctl+0x13aa/0x1bc0 [ 229.772834][ T8352] blkdev_ioctl+0x5ad/0x6f0 [ 229.777845][ T8352] __x64_sys_ioctl+0x18e/0x210 [ 229.783113][ T8352] do_syscall_64+0x106/0xf80 [ 229.788203][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.794600][ T8352] [ 229.794600][ T8352] other info that might help us debug this: [ 229.794600][ T8352] [ 229.804802][ T8352] Chain exists of: [ 229.804802][ T8352] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 229.804802][ T8352] [ 229.819206][ T8352] Possible unsafe locking scenario: [ 229.819206][ T8352] [ 229.826637][ T8352] CPU0 CPU1 [ 229.831979][ T8352] ---- ---- [ 229.837317][ T8352] lock(&q->q_usage_counter(io)#24); [ 229.842669][ T8352] lock(fs_reclaim); [ 229.849231][ T8352] lock(&q->q_usage_counter(io)#24); [ 229.857101][ T8352] rlock(&root->kernfs_iattr_rwsem); [ 229.862462][ T8352] [ 229.862462][ T8352] *** DEADLOCK *** [ 229.862462][ T8352] [ 229.870581][ T8352] 3 locks held by syz.0.703/8352: [ 229.875575][ T8352] #0: ffff888026a2f448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 229.885734][ T8352] #1: ffff8880267bf2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 229.897369][ T8352] #2: ffff8880267bf2f8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 229.909177][ T8352] [ 229.909177][ T8352] stack backtrace: [ 229.915044][ T8352] CPU: 0 UID: 0 PID: 8352 Comm: syz.0.703 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.915065][ T8352] Tainted: [L]=SOFTLOCKUP [ 229.915070][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 229.915078][ T8352] Call Trace: [ 229.915083][ T8352] [ 229.915089][ T8352] dump_stack_lvl+0x100/0x190 [ 229.915111][ T8352] print_circular_bug.cold+0x178/0x1c7 [ 229.915133][ T8352] check_noncircular+0x146/0x160 [ 229.915152][ T8352] __lock_acquire+0x14b8/0x2630 [ 229.915174][ T8352] lock_acquire+0x17c/0x330 [ 229.915191][ T8352] ? kernfs_iop_getattr+0x9c/0xf0 [ 229.915217][ T8352] ? __pfx___might_resched+0x10/0x10 [ 229.915240][ T8352] down_read+0x99/0x460 [ 229.915255][ T8352] ? kernfs_iop_getattr+0x9c/0xf0 [ 229.915273][ T8352] ? find_held_lock+0x2b/0x80 [ 229.915287][ T8352] ? __pfx_down_read+0x10/0x10 [ 229.915300][ T8352] ? kernfs_root+0xee/0x2a0 [ 229.915320][ T8352] kernfs_iop_getattr+0x9c/0xf0 [ 229.915339][ T8352] vfs_getattr_nosec+0x2d4/0x430 [ 229.915355][ T8352] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 229.915375][ T8352] vfs_getattr+0x4a/0x60 [ 229.915390][ T8352] loop_query_min_dio_size.isra.0+0x117/0x250 [ 229.915413][ T8352] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 229.915442][ T8352] lo_ioctl+0x13aa/0x1bc0 [ 229.915455][ T8352] ? __pfx_lo_ioctl+0x10/0x10 [ 229.915467][ T8352] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 229.915491][ T8352] ? kasan_quarantine_put+0x104/0x240 [ 229.915503][ T8352] ? blk_get_meta_cap+0xd4/0x6c0 [ 229.915519][ T8352] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 229.915536][ T8352] ? blkdev_common_ioctl+0x515/0x2ba0 [ 229.915553][ T8352] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 229.915570][ T8352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.915586][ T8352] ? do_vfs_ioctl+0x226/0x13e0 [ 229.915607][ T8352] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 229.915628][ T8352] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.915650][ T8352] ? __fget_files+0x215/0x3d0 [ 229.915665][ T8352] ? __pfx_lo_ioctl+0x10/0x10 [ 229.915677][ T8352] blkdev_ioctl+0x5ad/0x6f0 [ 229.915692][ T8352] ? __pfx_blkdev_ioctl+0x10/0x10 [ 229.915707][ T8352] ? selinux_file_ioctl+0x139/0x290 [ 229.915724][ T8352] ? selinux_file_ioctl+0xb4/0x290 [ 229.915742][ T8352] ? __pfx_blkdev_ioctl+0x10/0x10 [ 229.915757][ T8352] __x64_sys_ioctl+0x18e/0x210 [ 229.915779][ T8352] do_syscall_64+0x106/0xf80 [ 229.915790][ T8352] ? clear_bhb_loop+0x40/0x90 [ 229.915806][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.915820][ T8352] RIP: 0033:0x7f32ae19bf79 [ 229.915831][ T8352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.915845][ T8352] RSP: 002b:00007f32af005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.915858][ T8352] RAX: ffffffffffffffda RBX: 00007f32ae416090 RCX: 00007f32ae19bf79 [ 229.915867][ T8352] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 229.915875][ T8352] RBP: 00007f32ae2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 229.915883][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.915891][ T8352] R13: 00007f32ae416128 R14: 00007f32ae416090 R15: 00007ffc49411108 [ 229.915904][ T8352] [ 230.242768][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.261459][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.273052][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.281014][ T8347] ldm_validate_partition_table(): Disk read failed. [ 230.288633][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.296615][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.305033][ T8347] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.313054][ T8347] Dev loop7: unable to read RDB block 0 [ 230.318773][ T8347] loop7: unable to read partition table [ 230.324454][ T8347] loop7: partition table beyond EOD, truncated [ 230.331122][ T5796] ldm_validate_partition_table(): Disk read failed. [ 230.337728][ T5796] Dev loop7: unable to read RDB block 0 [ 230.343506][ T5796] loop7: unable to read partition table [ 230.349184][ T5796] loop7: partition table beyond EOD, truncated [ 230.364523][ T8352] ldm_validate_partition_table(): Disk read failed. [ 230.372223][ T8352] Dev loop7: unable to read RDB block 0 [ 230.378179][ T8347] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P@?X) failed (rc=-5) [ 230.388653][ T8352] loop7: unable to read partition table [ 230.394363][ T8352] loop7: partition table beyond EOD, truncated [ 230.400507][ T8352] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P@?X) failed (rc=-5)