last executing test programs: 4.20723498s ago: executing program 0 (id=1633): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.051828032s ago: executing program 0 (id=1637): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.927891561s ago: executing program 0 (id=1639): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) 1.615275417s ago: executing program 4 (id=1679): socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 1.413370416s ago: executing program 1 (id=1682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'team_slave_1\x00', &(0x7f00000004c0)=@ethtool_rxfh_indir={0x39, 0x2, [0x1, 0x40]}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 924.164415ms ago: executing program 2 (id=1688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) sendto$inet6(r0, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 882.889414ms ago: executing program 0 (id=1689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000800)={0x7ef1afdee983757f, 0x0, [0x100000000, 0x40, 0x3, 0x9, 0x1, 0xfffffffffffffffd, 0x8c, 0x10000a71]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 764.17813ms ago: executing program 2 (id=1691): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}]}, 0x20}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 717.898303ms ago: executing program 4 (id=1692): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800058004000880"], 0x2c}}, 0x200090c8) 714.744575ms ago: executing program 3 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd29, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) 703.543155ms ago: executing program 2 (id=1694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f14257b6c5820fae9d", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000dac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x800}], 0x1, 0x40008040) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) 582.647274ms ago: executing program 0 (id=1695): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x3f, 0x0) 571.539209ms ago: executing program 4 (id=1696): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 540.951983ms ago: executing program 1 (id=1697): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 540.19727ms ago: executing program 3 (id=1698): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000003200)) 418.867722ms ago: executing program 1 (id=1699): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0x9, @mcast2, 0x7}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) 400.6038ms ago: executing program 3 (id=1700): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"3b04d785", 0x550, 0x5, 0x7f, 0x2, 0x2, "3260116f664e50532cd4a95668bee2", "47ae93b2", "bff5f45b", "84d5db06", ["ebddbb92d626aeb6806a02c4", "f9f524fab8a5e444d51540c5", "f3f037eb886ea274030ce0a5", "67302890d870fc4ae9ad4647"]}) 352.180096ms ago: executing program 2 (id=1701): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 319.573528ms ago: executing program 3 (id=1702): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x52, 0x2, 0x7, {0xfff7, 0x2}, {0x8, 0x3}, @const={0x9, {0x6, 0x105, 0x9, 0x7}}}) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 308.496555ms ago: executing program 2 (id=1703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x890d}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0xa0100ff, @multicast1}, {0xa000, 0x8100, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}}}}}}}}, 0x36) 239.926563ms ago: executing program 1 (id=1704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"0300", 0x0, 0x6, 0x3, 0x6, 0x0, "01cff78ea77000ebff00", "000200", '\x00\x00(\x00', "798a202d", ["c2fffedbff00ffdfffffffff", "1f0008000000000000042371", "070500110800c1024b00", "38a70ed483d94574c99b9f16"]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x3, 0x4006, 0x5, 0x0, [{0x80, 0x9, 0x0, '\x00', 0xd7}, {0x0, 0xff, 0x0, '\x00', 0x2}, {0x4, 0x2, 0x8, '\x00', 0x7}, {0xf4, 0x2, 0xa2, '\x00', 0x5}, {0xd, 0x8, 0x5, '\x00', 0xd}, {0x4, 0x0, 0x20, '\x00', 0x4}, {0x3, 0x65, 0x10, '\x00', 0x4}, {0x5, 0xe8, 0x9, '\x00', 0xfd}, {0x7, 0xd, 0x8, '\x00', 0xb9}, {0xb0, 0x8, 0x6b, '\x00', 0xa}, {0x8, 0x59, 0x5, '\x00', 0x8}, {0x5, 0x4, 0xb, '\x00', 0x2}, {0x81, 0x0, 0x1, '\x00', 0xe8}, {0x4, 0xb, 0x1, '\x00', 0x8}, {0x8, 0xf0, 0x40, '\x00', 0xd}, {0x8, 0x8, 0xf7, '\x00', 0x8}, {0xbb, 0xd, 0x9, '\x00', 0x4}, {0x6, 0x5, 0x81, '\x00', 0x1}, {0x6, 0x3, 0x4, '\x00', 0x8}, {0x4, 0x7, 0x5, '\x00', 0x71}, {0x50, 0x3, 0x4, '\x00', 0x9}, {0x51, 0x0, 0x1, '\x00', 0x6}, {0xc0, 0x6, 0x9}, {0x1, 0x4, 0x2, '\x00', 0xd5}]}}) 230.927268ms ago: executing program 4 (id=1705): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_le_set_cig_params={{0x7f}, {0x2}}}}, 0x9) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 203.843627ms ago: executing program 0 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0x1c2f, 0x0, 0x0, 0x0, 0x2], 0x0, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 153.273446ms ago: executing program 3 (id=1707): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800058004000880"], 0x2c}}, 0x200090c8) 152.457336ms ago: executing program 4 (id=1708): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 76.209916ms ago: executing program 1 (id=1709): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 57.061578ms ago: executing program 3 (id=1710): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 44.973685ms ago: executing program 2 (id=1711): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 159.573µs ago: executing program 1 (id=1712): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"3b04d785", 0x550, 0x5, 0x7f, 0x2, 0x2, "3260116f664e50532cd4a95668bee2", "47ae93b2", "bff5f45b", "84d5db06", ["ebddbb92d626aeb6806a02c4", "f9f524fab8a5e444d51540c5", "f3f037eb886ea274030ce0a5", "67302890d870fc4ae9ad4647"]}) 0s ago: executing program 4 (id=1713): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e24, @multicast2}}}, 0x88) kernel console output (not intermixed with test programs): [ 352.157125][ T5832] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 352.767081][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 352.898468][ T9390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.919'. [ 352.957126][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.015406][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.038975][ T5832] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 353.053181][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.207204][ T5832] usb 3-1: config 0 descriptor?? [ 353.248254][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 353.264793][ T30] audit: type=1400 audit(1744563863.305:646): avc: denied { relabelfrom } for pid=9391 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 353.284796][ T5874] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 353.407074][ T30] audit: type=1400 audit(1744563863.305:647): avc: denied { relabelto } for pid=9391 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 353.887760][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 353.939576][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 353.997050][ T5832] usb 3-1: USB disconnect, device number 26 [ 354.037060][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 354.047670][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8224, setting to 1024 [ 354.070814][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 354.116582][ T5874] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 354.150671][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.175541][ T5874] usb 5-1: Product: syz [ 354.265588][ T5874] usb 5-1: Manufacturer: syz [ 354.275750][ T5874] usb 5-1: SerialNumber: syz [ 354.296272][ T5874] usb 5-1: config 0 descriptor?? [ 354.303213][ T9390] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 354.317192][ T5874] hub 5-1:0.0: bad descriptor, ignoring hub [ 354.442140][ T5874] hub 5-1:0.0: probe with driver hub failed with error -5 [ 354.462284][ T5874] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 354.566189][ T5874] usb 5-1: USB disconnect, device number 30 [ 354.572165][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 354.933049][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 355.693615][ T30] audit: type=1400 audit(1744563865.735:648): avc: denied { append } for pid=9428 comm="syz.0.933" name="vsock" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.137131][ T30] audit: type=1400 audit(1744563866.055:649): avc: denied { create } for pid=9428 comm="syz.0.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.201077][ T30] audit: type=1400 audit(1744563866.055:650): avc: denied { connect } for pid=9428 comm="syz.0.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.250368][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 356.278821][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 356.519816][ T9441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.936'. [ 357.186991][ T5874] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 357.315131][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 357.347336][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 357.356050][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 357.373005][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.402687][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.413445][ T5874] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 357.427944][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.466769][ T5874] usb 4-1: config 0 descriptor?? [ 357.794178][ T9461] syz.1.941 uses obsolete (PF_INET,SOCK_PACKET) [ 358.117419][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 358.238599][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 358.269453][ T5874] usb 4-1: USB disconnect, device number 26 [ 358.474891][ T30] audit: type=1400 audit(1744563868.515:651): avc: denied { read write } for pid=9465 comm="syz.2.944" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 358.539532][ T30] audit: type=1400 audit(1744563868.515:652): avc: denied { open } for pid=9465 comm="syz.2.944" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 358.854394][ T30] audit: type=1400 audit(1744563868.835:653): avc: denied { read } for pid=9465 comm="syz.2.944" path="socket:[22271]" dev="sockfs" ino=22271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 359.930026][ T30] audit: type=1400 audit(1744563869.975:654): avc: denied { write } for pid=9481 comm="syz.2.949" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 361.142394][ T30] audit: type=1400 audit(1744563871.185:655): avc: denied { name_bind } for pid=9488 comm="syz.1.951" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 361.288943][ T9501] lo speed is unknown, defaulting to 1000 [ 362.231807][ T9513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.957'. [ 364.230066][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.967'. [ 364.256108][ T9545] Unknown options in mask 5 [ 364.562096][ T9543] lo speed is unknown, defaulting to 1000 [ 364.757274][ T5136] Bluetooth: hci5: command 0xfc11 tx timeout [ 364.757474][ T5822] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 364.876186][ T9553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.964826][ T9555] kvm: pic: single mode not supported [ 364.964893][ T9555] picdev_read: 17 callbacks suppressed [ 364.964908][ T9555] kvm: pic: non byte read [ 365.004751][ T9555] kvm: pic: non byte read [ 365.009998][ T9555] kvm: pic: non byte read [ 365.015475][ T9555] kvm: pic: non byte read [ 365.022185][ T9555] kvm: pic: non byte read [ 365.026757][ T9555] kvm: pic: level sensitive irq not supported [ 365.026809][ T9555] kvm: pic: non byte read [ 365.040212][ T9555] kvm: pic: non byte read [ 365.044928][ T9555] kvm: pic: non byte read [ 365.051778][ T9555] kvm: pic: non byte read [ 365.056686][ T9555] kvm: pic: non byte read [ 365.067887][ T9555] kvm: pic: single mode not supported [ 365.070388][ T9555] kvm: pic: single mode not supported [ 365.077132][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 365.092023][ T9555] kvm: pic: single mode not supported [ 365.092041][ T9555] kvm: pic: level sensitive irq not supported [ 365.098175][ T9555] kvm: pic: level sensitive irq not supported [ 365.106179][ T9555] kvm: pic: single mode not supported [ 365.125777][ T9555] kvm: pic: single mode not supported [ 365.152735][ T9555] kvm: pic: level sensitive irq not supported [ 365.167985][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 365.487074][ T9573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.976'. [ 366.067609][ T9591] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.225209][ T9594] netlink: 60 bytes leftover after parsing attributes in process `syz.3.983'. [ 366.707192][ T5874] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 366.826352][ T9600] xt_CONNSECMARK: invalid mode: 3 [ 366.860070][ T9602] fuse: Unknown parameter 'fdlNeXW' [ 366.870386][ T9602] trusted_key: encrypted_key: keyword 'loadTwyKs' not recognized [ 366.927071][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 366.940618][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.967124][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.982680][ T5874] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 366.992474][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.014670][ T5874] usb 4-1: config 0 descriptor?? [ 367.133683][ T9606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.227448][ T30] audit: type=1400 audit(1744563877.265:656): avc: denied { setopt } for pid=9610 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 367.394087][ T30] audit: type=1400 audit(1744563877.435:657): avc: denied { write } for pid=9615 comm="syz.2.991" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 367.395824][ T9616] FAULT_INJECTION: forcing a failure. [ 367.395824][ T9616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.430730][ T9616] CPU: 0 UID: 0 PID: 9616 Comm: syz.2.991 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 367.430745][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.430752][ T9616] Call Trace: [ 367.430755][ T9616] [ 367.430759][ T9616] dump_stack_lvl+0x16c/0x1f0 [ 367.430780][ T9616] should_fail_ex+0x512/0x640 [ 367.430793][ T9616] _copy_from_iter+0x2a4/0x15b0 [ 367.430808][ T9616] ? __pfx__copy_from_iter+0x10/0x10 [ 367.430819][ T9616] ? avc_has_perm_noaudit+0x149/0x3b0 [ 367.430836][ T9616] ? sock_has_perm+0x259/0x2f0 [ 367.430848][ T9616] ? __pfx_sock_has_perm+0x10/0x10 [ 367.430861][ T9616] hci_sock_sendmsg+0x46d/0x25e0 [ 367.430875][ T9616] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 367.430890][ T9616] sock_write_iter+0x4fc/0x5b0 [ 367.430907][ T9616] ? __pfx_sock_write_iter+0x10/0x10 [ 367.430927][ T9616] ? bpf_lsm_file_permission+0x9/0x10 [ 367.430943][ T9616] ? security_file_permission+0x71/0x210 [ 367.430958][ T9616] ? rw_verify_area+0xcf/0x680 [ 367.430974][ T9616] vfs_write+0x5ba/0x1180 [ 367.430983][ T9616] ? __pfx_sock_write_iter+0x10/0x10 [ 367.431000][ T9616] ? __pfx_vfs_write+0x10/0x10 [ 367.431008][ T9616] ? find_held_lock+0x2b/0x80 [ 367.431030][ T9616] ksys_write+0x205/0x240 [ 367.431038][ T9616] ? __pfx_ksys_write+0x10/0x10 [ 367.431046][ T9616] ? rcu_is_watching+0x12/0xc0 [ 367.431063][ T9616] do_syscall_64+0xcd/0x260 [ 367.431079][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.431090][ T9616] RIP: 0033:0x7f9615b8d169 [ 367.431099][ T9616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.431109][ T9616] RSP: 002b:00007f9616a2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.431119][ T9616] RAX: ffffffffffffffda RBX: 00007f9615da5fa0 RCX: 00007f9615b8d169 [ 367.431125][ T9616] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000009 [ 367.431131][ T9616] RBP: 00007f9616a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 367.431137][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.431143][ T9616] R13: 0000000000000000 R14: 00007f9615da5fa0 R15: 00007fffbff93c78 [ 367.431155][ T9616] [ 367.436369][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 367.703423][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 367.719922][ T5874] usb 4-1: USB disconnect, device number 27 [ 367.826629][ T30] audit: type=1400 audit(1744563877.865:658): avc: denied { create } for pid=9622 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 367.960493][ T30] audit: type=1400 audit(1744563878.005:659): avc: denied { write } for pid=9622 comm="syz.2.994" path="socket:[22869]" dev="sockfs" ino=22869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 369.772299][ T9641] overlayfs: failed to resolve './file1': -2 [ 369.963785][ T30] audit: type=1400 audit(1744563879.995:660): avc: denied { append } for pid=9648 comm="syz.4.1001" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.420741][ T9660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.619423][ T9667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.668735][ T9672] Unknown options in mask 5 [ 370.748990][ T9673] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1007'. [ 370.758248][ T9673] netlink: 'syz.3.1007': attribute type 5 has an invalid length. [ 370.766118][ T9673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1007'. [ 370.805754][ T9669] lo speed is unknown, defaulting to 1000 [ 372.741370][ T5822] Bluetooth: hci4: unexpected event for opcode 0x204e [ 372.951713][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 372.961399][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 372.990650][ T972] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 373.030397][ T5196] udevd[5196]: worker [5827] terminated by signal 33 (Unknown signal 33) [ 373.042526][ T5196] udevd[5196]: worker [5827] failed while handling '/devices/virtual/block/loop3' [ 373.085423][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 373.141159][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 373.256604][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.273363][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 373.288198][ T972] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.300269][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.790079][ T972] usb 3-1: config 0 descriptor?? [ 373.810236][ T972] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 373.862028][ T30] audit: type=1400 audit(1744563883.905:661): avc: denied { read } for pid=9709 comm="syz.0.1019" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 373.909613][ T30] audit: type=1400 audit(1744563883.905:662): avc: denied { open } for pid=9709 comm="syz.0.1019" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 373.963897][ T30] audit: type=1400 audit(1744563883.935:663): avc: denied { read } for pid=9709 comm="syz.0.1019" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 373.964968][ T972] kernel write not supported for file /input/event2 (pid: 972 comm: kworker/1:2) [ 373.992242][ T30] audit: type=1400 audit(1744563883.935:664): avc: denied { open } for pid=9709 comm="syz.0.1019" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 374.020884][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.029857][ T30] audit: type=1400 audit(1744563884.005:665): avc: denied { write } for pid=9709 comm="syz.0.1019" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 374.704819][ T9713] ima: Can not allocate md4 (reason: -2) [ 374.719620][ T30] audit: type=1800 audit(1744563884.765:666): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1020" name="/" dev="fuse" ino=1 res=0 errno=0 [ 374.739760][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.296198][ T9729] Unknown options in mask 5 [ 375.383733][ T9730] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1024'. [ 375.397369][ T9730] netlink: 'syz.3.1024': attribute type 5 has an invalid length. [ 375.405224][ T9730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1024'. [ 375.747385][ T975] usb 3-1: USB disconnect, device number 27 [ 375.861882][ T5835] Bluetooth: hci2: unexpected event for opcode 0x204e [ 376.073370][ T6648] Bluetooth: hci6: Frame reassembly failed (-84) [ 376.256297][ T9752] veth0_vlan: left promiscuous mode [ 376.564551][ T9752] veth0_vlan: entered promiscuous mode [ 377.087287][ T5822] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 377.280529][ T9754] lo speed is unknown, defaulting to 1000 [ 377.917012][ T975] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 378.117094][ T5835] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 378.124684][ T5822] Bluetooth: hci6: command 0xfc11 tx timeout [ 378.140664][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.275941][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.319688][ T975] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 378.352694][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.398847][ T975] usb 4-1: config 0 descriptor?? [ 378.452300][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.458745][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.209081][ T975] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 379.254561][ T9786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.297457][ T975] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 379.307321][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.316110][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.327906][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.339857][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.355479][ T975] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 379.478062][ T30] audit: type=1400 audit(1744563889.525:667): avc: denied { bind } for pid=9794 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.504052][ T30] audit: type=1400 audit(1744563889.525:668): avc: denied { node_bind } for pid=9794 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 379.539845][ T972] usb 4-1: USB disconnect, device number 28 [ 379.564070][ T972] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 380.361457][ T9806] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1051'. [ 380.371437][ T9806] netlink: 'syz.2.1051': attribute type 5 has an invalid length. [ 380.379421][ T9806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1051'. [ 380.887048][ T9817] fuse: Unknown parameter '0x0000000000000005' [ 381.617218][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'. [ 382.209257][ T972] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 382.606670][ T5923] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 382.768775][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.788630][ T972] usb 3-1: Using ep0 maxpacket: 32 [ 382.903845][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.914567][ T5923] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 382.926443][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8224, setting to 1024 [ 382.937829][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.946952][ T972] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 382.965399][ T5923] usb 4-1: config 0 descriptor?? [ 382.976365][ T972] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 382.990802][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.000042][ T972] usb 3-1: Product: syz [ 383.004767][ T972] usb 3-1: Manufacturer: syz [ 383.010933][ T972] usb 3-1: SerialNumber: syz [ 383.016474][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 383.028854][ T972] usb 3-1: config 0 descriptor?? [ 383.034399][ T9821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.045686][ T972] hub 3-1:0.0: bad descriptor, ignoring hub [ 383.059398][ T972] hub 3-1:0.0: probe with driver hub failed with error -5 [ 383.073351][ T972] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 383.083059][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 383.163996][ T9862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1068'. [ 383.547104][ T975] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 383.718000][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 383.727805][ T9866] Unknown options in mask 5 [ 383.733703][ T5916] usb 3-1: USB disconnect, device number 28 [ 383.740191][ T5923] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 383.757069][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 383.782755][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8224, setting to 1024 [ 383.813217][ T975] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 383.839225][ T5923] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected [ 383.845479][ T975] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 383.866521][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.885050][ T975] usb 5-1: Product: syz [ 383.897233][ T975] usb 5-1: Manufacturer: syz [ 383.904284][ T975] usb 5-1: SerialNumber: syz [ 383.928520][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.943866][ T975] usb 5-1: config 0 descriptor?? [ 383.950566][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.987738][ T5923] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 384.007667][ T9862] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 384.016573][ T975] hub 5-1:0.0: bad descriptor, ignoring hub [ 384.038089][ T975] hub 5-1:0.0: probe with driver hub failed with error -5 [ 384.511243][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.534106][ T975] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 384.547874][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.582160][ T5835] Bluetooth: hci4: unexpected event for opcode 0x204e [ 384.586033][ T975] usb 5-1: USB disconnect, device number 31 [ 384.589063][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 384.629240][ T5874] usb 4-1: USB disconnect, device number 29 [ 384.646257][ T5874] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected [ 384.891817][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 386.285951][ T9905] Unknown options in mask 5 [ 386.360977][ T9908] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1080'. [ 386.380678][ T9908] netlink: 'syz.3.1080': attribute type 5 has an invalid length. [ 386.388819][ T9908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1080'. [ 387.125743][ T5835] Bluetooth: hci2: unexpected event 0x03 length: 31 > 11 [ 388.457261][ T30] audit: type=1400 audit(1744563898.495:669): avc: denied { ioctl } for pid=9929 comm="syz.2.1087" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 389.287038][ T5916] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 389.456995][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 389.463815][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.483943][ T5916] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 389.497261][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.521136][ T5916] usb 5-1: config 0 descriptor?? [ 389.737099][ T975] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 390.118382][ T5916] redragon 0003:0C45:760B.0019: item fetching failed at offset 2/69 [ 390.159074][ T5916] redragon 0003:0C45:760B.0019: probe with driver redragon failed with error -22 [ 390.277066][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 390.284559][ T975] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 390.292863][ T975] usb 3-1: config 0 has no interface number 0 [ 390.300023][ T975] usb 3-1: config 0 interface 244 has no altsetting 0 [ 390.766409][ T9964] veth0_vlan: left promiscuous mode [ 390.775885][ T9964] veth0_vlan: entered promiscuous mode [ 390.853548][ T9963] lo speed is unknown, defaulting to 1000 [ 391.094344][ T975] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 391.143315][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.143341][ T975] usb 3-1: Product: syz [ 391.143355][ T975] usb 3-1: Manufacturer: syz [ 391.143368][ T975] usb 3-1: SerialNumber: syz [ 391.146982][ T5874] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 391.148237][ T975] usb 3-1: config 0 descriptor?? [ 391.154099][ T975] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 391.312679][ T9971] vlan2: entered promiscuous mode [ 391.320850][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'. [ 391.329547][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 391.332046][ T9971] vlan2: entered allmulticast mode [ 391.343153][ T9971] hsr_slave_1: entered allmulticast mode [ 391.350262][ T5874] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 391.358105][ T5874] usb 4-1: can't read configurations, error -61 [ 391.399077][ T975] snd_usb_toneport 3-1:0.244: cannot get proper max packet size [ 391.406796][ T30] audit: type=1400 audit(1744563901.425:670): avc: denied { lock } for pid=9947 comm="syz.2.1093" path="socket:[24034]" dev="sockfs" ino=24034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 391.436684][ T975] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 391.458689][ T975] snd_usb_toneport 3-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 391.496978][ T5874] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 391.757648][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 391.777777][ T5874] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 391.786123][ T5874] usb 4-1: can't read configurations, error -61 [ 391.793064][ T5874] usb usb4-port1: attempt power cycle [ 391.807867][ T975] usb 5-1: USB disconnect, device number 32 [ 392.136996][ T5874] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 392.157496][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 392.164921][ T5874] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 392.173503][ T5874] usb 4-1: can't read configurations, error -61 [ 392.327047][ T5874] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 392.367694][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 392.378736][ T5874] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 392.397176][ T5874] usb 4-1: can't read configurations, error -61 [ 392.413995][ T5874] usb usb4-port1: unable to enumerate USB device [ 392.873849][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 392.885132][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 393.888233][ T975] usb 3-1: USB disconnect, device number 29 [ 395.333626][T10023] bond0: entered promiscuous mode [ 395.344946][T10023] bond_slave_0: entered promiscuous mode [ 395.357739][T10023] bond_slave_1: entered promiscuous mode [ 395.365102][T10023] batadv0: entered promiscuous mode [ 395.377995][T10023] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 395.378154][ T30] audit: type=1400 audit(1744563905.415:671): avc: denied { mount } for pid=10024 comm="syz.3.1117" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 395.459301][ T5835] Bluetooth: hci1: unexpected event for opcode 0x204e [ 395.487161][ T30] audit: type=1400 audit(1744563905.515:672): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 395.536975][ T975] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 395.577531][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 396.043714][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 396.055085][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.067830][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.109082][ T975] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 396.135849][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.189631][ T975] usb 3-1: config 0 descriptor?? [ 396.561167][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 396.604033][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 396.728637][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 396.734714][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 396.747317][ T975] usb 3-1: USB disconnect, device number 30 [ 397.034860][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 397.547502][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 397.921135][ T30] audit: type=1400 audit(1744563907.965:673): avc: denied { listen } for pid=10062 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 397.946281][ T30] audit: type=1400 audit(1744563907.965:674): avc: denied { accept } for pid=10062 comm="syz.4.1128" lport=48951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 398.099528][T10069] veth0_vlan: left promiscuous mode [ 398.106370][T10069] veth0_vlan: entered promiscuous mode [ 398.135199][T10069] lo speed is unknown, defaulting to 1000 [ 399.651755][ T5916] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 399.874264][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.000031][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.017413][ T5916] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 400.033061][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.122793][ T5916] usb 3-1: config 0 descriptor?? [ 400.799296][ T5916] hid-steam 0003:28DE:1142.001A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 400.986061][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.009848][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.116436][ T5916] hid-steam 0003:28DE:1142.001A: Steam wireless receiver connected [ 401.173940][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 401.191165][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.207896][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 401.269864][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.335383][ T5916] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 401.448026][ T5916] usb 3-1: USB disconnect, device number 31 [ 401.501387][ T5916] hid-steam 0003:28DE:1142.001A: Steam wireless receiver disconnected [ 401.809265][T10120] veth0_vlan: left promiscuous mode [ 401.815279][T10120] veth0_vlan: entered promiscuous mode [ 401.831823][T10118] lo speed is unknown, defaulting to 1000 [ 401.951596][T10122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1144'. [ 402.297315][ T975] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 402.976973][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 402.994093][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8224, setting to 1024 [ 403.019669][ T975] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 403.170892][ T975] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 403.597991][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.606103][ T975] usb 5-1: Product: syz [ 403.610321][ T975] usb 5-1: Manufacturer: syz [ 403.614920][ T975] usb 5-1: SerialNumber: syz [ 403.634632][ T975] usb 5-1: config 0 descriptor?? [ 403.640373][T10122] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 403.649745][ T975] hub 5-1:0.0: bad descriptor, ignoring hub [ 403.655726][ T975] hub 5-1:0.0: probe with driver hub failed with error -5 [ 403.681280][ T975] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 403.694682][ T5835] Bluetooth: hci2: unexpected event for opcode 0x204e [ 403.798532][T10142] overlayfs: failed to resolve './file1': -2 [ 404.184645][ T975] usb 5-1: USB disconnect, device number 33 [ 404.190738][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 404.494155][ T30] audit: type=1400 audit(1744563914.535:675): avc: denied { connect } for pid=10150 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.520952][ T30] audit: type=1400 audit(1744563914.565:676): avc: denied { mounton } for pid=10159 comm="syz.3.1155" path="/proc/781/task" dev="proc" ino=24411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 404.543774][ T30] audit: type=1400 audit(1744563914.565:677): avc: denied { mount } for pid=10159 comm="syz.3.1155" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 404.998194][ T5874] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 405.171173][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.182476][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.192599][ T5874] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 405.201858][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.213499][ T5874] usb 5-1: config 0 descriptor?? [ 405.336074][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1159'. [ 405.628711][ T5874] hid-steam 0003:28DE:1142.001C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 405.697547][ T5874] hid-steam 0003:28DE:1142.001C: Steam wireless receiver connected [ 405.711666][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 405.714001][ T5874] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 405.977089][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.994713][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.374336][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.422811][ T30] audit: type=1400 audit(1744563916.465:678): avc: denied { bind } for pid=10189 comm="syz.2.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 406.423014][T10190] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 406.460876][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.502487][ T30] audit: type=1400 audit(1744563916.545:679): avc: denied { setopt } for pid=10189 comm="syz.2.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 406.707738][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1166'. [ 406.885440][ T30] audit: type=1400 audit(1744563916.575:680): avc: denied { getopt } for pid=10189 comm="syz.2.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 407.671283][ T5923] usb 5-1: USB disconnect, device number 34 [ 407.967738][ T5923] hid-steam 0003:28DE:1142.001C: Steam wireless receiver disconnected [ 408.604256][ T5835] Bluetooth: hci3: connection err: -111 [ 409.331206][T10240] overlayfs: failed to resolve './file1': -2 [ 409.593437][T10241] veth0_vlan: left promiscuous mode [ 409.608474][T10241] veth0_vlan: entered promiscuous mode [ 409.717272][ T975] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 409.750750][T10245] lo speed is unknown, defaulting to 1000 [ 410.407069][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 410.459022][ T975] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 410.536086][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 410.547748][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14129, setting to 64 [ 410.562922][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.578535][ T975] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 410.599915][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.619679][ T975] usb 5-1: config 0 descriptor?? [ 410.696553][ T30] audit: type=1400 audit(1744563920.735:681): avc: denied { open } for pid=10255 comm="syz.0.1184" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.794649][ T30] audit: type=1400 audit(1744563920.805:682): avc: denied { ioctl } for pid=10255 comm="syz.0.1184" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.802541][ T5835] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 410.823062][ T30] audit: type=1400 audit(1744563920.835:683): avc: denied { write } for pid=10255 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 410.830243][T10260] 9pnet_fd: Insufficient options for proto=fd [ 410.831215][ T30] audit: type=1400 audit(1744563920.835:684): avc: denied { ioctl } for pid=10255 comm="syz.0.1184" path="socket:[24553]" dev="sockfs" ino=24553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 411.005155][ T30] audit: type=1400 audit(1744563920.875:685): avc: denied { mount } for pid=10258 comm="syz.1.1185" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 411.060897][ T30] audit: type=1400 audit(1744563920.875:686): avc: denied { remount } for pid=10258 comm="syz.1.1185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 412.073777][T10279] overlayfs: failed to clone upperpath [ 412.195253][ T5923] usb 5-1: USB disconnect, device number 35 [ 412.311573][T10287] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 413.225182][T10294] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 413.262516][T10294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 413.279676][T10301] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1196'. [ 413.347604][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 413.797077][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 414.241194][ T30] audit: type=1400 audit(1744563924.275:687): avc: denied { setopt } for pid=10312 comm="syz.3.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.407167][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 414.504928][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 415.555878][T10332] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.974918][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 416.677152][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 417.250570][ T186] Bluetooth: hci5: Frame reassembly failed (-84) [ 417.352378][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1215'. [ 417.598834][T10363] overlayfs: failed to clone upperpath [ 418.285644][T10371] veth0_vlan: left promiscuous mode [ 418.305622][T10371] veth0_vlan: entered promiscuous mode [ 418.892813][T10373] lo speed is unknown, defaulting to 1000 [ 419.553420][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout [ 419.560435][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 419.682871][ T30] audit: type=1400 audit(1744563929.725:688): avc: denied { read } for pid=10390 comm="syz.4.1224" path="socket:[25795]" dev="sockfs" ino=25795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.937223][ T5832] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 421.407143][ T5923] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 421.660800][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.672067][ T5923] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 421.682932][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.693049][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.708195][T10428] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 421.721776][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.807258][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 421.815410][ T5832] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 421.826128][ T5832] usb 5-1: config 154 has too many interfaces: 186, using maximum allowed: 32 [ 421.875401][ T5832] usb 5-1: config 154 has an invalid descriptor of length 47, skipping remainder of the config [ 422.092039][ T5832] usb 5-1: config 154 has 0 interfaces, different from the descriptor's value: 186 [ 422.200593][ T5832] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 422.203207][ T5923] usb 3-1: USB disconnect, device number 32 [ 422.249666][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.266382][ T5832] usb 5-1: Product: syz [ 422.283847][ T5832] usb 5-1: Manufacturer: syz [ 422.299446][ T5832] usb 5-1: SerialNumber: syz [ 422.308786][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.353319][T10439] overlayfs: failed to resolve './file0': -2 [ 422.432985][ T30] audit: type=1400 audit(1744563932.475:689): avc: denied { read } for pid=10442 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.492312][ T30] audit: type=1400 audit(1744563932.535:690): avc: denied { listen } for pid=10442 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 422.563082][ T30] audit: type=1400 audit(1744563932.605:691): avc: denied { read write } for pid=10408 comm="syz.4.1228" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 422.578431][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 422.596762][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:5 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 422.596788][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.596800][ T5835] Workqueue: hci3 hci_rx_work [ 422.596825][ T5835] Call Trace: [ 422.596831][ T5835] [ 422.596837][ T5835] dump_stack_lvl+0x16c/0x1f0 [ 422.596864][ T5835] sysfs_warn_dup+0x7f/0xa0 [ 422.596888][ T5835] sysfs_create_dir_ns+0x24b/0x2b0 [ 422.596907][ T5835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 422.596923][ T5835] ? find_held_lock+0x2b/0x80 [ 422.596950][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 422.596971][ T5835] kobject_add_internal+0x2c4/0x9b0 [ 422.597010][ T5835] kobject_add+0x16e/0x240 [ 422.597038][ T5835] ? __pfx_kobject_add+0x10/0x10 [ 422.597064][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 422.597083][ T5835] ? kobject_put+0xab/0x5a0 [ 422.597117][ T5835] device_add+0x288/0x1a70 [ 422.597136][ T5835] ? __pfx_dev_set_name+0x10/0x10 [ 422.597155][ T5835] ? __pfx_device_add+0x10/0x10 [ 422.597173][ T5835] ? mgmt_send_event_skb+0x2fb/0x460 [ 422.597198][ T5835] hci_conn_add_sysfs+0x17e/0x230 [ 422.597220][ T5835] le_conn_complete_evt+0x1075/0x1d70 [ 422.597245][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 422.597262][ T5835] ? hci_event_packet+0x43c/0x1190 [ 422.597286][ T5835] hci_le_conn_complete_evt+0x23c/0x370 [ 422.597310][ T5835] hci_le_meta_evt+0x2f3/0x5e0 [ 422.597328][ T5835] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 422.597350][ T5835] hci_event_packet+0x669/0x1190 [ 422.597367][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 422.597386][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 422.597405][ T5835] ? kcov_remote_start+0x3c9/0x6d0 [ 422.597422][ T5835] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.597451][ T5835] hci_rx_work+0x2c5/0x16b0 [ 422.597471][ T5835] ? rcu_is_watching+0x12/0xc0 [ 422.597497][ T5835] process_one_work+0x9cc/0x1b70 [ 422.597529][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 422.597556][ T5835] ? assign_work+0x1a0/0x250 [ 422.597577][ T5835] worker_thread+0x6c8/0xf10 [ 422.597610][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 422.597629][ T5835] kthread+0x3c2/0x780 [ 422.597648][ T5835] ? __pfx_kthread+0x10/0x10 [ 422.597664][ T5835] ? __pfx_kthread+0x10/0x10 [ 422.597680][ T5835] ? __pfx_kthread+0x10/0x10 [ 422.597696][ T5835] ? __pfx_kthread+0x10/0x10 [ 422.597713][ T5835] ? rcu_is_watching+0x12/0xc0 [ 422.597734][ T5835] ? __pfx_kthread+0x10/0x10 [ 422.597753][ T5835] ret_from_fork+0x45/0x80 [ 422.597772][ T5835] ? __pfx_kthread+0x10/0x10 [ 422.597790][ T5835] ret_from_fork_asm+0x1a/0x30 [ 422.597830][ T5835] [ 422.851825][ T5835] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 422.864188][ T5874] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 422.865903][ T5835] Bluetooth: hci3: failed to register connection device [ 422.889320][ T30] audit: type=1400 audit(1744563932.605:692): avc: denied { open } for pid=10408 comm="syz.4.1228" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 423.211374][ T5874] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 423.399635][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 423.717103][ T5874] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 423.825938][T10451] veth0_vlan: left promiscuous mode [ 423.853241][T10451] veth0_vlan: entered promiscuous mode [ 423.868928][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 423.890597][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8224, setting to 1024 [ 423.912431][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 423.945322][T10451] lo speed is unknown, defaulting to 1000 [ 423.994368][ T5874] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 424.007055][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.027061][ T5874] usb 3-1: Product: syz [ 424.035413][ T5874] usb 3-1: Manufacturer: syz [ 424.056440][ T5874] usb 3-1: SerialNumber: syz [ 424.079166][ T5874] usb 3-1: config 0 descriptor?? [ 424.098616][T10454] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 424.106795][ T5874] hub 3-1:0.0: bad descriptor, ignoring hub [ 424.120374][ T5874] hub 3-1:0.0: probe with driver hub failed with error -5 [ 424.150656][ T5874] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 424.421369][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 424.430578][ T5874] usb 3-1: USB disconnect, device number 33 [ 424.608728][ T5832] usb 5-1: USB disconnect, device number 36 [ 424.748887][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 424.850801][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 425.089452][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 425.284067][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 425.368540][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 426.169142][ T30] audit: type=1400 audit(1744563936.215:693): avc: denied { write } for pid=10485 comm="syz.3.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 426.196873][ T30] audit: type=1400 audit(1744563936.235:694): avc: denied { nlmsg_read } for pid=10485 comm="syz.3.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 426.437148][ T5874] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 426.628552][T10493] FAULT_INJECTION: forcing a failure. [ 426.628552][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.641709][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.4.1253 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 426.641733][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 426.641743][T10493] Call Trace: [ 426.641749][T10493] [ 426.641756][T10493] dump_stack_lvl+0x16c/0x1f0 [ 426.641783][T10493] should_fail_ex+0x512/0x640 [ 426.641805][T10493] _copy_to_user+0x32/0xd0 [ 426.641827][T10493] copy_to_sockptr_offset.constprop.0+0x129/0x150 [ 426.641846][T10493] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 426.641863][T10493] ? kfree+0x2b6/0x4d0 [ 426.641886][T10493] ? btf_new_fd+0x3f61/0x53a0 [ 426.641906][T10493] ? bpf_vlog_finalize+0x1ba/0x360 [ 426.641931][T10493] btf_new_fd+0x41ed/0x53a0 [ 426.641959][T10493] ? __pfx_btf_new_fd+0x10/0x10 [ 426.641977][T10493] ? security_capable+0x74/0x260 [ 426.641997][T10493] ? security_capable+0x7e/0x260 [ 426.642016][T10493] ? ns_capable+0xd7/0x110 [ 426.642039][T10493] __sys_bpf+0x1adb/0x4d80 [ 426.642061][T10493] ? rcu_is_watching+0x12/0xc0 [ 426.642083][T10493] ? __pfx___sys_bpf+0x10/0x10 [ 426.642102][T10493] ? __schedule+0x1186/0x5de0 [ 426.642121][T10493] ? ksys_write+0x190/0x240 [ 426.642156][T10493] ? fput+0x70/0xf0 [ 426.642174][T10493] ? ksys_write+0x1b9/0x240 [ 426.642194][T10493] __x64_sys_bpf+0x78/0xc0 [ 426.642215][T10493] ? lockdep_hardirqs_on+0x7c/0x110 [ 426.642237][T10493] do_syscall_64+0xcd/0x260 [ 426.642261][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.642277][T10493] RIP: 0033:0x7f724818d169 [ 426.642292][T10493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.642308][T10493] RSP: 002b:00007f7248fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.642325][T10493] RAX: ffffffffffffffda RBX: 00007f72483a6160 RCX: 00007f724818d169 [ 426.642336][T10493] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000012 [ 426.642346][T10493] RBP: 00007f7248fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 426.642355][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.642365][T10493] R13: 0000000000000000 R14: 00007f72483a6160 R15: 00007ffed310be48 [ 426.642388][T10493] [ 426.937821][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 426.951006][ T5874] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 426.960171][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.968291][ T5874] usb 4-1: Product: syz [ 426.972467][ T5874] usb 4-1: Manufacturer: syz [ 426.977087][ T5874] usb 4-1: SerialNumber: syz [ 426.983023][ T5874] usb 4-1: config 0 descriptor?? [ 427.110926][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 428.045272][ T5874] gspca_sonixj: reg_r err -110 [ 428.076931][ T5874] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 428.151042][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 428.379045][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 428.392821][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1257'. [ 428.428669][T10499] overlayfs: failed to resolve './file1': -2 [ 428.717754][T10517] veth0_vlan: left promiscuous mode [ 428.725649][T10517] veth0_vlan: entered promiscuous mode [ 428.760489][T10517] lo speed is unknown, defaulting to 1000 [ 428.808154][ T5923] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 429.017178][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 429.034747][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 429.074455][ T5923] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 429.084247][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.092646][ T5923] usb 5-1: Product: syz [ 429.097849][ T5923] usb 5-1: Manufacturer: syz [ 429.103455][ T5923] usb 5-1: SerialNumber: syz [ 429.113842][ T5923] usb 5-1: config 0 descriptor?? [ 429.124747][T10505] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 429.132821][ T5923] hub 5-1:0.0: bad descriptor, ignoring hub [ 429.139058][ T5923] hub 5-1:0.0: probe with driver hub failed with error -5 [ 429.150780][ T5923] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 429.220604][ T5874] usb 4-1: USB disconnect, device number 34 [ 429.696787][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.721958][ T10] usb 5-1: USB disconnect, device number 37 [ 429.722027][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 429.749777][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.840427][T10529] overlayfs: failed to resolve './file0': -2 [ 430.185649][ T5874] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 430.905894][ T5874] usb 4-1: device descriptor read/64, error -71 [ 431.050817][T10547] 9pnet_virtio: no channels available for device syz [ 431.327171][ T5874] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 431.457126][ T5874] usb 4-1: device descriptor read/64, error -71 [ 431.567208][ T5874] usb usb4-port1: attempt power cycle [ 431.597448][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 432.045293][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout [ 432.052367][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 432.240677][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 432.250240][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.258339][ T10] usb 3-1: Product: syz [ 432.262689][ T10] usb 3-1: Manufacturer: syz [ 432.267385][ T10] usb 3-1: SerialNumber: syz [ 432.282949][ T10] usb 3-1: config 0 descriptor?? [ 432.346989][ T5874] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 432.380807][ T5874] usb 4-1: device descriptor read/8, error -71 [ 435.178579][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 435.612224][ T10] usb 3-1: USB disconnect, device number 34 [ 435.636582][T10604] xt_NFQUEUE: number of total queues is 0 [ 436.094863][T10615] veth0_vlan: left promiscuous mode [ 436.101646][T10615] veth0_vlan: entered promiscuous mode [ 436.128772][T10615] lo speed is unknown, defaulting to 1000 [ 436.529859][ T5835] Bluetooth: hci2: unexpected event for opcode 0x204e [ 437.083871][T10632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1290'. [ 437.093106][T10632] netlink: 'syz.4.1290': attribute type 5 has an invalid length. [ 437.101464][T10632] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1290'. [ 437.348294][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 437.357460][T10636] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1293'. [ 437.397866][T10638] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1293'. [ 437.574973][ T30] audit: type=1400 audit(1744563947.615:695): avc: denied { create } for pid=10654 comm="syz.0.1297" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 437.607496][T10653] lo speed is unknown, defaulting to 1000 [ 437.621427][ T30] audit: type=1400 audit(1744563947.645:696): avc: denied { write } for pid=10654 comm="syz.0.1297" name="file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 437.709578][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 437.922116][ T30] audit: type=1400 audit(1744563947.645:697): avc: denied { open } for pid=10654 comm="syz.0.1297" path="/251/file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 438.065774][ T10] usb 3-1: config index 0 descriptor too short (expected 8228, got 36) [ 438.074173][ T30] audit: type=1400 audit(1744563947.645:698): avc: denied { ioctl } for pid=10654 comm="syz.0.1297" path="/251/file0" dev="tmpfs" ino=1345 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 438.075796][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.102436][ T30] audit: type=1400 audit(1744563947.735:699): avc: denied { unlink } for pid=5831 comm="syz-executor" name="file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 438.292901][T10670] veth0_vlan: left promiscuous mode [ 438.299668][T10670] veth0_vlan: entered promiscuous mode [ 438.327645][T10670] lo speed is unknown, defaulting to 1000 [ 438.956608][ T10] usb 3-1: config 0 has no interfaces? [ 438.962315][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.033788][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.070796][ T10] usb 3-1: config 0 descriptor?? [ 439.847686][ T10] usb 3-1: string descriptor 0 read error: -71 [ 439.862080][ T10] usb 3-1: USB disconnect, device number 35 [ 439.881677][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.888209][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.214857][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 441.232088][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 442.217680][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.270793][T10705] lo speed is unknown, defaulting to 1000 [ 442.278895][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.286325][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.339653][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.441404][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.449943][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.457739][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.465207][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.473132][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.481226][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.905651][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.913434][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.923720][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.932712][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.941718][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.949545][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.957335][ T5923] hid-generic C990:0003:007F.001F: unknown main item tag 0x0 [ 442.967791][ T5923] hid-generic C990:0003:007F.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 443.245320][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 443.596990][ T972] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 443.799550][ T972] usb 4-1: Using ep0 maxpacket: 8 [ 443.827352][ T972] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.886996][ T972] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 443.898922][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 443.910373][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 443.924896][ T972] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.945166][ T972] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 443.957683][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.965737][ T972] usb 4-1: Product: syz [ 443.970782][ T972] usb 4-1: Manufacturer: syz [ 443.975403][ T972] usb 4-1: SerialNumber: syz [ 443.995457][ T972] usb 4-1: config 0 descriptor?? [ 444.010103][ T972] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 444.031177][ C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 444.235551][ C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 444.394143][ T5923] usb 4-1: USB disconnect, device number 39 [ 444.554625][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 444.569942][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 444.733272][T10751] 9pnet_fd: Insufficient options for proto=fd [ 444.983187][ T30] audit: type=1400 audit(1744563954.965:700): avc: denied { append } for pid=10759 comm="syz.2.1331" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 445.006061][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.467757][ T30] audit: type=1400 audit(1744563956.475:701): avc: denied { map } for pid=10779 comm="syz.1.1337" path="socket:[27696]" dev="sockfs" ino=27696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 446.490820][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.548575][ T30] audit: type=1400 audit(1744563956.475:702): avc: denied { read } for pid=10779 comm="syz.1.1337" path="socket:[27696]" dev="sockfs" ino=27696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 446.572508][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.741105][T10789] sch_tbf: peakrate 1 is lower than or equals to rate 5 ! [ 446.749787][T10789] sch_tbf: peakrate 1 is lower than or equals to rate 5 ! [ 448.118886][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout [ 448.147436][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 448.358640][ T30] audit: type=1400 audit(1744563958.405:703): avc: denied { bind } for pid=10806 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 448.666865][ T5832] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 448.745036][T10824] lo speed is unknown, defaulting to 1000 [ 448.997064][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 449.004661][ T30] audit: type=1400 audit(1744563959.045:704): avc: denied { name_connect } for pid=10826 comm="syz.1.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 449.012590][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.036837][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.047545][ T5832] usb 3-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 449.236224][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.262322][ T5832] usb 3-1: config 0 descriptor?? [ 449.415893][T10842] xt_NFQUEUE: number of total queues is 0 [ 449.743787][ T5832] sony 0003:054C:0002.0020: unknown main item tag 0x0 [ 449.755293][ T5832] sony 0003:054C:0002.0020: hidraw0: USB HID v0.00 Device [HID 054c:0002] on usb-dummy_hcd.2-1/input0 [ 449.768371][ T5832] sony 0003:054C:0002.0020: failed to claim input [ 450.308366][ T10] usb 3-1: USB disconnect, device number 36 [ 450.352687][ T30] audit: type=1400 audit(1744563960.395:705): avc: denied { write } for pid=10856 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 450.386072][ T30] audit: type=1400 audit(1744563960.425:706): avc: denied { getopt } for pid=10856 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 451.123616][T10869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 451.135168][T10869] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 451.422431][ T30] audit: type=1400 audit(1744563961.115:707): avc: denied { mount } for pid=10858 comm="syz.4.1368" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 451.451056][ T30] audit: type=1400 audit(1744563961.165:708): avc: denied { unlink } for pid=10858 comm="syz.4.1368" name="#12" dev="tmpfs" ino=1454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 451.525508][ T30] audit: type=1400 audit(1744563961.565:709): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 451.595732][T10865] lo speed is unknown, defaulting to 1000 [ 451.697471][T10875] veth0_vlan: left promiscuous mode [ 451.708574][T10875] veth0_vlan: entered promiscuous mode [ 452.021524][T10875] lo speed is unknown, defaulting to 1000 [ 453.150815][ T30] audit: type=1400 audit(1744563963.195:710): avc: denied { create } for pid=10897 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 453.195982][ T30] audit: type=1400 audit(1744563963.225:711): avc: denied { bind } for pid=10897 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 453.215477][ T30] audit: type=1400 audit(1744563963.225:712): avc: denied { write } for pid=10897 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 453.338649][ T30] audit: type=1400 audit(1744563963.225:713): avc: denied { write } for pid=10897 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 453.970529][ T5832] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 454.269568][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 454.288604][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.309784][ T5832] usb 4-1: config 0 has no interfaces? [ 454.329658][ T5832] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 454.360380][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.376276][ T5832] usb 4-1: Product: syz [ 454.387880][ T5832] usb 4-1: Manufacturer: syz [ 454.392531][ T5832] usb 4-1: SerialNumber: syz [ 454.404889][ T5832] usb 4-1: config 0 descriptor?? [ 454.555514][T10921] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1386'. [ 454.606443][ T30] audit: type=1400 audit(1744563964.645:714): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 454.761155][T10924] Illegal XDP return value 1563394048 on prog (id 219) dev N/A, expect packet loss! [ 455.570186][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 455.570204][ T30] audit: type=1400 audit(1744563965.595:723): avc: denied { read } for pid=10928 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.627263][ T30] audit: type=1400 audit(1744563965.595:724): avc: denied { open } for pid=10928 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.653384][ T30] audit: type=1400 audit(1744563965.595:725): avc: denied { getattr } for pid=10928 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.825603][T10942] veth0_vlan: left promiscuous mode [ 455.832490][T10942] veth0_vlan: entered promiscuous mode [ 455.860610][T10942] lo speed is unknown, defaulting to 1000 [ 456.446387][ T5832] usb 4-1: USB disconnect, device number 40 [ 456.692466][ T30] audit: type=1400 audit(1744563966.735:726): avc: denied { write } for pid=10927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.719816][ T30] audit: type=1400 audit(1744563966.735:727): avc: denied { add_name } for pid=10927 comm="dhcpcd-run-hook" name="resolv.conf.wlan3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.163078][ T30] audit: type=1400 audit(1744563966.735:728): avc: denied { create } for pid=10927 comm="dhcpcd-run-hook" name="resolv.conf.wlan3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 457.185649][ T30] audit: type=1400 audit(1744563966.735:729): avc: denied { write } for pid=10927 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan3.link" dev="tmpfs" ino=5653 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 457.187718][ T972] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 457.220801][ T30] audit: type=1400 audit(1744563966.735:730): avc: denied { append } for pid=10927 comm="dhcpcd-run-hook" name="resolv.conf.wlan3.link" dev="tmpfs" ino=5653 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 457.323920][ T30] audit: type=1400 audit(1744563967.365:731): avc: denied { remove_name } for pid=10961 comm="rm" name="resolv.conf.wlan3.link" dev="tmpfs" ino=5653 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.367040][ T30] audit: type=1400 audit(1744563967.395:732): avc: denied { unlink } for pid=10961 comm="rm" name="resolv.conf.wlan3.link" dev="tmpfs" ino=5653 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 457.392220][T10960] netlink: zone id is out of range [ 457.400655][T10960] netlink: zone id is out of range [ 457.410870][T10960] netlink: zone id is out of range [ 457.416010][T10960] netlink: zone id is out of range [ 457.445212][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.449954][T10960] netlink: zone id is out of range [ 457.528803][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.535873][T10960] netlink: zone id is out of range [ 457.593252][ T972] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 457.726674][T10960] netlink: zone id is out of range [ 457.751800][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.755695][T10960] netlink: zone id is out of range [ 457.777153][T10960] netlink: set zone limit has 8 unknown bytes [ 457.929863][ T972] usb 5-1: config 0 descriptor?? [ 458.187223][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'. [ 458.297095][ T5832] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 458.433479][ T972] hid-steam 0003:28DE:1142.0021: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 458.448487][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 458.461448][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8224, setting to 1024 [ 458.478529][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 458.494917][ T5832] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 458.504574][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.518884][ T972] hid-steam 0003:28DE:1142.0021: Steam wireless receiver connected [ 458.526987][ T5832] usb 3-1: Product: syz [ 458.527008][ T5832] usb 3-1: Manufacturer: syz [ 458.527021][ T5832] usb 3-1: SerialNumber: syz [ 458.547062][ T5832] usb 3-1: config 0 descriptor?? [ 458.559018][T10973] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 458.563830][ T972] hid-steam 0003:28DE:1142.0022: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 458.595960][ T5832] hub 3-1:0.0: bad descriptor, ignoring hub [ 458.618395][ T5832] hub 3-1:0.0: probe with driver hub failed with error -5 [ 458.637487][ T5832] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 458.733499][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.775897][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.986226][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.001391][ T972] usb 3-1: USB disconnect, device number 37 [ 459.001507][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 459.007747][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.633054][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 459.722632][ T5871] usb 5-1: reset high-speed USB device number 38 using dummy_hcd [ 459.921520][T11007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1401'. [ 460.689165][ T972] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 460.829702][ T5923] usb 5-1: USB disconnect, device number 38 [ 460.848593][ T5923] hid-steam 0003:28DE:1142.0021: Steam wireless receiver disconnected [ 460.986286][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 461.267114][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 461.410119][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 461.425880][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 461.449593][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 461.954220][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 461.998330][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 462.056771][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 462.111998][ T972] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 462.121700][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.130221][ T972] usb 4-1: Product: syz [ 462.141336][ T972] usb 4-1: Manufacturer: syz [ 462.225549][ T972] usb 4-1: SerialNumber: syz [ 462.248251][ T972] usb 4-1: config 0 descriptor?? [ 462.265321][ T972] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 462.277797][ T972] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 462.483401][ T972] usb 4-1: USB disconnect, device number 41 [ 462.557228][ T975] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 462.745940][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.769671][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.812869][ T975] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 462.837382][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.856867][ T975] usb 3-1: config 0 descriptor?? [ 463.051583][T11077] netlink: 'syz.0.1414': attribute type 5 has an invalid length. [ 463.430834][T11084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1415'. [ 463.542778][ T975] hid-steam 0003:28DE:1142.0023: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 463.663570][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.682106][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.696135][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.705613][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.729200][ T975] hid-steam 0003:28DE:1142.0023: Steam wireless receiver connected [ 463.741871][ T975] hid-steam 0003:28DE:1142.0024: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 463.786981][ T5832] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 463.909660][ T5871] usb 3-1: USB disconnect, device number 38 [ 464.230411][ T5871] hid-steam 0003:28DE:1142.0023: Steam wireless receiver disconnected [ 464.289650][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 464.305890][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 464.444267][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 465.043633][ T5832] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 465.073437][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.095942][ T5832] usb 5-1: Product: syz [ 465.102407][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 465.123508][ T5832] usb 5-1: Manufacturer: syz [ 465.195351][ T5832] usb 5-1: SerialNumber: syz [ 465.310643][ T5832] usb 5-1: config 0 descriptor?? [ 465.490804][T11084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 465.531150][ T5832] hub 5-1:0.0: bad descriptor, ignoring hub [ 465.549476][ T5832] hub 5-1:0.0: probe with driver hub failed with error -5 [ 465.572948][ T5832] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 465.766099][ T5832] usb 5-1: USB disconnect, device number 39 [ 465.772196][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 466.209841][T11129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.289815][T11136] FAULT_INJECTION: forcing a failure. [ 466.289815][T11136] name failslab, interval 1, probability 0, space 0, times 0 [ 466.302701][T11136] CPU: 1 UID: 0 PID: 11136 Comm: syz.0.1430 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 466.302723][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 466.302733][T11136] Call Trace: [ 466.302739][T11136] [ 466.302745][T11136] dump_stack_lvl+0x16c/0x1f0 [ 466.302773][T11136] should_fail_ex+0x512/0x640 [ 466.302795][T11136] should_failslab+0xc2/0x120 [ 466.302814][T11136] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 466.302832][T11136] ? skb_clone+0x190/0x3f0 [ 466.302856][T11136] skb_clone+0x190/0x3f0 [ 466.302877][T11136] netlink_deliver_tap+0xabd/0xd30 [ 466.302905][T11136] netlink_unicast+0x5df/0x7f0 [ 466.302931][T11136] ? __pfx_netlink_unicast+0x10/0x10 [ 466.302960][T11136] netlink_sendmsg+0x8d1/0xdd0 [ 466.302986][T11136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.303016][T11136] ____sys_sendmsg+0xa95/0xc70 [ 466.303041][T11136] ? copy_msghdr_from_user+0x10a/0x160 [ 466.303061][T11136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.303096][T11136] ___sys_sendmsg+0x134/0x1d0 [ 466.303118][T11136] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.303169][T11136] __sys_sendmsg+0x16d/0x220 [ 466.303189][T11136] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.303216][T11136] ? rcu_is_watching+0x12/0xc0 [ 466.303244][T11136] do_syscall_64+0xcd/0x260 [ 466.303269][T11136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.303286][T11136] RIP: 0033:0x7f4e5d98d169 [ 466.303299][T11136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.303315][T11136] RSP: 002b:00007f4e5b7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.303331][T11136] RAX: ffffffffffffffda RBX: 00007f4e5dba5fa0 RCX: 00007f4e5d98d169 [ 466.303342][T11136] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 466.303352][T11136] RBP: 00007f4e5b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.303361][T11136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.303371][T11136] R13: 0000000000000000 R14: 00007f4e5dba5fa0 R15: 00007ffefbe3e718 [ 466.303393][T11136] [ 466.658095][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 467.048581][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 467.048611][ T30] audit: type=1400 audit(1744563977.085:738): avc: denied { create } for pid=11141 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 467.252469][ T5871] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 467.358382][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 467.439999][ T5871] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 467.449444][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.459741][ T5871] usb 5-1: Product: syz [ 467.464011][ T5871] usb 5-1: Manufacturer: syz [ 467.470093][ T5871] usb 5-1: SerialNumber: syz [ 467.485409][ T5871] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 467.667189][ T30] audit: type=1400 audit(1744563977.705:739): avc: denied { firmware_load } for pid=972 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 468.061262][ T972] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.405029][ T972] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 469.417062][ T30] audit: type=1400 audit(1744563979.455:740): avc: denied { map } for pid=11144 comm="syz.4.1434" path="socket:[28438]" dev="sockfs" ino=28438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 469.458139][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 469.477758][ T972] ath9k_htc: Failed to initialize the device [ 469.520529][ T972] usb 5-1: ath9k_htc: USB layer deinitialized [ 470.072158][T11172] serio: Serial port ttyS3 [ 471.081353][T11178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11178 comm=syz.0.1443 [ 471.101571][ T5832] usb 5-1: USB disconnect, device number 40 [ 471.118299][T11178] netlink: 'syz.0.1443': attribute type 1 has an invalid length. [ 471.169073][T11182] FAULT_INJECTION: forcing a failure. [ 471.169073][T11182] name failslab, interval 1, probability 0, space 0, times 0 [ 471.196298][T11178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.209030][T11182] CPU: 0 UID: 0 PID: 11182 Comm: syz.3.1444 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 471.209061][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.209072][T11182] Call Trace: [ 471.209078][T11182] [ 471.209084][T11182] dump_stack_lvl+0x16c/0x1f0 [ 471.209112][T11182] should_fail_ex+0x512/0x640 [ 471.209131][T11182] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 471.209154][T11182] should_failslab+0xc2/0x120 [ 471.209175][T11182] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 471.209194][T11182] ? __alloc_skb+0x2b2/0x380 [ 471.209218][T11182] __alloc_skb+0x2b2/0x380 [ 471.209239][T11182] ? __pfx___alloc_skb+0x10/0x10 [ 471.209258][T11182] ? ip_frag_init+0x2c0/0x350 [ 471.209283][T11182] ? sk_page_frag_refill+0x6c/0x300 [ 471.209303][T11182] __ip6_append_data+0x2bb6/0x4710 [ 471.209334][T11182] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 471.209368][T11182] ? __pfx___ip6_append_data+0x10/0x10 [ 471.209398][T11182] ip6_append_data+0x1bd/0x4c0 [ 471.209422][T11182] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 471.209449][T11182] udpv6_sendmsg+0xd66/0x3070 [ 471.209470][T11182] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 471.209499][T11182] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 471.209525][T11182] ? avc_has_perm+0x11a/0x1c0 [ 471.209569][T11182] ? __import_iovec+0x1c8/0x660 [ 471.209590][T11182] ? __might_fault+0xe3/0x190 [ 471.209606][T11182] ? __might_fault+0x13b/0x190 [ 471.209623][T11182] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 471.209643][T11182] ? inet6_sendmsg+0x105/0x140 [ 471.209661][T11182] inet6_sendmsg+0x105/0x140 [ 471.209681][T11182] ____sys_sendmsg+0x705/0xc70 [ 471.209708][T11182] ? copy_msghdr_from_user+0x10a/0x160 [ 471.209733][T11182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.209763][T11182] ? __pfx__kstrtoull+0x10/0x10 [ 471.209793][T11182] ___sys_sendmsg+0x134/0x1d0 [ 471.209817][T11182] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.209850][T11182] ? find_held_lock+0x2b/0x80 [ 471.209889][T11182] __sys_sendmmsg+0x200/0x420 [ 471.209914][T11182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 471.209944][T11182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.209979][T11182] ? fput+0x70/0xf0 [ 471.210000][T11182] ? ksys_write+0x1b9/0x240 [ 471.210015][T11182] ? __pfx_ksys_write+0x10/0x10 [ 471.210030][T11182] ? rcu_is_watching+0x12/0xc0 [ 471.210055][T11182] __x64_sys_sendmmsg+0x9c/0x100 [ 471.210076][T11182] ? lockdep_hardirqs_on+0x7c/0x110 [ 471.210098][T11182] do_syscall_64+0xcd/0x260 [ 471.210123][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.210140][T11182] RIP: 0033:0x7f7f5a18d169 [ 471.210155][T11182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.210172][T11182] RSP: 002b:00007f7f5af0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 471.210189][T11182] RAX: ffffffffffffffda RBX: 00007f7f5a3a5fa0 RCX: 00007f7f5a18d169 [ 471.210200][T11182] RDX: 0000000000000001 RSI: 0000200000006780 RDI: 0000000000000003 [ 471.210210][T11182] RBP: 00007f7f5af0e090 R08: 0000000000000000 R09: 0000000000000000 [ 471.210221][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.210231][T11182] R13: 0000000000000000 R14: 00007f7f5a3a5fa0 R15: 00007fffb155db38 [ 471.210254][T11182] [ 471.235164][T11183] bond1: (slave ip6gretap1): making interface the new active one [ 471.599167][T11183] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 471.997126][ T5832] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 472.017777][T11198] lo speed is unknown, defaulting to 1000 [ 472.167012][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 472.185820][ T5832] usb 3-1: not running at top speed; connect to a high speed hub [ 472.217746][ T5832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.237007][ T5832] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 472.269442][ T5832] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.296298][ T5832] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.315984][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.330284][ T5832] usb 3-1: Product: syz [ 472.339750][ T5832] usb 3-1: Manufacturer: syz [ 472.350611][ T5832] usb 3-1: SerialNumber: syz [ 473.187076][ T975] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 473.266551][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'. [ 473.357026][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 473.364061][ T975] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 473.374720][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 473.386260][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14129, setting to 64 [ 473.397565][ T975] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.411093][ T975] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 473.420296][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.430318][ T975] usb 4-1: config 0 descriptor?? [ 473.739719][ T5832] usb 3-1: USB disconnect, device number 39 [ 473.950705][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.247029][ T975] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 474.416950][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 474.423524][ T975] usb 5-1: config 1 has an invalid interface number: 193 but max is 1 [ 474.432390][ T975] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 474.441507][ T975] usb 5-1: config 1 has an invalid interface number: 73 but max is 1 [ 474.450028][ T975] usb 5-1: config 1 has no interface number 0 [ 474.456131][ T975] usb 5-1: config 1 has no interface number 1 [ 474.462353][ T975] usb 5-1: config 1 interface 193 altsetting 15 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 474.473503][ T975] usb 5-1: config 1 interface 193 altsetting 15 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 474.484628][ T975] usb 5-1: config 1 interface 193 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 474.495676][ T975] usb 5-1: config 1 interface 193 altsetting 15 endpoint 0x6 has an invalid bInterval 224, changing to 7 [ 474.506951][ T975] usb 5-1: config 1 interface 193 altsetting 15 bulk endpoint 0x3 has invalid maxpacket 8 [ 474.517042][ T975] usb 5-1: config 1 interface 193 altsetting 15 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 474.528202][ T975] usb 5-1: config 1 interface 193 altsetting 15 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 474.539336][ T975] usb 5-1: config 1 interface 193 altsetting 15 has a duplicate endpoint with address 0x3, skipping [ 474.550520][ T975] usb 5-1: config 1 interface 193 altsetting 15 endpoint 0xD has an invalid bInterval 127, changing to 7 [ 474.562618][ T975] usb 5-1: config 1 interface 193 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 474.573664][ T975] usb 5-1: config 1 interface 193 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 474.584530][ T975] usb 5-1: config 1 interface 193 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 474.595452][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x1, skipping [ 474.606574][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x1, skipping [ 474.617676][ T975] usb 5-1: config 1 interface 73 altsetting 242 has an invalid descriptor for endpoint zero, skipping [ 474.628914][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0xD, skipping [ 474.640607][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0xC, skipping [ 474.697315][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x1, skipping [ 474.715695][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x9, skipping [ 474.726728][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x2, skipping [ 474.744911][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x1, skipping [ 474.761560][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x8, skipping [ 474.775790][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x3, skipping [ 474.787745][ T975] usb 5-1: config 1 interface 73 altsetting 242 has an endpoint descriptor with address 0x79, changing to 0x9 [ 474.799942][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x9, skipping [ 474.811062][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0xD, skipping [ 474.822203][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x8, skipping [ 474.842868][ T975] usb 5-1: config 1 interface 73 altsetting 242 has a duplicate endpoint with address 0x9, skipping [ 475.086522][ T975] usb 5-1: config 1 interface 73 altsetting 242 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 475.140778][ T975] usb 5-1: config 1 interface 193 has no altsetting 0 [ 475.430816][ T975] usb 5-1: config 1 interface 73 has no altsetting 0 [ 475.452327][ T975] usb 5-1: Dual-Role OTG device on HNP port [ 475.462601][ T975] usb 5-1: New USB device found, idVendor=2040, idProduct=b763, bcdDevice=e1.38 [ 475.480017][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.492029][T11239] FAULT_INJECTION: forcing a failure. [ 475.492029][T11239] name failslab, interval 1, probability 0, space 0, times 0 [ 475.504868][ T975] usb 5-1: Product: Н [ 475.509461][ T975] usb 5-1: SerialNumber: 棝銈禯澍蝊躄꺂㎐㌟豼͢㖟뗊㱻篇왏䪩윝挂㷽㕆뼐쟠呀먣媃䥭띱ꡯ嬥儁荑螙룼﬎簯웥桵扵삽駴ઋ鄉瀗ꮸ햁[豨큧쫻 [ 475.527121][T11239] CPU: 1 UID: 0 PID: 11239 Comm: syz.0.1459 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 475.527145][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 475.527154][T11239] Call Trace: [ 475.527159][T11239] [ 475.527165][T11239] dump_stack_lvl+0x16c/0x1f0 [ 475.527190][T11239] should_fail_ex+0x512/0x640 [ 475.527206][T11239] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 475.527230][T11239] should_failslab+0xc2/0x120 [ 475.527247][T11239] __kmalloc_cache_noprof+0x6a/0x3e0 [ 475.527267][T11239] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.527286][T11239] ? alloc_fs_context+0x57/0x9c0 [ 475.527305][T11239] alloc_fs_context+0x57/0x9c0 [ 475.527324][T11239] __x64_sys_fsopen+0xeb/0x240 [ 475.527343][T11239] do_syscall_64+0xcd/0x260 [ 475.527364][T11239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.527379][T11239] RIP: 0033:0x7f4e5d98d169 [ 475.527391][T11239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.527405][T11239] RSP: 002b:00007f4e5b7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 475.527420][T11239] RAX: ffffffffffffffda RBX: 00007f4e5dba5fa0 RCX: 00007f4e5d98d169 [ 475.527429][T11239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 475.527438][T11239] RBP: 00007f4e5b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.527446][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.527454][T11239] R13: 0000000000000001 R14: 00007f4e5dba5fa0 R15: 00007ffefbe3e718 [ 475.527473][T11239] [ 475.688169][ T5832] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 475.714859][ T10] usb 4-1: USB disconnect, device number 42 [ 475.739505][T11220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.804797][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 475.973123][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 476.108122][ T5832] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 476.117491][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.156226][ T975] usb 5-1: Found UVC 0.00 device Н (2040:b763) [ 476.163564][ T5832] usb 3-1: config 0 descriptor?? [ 476.237554][ T975] usb 5-1: No valid video chain found. [ 476.260348][ T5832] cp210x 3-1:0.0: cp210x converter detected [ 476.299441][ T975] usb 5-1: USB disconnect, device number 41 [ 476.704536][ T5832] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 476.734221][T11265] veth0_vlan: left promiscuous mode [ 476.740854][T11265] veth0_vlan: entered promiscuous mode [ 476.763291][ T5832] cp210x 3-1:0.0: querying part number failed [ 476.795685][ T5832] usb 3-1: cp210x converter now attached to ttyUSB0 [ 476.832413][ T5832] usb 3-1: USB disconnect, device number 40 [ 476.834156][T11265] lo speed is unknown, defaulting to 1000 [ 476.871239][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.896685][ T5832] cp210x 3-1:0.0: device disconnected [ 477.911077][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 478.261479][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 478.605801][T11309] veth0_vlan: left promiscuous mode [ 478.613831][T11309] veth0_vlan: entered promiscuous mode [ 478.742216][T11309] lo speed is unknown, defaulting to 1000 [ 479.237031][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 479.877775][T11338] sp0: Synchronizing with TNC [ 479.903965][T11338] sp0: Found TNC [ 479.932100][T11338] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 479.947014][ T30] audit: type=1400 audit(1744563989.995:741): avc: denied { relabelto } for pid=11337 comm="syz.4.1485" name="289" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 479.981521][ T30] audit: type=1400 audit(1744563989.995:742): avc: denied { associate } for pid=11337 comm="syz.4.1485" name="289" dev="tmpfs" ino=1538 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 480.201466][ T30] audit: type=1400 audit(1744563990.245:743): avc: denied { shutdown } for pid=11337 comm="syz.4.1485" lport=50329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.306788][ T30] audit: type=1400 audit(1744563990.245:744): avc: denied { read } for pid=11337 comm="syz.4.1485" lport=50329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.461807][ T30] audit: type=1400 audit(1744563990.505:745): avc: denied { write } for pid=5818 comm="syz-executor" name="289" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 480.500391][ T30] audit: type=1400 audit(1744563990.505:746): avc: denied { remove_name } for pid=5818 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 480.557037][ T30] audit: type=1400 audit(1744563990.505:747): avc: denied { rmdir } for pid=5818 comm="syz-executor" name="289" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 481.489230][ T30] audit: type=1400 audit(1744563991.535:748): avc: denied { create } for pid=11357 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 481.508397][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'. [ 481.717192][ T30] audit: type=1400 audit(1744563991.755:749): avc: denied { ioctl } for pid=11362 comm="syz.1.1491" path="socket:[29824]" dev="sockfs" ino=29824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 481.937097][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 482.917541][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 482.963229][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 482.989650][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 483.048134][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.273653][ T10] usb 4-1: Product: syz [ 483.338213][ T10] usb 4-1: Manufacturer: syz [ 483.399836][ T10] usb 4-1: SerialNumber: syz [ 483.415054][ T10] usb 4-1: config 0 descriptor?? [ 483.433201][T11361] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.444242][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 483.470947][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 483.515669][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 483.531366][ T9] libceph: connect (1)[c::]:6789 error -101 [ 483.538518][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 483.552294][T11387] ceph: No mds server is up or the cluster is laggy [ 483.561344][T11392] lo speed is unknown, defaulting to 1000 [ 483.683402][T11397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1499'. [ 483.743886][ T10] usb 4-1: USB disconnect, device number 43 [ 483.749905][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 484.016122][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 484.026073][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 484.622748][T11411] lo speed is unknown, defaulting to 1000 [ 484.917392][T11413] lo speed is unknown, defaulting to 1000 [ 485.077515][T11421] FAULT_INJECTION: forcing a failure. [ 485.077515][T11421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.150701][T11421] CPU: 1 UID: 0 PID: 11421 Comm: syz.2.1505 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 485.150728][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 485.150739][T11421] Call Trace: [ 485.150744][T11421] [ 485.150752][T11421] dump_stack_lvl+0x16c/0x1f0 [ 485.150781][T11421] should_fail_ex+0x512/0x640 [ 485.150803][T11421] _copy_to_user+0x32/0xd0 [ 485.150823][T11421] simple_read_from_buffer+0xcb/0x170 [ 485.150849][T11421] proc_fail_nth_read+0x197/0x270 [ 485.150875][T11421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.150900][T11421] ? rw_verify_area+0xcf/0x680 [ 485.150922][T11421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.150947][T11421] vfs_read+0x1de/0xc70 [ 485.150973][T11421] ? __pfx___mutex_lock+0x10/0x10 [ 485.150992][T11421] ? __pfx_vfs_read+0x10/0x10 [ 485.151021][T11421] ? __fget_files+0x20e/0x3c0 [ 485.151043][T11421] ksys_read+0x12a/0x240 [ 485.151057][T11421] ? __pfx_ksys_read+0x10/0x10 [ 485.151070][T11421] ? rcu_is_watching+0x12/0xc0 [ 485.151095][T11421] do_syscall_64+0xcd/0x260 [ 485.151121][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.151137][T11421] RIP: 0033:0x7f9615b8bb7c [ 485.151151][T11421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 485.151166][T11421] RSP: 002b:00007f9616a2c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.151182][T11421] RAX: ffffffffffffffda RBX: 00007f9615da5fa0 RCX: 00007f9615b8bb7c [ 485.151192][T11421] RDX: 000000000000000f RSI: 00007f9616a2c0a0 RDI: 0000000000000004 [ 485.151201][T11421] RBP: 00007f9616a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.151211][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.151220][T11421] R13: 0000000000000000 R14: 00007f9615da5fa0 R15: 00007fffbff93c78 [ 485.151242][T11421] [ 486.677890][ T30] audit: type=1400 audit(1744564252.719:750): avc: denied { read } for pid=11445 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 487.007603][T11452] Cannot find add_set index 0 as target [ 487.498463][T11456] veth0_vlan: left promiscuous mode [ 487.504132][T11456] veth0_vlan: entered promiscuous mode [ 487.520691][T11456] lo speed is unknown, defaulting to 1000 [ 487.794757][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 487.813836][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 487.957624][T11466] pim6reg: entered allmulticast mode [ 488.134272][ T30] audit: type=1400 audit(1744564254.099:751): avc: denied { getopt } for pid=11464 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 490.103168][T11499] veth0_vlan: left promiscuous mode [ 490.109942][T11499] veth0_vlan: entered promiscuous mode [ 490.136083][T11499] lo speed is unknown, defaulting to 1000 [ 490.466748][T11505] lo: entered promiscuous mode [ 490.472693][T11505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.696946][ T5832] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 490.753072][ T30] audit: type=1400 audit(1744564256.799:752): avc: denied { map } for pid=11508 comm="syz.1.1530" path="socket:[31456]" dev="sockfs" ino=31456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 490.971977][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.982331][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 490.995828][ T5832] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 491.015559][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.262852][ T30] audit: type=1400 audit(1744564257.299:753): avc: denied { create } for pid=11512 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 491.420656][ T5832] usb 5-1: config 0 descriptor?? [ 491.651457][ T30] audit: type=1400 audit(1744564257.309:754): avc: denied { bind } for pid=11512 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 491.682830][ T5832] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 491.716586][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 491.927342][ T30] audit: type=1400 audit(1744564257.799:755): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 491.936727][ T5832] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 491.960433][ T5832] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 491.969186][ T5832] usb 5-1: media controller created [ 491.984479][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.288247][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 492.398860][ T5832] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 492.617401][ T5832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 492.775295][ T5832] dvb-usb: schedule remote query interval to 150 msecs. [ 492.790720][T11528] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 492.817290][ T5832] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 492.978183][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 492.984947][ T5832] dvb-usb: error while querying for an remote control event. [ 493.687115][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 493.706530][ T10] dvb-usb: error while querying for an remote control event. [ 493.879513][ T5832] usb 5-1: USB disconnect, device number 42 [ 493.984814][ T5832] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 494.401963][T11556] veth0_vlan: left promiscuous mode [ 494.409126][T11556] veth0_vlan: entered promiscuous mode [ 494.430871][T11554] lo speed is unknown, defaulting to 1000 [ 494.502659][T11557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1543'. [ 494.976444][T11567] xt_CT: No such helper "syz1" [ 494.989235][ T5832] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 495.497270][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 495.657090][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 495.799396][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 495.823644][ T5832] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 495.838248][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.846539][ T5832] usb 3-1: Product: syz [ 495.853313][ T5832] usb 3-1: Manufacturer: syz [ 495.859065][ T5832] usb 3-1: SerialNumber: syz [ 495.887191][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 495.897369][ T10] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 496.056996][ T10] usb 5-1: device descriptor read/64, error -71 [ 496.251890][ T5832] usb 3-1: config 0 descriptor?? [ 496.265499][T11557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.299392][ T5832] hub 3-1:0.0: bad descriptor, ignoring hub [ 496.305522][ T5832] hub 3-1:0.0: probe with driver hub failed with error -5 [ 496.318987][ T5832] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 496.332295][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 496.527175][ T10] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 496.641838][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 496.692960][ T10] usb 5-1: device descriptor read/64, error -71 [ 496.751818][ T5832] usb 3-1: USB disconnect, device number 41 [ 496.757891][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 496.837342][ T10] usb usb5-port1: attempt power cycle [ 496.926254][T11600] veth0_vlan: left promiscuous mode [ 496.933003][T11600] veth0_vlan: entered promiscuous mode [ 496.958707][T11600] lo speed is unknown, defaulting to 1000 [ 497.144009][ T30] audit: type=1400 audit(1744564263.189:756): avc: denied { read } for pid=11602 comm="syz.3.1559" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 497.168054][ T30] audit: type=1400 audit(1744564263.189:757): avc: denied { open } for pid=11602 comm="syz.3.1559" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 497.191929][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.199493][T11604] FAULT_INJECTION: forcing a failure. [ 497.199493][T11604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.212979][T11604] CPU: 0 UID: 0 PID: 11604 Comm: syz.3.1559 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 497.213000][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.213010][T11604] Call Trace: [ 497.213015][T11604] [ 497.213020][T11604] dump_stack_lvl+0x16c/0x1f0 [ 497.213045][T11604] should_fail_ex+0x512/0x640 [ 497.213066][T11604] _copy_from_user+0x2e/0xd0 [ 497.213086][T11604] input_event_from_user+0x133/0x3b0 [ 497.213111][T11604] ? __pfx_input_event_from_user+0x10/0x10 [ 497.213134][T11604] ? __pfx___might_resched+0x10/0x10 [ 497.213151][T11604] ? input_inject_event+0x1a5/0x390 [ 497.213169][T11604] evdev_write+0x37b/0x750 [ 497.213186][T11604] ? __pfx_evdev_write+0x10/0x10 [ 497.213202][T11604] ? bpf_lsm_file_permission+0x9/0x10 [ 497.213217][T11604] ? security_file_permission+0x71/0x210 [ 497.213240][T11604] ? rw_verify_area+0xcf/0x680 [ 497.213256][T11604] vfs_write+0x25c/0x1180 [ 497.213264][T11604] ? __pfx_evdev_write+0x10/0x10 [ 497.213281][T11604] ? __pfx_vfs_write+0x10/0x10 [ 497.213291][T11604] ? find_held_lock+0x2b/0x80 [ 497.213310][T11604] ? __fget_files+0x204/0x3c0 [ 497.213329][T11604] ? __fget_files+0x20e/0x3c0 [ 497.213351][T11604] ksys_write+0x205/0x240 [ 497.213365][T11604] ? __pfx_ksys_write+0x10/0x10 [ 497.213378][T11604] ? rcu_is_watching+0x12/0xc0 [ 497.213403][T11604] do_syscall_64+0xcd/0x260 [ 497.213425][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.213438][T11604] RIP: 0033:0x7f7f5a18d169 [ 497.213447][T11604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.213457][T11604] RSP: 002b:00007f7f57ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.213467][T11604] RAX: ffffffffffffffda RBX: 00007f7f5a3a6080 RCX: 00007f7f5a18d169 [ 497.213475][T11604] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 497.213481][T11604] RBP: 00007f7f57ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 497.213487][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.213493][T11604] R13: 0000000000000000 R14: 00007f7f5a3a6080 R15: 00007fffb155db38 [ 497.213505][T11604] [ 497.432691][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.577446][ T10] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 497.607485][ T10] usb 5-1: device descriptor read/8, error -71 [ 498.248039][ T10] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 498.642087][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 498.685291][ T10] usb 5-1: device descriptor read/8, error -71 [ 498.726298][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'. [ 498.820307][ T10] usb usb5-port1: unable to enumerate USB device [ 498.996181][ T6647] Bluetooth: hci5: Frame reassembly failed (-84) [ 499.261575][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 499.296380][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 499.542064][T11635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.076444][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 500.366954][ T5901] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 500.382495][T11661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1581'. [ 500.594130][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.613307][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.634683][ T5901] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 500.643848][ T5871] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 500.664417][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.701005][ T5901] usb 5-1: config 0 descriptor?? [ 500.816946][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 500.823705][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8224, setting to 1024 [ 500.834931][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 500.847272][ T5871] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 500.857461][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.865477][ T5871] usb 3-1: Product: syz [ 500.870734][ T5871] usb 3-1: Manufacturer: syz [ 500.875338][ T5871] usb 3-1: SerialNumber: syz [ 500.882302][ T5871] usb 3-1: config 0 descriptor?? [ 500.887780][T11661] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 500.895843][ T5871] hub 3-1:0.0: bad descriptor, ignoring hub [ 500.901859][ T5871] hub 3-1:0.0: probe with driver hub failed with error -5 [ 500.910751][ T5871] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 500.997936][ T5835] Bluetooth: hci5: command 0xfc11 tx timeout [ 500.998191][ T5822] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 501.088730][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 501.105933][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 501.121220][ T30] audit: type=1400 audit(1744564267.169:758): avc: denied { execheap } for pid=11654 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 501.141195][T11656] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x2) [ 501.162550][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 501.184158][ T5871] usb 3-1: USB disconnect, device number 42 [ 501.190159][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 501.199402][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 501.210076][ T5901] usb 5-1: USB disconnect, device number 47 [ 501.319670][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.326073][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.317304][ T5923] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 502.565434][T11700] netlink: 'syz.2.1596': attribute type 10 has an invalid length. [ 502.573350][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 502.573864][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.585898][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.601254][ T5923] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 502.619053][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.635535][T11700] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.643825][T11700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.648814][ T5923] usb 4-1: config 0 descriptor?? [ 502.651303][T11700] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.663071][ T5871] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 502.663100][T11700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.683494][ T5923] gspca_main: sq930x-2.14.0 probing 041e:403c [ 502.704416][T11700] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 502.846389][ T5871] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 502.858051][ T5871] usb 5-1: config 0 has no interface number 0 [ 502.864224][ T5871] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 502.878476][ T5871] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 502.888599][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.905607][ T5871] usb 5-1: config 0 descriptor?? [ 502.923269][ T5871] ldusb 5-1:0.55: Interrupt in endpoint not found [ 502.991893][T11718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1605'. [ 503.159364][ T5822] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 503.196638][ T30] audit: type=1400 audit(1744564269.239:759): avc: denied { map } for pid=11690 comm="syz.4.1592" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 503.220306][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.227807][ T30] audit: type=1400 audit(1744564269.239:760): avc: denied { execute } for pid=11690 comm="syz.4.1592" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 503.251705][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.261961][T11682] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 503.516782][T11680] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 503.549986][ T30] audit: type=1400 audit(1744564269.599:761): avc: denied { read } for pid=11751 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 503.624258][T11754] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1619'. [ 503.688091][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 503.788546][ T30] audit: type=1400 audit(1744564269.839:762): avc: denied { mount } for pid=11761 comm="syz.1.1623" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 503.868371][ T5923] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 503.876673][ T5923] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 503.913061][ T30] audit: type=1400 audit(1744564269.959:763): avc: denied { append } for pid=11770 comm="syz.2.1627" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 504.272421][T11795] wg2: entered promiscuous mode [ 504.278503][T11795] wg2: entered allmulticast mode [ 504.541141][ T5822] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 504.617089][T11810] team0: No ports can be present during mode change [ 504.673374][ T9] usb 4-1: USB disconnect, device number 44 [ 504.812912][T11818] 9pnet_virtio: no channels available for device syz [ 505.009469][ T30] audit: type=1400 audit(1744564271.059:764): avc: denied { create } for pid=11827 comm="syz.3.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 505.028250][T11829] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 505.065235][ T30] audit: type=1400 audit(1744564271.109:765): avc: denied { ioctl } for pid=11827 comm="syz.3.1653" path="socket:[33022]" dev="sockfs" ino=33022 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 505.090091][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.156688][T11833] Cannot find set identified by id 0 to match [ 505.277671][T11837] xt_hashlimit: size too large, truncated to 1048576 [ 505.366084][ T5901] usb 5-1: USB disconnect, device number 48 [ 505.472712][T11845] Bluetooth: MGMT ver 1.23 [ 505.921304][T11864] overlayfs: failed to clone upperpath [ 506.186336][ T30] audit: type=1400 audit(1744564272.229:766): avc: denied { write } for pid=11871 comm="syz.3.1671" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 506.237001][ T30] audit: type=1400 audit(1744564272.239:767): avc: denied { map } for pid=11871 comm="syz.3.1671" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 506.358321][T11876] overlayfs: failed to clone upperpath [ 506.648877][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 507.490618][T11914] netlink: 'syz.3.1690': attribute type 4 has an invalid length. [ 507.773978][T11929] random: crng reseeded on system resumption [ 507.777146][ T30] audit: type=1400 audit(1744564273.819:768): avc: denied { read write } for pid=11928 comm="syz.0.1695" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 507.803740][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.098174][ T5822] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 508.312715][T11965] [ 508.315092][T11965] ====================================================== [ 508.322120][T11965] WARNING: possible circular locking dependency detected [ 508.329141][T11965] 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 Not tainted [ 508.336235][T11965] ------------------------------------------------------ [ 508.343232][T11965] syz.4.1713/11965 is trying to acquire lock: [ 508.349282][T11965] ffffffff9012c8e8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 508.358148][T11965] [ 508.358148][T11965] but task is already holding lock: [ 508.365495][T11965] ffff88805bffcfa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 508.375581][T11965] [ 508.375581][T11965] which lock already depends on the new lock. [ 508.375581][T11965] [ 508.385959][T11965] [ 508.385959][T11965] the existing dependency chain (in reverse order) is: [ 508.394965][T11965] [ 508.394965][T11965] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 508.403547][T11965] __mutex_lock+0x199/0xb90 [ 508.408572][T11965] smc_switch_to_fallback+0x2d/0x9f0 [ 508.414370][T11965] smc_sendmsg+0x13d/0x520 [ 508.419286][T11965] __sys_sendto+0x495/0x510 [ 508.424290][T11965] __x64_sys_sendto+0xe0/0x1c0 [ 508.429560][T11965] do_syscall_64+0xcd/0x260 [ 508.434574][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.440970][T11965] [ 508.440970][T11965] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 508.448596][T11965] lock_sock_nested+0x41/0xf0 [ 508.453797][T11965] sockopt_lock_sock+0x54/0x70 [ 508.459067][T11965] do_ip_setsockopt+0xfe/0x3240 [ 508.464433][T11965] ip_setsockopt+0x59/0xf0 [ 508.469352][T11965] udp_setsockopt+0x7d/0xd0 [ 508.474369][T11965] do_sock_setsockopt+0x221/0x470 [ 508.479899][T11965] __sys_setsockopt+0x1a0/0x230 [ 508.485255][T11965] __x64_sys_setsockopt+0xbd/0x160 [ 508.490871][T11965] do_syscall_64+0xcd/0x260 [ 508.495881][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.502277][T11965] [ 508.502277][T11965] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 508.509473][T11965] __lock_acquire+0x1173/0x1ba0 [ 508.514831][T11965] lock_acquire+0x179/0x350 [ 508.519837][T11965] __mutex_lock+0x199/0xb90 [ 508.524850][T11965] do_ip_setsockopt+0xf6/0x3240 [ 508.530214][T11965] ip_setsockopt+0x59/0xf0 [ 508.535133][T11965] tcp_setsockopt+0xa4/0x100 [ 508.540229][T11965] smc_setsockopt+0x1b3/0xa00 [ 508.545410][T11965] do_sock_setsockopt+0x221/0x470 [ 508.550943][T11965] __sys_setsockopt+0x1a0/0x230 [ 508.556296][T11965] __x64_sys_setsockopt+0xbd/0x160 [ 508.561911][T11965] do_syscall_64+0xcd/0x260 [ 508.566922][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.573317][T11965] [ 508.573317][T11965] other info that might help us debug this: [ 508.573317][T11965] [ 508.583538][T11965] Chain exists of: [ 508.583538][T11965] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 508.583538][T11965] [ 508.597079][T11965] Possible unsafe locking scenario: [ 508.597079][T11965] [ 508.604507][T11965] CPU0 CPU1 [ 508.609848][T11965] ---- ---- [ 508.615189][T11965] lock(&smc->clcsock_release_lock); [ 508.620540][T11965] lock(sk_lock-AF_INET); [ 508.627458][T11965] lock(&smc->clcsock_release_lock); [ 508.635330][T11965] lock(rtnl_mutex); [ 508.639299][T11965] [ 508.639299][T11965] *** DEADLOCK *** [ 508.639299][T11965] [ 508.647424][T11965] 1 lock held by syz.4.1713/11965: [ 508.652512][T11965] #0: ffff88805bffcfa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 508.663020][T11965] [ 508.663020][T11965] stack backtrace: [ 508.668889][T11965] CPU: 0 UID: 0 PID: 11965 Comm: syz.4.1713 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 508.668907][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.668915][T11965] Call Trace: [ 508.668920][T11965] [ 508.668925][T11965] dump_stack_lvl+0x116/0x1f0 [ 508.668945][T11965] print_circular_bug+0x275/0x350 [ 508.668967][T11965] check_noncircular+0x14c/0x170 [ 508.668989][T11965] __lock_acquire+0x1173/0x1ba0 [ 508.669004][T11965] lock_acquire+0x179/0x350 [ 508.669016][T11965] ? do_ip_setsockopt+0xf6/0x3240 [ 508.669038][T11965] ? __pfx___might_resched+0x10/0x10 [ 508.669058][T11965] ? __schedule+0x1186/0x5de0 [ 508.669074][T11965] __mutex_lock+0x199/0xb90 [ 508.669092][T11965] ? do_ip_setsockopt+0xf6/0x3240 [ 508.669113][T11965] ? __lock_acquire+0x5ca/0x1ba0 [ 508.669125][T11965] ? do_ip_setsockopt+0xf6/0x3240 [ 508.669145][T11965] ? __pfx___mutex_lock+0x10/0x10 [ 508.669166][T11965] ? __mutex_trylock_common+0xe9/0x250 [ 508.669179][T11965] ? do_ip_setsockopt+0xf6/0x3240 [ 508.669199][T11965] ? rtnl_lock+0x9/0x20 [ 508.669210][T11965] do_ip_setsockopt+0xf6/0x3240 [ 508.669231][T11965] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 508.669251][T11965] ? __mutex_lock+0x1ca/0xb90 [ 508.669268][T11965] ? avc_has_perm+0x11a/0x1c0 [ 508.669281][T11965] ? __pfx_avc_has_perm+0x10/0x10 [ 508.669293][T11965] ? smc_setsockopt+0x100/0xa00 [ 508.669305][T11965] ? __pfx___mutex_lock+0x10/0x10 [ 508.669323][T11965] ? __pfx_try_to_wake_up+0x10/0x10 [ 508.669341][T11965] ip_setsockopt+0x59/0xf0 [ 508.669352][T11965] tcp_setsockopt+0xa4/0x100 [ 508.669374][T11965] smc_setsockopt+0x1b3/0xa00 [ 508.669386][T11965] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 508.669407][T11965] ? __pfx_smc_setsockopt+0x10/0x10 [ 508.669420][T11965] ? selinux_socket_setsockopt+0x6a/0x80 [ 508.669438][T11965] ? __pfx_smc_setsockopt+0x10/0x10 [ 508.669450][T11965] do_sock_setsockopt+0x221/0x470 [ 508.669469][T11965] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 508.669492][T11965] __sys_setsockopt+0x1a0/0x230 [ 508.669508][T11965] __x64_sys_setsockopt+0xbd/0x160 [ 508.669522][T11965] ? do_syscall_64+0x91/0x260 [ 508.669540][T11965] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.669557][T11965] do_syscall_64+0xcd/0x260 [ 508.669575][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.669589][T11965] RIP: 0033:0x7f724818d169 [ 508.669601][T11965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.669615][T11965] RSP: 002b:00007f7248ffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 508.669628][T11965] RAX: ffffffffffffffda RBX: 00007f72483a5fa0 RCX: 00007f724818d169 [ 508.669637][T11965] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000003 [ 508.669645][T11965] RBP: 00007f724820e990 R08: 0000000000000088 R09: 0000000000000000 [ 508.669653][T11965] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 508.669661][T11965] R13: 0000000000000000 R14: 00007f72483a5fa0 R15: 00007ffed310be48 [ 508.669673][T11965]