last executing test programs: 16.286453112s ago: executing program 0 (id=458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40140, 0x1) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000000880)={0xdc, 0x0, 0x2}) socket(0x8, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x22c90ac, &(0x7f0000000540)=ANY=[]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0x31, 0x0, 0x7fc551fb, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 14.733576834s ago: executing program 0 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4000000001f, 0x2}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0) preadv(r5, 0x0, 0x0, 0x7, 0x5) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000780)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd22, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) r10 = accept4$alg(r6, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000300)=0x0) io_submit(r11, 0x1, &(0x7f0000000440)=[&(0x7f0000000480)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r10, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x4}]) 12.781717789s ago: executing program 0 (id=464): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000100008d"], 0x0, 0x3c, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019b40)=0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}], 0x10) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000300)="020000000980ffff", 0x8) 11.815757241s ago: executing program 0 (id=465): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000100008d"], 0x0, 0x3c, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019b40)=0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}], 0x10) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000300)="020000000980ffff", 0x8) 8.505902499s ago: executing program 3 (id=471): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.182068969s ago: executing program 0 (id=475): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000020000000"], 0x0, 0x3c, 0x0, 0x1}, 0x28) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r2, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000019b40)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019b80)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}], 0x10) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000300)="020000000980ffff", 0x8) 3.291265018s ago: executing program 1 (id=479): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_delete(0x0) syslog(0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f00000004c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) chown(&(0x7f0000000500)='.\x00', 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='\'-(\x00', &(0x7f0000000180)='ext2\x00', 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.081416149s ago: executing program 0 (id=480): mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) 2.326476008s ago: executing program 1 (id=481): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x80503d0a, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000140)=0x1, 0x4) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x8002, 0x10) write(r2, &(0x7f0000000300)='3', 0x4e) semget(0x1, 0x5, 0x6b4) 1.985317747s ago: executing program 3 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) unshare(0x24060400) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x10a) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) write$binfmt_elf32(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/860], 0x6b7) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0x5) setreuid(r6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.259689462s ago: executing program 4 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 1.135943711s ago: executing program 4 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200000085000000860000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="ce0000050000000027d050516d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.13577695s ago: executing program 2 (id=489): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000001cc0)=0x9) 1.135606623s ago: executing program 4 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a8000000000015010200000000008500000089000000b70000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000740)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 1.090355896s ago: executing program 4 (id=491): socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r3 = shmget$private(0x0, 0xe000, 0x2, &(0x7f0000ff2000/0xe000)=nil) shmat(r3, &(0x7f0000ff4000/0x2000)=nil, 0x7000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 1.083407269s ago: executing program 3 (id=492): r0 = fsopen(&(0x7f00000009c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x14b302, 0x8c) pwritev2(r3, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="7f", 0x1}], 0x1, 0x5412, 0x5, 0x5) sendfile(r2, r2, 0x0, 0x6fecb1) 959.758429ms ago: executing program 2 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f41600001600350b27bd7000fddbdf2501"], 0x16f4}, 0x1, 0x0, 0x0, 0x80}, 0x4004) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) 959.663091ms ago: executing program 3 (id=494): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f0000001680)=""/4103, 0x1007}], 0x1) 899.094456ms ago: executing program 1 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x9, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r1}, 0x4) 898.106837ms ago: executing program 2 (id=496): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x3, &(0x7f0000000500)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x152e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd60df759314f82ffffc020000000000000000000000000000fe8000000000000000000000000000aa3c04"], 0x0) 887.799072ms ago: executing program 3 (id=497): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f00000002c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) 448.186157ms ago: executing program 2 (id=498): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002e00)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002f80)='fdinfo\x00') getdents(r1, &(0x7f0000002fc0)=""/4091, 0xffb) 402.916795ms ago: executing program 3 (id=499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f2, 0x400, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x8014) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="adfdea54c70300000000000001005f6a8cf32b55925bbffa4d5441f62dbf8e9c33a6339235ffc47bda72d1fc964ca205aefa715e1af09ca4edfaf173306265979acd1100"/77, 0x4d) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000240)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0x529, 0x0, 0x0, 'queue0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) write(r4, &(0x7f00000004c0)='h', 0x1) write$sndseq(r3, &(0x7f0000000840)=[{0x84, 0xfe, 0x4, 0x0, @tick, {0x4}, {0xe}, @raw32}], 0x1c) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) 260.592888ms ago: executing program 1 (id=500): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x3a, 0x40, 0x0, 0x0) 204.486129ms ago: executing program 2 (id=501): symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x142) 155.423547ms ago: executing program 1 (id=502): r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000500)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x2], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffdf]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1386, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) read$snddsp(r0, &(0x7f0000000800)=""/192, 0xc0) 120.974042ms ago: executing program 4 (id=503): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x6100) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100) 63.287888ms ago: executing program 2 (id=504): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) 63.039603ms ago: executing program 1 (id=505): r0 = fanotify_init(0x1a, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x541, 0x1023, r1, 0x0) 0s ago: executing program 4 (id=506): mkdir(&(0x7f0000000000)='./myproc\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./myproc/scsi/device_info\x00', 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="22e84683b7205016a7f33f878bb9f7b36f8a3b22d3a2a0da983acf041b72549a126567e1c98178d1cde5527262612a0a8f48c6ac6055f39362a5f3d84536e0eb58ff2cc9597564df0d2cf65eecf135f968c2df165561d7990f27d70c5e981b29d64ffe95976c05157147fc56ea924134f8219d799f0cd1908a1f53cc0ae82740483e1c33ab267785e46b3a1458a6cc5f5122", 0x92}], 0x1) kernel console output (not intermixed with test programs): 35792][ T1698] usb 2-1: USB disconnect, device number 3 [ 93.092939][ T5733] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 93.411732][ T6013] vhci_hcd: connection reset by peer [ 93.467778][ T62] vhci_hcd vhci_hcd.3: stop threads [ 93.467851][ T62] vhci_hcd vhci_hcd.3: release socket [ 93.467944][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 95.217865][ T6027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.50'. [ 95.243001][ T6009] raw_sendmsg: syz.2.44 forgot to set AF_INET. Fix it! [ 96.751234][ T6033] overlayfs: failed to resolve './file0': -2 [ 97.298062][ T6037] warning: `syz.4.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.310793][ T6037] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.53'. [ 97.881396][ T6052] tmpfs: Bad value for 'mpol' [ 97.881793][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 97.922993][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 97.923005][ T30] audit: type=1400 audit(1793361214.970:303): avc: denied { mounton } for pid=6045 comm="syz.4.55" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.965822][ T30] audit: type=1400 audit(1793361215.050:304): avc: denied { firmware_load } for pid=6045 comm="syz.4.55" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 98.333999][ T5733] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 98.443671][ T6052] syz.4.55 (6052) used greatest stack depth: 19880 bytes left [ 98.526780][ T30] audit: type=1400 audit(1793361215.610:305): avc: denied { write } for pid=6043 comm="syz.1.49" name="ipv6_route" dev="proc" ino=4026532867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 99.107280][ T6066] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 99.107309][ T6066] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.108391][ T6066] vhci_hcd vhci_hcd.0: Device attached [ 99.290845][ T30] audit: type=1400 audit(1793361216.270:306): avc: denied { mount } for pid=6058 comm="syz.3.51" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.290955][ T30] audit: type=1400 audit(1793361216.270:307): avc: denied { read } for pid=6058 comm="syz.3.51" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.291091][ T30] audit: type=1400 audit(1793361216.270:308): avc: denied { open } for pid=6058 comm="syz.3.51" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.291225][ T30] audit: type=1400 audit(1793361216.340:309): avc: denied { search } for pid=6058 comm="syz.3.51" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.291362][ T30] audit: type=1400 audit(1793361216.340:310): avc: denied { search } for pid=6058 comm="syz.3.51" name="target" dev="configfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.291490][ T30] audit: type=1400 audit(1793361216.340:311): avc: denied { search } for pid=6058 comm="syz.3.51" name="core" dev="configfs" ino=3550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.291613][ T30] audit: type=1400 audit(1793361216.340:312): avc: denied { write search } for pid=6058 comm="syz.3.51" name="core" dev="configfs" ino=3550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.518725][ T989] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 100.554422][ T6069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.555048][ T6069] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.591649][ T6069] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.598088][ T6069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.612356][ T6069] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.625984][ T6069] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.637364][ T6069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.638488][ T6069] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.652148][ T6069] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.663801][ T6069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.665833][ T6069] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.666880][ T6069] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.680998][ T6069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.681779][ T6067] vhci_hcd: connection reset by peer [ 100.691179][ T6069] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.696419][ T147] vhci_hcd vhci_hcd.4: stop threads [ 100.696433][ T147] vhci_hcd vhci_hcd.4: release socket [ 100.696864][ T147] vhci_hcd vhci_hcd.4: disconnect device [ 100.713577][ T6069] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.729685][ T6078] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.729696][ T6078] CIFS mount error: No usable UNC path provided in device string! [ 100.729696][ T6078] [ 100.729781][ T6078] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.471647][ T6084] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.471883][ T6084] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.664064][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.872142][ T9] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 101.874254][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.876173][ T9] usb 2-1: config 0 descriptor?? [ 101.981992][ T6089] ip_tables: iptables: counters copy to user failed while replacing table [ 102.472141][ T6091] FAULT_INJECTION: forcing a failure. [ 102.472141][ T6091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.472187][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.4.63 Not tainted syzkaller #0 PREEMPT(full) [ 102.472207][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 102.472217][ T6091] Call Trace: [ 102.472223][ T6091] [ 102.472230][ T6091] dump_stack_lvl+0x100/0x190 [ 102.472264][ T6091] should_fail_ex.cold+0x5/0xa [ 102.472291][ T6091] _copy_from_user+0x2e/0xd0 [ 102.472315][ T6091] copy_msghdr_from_user+0x9f/0x4c0 [ 102.472342][ T6091] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.472372][ T6091] ? lock_acquire+0x1d1/0x380 [ 102.472394][ T6091] ? get_pid_task+0x2a/0x250 [ 102.472412][ T6091] ___sys_sendmsg+0x106/0x1e0 [ 102.472439][ T6091] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.472464][ T6091] ? get_pid_task+0x106/0x250 [ 102.472490][ T6091] ? find_held_lock+0x2b/0x80 [ 102.472525][ T6091] __sys_sendmsg+0x160/0x210 [ 102.472544][ T6091] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.472576][ T6091] do_syscall_64+0x123/0x790 [ 102.472598][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.472615][ T6091] RIP: 0033:0x7fe51eb9f559 [ 102.472630][ T6091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.472645][ T6091] RSP: 002b:00007fe51fadb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.472662][ T6091] RAX: ffffffffffffffda RBX: 00007fe51ee25fa0 RCX: 00007fe51eb9f559 [ 102.472673][ T6091] RDX: 0000000004000084 RSI: 0000200000000440 RDI: 0000000000000003 [ 102.472684][ T6091] RBP: 00007fe51fadb090 R08: 0000000000000000 R09: 0000000000000000 [ 102.472694][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.472704][ T6091] R13: 00007fe51ee26038 R14: 00007fe51ee25fa0 R15: 00007ffd6d2d6468 [ 102.472728][ T6091] [ 102.648730][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.648775][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.682129][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 102.682522][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 102.719052][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 102.719078][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.719100][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.772213][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 102.772231][ T9] [drm] Initialized udl on minor 1 [ 102.794921][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 102.804922][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 102.972905][ T6096] overlayfs: failed to resolve './file0': -2 [ 103.253090][ T5740] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.267889][ T9] usb 2-1: USB disconnect, device number 4 [ 103.270050][ T5740] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 104.098132][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 104.098161][ T30] audit: type=1400 audit(1793361221.180:329): avc: denied { sqpoll } for pid=6105 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 104.281692][ T30] audit: type=1400 audit(1793361221.370:330): avc: denied { unlink } for pid=6099 comm="syz.4.65" name="#3" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.648579][ T989] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 104.718894][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.718984][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.788828][ T4939] Bluetooth: hci4: command 0x0405 tx timeout [ 104.789105][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.790712][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.159291][ T6118] Zero length message leads to an empty skb [ 105.161699][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 105.339486][ T30] audit: type=1400 audit(1793361222.240:331): avc: denied { create } for pid=6115 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.339657][ T30] audit: type=1400 audit(1793361222.360:332): avc: denied { bind } for pid=6115 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.339788][ T30] audit: type=1400 audit(1793361222.360:333): avc: denied { accept } for pid=6115 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.339928][ T30] audit: type=1400 audit(1793361222.360:334): avc: denied { read } for pid=6115 comm="syz.0.70" path="socket:[10495]" dev="sockfs" ino=10495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.788995][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.789027][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.879402][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.879432][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.879454][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 107.259361][ T6127] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.259555][ T6127] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.608164][ T6133] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 107.608191][ T6133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.608321][ T6133] vhci_hcd vhci_hcd.0: Device attached [ 108.023415][ T6139] ip_tables: iptables: counters copy to user failed while replacing table [ 108.115915][ T5747] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 108.513192][ T6134] vhci_hcd: connection reset by peer [ 108.517395][ T1840] vhci_hcd vhci_hcd.1: stop threads [ 108.517414][ T1840] vhci_hcd vhci_hcd.1: release socket [ 108.517751][ T1840] vhci_hcd vhci_hcd.1: disconnect device [ 109.062833][ T6142] overlayfs: failed to resolve './file0': -2 [ 110.249958][ T6144] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.459907][ T6152] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 110.503524][ T6152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.511301][ T6153] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 110.517983][ T6152] team0: Port device netdevsim1 added [ 110.625097][ T30] audit: type=1400 audit(1793361227.710:335): avc: denied { connect } for pid=6145 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.655055][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 110.724389][ T6155] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 110.726160][ T30] audit: type=1400 audit(1793361227.810:336): avc: denied { ioctl } for pid=6149 comm="syz.1.79" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.726205][ T30] audit: type=1400 audit(1793361227.810:337): avc: denied { read } for pid=6149 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.726239][ T30] audit: type=1400 audit(1793361227.810:338): avc: denied { create } for pid=6149 comm="syz.1.79" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.959963][ T6153] team0: Port device netdevsim1 removed [ 110.989629][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.009329][ T6153] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 111.053081][ T6158] CIFS mount error: No usable UNC path provided in device string! [ 111.053081][ T6158] [ 111.053092][ T6158] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 111.118941][ T989] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.271207][ T989] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 111.273493][ T989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.273530][ T989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.273550][ T989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.273563][ T989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.273583][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.352862][ T989] usb 1-1: config 0 descriptor?? [ 111.478860][ T5622] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.518440][ T30] audit: type=1400 audit(1793361228.600:339): avc: denied { unlink } for pid=5619 comm="syz-executor" name="loop0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.577567][ T6162] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 111.595225][ T6162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.597661][ T6162] team0: Port device netdevsim1 added [ 111.620091][ T6162] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 111.630063][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 111.630690][ T5622] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.631566][ T5622] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.652974][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.652992][ T5622] usb 5-1: Product: syz [ 111.653005][ T5622] usb 5-1: Manufacturer: syz [ 111.653016][ T5622] usb 5-1: SerialNumber: syz [ 111.660072][ T5622] usb 5-1: config 0 descriptor?? [ 111.660643][ T6160] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.665036][ T5622] hub 5-1:0.0: bad descriptor, ignoring hub [ 111.665053][ T5622] hub 5-1:0.0: probe with driver hub failed with error -5 [ 111.714682][ T6162] team0: Port device netdevsim1 removed [ 111.716742][ T6162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.733220][ T6162] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 111.978684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.910912][ T989] usbhid 1-1:0.0: can't add hid device: -71 [ 112.911008][ T989] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.924352][ T989] usb 1-1: USB disconnect, device number 2 [ 112.969467][ T5622] usb 5-1: USB disconnect, device number 2 [ 113.040065][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.190089][ T5813] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 113.192925][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.192964][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.192986][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.193005][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.193040][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.208214][ T5813] usb 2-1: config 0 descriptor?? [ 113.271280][ T5747] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 113.688682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.848687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.008699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.684333][ T5813] usbhid 2-1:0.0: can't add hid device: -71 [ 114.684384][ T5813] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 114.699680][ T5813] usb 2-1: USB disconnect, device number 5 [ 114.902496][ T6190] overlayfs: failed to resolve './file0': -2 [ 115.352668][ T6178] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 115.352912][ T6178] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.634361][ T6196] CIFS mount error: No usable UNC path provided in device string! [ 115.634361][ T6196] [ 115.634374][ T6196] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.972054][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'. [ 116.818340][ T6205] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 116.919576][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.116407][ T9] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 117.117284][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.139803][ T9] usb 4-1: config 0 descriptor?? [ 117.509865][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.664922][ T5813] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 117.684946][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.687925][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 117.689053][ T30] audit: type=1400 audit(1793361234.500:340): avc: denied { create } for pid=6207 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.689091][ T30] audit: type=1400 audit(1793361234.540:341): avc: denied { getopt } for pid=6207 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.775495][ T5813] usb 3-1: config 0 descriptor?? [ 117.820848][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 117.820923][ T9] [drm] Initialized udl on minor 1 [ 118.217671][ T5813] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 118.227345][ T5813] [drm:udl_init] *ERROR* Selecting channel failed [ 118.264594][ T5813] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 118.264614][ T5813] [drm] Initialized udl on minor 2 [ 118.265797][ T5813] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.266108][ T5813] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 118.303716][ T5813] usb 3-1: USB disconnect, device number 2 [ 118.314959][ T989] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 118.458781][ T5740] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.609239][ T5740] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 118.610160][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.610185][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.610205][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.612017][ T5740] usb 1-1: config 0 descriptor?? [ 118.727333][ T6229] xt_hl: Unknown Hop Limit match mode: 206 [ 118.742745][ T30] audit: type=1400 audit(1793361235.830:342): avc: denied { execute } for pid=6224 comm="syz.4.100" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.762796][ T6229] process 'syz.4.100' launched './file0' with NULL argv: empty string added [ 118.763825][ T30] audit: type=1400 audit(1793361235.850:343): avc: denied { execute_no_trans } for pid=6224 comm="syz.4.100" path="/17/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.484290][ T5740] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 119.484309][ T5740] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 119.484321][ T5740] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 119.484333][ T5740] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 119.484345][ T5740] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 119.557549][ T5740] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 119.671394][ T6235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.101'. [ 120.318680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.613437][ T30] audit: type=1400 audit(1793361237.700:344): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 121.770089][ T1698] usb 1-1: USB disconnect, device number 3 [ 122.274136][ T6245] overlayfs: failed to resolve './file0': -2 [ 122.626523][ T30] audit: type=1400 audit(1793361239.710:345): avc: denied { mounton } for pid=6246 comm="syz.0.105" path="/21/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.643686][ T30] audit: type=1400 audit(1793361239.730:346): avc: denied { create } for pid=6246 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.643719][ T30] audit: type=1400 audit(1793361239.730:347): avc: denied { write } for pid=6246 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.643752][ T30] audit: type=1400 audit(1793361239.730:348): avc: denied { read } for pid=6246 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.651939][ T30] audit: type=1400 audit(1793361239.740:349): avc: denied { ioctl } for pid=6246 comm="syz.0.105" path="socket:[10678]" dev="sockfs" ino=10678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.870579][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 122.870919][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 122.881378][ T5835] usb 4-1: USB disconnect, device number 6 [ 122.889707][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.890129][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 123.129371][ T6250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.108'. [ 123.959229][ T30] audit: type=1400 audit(1793361241.050:350): avc: denied { ioctl } for pid=6251 comm="syz.1.107" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10695 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.989812][ T6254] [U] [ 123.989843][ T6254] [U] [ 123.989870][ T6254] [U] [ 123.989897][ T6254] [U] [ 123.989972][ T6254] [U] [ 123.989998][ T6254] [U] [ 123.990028][ T6254] [U] [ 123.990052][ T6254] [U] [ 123.990096][ T6254] [U] [ 123.990123][ T6254] [U] [ 123.990150][ T6254] [U] [ 123.990178][ T6254] [U] [ 123.990214][ T6254] [U] [ 123.990236][ T6254] [U] [ 123.990261][ T6254] [U] [ 123.990285][ T6254] [U] [ 123.990310][ T6254] [U] [ 123.990335][ T6254] [U] [ 123.990361][ T6254] [U] [ 123.990386][ T6254] [U] [ 123.990421][ T6254] [U] [ 123.990447][ T6254] [U] [ 123.990472][ T6254] [U] [ 123.990496][ T6254] [U] [ 123.990522][ T6254] [U] [ 123.990548][ T6254] [U] [ 123.990573][ T6254] [U] [ 123.990598][ T6254] [U] [ 123.990633][ T6254] [U] [ 123.990659][ T6254] [U] [ 123.990684][ T6254] [U] [ 123.990710][ T6254] [U] [ 123.990743][ T6254] [U] [ 123.990769][ T6254] [U] [ 123.990796][ T6254] [U] [ 123.990821][ T6254] [U] [ 123.990855][ T6254] [U] [ 123.990881][ T6254] [U] [ 123.990907][ T6254] [U] [ 123.990932][ T6254] [U] [ 123.990959][ T6254] [U] [ 123.990984][ T6254] [U] [ 123.991009][ T6254] [U] [ 123.991034][ T6254] [U] [ 123.991068][ T6254] [U] [ 123.991094][ T6254] [U] [ 123.991120][ T6254] [U] [ 123.991145][ T6254] [U] [ 123.991172][ T6254] [U] [ 123.991198][ T6254] [U] [ 123.991221][ T6254] [U] [ 123.991246][ T6254] [U] [ 123.991280][ T6254] [U] [ 123.991306][ T6254] [U] [ 123.991331][ T6254] [U] [ 123.991357][ T6254] [U] [ 123.991384][ T6254] [U] [ 123.991409][ T6254] [U] [ 123.991434][ T6254] [U] [ 123.991459][ T6254] [U] [ 123.991493][ T6254] [U] [ 123.991519][ T6254] [U] [ 123.991544][ T6254] [U] [ 123.991569][ T6254] [U] [ 123.991596][ T6254] [U] [ 123.991622][ T6254] [U] [ 123.991647][ T6254] [U] [ 123.991672][ T6254] [U] [ 123.991707][ T6254] [U] [ 123.991741][ T6254] [U] [ 123.991769][ T6254] [U] [ 123.991797][ T6254] [U] [ 123.991826][ T6254] [U] [ 123.991854][ T6254] [U] [ 123.991880][ T6254] [U] [ 123.991902][ T6254] [U] [ 123.991935][ T6254] [U] [ 123.991961][ T6254] [U] [ 123.991986][ T6254] [U] [ 123.992011][ T6254] [U] [ 123.992037][ T6254] [U] [ 123.992062][ T6254] [U] [ 123.992087][ T6254] [U] [ 123.992111][ T6254] [U] [ 123.992146][ T6254] [U] [ 123.992167][ T6254] [U] [ 123.992192][ T6254] [U] [ 123.992217][ T6254] [U] [ 123.992243][ T6254] [U] [ 123.992269][ T6254] [U] [ 123.992294][ T6254] [U] [ 123.992319][ T6254] [U] [ 123.992354][ T6254] [U] [ 123.992380][ T6254] [U] [ 123.992404][ T6254] [U] [ 123.992429][ T6254] [U] [ 123.992457][ T6254] [U] [ 123.992483][ T6254] [U] [ 123.992508][ T6254] [U] [ 123.992534][ T6254] [U] [ 123.992568][ T6254] [U] [ 123.992593][ T6254] [U] [ 123.992618][ T6254] [U] [ 123.992643][ T6254] [U] [ 123.992667][ T6254] [U] [ 123.992693][ T6254] [U] [ 123.992724][ T6254] [U] [ 123.992749][ T6254] [U] [ 123.992784][ T6254] [U] [ 123.992811][ T6254] [U] [ 123.992840][ T6254] [U] [ 123.992867][ T6254] [U] [ 123.992897][ T6254] [U] [ 123.992925][ T6254] [U] [ 123.992949][ T6254] [U] [ 123.992976][ T6254] [U] [ 123.993028][ T6254] [U] [ 123.993055][ T6254] [U] [ 123.993080][ T6254] [U] [ 123.993108][ T6254] [U] [ 123.993138][ T6254] [U] [ 123.993165][ T6254] [U] [ 123.993194][ T6254] [U] [ 123.993220][ T6254] [U] [ 123.993254][ T6254] [U] [ 123.993277][ T6254] [U] [ 123.993303][ T6254] [U] [ 124.998732][ T5813] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.148713][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 125.149298][ T5813] usb 2-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 125.152300][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.152321][ T5813] usb 2-1: Product: syz [ 125.152335][ T5813] usb 2-1: Manufacturer: syz [ 125.152348][ T5813] usb 2-1: SerialNumber: syz [ 125.182972][ T5813] usb 2-1: config 0 descriptor?? [ 125.204892][ T5813] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 125.205176][ T5813] dvb-usb: bulk message failed: -22 (4/0) [ 125.205190][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.205283][ T5813] dvb-usb: bulk message failed: -22 (5/0) [ 125.205293][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.254555][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.256871][ T5813] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 125.256914][ T5813] usb 2-1: media controller created [ 125.297746][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.327461][ T5813] usb 2-1: selecting invalid altsetting 3 [ 125.327479][ T5813] ttusb2: set interface to alts=3 failed [ 126.063602][ T5813] DVB: Unable to find symbol tda10086_attach() [ 126.063618][ T5813] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 126.064780][ T5813] dvb-usb: bulk message failed: -22 (4/0) [ 126.064798][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 126.064890][ T5813] dvb-usb: bulk message failed: -22 (5/0) [ 126.064902][ T5813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 126.064951][ T5813] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 126.187165][ T6265] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 126.550043][ T6256] [U] [ 126.575651][ T5813] usb 2-1: USB disconnect, device number 6 [ 126.672069][ T6269] ip_tables: iptables: counters copy to user failed while replacing table [ 127.196961][ T5813] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 127.349880][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.349927][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.410992][ T6271] tmpfs: Unknown parameter 'ω`' [ 128.060780][ T6277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.170188][ T30] audit: type=1400 audit(1793361246.250:351): avc: denied { bind } for pid=6282 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.211930][ T6286] CIFS mount error: No usable UNC path provided in device string! [ 129.211930][ T6286] [ 129.211943][ T6286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.229185][ T30] audit: type=1400 audit(1793361246.310:352): avc: denied { listen } for pid=6282 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.284178][ T30] audit: type=1400 audit(1793361246.370:353): avc: denied { write } for pid=6282 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.319269][ T30] audit: type=1400 audit(1793361246.410:354): avc: denied { read } for pid=6282 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.844092][ T6292] overlayfs: failed to resolve './file0': -2 [ 130.287097][ T30] audit: type=1400 audit(1793361247.370:355): avc: denied { wake_alarm } for pid=6293 comm="syz.2.119" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.290139][ T30] audit: type=1400 audit(1793361247.380:356): avc: denied { watch } for pid=6296 comm="syz.3.109" path="/proc/79" dev="proc" ino=10765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 130.639453][ T1698] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.649974][ T5813] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 130.790344][ T1698] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.792394][ T1698] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.792413][ T1698] usb 4-1: config 0 has no interface number 0 [ 130.794408][ T1698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.794425][ T1698] usb 4-1: Product: syz [ 130.794437][ T1698] usb 4-1: Manufacturer: syz [ 130.794448][ T1698] usb 4-1: SerialNumber: syz [ 130.801226][ T1698] usb 4-1: config 0 descriptor?? [ 130.845361][ T5813] usb 5-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 130.858618][ T5813] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1023 [ 130.873843][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.873866][ T5813] usb 5-1: Product: syz [ 130.874123][ T5813] usb 5-1: Manufacturer: syz [ 130.874138][ T5813] usb 5-1: SerialNumber: syz [ 131.268788][ T30] audit: type=1400 audit(1793361248.350:357): avc: denied { getopt } for pid=6296 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.329474][ T30] audit: type=1400 audit(1793361248.400:358): avc: denied { read write } for pid=6296 comm="syz.3.109" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.329518][ T30] audit: type=1400 audit(1793361248.400:359): avc: denied { open } for pid=6296 comm="syz.3.109" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.731729][ T5813] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 131.737569][ T5813] usb 5-1: unit 5 not found! [ 132.429197][ T1698] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 132.469379][ T1698] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.469630][ T1698] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 132.469671][ T1698] usb 4-1: media controller created [ 132.527117][ T1698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.592515][ T5813] usb 5-1: USB disconnect, device number 3 [ 132.980370][ T6319] ip_tables: iptables: counters copy to user failed while replacing table [ 134.190770][ T1698] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 134.306729][ T1698] usb 4-1: USB disconnect, device number 7 [ 135.001610][ T6337] overlayfs: failed to resolve './file0': -2 [ 135.194182][ T5813] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.359916][ T5813] usb 5-1: New USB device found: idVendor=0a5c, idProduct=21e1, bcdDevice=1.00 [ 135.360946][ T5813] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.360971][ T5813] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.361003][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.434132][ T5620] Bluetooth: hci5: urb ffff88803455c500 submission failed (90) [ 135.447788][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.122'. [ 136.616370][ T30] audit: type=1400 audit(1793361253.690:360): avc: denied { write } for pid=6342 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.616549][ T30] audit: type=1400 audit(1793361253.690:361): avc: denied { module_load } for pid=6342 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 137.152003][ T9] usb 5-1: USB disconnect, device number 4 [ 137.311359][ T30] audit: type=1400 audit(1793361254.400:362): avc: denied { write } for pid=6347 comm="syz.4.133" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.343603][ T6348] usb usb1: usbfs: process 6348 (syz.4.133) did not claim interface 0 before use [ 137.344047][ T6348] tipc: Started in network mode [ 137.344060][ T6348] tipc: Node identity 4, cluster identity 4711 [ 137.344069][ T6348] tipc: Node number set to 4 [ 138.169994][ T30] audit: type=1400 audit(1793361254.890:363): avc: denied { mount } for pid=6347 comm="syz.4.133" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 138.536926][ T6354] netlink: 'syz.3.134': attribute type 12 has an invalid length. [ 139.276664][ T6360] CIFS mount error: No usable UNC path provided in device string! [ 139.276664][ T6360] [ 139.276677][ T6360] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.252288][ T5813] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.419968][ T5813] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 140.420865][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.426308][ T5813] usb 4-1: config 0 descriptor?? [ 140.572924][ T6372] overlayfs: failed to resolve './file0': -2 [ 140.872733][ T5813] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 140.928269][ T6375] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 140.962938][ T6375] bond0: (slave netdevsim1): Releasing backup interface [ 140.975383][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.975510][ T6376] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 140.984676][ T6375] team0: Port device netdevsim1 added [ 141.007397][ T6376] team0: Port device netdevsim1 removed [ 141.015424][ T6376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.017009][ T6376] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 141.061842][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 141.096235][ T5813] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 141.096254][ T5813] [drm] Initialized udl on minor 1 [ 141.282053][ T5813] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 141.282235][ T5813] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 141.293135][ T5813] usb 4-1: USB disconnect, device number 8 [ 141.295257][ T5747] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 141.295604][ T5747] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 141.309042][ T1698] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.439756][ T30] audit: type=1400 audit(1793361258.530:364): avc: denied { create } for pid=6377 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.462269][ T1698] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 141.463133][ T1698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.463171][ T1698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.463195][ T1698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.463215][ T1698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.463249][ T1698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.467643][ T1698] usb 2-1: config 0 descriptor?? [ 142.178386][ T30] audit: type=1800 audit(1793361258.940:365): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.139" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 142.474171][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.474201][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.474222][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.474241][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.474259][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.474278][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.474296][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.474315][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.478002][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 142.478028][ T1698] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 143.039334][ T1698] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 143.078567][ T989] usb 2-1: USB disconnect, device number 7 [ 143.288900][ T30] audit: type=1400 audit(1793361260.330:366): avc: denied { getopt } for pid=6394 comm="syz.2.144" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.693305][ T6396] fido_id[6396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 143.749129][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 143.793560][ T30] audit: type=1400 audit(1793361260.870:367): avc: denied { write } for pid=6401 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 143.858157][ T6407] netlink: 156 bytes leftover after parsing attributes in process `syz.3.146'. [ 144.182866][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 145.087204][ T30] audit: type=1400 audit(1793361262.160:368): avc: denied { setopt } for pid=6401 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.375332][ T30] audit: type=1400 audit(1793361262.460:369): avc: denied { read } for pid=6414 comm="syz.4.149" name="sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.485642][ T30] audit: type=1400 audit(1793361262.500:370): avc: denied { open } for pid=6414 comm="syz.4.149" path="/dev/sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.700684][ T5813] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 145.876325][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.151'. [ 146.548501][ T5813] usb 2-1: New USB device found: idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 146.562449][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.562485][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 146.562500][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 146.562512][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.564766][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.564786][ T5813] usb 2-1: Product: syz [ 146.564798][ T5813] usb 2-1: Manufacturer: syz [ 146.564810][ T5813] usb 2-1: SerialNumber: syz [ 146.566724][ T5813] usb 2-1: config 0 descriptor?? [ 146.645637][ T5813] xbox_remote_probe: Unexpected endpoint_in [ 147.697792][ T6435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 147.697816][ T6435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.697915][ T6435] vhci_hcd vhci_hcd.0: Device attached [ 147.714714][ T30] audit: type=1400 audit(1793361264.800:371): avc: denied { shutdown } for pid=6418 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.945337][ T5740] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 148.090160][ T6436] vhci_hcd: connection reset by peer [ 148.097235][ T1156] vhci_hcd vhci_hcd.2: stop threads [ 148.097298][ T1156] vhci_hcd vhci_hcd.2: release socket [ 148.097393][ T1156] vhci_hcd vhci_hcd.2: disconnect device [ 148.984293][ T5835] usb 2-1: USB disconnect, device number 8 [ 149.158981][ T5622] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.365529][ T6452] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 149.365559][ T6452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.365850][ T6452] vhci_hcd vhci_hcd.0: Device attached [ 149.438702][ T5622] usb 3-1: Using ep0 maxpacket: 32 [ 149.439255][ T5622] usb 3-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 149.551964][ T6457] device-mapper: ioctl: Unable to change name on mapped device syzd2 to one that already exists: LVM-syzd1 [ 149.648767][ T5835] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 149.717350][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.717376][ T5622] usb 3-1: Product: syz [ 149.717389][ T5622] usb 3-1: Manufacturer: syz [ 149.717401][ T5622] usb 3-1: SerialNumber: syz [ 150.253390][ T6453] vhci_hcd: connection reset by peer [ 150.274994][ T1156] vhci_hcd vhci_hcd.1: stop threads [ 150.275060][ T1156] vhci_hcd vhci_hcd.1: release socket [ 150.275134][ T1156] vhci_hcd vhci_hcd.1: disconnect device [ 150.647153][ T5622] usb 3-1: config 0 descriptor?? [ 150.694260][ T30] audit: type=1400 audit(1793361267.780:372): avc: denied { create } for pid=6460 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 151.610900][ T5622] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 151.622619][ T5622] gspca_stk1135: reg_w 0x2 err -71 [ 151.623649][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623656][ T5622] gspca_stk1135: Sensor write failed [ 151.623674][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623679][ T5622] gspca_stk1135: Sensor write failed [ 151.623696][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623700][ T5622] gspca_stk1135: Sensor read failed [ 151.623717][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623721][ T5622] gspca_stk1135: Sensor read failed [ 151.623724][ T5622] gspca_stk1135: Detected sensor type unknown (0x0) [ 151.623745][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623749][ T5622] gspca_stk1135: Sensor read failed [ 151.623766][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623770][ T5622] gspca_stk1135: Sensor read failed [ 151.623787][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623792][ T5622] gspca_stk1135: Sensor write failed [ 151.623809][ T5622] gspca_stk1135: serial bus timeout: status=0x00 [ 151.623814][ T5622] gspca_stk1135: Sensor write failed [ 151.623846][ T5622] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 151.638351][ T5622] usb 3-1: USB disconnect, device number 3 [ 152.108770][ T30] audit: type=1400 audit(1793361269.150:373): avc: denied { create } for pid=6465 comm="syz.1.165" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.336439][ T5740] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 154.537781][ T6482] device-mapper: ioctl: Unable to change name on mapped device syzb2 to one that already exists: LVM-syzb1 [ 154.778890][ T5622] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.779166][ T5835] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 154.930527][ T5622] usb 3-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 154.931754][ T5622] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 154.931773][ T5622] usb 3-1: config 1 has no interface number 0 [ 154.931800][ T5622] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 154.931820][ T5622] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 154.931839][ T5622] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 154.931857][ T5622] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 154.933809][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.933828][ T5622] usb 3-1: Product: syz [ 154.933839][ T5622] usb 3-1: Manufacturer: syz [ 154.933851][ T5622] usb 3-1: SerialNumber: syz [ 154.941482][ T6480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.941581][ T6480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.146336][ T6480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.146447][ T6480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.165321][ T5622] usb 3-1: No status endpoint found [ 155.380988][ T5622] usb 3-1: USB disconnect, device number 4 [ 156.066684][ T6494] device-mapper: ioctl: Unable to change name on mapped device syzb2 to one that already exists: LVM-syzb1 [ 156.370654][ T30] audit: type=1400 audit(1793361273.460:374): avc: denied { bind } for pid=6495 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.477255][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 157.478303][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 158.828916][ T5747] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.867045][ T6517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.178'. [ 159.811758][ T5747] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 159.812772][ T5747] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.812811][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.859172][ T6524] CIFS mount error: No usable UNC path provided in device string! [ 159.859172][ T6524] [ 159.859183][ T6524] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.292421][ T5747] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 160.317851][ T5747] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 160.357938][ T5747] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0004/input/input7 [ 160.470404][ C1] usb 3-1: input irq status -75 received [ 160.873925][ T6534] device-mapper: ioctl: Unable to rename non-existent device, syza2 to LVM-syza1 [ 162.777286][ T5813] usb 3-1: USB disconnect, device number 5 [ 164.708882][ T5620] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 165.445958][ T30] audit: type=1400 audit(1793361282.530:375): avc: denied { write } for pid=6568 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.704522][ T6584] netlink: 36 bytes leftover after parsing attributes in process `syz.0.197'. [ 167.584099][ T6597] netlink: 'syz.2.200': attribute type 10 has an invalid length. [ 167.655373][ T6600] netlink: 'syz.2.200': attribute type 10 has an invalid length. [ 167.674358][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.683803][ T6597] team0: Port device netdevsim1 added [ 167.727684][ T6600] team0: Port device netdevsim1 removed [ 167.728475][ T6600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.744723][ T6600] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 168.656526][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 168.889618][ T5813] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.060357][ T5813] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 169.061214][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.061250][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.061272][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.061284][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.061304][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.068017][ T5813] usb 3-1: config 0 descriptor?? [ 169.882580][ T5813] hid_parser_main: 14 callbacks suppressed [ 169.882603][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882634][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882654][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882674][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882694][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882714][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882733][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882753][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882772][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.882791][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 169.911670][ T5813] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 170.264067][ T5835] usb 3-1: USB disconnect, device number 6 [ 171.120357][ T30] audit: type=1400 audit(1793361288.210:376): avc: denied { ioctl } for pid=6629 comm="syz.0.208" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11940 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.126860][ T30] audit: type=1400 audit(1793361288.210:377): avc: denied { map } for pid=6630 comm="syz.4.209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.127099][ T30] audit: type=1400 audit(1793361288.210:378): avc: denied { read write } for pid=6630 comm="syz.4.209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.444504][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 173.339712][ T5813] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.496931][ T5813] usb 2-1: New USB device found: idVendor=172f, idProduct=0034, bcdDevice=0.00 [ 173.509126][ T5813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.509159][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.536806][ T5813] usb 2-1: config 0 descriptor?? [ 173.600937][ T30] audit: type=1400 audit(1793361290.690:379): avc: denied { execute } for pid=6655 comm="syz.3.216" path="/syzcgroup/cpu/syz3/memory.limit_in_bytes" dev="cgroup" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 174.067940][ T5813] usbhid 2-1:0.0: can't add hid device: -71 [ 174.068024][ T5813] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 174.662497][ T5813] usb 2-1: USB disconnect, device number 9 [ 174.825089][ T30] audit: type=1400 audit(1793361291.910:380): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.184880][ T6669] ip_tables: iptables: counters copy to user failed while replacing table [ 177.032308][ T30] audit: type=1400 audit(1793361294.100:381): avc: denied { write } for pid=6686 comm="syz.2.223" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.307304][ T6689] ip_tables: iptables: counters copy to user failed while replacing table [ 178.272984][ T30] audit: type=1400 audit(1793361295.360:382): avc: denied { write } for pid=6698 comm="syz.1.230" name="sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.360760][ T6702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.231'. [ 178.372119][ T6702] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.231'. [ 178.376428][ T6702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56407 sclass=netlink_route_socket pid=6702 comm=syz.3.231 [ 178.524092][ T6706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.231'. [ 178.538079][ T6702] : entered promiscuous mode [ 178.640019][ T6713] ======================================================= [ 178.640019][ T6713] WARNING: The mand mount option has been deprecated and [ 178.640019][ T6713] and is ignored by this kernel. Remove the mand [ 178.640019][ T6713] option from the mount to silence this warning. [ 178.640019][ T6713] ======================================================= [ 179.103804][ T6714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56407 sclass=netlink_route_socket pid=6714 comm=syz.3.231 [ 179.782803][ T30] audit: type=1400 audit(1793361296.870:383): avc: denied { name_connect } for pid=6723 comm="syz.2.234" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 179.864505][ T6725] ip_tables: iptables: counters copy to user failed while replacing table [ 180.293425][ T30] audit: type=1326 audit(1793361297.380:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6723 comm="syz.2.234" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2bbf9f559 code=0x0 [ 182.736215][ T6753] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 183.663532][ T30] audit: type=1400 audit(1793361300.750:385): avc: denied { ioctl } for pid=6757 comm="syz.2.243" path="socket:[12096]" dev="sockfs" ino=12096 ioctlcmd=0xc0045878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 183.863655][ T6760] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 184.149474][ T6760] device-mapper: table: 248:7: raid: Invalid write_mostly index given (-EINVAL) [ 184.149499][ T6760] device-mapper: ioctl: error adding target to table [ 184.450972][ T6768] FAULT_INJECTION: forcing a failure. [ 184.450972][ T6768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.451012][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.2.244 Not tainted syzkaller #0 PREEMPT(full) [ 184.451033][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 184.451042][ T6768] Call Trace: [ 184.451049][ T6768] [ 184.451057][ T6768] dump_stack_lvl+0x100/0x190 [ 184.451091][ T6768] should_fail_ex.cold+0x5/0xa [ 184.451119][ T6768] _copy_from_iter+0x1f4/0x16c0 [ 184.451148][ T6768] ? __pfx__copy_from_iter+0x10/0x10 [ 184.451175][ T6768] ? __pfx___might_resched+0x10/0x10 [ 184.451195][ T6768] ? kfree+0x1e5/0x6d0 [ 184.451222][ T6768] file_tty_write.isra.0+0x453/0x8f0 [ 184.451250][ T6768] vfs_write+0x6af/0x1050 [ 184.451268][ T6768] ? __pfx_tty_write+0x10/0x10 [ 184.451288][ T6768] ? __pfx_vfs_write+0x10/0x10 [ 184.451303][ T6768] ? find_held_lock+0x2b/0x80 [ 184.451346][ T6768] ksys_write+0x12a/0x250 [ 184.451362][ T6768] ? __pfx_ksys_write+0x10/0x10 [ 184.451379][ T6768] ? trace_hardirqs_off+0x70/0x170 [ 184.451406][ T6768] do_syscall_64+0x123/0x790 [ 184.451427][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.451445][ T6768] RIP: 0033:0x7fc2bbf9f559 [ 184.451460][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.451476][ T6768] RSP: 002b:00007fc2bcdfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.451493][ T6768] RAX: ffffffffffffffda RBX: 00007fc2bc226180 RCX: 00007fc2bbf9f559 [ 184.451504][ T6768] RDX: 0000000000001006 RSI: 0000200000001440 RDI: 0000000000000006 [ 184.451515][ T6768] RBP: 00007fc2bcdfc090 R08: 0000000000000000 R09: 0000000000000000 [ 184.451525][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.451535][ T6768] R13: 00007fc2bc226218 R14: 00007fc2bc226180 R15: 00007ffc5f9cdc88 [ 184.451560][ T6768] [ 184.662923][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.724284][ T6773] ALSA: mixer_oss: invalid OSS volume '' [ 184.732261][ T6774] can0: slcan on ttyS3. [ 184.736675][ T30] audit: type=1400 audit(1793361301.800:386): avc: denied { create } for pid=6769 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.774923][ T6773] capability: warning: `syz.0.245' uses 32-bit capabilities (legacy support in use) [ 184.821313][ T5620] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 184.978733][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 185.025313][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.028426][ T9] usb 4-1: New USB device found: idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 185.261117][ T9] usb 4-1: config 151 has an invalid interface number: 33 but max is 0 [ 185.261142][ T9] usb 4-1: config 151 has no interface number 0 [ 185.261168][ T9] usb 4-1: config 151 interface 33 has no altsetting 0 [ 185.264322][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.264344][ T9] usb 4-1: Product: syz [ 185.264358][ T9] usb 4-1: Manufacturer: syz [ 185.264372][ T9] usb 4-1: SerialNumber: syz [ 185.278842][ T6775] can0 (unregistered): slcan off ttyS3. [ 185.992668][ T6786] syzkaller1: entered promiscuous mode [ 185.992686][ T6786] syzkaller1: entered allmulticast mode [ 186.044548][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.248'. [ 187.672494][ T9] io_ti 4-1:151.33: required endpoints missing [ 188.582543][ T9] uvcvideo 4-1:151.33: probe with driver uvcvideo failed with error -22 [ 188.597253][ T9] usb 4-1: USB disconnect, device number 9 [ 189.113816][ T6795] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 189.115132][ T6795] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 189.468612][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.468688][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.465858][ T30] audit: type=1400 audit(1793361307.550:387): avc: denied { map } for pid=6798 comm="syz.3.253" path="socket:[12139]" dev="sockfs" ino=12139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 193.506516][ T30] audit: type=1400 audit(1793361310.590:388): avc: denied { setopt } for pid=6838 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.585562][ T6843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6843 comm=syz.0.261 [ 194.034934][ T30] audit: type=1400 audit(1793361311.120:389): avc: denied { create } for pid=6849 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 194.098737][ T5740] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 195.035096][ T5740] usb 2-1: device descriptor read/64, error -71 [ 195.122461][ T5620] Bluetooth: hci4: connection err: -111 [ 195.126804][ T6863] Bluetooth: MGMT ver 1.23 [ 195.291200][ T5740] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 195.978694][ T5740] usb 2-1: device descriptor read/64, error -71 [ 196.089208][ T5740] usb usb2-port1: attempt power cycle [ 198.180956][ T30] audit: type=1400 audit(1793361315.260:390): avc: denied { execute } for pid=6886 comm="syz.0.266" name="file0" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.184857][ T30] audit: type=1400 audit(1793361315.270:391): avc: denied { execute_no_trans } for pid=6886 comm="syz.0.266" path="/61/file0" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.404871][ T6893] netlink: 340 bytes leftover after parsing attributes in process `syz.4.275'. [ 198.404923][ T6893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.275'. [ 198.625076][ T6898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.277'. [ 200.247622][ T30] audit: type=1400 audit(1793361317.330:392): avc: denied { create } for pid=6904 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.999020][ T6912] ip_tables: iptables: counters copy to user failed while replacing table [ 201.809911][ T30] audit: type=1400 audit(1793361318.900:393): avc: denied { name_bind } for pid=6916 comm="syz.1.282" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 201.993507][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 202.001029][ T30] audit: type=1400 audit(1793361319.090:394): avc: denied { setopt } for pid=6916 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.030884][ T30] audit: type=1400 audit(1793361319.120:395): avc: denied { bind } for pid=6916 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.793424][ T6922] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 202.793448][ T6922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.793549][ T6922] vhci_hcd vhci_hcd.0: Device attached [ 203.489852][ T5622] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 203.970427][ T6924] vhci_hcd: connection reset by peer [ 203.997984][ T12] vhci_hcd vhci_hcd.0: stop threads [ 203.998046][ T12] vhci_hcd vhci_hcd.0: release socket [ 203.998111][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 207.092765][ T30] audit: type=1400 audit(1793361324.110:396): avc: denied { mounton } for pid=6942 comm="syz.4.279" path="/proc/154/task" dev="proc" ino=12793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 207.332803][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 208.778722][ T5622] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 211.243820][ T6979] ip_tables: iptables: counters copy to user failed while replacing table [ 212.039981][ T30] audit: type=1400 audit(1793361329.130:397): avc: denied { append } for pid=6984 comm="syz.3.297" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 212.157036][ T30] audit: type=1400 audit(1793361329.240:398): avc: denied { read } for pid=6984 comm="syz.3.297" name="file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 212.157082][ T30] audit: type=1400 audit(1793361329.240:399): avc: denied { open } for pid=6984 comm="syz.3.297" path="/51/file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 212.160727][ T30] audit: type=1400 audit(1793361329.240:400): avc: denied { ioctl } for pid=6984 comm="syz.3.297" path="/51/file0" dev="tmpfs" ino=315 ioctlcmd=0x40081271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 212.289755][ T6989] Cannot find set identified by id 0 to match [ 212.778066][ T6999] ip_tables: iptables: counters copy to user failed while replacing table [ 212.972921][ T30] audit: type=1400 audit(1793361330.060:401): avc: denied { read } for pid=7000 comm="syz.1.294" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 212.973226][ T30] audit: type=1400 audit(1793361330.060:402): avc: denied { open } for pid=7000 comm="syz.1.294" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 212.974332][ T30] audit: type=1400 audit(1793361330.060:403): avc: denied { ioctl } for pid=7000 comm="syz.1.294" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.373465][ T30] audit: type=1400 audit(1793361330.450:404): avc: denied { write } for pid=6990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.933535][ T30] audit: type=1400 audit(1793361331.020:405): avc: denied { write } for pid=7024 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.097737][ T5813] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.137288][ T7023] input: syz0 as /devices/virtual/input/input10 [ 214.158915][ T5622] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.278694][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 214.279164][ T5813] usb 4-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 214.279989][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.280022][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 214.280045][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 214.280068][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 214.280092][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 214.280112][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 214.280128][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.287666][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.287688][ T5813] usb 4-1: Product: syz [ 214.287701][ T5813] usb 4-1: Manufacturer: syz [ 214.287714][ T5813] usb 4-1: SerialNumber: syz [ 214.359192][ T5622] usb 3-1: Using ep0 maxpacket: 8 [ 214.901856][ T5622] usb 3-1: New USB device found: idVendor=04e7, idProduct=0030, bcdDevice=0.00 [ 214.906302][ T5813] usb 4-1: config 0 descriptor?? [ 214.906992][ T7012] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.915149][ T5622] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 214.915175][ T5622] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.915195][ T5622] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.915220][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.936586][ T5813] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 214.942233][ T5813] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5 [ 214.963058][ T30] audit: type=1400 audit(1793361332.060:406): avc: denied { ioctl } for pid=7018 comm="syz.0.301" path="socket:[13618]" dev="sockfs" ino=13618 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.991477][ T5622] usb 3-1: config 0 descriptor?? [ 215.229132][ T30] audit: type=1400 audit(1793361332.310:407): avc: denied { create } for pid=7016 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.011803][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 216.017560][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.060372][ T7011] fuse: Unknown parameter '0x000000000000000c' [ 216.089882][ T7011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.195745][ T5622] usbhid 3-1:0.0: can't add hid device: -71 [ 216.195822][ T5622] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 216.225092][ T5622] usb 3-1: USB disconnect, device number 7 [ 216.262458][ T29] usb 4-1: USB disconnect, device number 10 [ 216.578096][ T7063] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 216.578120][ T7063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.578246][ T7063] vhci_hcd vhci_hcd.0: Device attached [ 216.828750][ T29] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 217.316043][ T7064] vhci_hcd: connection reset by peer [ 217.334401][ T5944] vhci_hcd vhci_hcd.1: stop threads [ 217.334467][ T5944] vhci_hcd vhci_hcd.1: release socket [ 217.334557][ T5944] vhci_hcd vhci_hcd.1: disconnect device [ 217.933980][ T7070] syz.2.309 (7070): /proc/7069/oom_adj is deprecated, please use /proc/7069/oom_score_adj instead. [ 220.274103][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 220.274119][ T30] audit: type=1400 audit(1793361337.360:410): avc: denied { accept } for pid=7085 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 220.371751][ T30] audit: type=1400 audit(1793361337.460:411): avc: denied { setopt } for pid=7085 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.908690][ T5835] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.978757][ T29] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 222.110101][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 222.110547][ T5835] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 222.112476][ T5835] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 222.112495][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.112510][ T5835] usb 2-1: config 0 has no interface number 0 [ 222.112538][ T5835] usb 2-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.114719][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.114738][ T5835] usb 2-1: Product: syz [ 222.114750][ T5835] usb 2-1: Manufacturer: syz [ 222.114763][ T5835] usb 2-1: SerialNumber: syz [ 222.116641][ T5835] usb 2-1: config 0 descriptor?? [ 222.123455][ T5835] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 222.123600][ T5835] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 222.166855][ T7123] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzc3 [ 223.158704][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.865221][ T9] usb 4-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 223.875456][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 223.875481][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 223.875504][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 223.875524][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 223.891432][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.891453][ T9] usb 4-1: Product: syz [ 223.891466][ T9] usb 4-1: Manufacturer: syz [ 223.891480][ T9] usb 4-1: SerialNumber: syz [ 223.896522][ T9] usb 4-1: config 0 descriptor?? [ 223.897124][ T7119] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 223.965501][ T7138] device-mapper: table: 248:8: ram2 too small for target: start=0, len=14336, dev_size=8192 [ 223.965524][ T7138] device-mapper: core: Cannot calculate initial queue limits [ 223.965531][ T7138] device-mapper: ioctl: unable to set up device queue for new table. [ 226.537681][ T5835] usb 2-1: USB disconnect, device number 13 [ 226.677837][ T7161] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 226.711704][ T7161] bond0: (slave netdevsim1): Releasing backup interface [ 226.725560][ T7167] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 226.782678][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 226.829709][ T30] audit: type=1400 audit(1793361343.910:412): avc: denied { mount } for pid=7165 comm="syz.1.332" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 226.829747][ T30] audit: type=1400 audit(1793361343.920:413): avc: denied { search } for pid=7165 comm="syz.1.332" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 226.829774][ T30] audit: type=1400 audit(1793361343.920:414): avc: denied { search } for pid=7165 comm="syz.1.332" name="events" dev="tracefs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 226.831831][ T7164] ip_tables: iptables: counters copy to user failed while replacing table [ 226.907528][ T30] audit: type=1400 audit(1793361343.920:415): avc: denied { search } for pid=7165 comm="syz.1.332" name="sched" dev="tracefs" ino=13157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 226.907572][ T30] audit: type=1400 audit(1793361343.920:416): avc: denied { search } for pid=7165 comm="syz.1.332" name="sched_switch" dev="tracefs" ino=13159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 226.907608][ T30] audit: type=1400 audit(1793361343.920:417): avc: denied { write } for pid=7165 comm="syz.1.332" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 226.907694][ T30] audit: type=1400 audit(1793361343.920:418): avc: denied { open } for pid=7165 comm="syz.1.332" path="/74/trace/events/sched/sched_switch/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 226.946290][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.947463][ T7161] team0: Port device netdevsim1 added [ 227.025961][ T7167] team0: Port device netdevsim1 removed [ 227.038866][ T7167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.046146][ T7167] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 227.099809][ T5835] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.121896][ T1698] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 228.339702][ T1698] usb 2-1: Using ep0 maxpacket: 16 [ 228.340529][ T5835] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 228.340732][ T1698] usb 2-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 228.341791][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.342077][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.342101][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.342119][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.342154][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.427284][ T1698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.427307][ T1698] usb 2-1: Product: syz [ 228.427322][ T1698] usb 2-1: Manufacturer: syz [ 228.427335][ T1698] usb 2-1: SerialNumber: syz [ 228.452997][ T5835] usb 3-1: config 0 descriptor?? [ 229.393312][ T30] audit: type=1400 audit(1793361346.480:419): avc: denied { write } for pid=7156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.555223][ T30] audit: type=1400 audit(1793361346.640:420): avc: denied { write } for pid=7187 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.608568][ T5835] usbhid 3-1:0.0: can't add hid device: -71 [ 229.618219][ T5835] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.634936][ T5835] usb 3-1: USB disconnect, device number 8 [ 230.242379][ T30] audit: type=1400 audit(1793361347.320:421): avc: denied { write } for pid=7193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.340158][ T1698] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 230.357736][ T1698] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 230.370567][ T1698] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 230.370605][ T1698] usb 2-1: media controller created [ 230.457585][ T1698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.661171][ T1698] zl10353_read_register: readreg error (reg=127, ret==-71) [ 233.080934][ T1698] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 233.086961][ T1698] usb 2-1: USB disconnect, device number 14 [ 233.095865][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 233.095877][ T30] audit: type=1400 audit(1793361350.180:423): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 233.388016][ T7227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.341'. [ 234.632627][ T30] audit: type=1800 audit(1793361351.050:424): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.342" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 235.075291][ T30] audit: type=1400 audit(1793361352.140:425): avc: denied { write } for pid=7235 comm="syz.3.343" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 235.075338][ T30] audit: type=1400 audit(1793361352.140:426): avc: denied { open } for pid=7235 comm="syz.3.343" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 235.158710][ T30] audit: type=1400 audit(1793361352.210:427): avc: denied { ioctl } for pid=7235 comm="syz.3.343" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0xc0304d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 236.958550][ T7260] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 236.979341][ T7260] bond0: (slave netdevsim1): Releasing backup interface [ 236.983222][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.990503][ T7260] team0: Port device netdevsim1 added [ 237.016846][ T7260] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 237.030108][ T7260] team0: Port device netdevsim1 removed [ 237.037294][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.042743][ T7260] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 237.078955][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 237.774555][ T7271] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.775361][ T7271] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.471625][ T30] audit: type=1400 audit(1793361355.550:428): avc: denied { create } for pid=7274 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.481134][ T30] audit: type=1400 audit(1793361355.570:429): avc: denied { read write } for pid=7274 comm="syz.4.353" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 238.481911][ T30] audit: type=1400 audit(1793361355.570:430): avc: denied { open } for pid=7274 comm="syz.4.353" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 238.488714][ T5747] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 238.639823][ T5747] usb 3-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 238.641739][ T5747] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 238.641758][ T5747] usb 3-1: config 1 has no interface number 0 [ 238.641786][ T5747] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 238.641806][ T5747] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 238.641827][ T5747] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 238.641845][ T5747] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 238.644426][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.644445][ T5747] usb 3-1: Product: syz [ 238.644457][ T5747] usb 3-1: Manufacturer: syz [ 238.644468][ T5747] usb 3-1: SerialNumber: syz [ 238.648213][ T7268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.648310][ T7268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.820802][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.355'. [ 239.907434][ T7276] FAULT_INJECTION: forcing a failure. [ 239.907434][ T7276] name fail_futex, interval 1, probability 0, space 0, times 1 [ 239.907454][ T7276] CPU: 1 UID: 0 PID: 7276 Comm: syz.4.353 Not tainted syzkaller #0 PREEMPT(full) [ 239.907469][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 239.907475][ T7276] Call Trace: [ 239.907480][ T7276] [ 239.907487][ T7276] dump_stack_lvl+0x100/0x190 [ 239.907520][ T7276] should_fail_ex.cold+0x5/0xa [ 239.907545][ T7276] get_futex_key+0xf5d/0x13e0 [ 239.907567][ T7276] ? __pfx_get_futex_key+0x10/0x10 [ 239.907583][ T7276] ? __mutex_unlock_slowpath+0x35d/0x930 [ 239.907603][ T7276] futex_wake+0xf4/0x5e0 [ 239.907618][ T7276] ? __pfx_futex_wake+0x10/0x10 [ 239.907634][ T7276] ? lock_acquire+0x1d1/0x380 [ 239.907648][ T7276] ? detach_task_ctx_data+0x83/0x490 [ 239.907674][ T7276] do_futex+0x2b2/0x440 [ 239.907695][ T7276] ? __pfx_do_futex+0x10/0x10 [ 239.907712][ T7276] ? __might_fault+0xc5/0x140 [ 239.907738][ T7276] mm_exit_exec_release+0x256/0x2f0 [ 239.907759][ T7276] do_exit+0x6d8/0x2a00 [ 239.907780][ T7276] ? __pfx_do_exit+0x10/0x10 [ 239.907794][ T7276] ? do_raw_spin_lock+0x128/0x260 [ 239.907804][ T7276] ? find_held_lock+0x2b/0x80 [ 239.907814][ T7276] ? get_signal+0x7db/0x21d0 [ 239.907828][ T7276] do_group_exit+0xd5/0x2a0 [ 239.907852][ T7276] get_signal+0x1ebd/0x21d0 [ 239.907881][ T7276] ? __pfx_get_signal+0x10/0x10 [ 239.907902][ T7276] ? do_futex+0x190/0x440 [ 239.907923][ T7276] arch_do_signal_or_restart+0x91/0x7e0 [ 239.907942][ T7276] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 239.907963][ T7276] exit_to_user_mode_loop+0x139/0x700 [ 239.907973][ T7276] ? rcu_is_watching+0x13/0xc0 [ 239.907985][ T7276] do_syscall_64+0x661/0x790 [ 239.907997][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.908009][ T7276] RIP: 0033:0x7fe51eb9f559 [ 239.908023][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.908040][ T7276] RSP: 002b:00007fe51faba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.908058][ T7276] RAX: fffffffffffffe00 RBX: 00007fe51ee26098 RCX: 00007fe51eb9f559 [ 239.908069][ T7276] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe51ee26098 [ 239.908079][ T7276] RBP: 00007fe51ee26090 R08: 0000000000000000 R09: 0000000000000000 [ 239.908089][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.908099][ T7276] R13: 00007fe51ee26128 R14: 00007ffd6d2d6380 R15: 00007ffd6d2d6468 [ 239.908123][ T7276] [ 239.922077][ T7268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 239.922158][ T7268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 239.935302][ T5747] usb 3-1: No status endpoint found [ 241.436764][ T5747] usb 3-1: USB disconnect, device number 9 [ 242.093653][ T30] audit: type=1400 audit(1793361359.180:431): avc: denied { read } for pid=7307 comm="syz.2.363" path="socket:[14241]" dev="sockfs" ino=14241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.144260][ T30] audit: type=1400 audit(1793361359.230:432): avc: denied { bind } for pid=7307 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.531932][ T5747] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.537457][ T7318] ip_tables: iptables: counters copy to user failed while replacing table [ 243.150136][ T5747] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 243.152392][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.152410][ T5747] usb 2-1: Product: syz [ 243.152424][ T5747] usb 2-1: Manufacturer: syz [ 243.152437][ T5747] usb 2-1: SerialNumber: syz [ 243.210669][ T29] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.296497][ T5813] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 243.444693][ T5740] usb 2-1: USB disconnect, device number 15 [ 243.826895][ T5813] usb 3-1: New USB device found: idVendor=1e7d, idProduct=3138, bcdDevice=0.00 [ 243.827722][ T5813] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 243.827756][ T5813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.827779][ T5813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.827797][ T5813] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 243.827818][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.827842][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.899339][ T5813] usb 3-1: config 0 descriptor?? [ 244.228768][ T29] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 244.229142][ T29] ath9k_htc: Failed to initialize the device [ 244.230698][ T5740] usb 2-1: ath9k_htc: USB layer deinitialized [ 244.306432][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.307397][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.325927][ T5813] usbhid 3-1:0.0: can't add hid device: -71 [ 244.325996][ T5813] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 244.327809][ T5813] usb 3-1: USB disconnect, device number 10 [ 245.047735][ T7335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.371'. [ 245.064141][ T30] audit: type=1400 audit(1793361362.150:433): avc: denied { mount } for pid=7333 comm="syz.4.371" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 245.065359][ T30] audit: type=1400 audit(1793361362.150:434): avc: denied { search } for pid=7333 comm="syz.4.371" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 245.065401][ T30] audit: type=1400 audit(1793361362.150:435): avc: denied { read write } for pid=7333 comm="syz.4.371" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 245.065434][ T30] audit: type=1400 audit(1793361362.150:436): avc: denied { open } for pid=7333 comm="syz.4.371" path="/58/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 245.066263][ T7335] nfsd: exp_rootfh path not found \ [ 245.108868][ T9] iguanair 4-1:0.0: failed to get version [ 245.109367][ T9] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 245.111840][ T9] usb 4-1: USB disconnect, device number 11 [ 245.188870][ T30] audit: type=1400 audit(1793361362.250:437): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 245.665189][ T30] audit: type=1800 audit(1793361362.730:438): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.369" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 245.698296][ T30] audit: type=1400 audit(1793361362.780:439): avc: denied { create } for pid=7342 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 245.723352][ T30] audit: type=1400 audit(1793361362.810:440): avc: denied { getopt } for pid=7342 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.893147][ T7361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.378'. [ 249.486598][ T7378] FAULT_INJECTION: forcing a failure. [ 249.486598][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.486616][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.4.385 Not tainted syzkaller #0 PREEMPT(full) [ 249.486628][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 249.486634][ T7378] Call Trace: [ 249.486638][ T7378] [ 249.486643][ T7378] dump_stack_lvl+0x100/0x190 [ 249.486664][ T7378] should_fail_ex.cold+0x5/0xa [ 249.486680][ T7378] _copy_from_user+0x2e/0xd0 [ 249.486694][ T7378] __sys_bpf+0x2f5/0x4b60 [ 249.486713][ T7378] ? __pfx___sys_bpf+0x10/0x10 [ 249.486729][ T7378] ? find_held_lock+0x2b/0x80 [ 249.486740][ T7378] ? get_pid_task+0xfc/0x250 [ 249.486749][ T7378] ? get_pid_task+0xfc/0x250 [ 249.486763][ T7378] ? find_held_lock+0x2b/0x80 [ 249.486776][ T7378] ? rcu_read_lock_any_held+0x6a/0x90 [ 249.486788][ T7378] ? find_held_lock+0x2b/0x80 [ 249.486799][ T7378] ? ksys_write+0x190/0x250 [ 249.486808][ T7378] ? ksys_write+0x190/0x250 [ 249.486817][ T7378] ? lock_acquire+0x1d1/0x380 [ 249.486840][ T7378] ? fput+0x7c/0x100 [ 249.486859][ T7378] ? ksys_write+0x1ac/0x250 [ 249.486870][ T7378] ? __x64_sys_bpf+0xce/0x140 [ 249.486879][ T7378] __x64_sys_bpf+0xce/0x140 [ 249.486889][ T7378] ? do_syscall_64+0xae/0x790 [ 249.486901][ T7378] do_syscall_64+0x123/0x790 [ 249.486912][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.486923][ T7378] RIP: 0033:0x7fe51eb9f559 [ 249.486932][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.486942][ T7378] RSP: 002b:00007fe51fadb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.486953][ T7378] RAX: ffffffffffffffda RBX: 00007fe51ee25fa0 RCX: 00007fe51eb9f559 [ 249.486960][ T7378] RDX: 000000000000004c RSI: 00002000000002c0 RDI: 000000000000000a [ 249.486966][ T7378] RBP: 00007fe51fadb090 R08: 0000000000000000 R09: 0000000000000000 [ 249.486972][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.486978][ T7378] R13: 00007fe51ee26038 R14: 00007fe51ee25fa0 R15: 00007ffd6d2d6468 [ 249.486992][ T7378] [ 249.707394][ T7380] xt_HMARK: spi-set and port-set can't be combined [ 250.182051][ T7388] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 250.182078][ T7388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.182205][ T7388] vhci_hcd vhci_hcd.0: Device attached [ 250.229511][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.229557][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.442351][ T5747] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 251.041458][ T7389] vhci_hcd: connection reset by peer [ 251.059350][ T5944] vhci_hcd vhci_hcd.3: stop threads [ 251.059391][ T5944] vhci_hcd vhci_hcd.3: release socket [ 251.059459][ T5944] vhci_hcd vhci_hcd.3: disconnect device [ 251.109223][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.311795][ T29] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 251.315311][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.315490][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 251.315520][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 251.315613][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.808680][ T30] audit: type=1400 audit(1793361368.880:441): avc: denied { read append } for pid=7392 comm="syz.2.381" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.808729][ T30] audit: type=1400 audit(1793361368.880:442): avc: denied { open } for pid=7392 comm="syz.2.381" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.808767][ T30] audit: type=1400 audit(1793361368.890:443): avc: denied { ioctl } for pid=7392 comm="syz.2.381" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x4024700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.620296][ T30] audit: type=1400 audit(1793361369.700:444): avc: denied { read append } for pid=7407 comm="syz.3.392" name="usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.620347][ T30] audit: type=1400 audit(1793361369.710:445): avc: denied { open } for pid=7407 comm="syz.3.392" path="/dev/usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.988972][ T29] cxacru 3-1:1.0: send of cm 0x91 failed (-104) [ 253.989249][ T29] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 253.989278][ T29] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 254.064434][ T29] cxacru 3-1:1.0: probe with driver cxacru failed with error -104 [ 255.023876][ T5622] usb 3-1: USB disconnect, device number 11 [ 256.175256][ T5747] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 256.175646][ T30] audit: type=1400 audit(1793361372.750:446): avc: denied { create } for pid=7426 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 256.175687][ T30] audit: type=1400 audit(1793361372.760:447): avc: denied { setopt } for pid=7426 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 256.175721][ T30] audit: type=1400 audit(1793361372.760:448): avc: denied { connect } for pid=7426 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 256.546558][ T7434] can0: slcan on ttyS3. [ 256.578730][ T7434] can0 (unregistered): slcan off ttyS3. [ 257.932908][ T7444] netlink: 'syz.4.402': attribute type 2 has an invalid length. [ 257.932927][ T7444] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.402'. [ 257.932943][ T7444] nbd: must specify at least one socket [ 259.735841][ T30] audit: type=1400 audit(1793361376.420:449): avc: denied { setopt } for pid=7460 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.998830][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 260.148738][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 260.149312][ T9] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 260.152649][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.152670][ T9] usb 2-1: Product: syz [ 260.152685][ T9] usb 2-1: Manufacturer: syz [ 260.152699][ T9] usb 2-1: SerialNumber: syz [ 260.220867][ T9] usb 2-1: config 0 descriptor?? [ 260.300468][ T30] audit: type=1800 audit(1793361377.380:450): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.410" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 260.764872][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.798415][ T7476] hub 8-0:1.0: USB hub found [ 260.804688][ T7476] hub 8-0:1.0: 1 port detected [ 260.961248][ T7473] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.961331][ T7473] block device autoloading is deprecated and will be removed. [ 262.003304][ T30] audit: type=1400 audit(1793361378.790:451): avc: denied { setopt } for pid=7472 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 263.190078][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.467513][ T7498] FAULT_INJECTION: forcing a failure. [ 263.467513][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 263.467574][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.0.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.467600][ T7498] Tainted: [L]=SOFTLOCKUP [ 263.467606][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 263.467616][ T7498] Call Trace: [ 263.467622][ T7498] [ 263.467629][ T7498] dump_stack_lvl+0x100/0x190 [ 263.467662][ T7498] should_fail_ex.cold+0x5/0xa [ 263.467692][ T7498] should_failslab+0xc2/0x120 [ 263.467711][ T7498] __kvmalloc_node_noprof+0x113/0x9b0 [ 263.467738][ T7498] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 263.467760][ T7498] ? io_uring_setup.cold+0x1f4/0x1c7e [ 263.467784][ T7498] io_uring_setup.cold+0x1f4/0x1c7e [ 263.467809][ T7498] ? __pfx_io_uring_setup+0x10/0x10 [ 263.467830][ T7498] ? rcu_is_watching+0x13/0xc0 [ 263.467852][ T7498] ? __rcu_read_unlock+0x27f/0x5a0 [ 263.467891][ T7498] ? ksys_write+0x1ac/0x250 [ 263.467907][ T7498] ? __pfx_ksys_write+0x10/0x10 [ 263.467929][ T7498] __x64_sys_io_uring_setup+0xc2/0x170 [ 263.467950][ T7498] do_syscall_64+0x123/0x790 [ 263.467971][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.467989][ T7498] RIP: 0033:0x7f18b419f559 [ 263.468003][ T7498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.468020][ T7498] RSP: 002b:00007f18b238aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 263.468038][ T7498] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f18b419f559 [ 263.468049][ T7498] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 263.468060][ T7498] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 263.468071][ T7498] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 263.468082][ T7498] R13: 0000200000000b10 R14: 00007f18b238afd8 R15: 0000000000000000 [ 263.468106][ T7498] [ 263.928942][ T5835] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 263.989280][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 264.044174][ T9] usb 2-1: USB disconnect, device number 16 [ 264.089444][ T30] audit: type=1400 audit(1793361381.180:452): avc: denied { write } for pid=7499 comm="syz.3.416" name="ram0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.089860][ T30] audit: type=1400 audit(1793361381.180:453): avc: denied { map } for pid=7499 comm="syz.3.416" path="/79/dev/ram0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.169170][ T5835] usb 3-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 264.170030][ T5835] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 264.170053][ T5835] usb 3-1: config 1 has no interface number 0 [ 264.170085][ T5835] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 264.170107][ T5835] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 264.170127][ T5835] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 264.170147][ T5835] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 264.172010][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.172032][ T5835] usb 3-1: Product: syz [ 264.172045][ T5835] usb 3-1: Manufacturer: syz [ 264.172059][ T5835] usb 3-1: SerialNumber: syz [ 264.176624][ T7486] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 264.176730][ T7486] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 264.348482][ T7506] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 264.349872][ T30] audit: type=1400 audit(1793361381.440:454): avc: denied { relabelto } for pid=7504 comm="syz.3.419" name="80" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 264.349914][ T30] audit: type=1400 audit(1793361381.440:455): avc: denied { associate } for pid=7504 comm="syz.3.419" name="80" dev="tmpfs" ino=472 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 264.500253][ T7486] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 264.500345][ T7486] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 264.507792][ T5835] usb 3-1: No status endpoint found [ 265.305699][ T30] audit: type=1800 audit(1793361382.390:456): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.422" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 266.028760][ T29] usb 3-1: USB disconnect, device number 12 [ 268.320940][ T30] audit: type=1400 audit(1793361385.410:457): avc: denied { create } for pid=7536 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 268.413375][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 269.218689][ T5747] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 270.159238][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 270.162834][ T5747] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 270.163907][ T5747] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.163947][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.163972][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.163991][ T5747] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.164010][ T5747] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.171959][ T5747] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.171978][ T5747] usb 2-1: Manufacturer: syz [ 270.255436][ T5747] usb 2-1: config 0 descriptor?? [ 270.689942][ T5747] rc_core: IR keymap rc-hauppauge not found [ 270.689990][ T5747] Registered IR keymap rc-empty [ 270.690948][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 270.709279][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 270.758692][ T30] audit: type=1800 audit(1793361387.830:458): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.434" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=-22 [ 271.238474][ T5747] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 271.260747][ T5747] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 271.285605][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.298737][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.318746][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.339275][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.359365][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.381647][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.400209][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.419051][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.438710][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.458794][ T5747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.486158][ T5747] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 271.486171][ T5747] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 271.513294][ T5747] usb 2-1: USB disconnect, device number 17 [ 271.797587][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'. [ 272.008794][ T5747] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.033143][ T30] audit: type=1400 audit(1793361389.100:459): avc: denied { write } for pid=7571 comm="syz.4.438" path="socket:[15773]" dev="sockfs" ino=15773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.158785][ T5747] usb 2-1: Using ep0 maxpacket: 8 [ 272.161153][ T5747] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.195210][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.195231][ T5747] usb 2-1: Product: syz [ 272.195245][ T5747] usb 2-1: Manufacturer: syz [ 272.195259][ T5747] usb 2-1: SerialNumber: syz [ 272.197852][ T5747] usb 2-1: config 0 descriptor?? [ 272.469561][ T5747] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 273.783516][ T7588] syz.2.440 uses obsolete (PF_INET,SOCK_PACKET) [ 274.557347][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 274.569901][ T5747] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 274.960416][ T29] usb 3-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 274.961434][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.961461][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.961493][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.015936][ T29] usb 3-1: config 0 descriptor?? [ 275.843010][ T29] hid_parser_main: 14 callbacks suppressed [ 275.843025][ T29] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x2 [ 275.864086][ T29] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 276.043742][ T29] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 276.043787][ T29] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 276.076677][ T29] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 276.093263][ T29] usb 3-1: USB disconnect, device number 13 [ 276.791176][ T5740] usb 2-1: USB disconnect, device number 18 [ 278.881684][ T7620] block device autoloading is deprecated and will be removed. [ 278.881850][ T7620] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 279.796498][ T7632] ip_tables: iptables: counters copy to user failed while replacing table [ 283.550540][ T7648] batman_adv: batadv0: Adding interface: dummy0 [ 283.550553][ T7648] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.550568][ T7648] batman_adv: batadv0: Interface activated: dummy0 [ 283.635889][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 283.780943][ T30] audit: type=1400 audit(1793361400.870:460): avc: denied { ioctl } for pid=7644 comm="syz.1.450" path="socket:[15914]" dev="sockfs" ino=15914 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.065429][ T7652] netlink: 'syz.1.450': attribute type 10 has an invalid length. [ 284.065442][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.450'. [ 284.153284][ T7648] batadv0: mtu less than device minimum [ 284.154320][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.155305][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.156336][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.157319][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.158318][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.159257][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.160117][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.160990][ T7648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.350664][ T7652] batadv0: entered promiscuous mode [ 284.350679][ T7652] batadv0: entered allmulticast mode [ 284.351029][ T7652] bridge0: port 3(batadv0) entered blocking state [ 284.351242][ T7652] bridge0: port 3(batadv0) entered disabled state [ 284.461240][ T7652] batadv0: failed to initialize vlan filtering on this port [ 285.906894][ T7656] overlayfs: failed to resolve './file0': -2 [ 289.663949][ T7692] bridge_slave_0: left allmulticast mode [ 289.663974][ T7692] bridge_slave_0: left promiscuous mode [ 289.664156][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.001736][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.468'. [ 292.211429][ T29] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 292.224533][ T30] audit: type=1400 audit(1793361409.310:461): avc: denied { mounton } for pid=7710 comm="syz.2.470" path="/102/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 292.224780][ T7712] FAULT_INJECTION: forcing a failure. [ 292.224780][ T7712] name failslab, interval 1, probability 0, space 0, times 0 [ 292.224809][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.2.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.224839][ T7712] Tainted: [L]=SOFTLOCKUP [ 292.224847][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 292.224859][ T7712] Call Trace: [ 292.224866][ T7712] [ 292.224873][ T7712] dump_stack_lvl+0x100/0x190 [ 292.224910][ T7712] should_fail_ex.cold+0x5/0xa [ 292.224940][ T7712] ? __pfx_proc_fill_super+0x10/0x10 [ 292.224960][ T7712] should_failslab+0xc2/0x120 [ 292.224981][ T7712] ? __pfx_proc_fill_super+0x10/0x10 [ 292.225001][ T7712] __kmalloc_cache_noprof+0x91/0x6d0 [ 292.225029][ T7712] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 292.225062][ T7712] ? proc_fill_super+0x7d/0x860 [ 292.225085][ T7712] ? __pfx_proc_fill_super+0x10/0x10 [ 292.225104][ T7712] proc_fill_super+0x7d/0x860 [ 292.225126][ T7712] ? __pfx_proc_fill_super+0x10/0x10 [ 292.225146][ T7712] get_tree_nodev+0xdd/0x190 [ 292.225167][ T7712] vfs_get_tree+0x92/0x320 [ 292.225195][ T7712] path_mount+0x7d0/0x2850 [ 292.225228][ T7712] ? __pfx_path_mount+0x10/0x10 [ 292.225254][ T7712] ? lockdep_hardirqs_on+0x7d/0x110 [ 292.225277][ T7712] ? putname+0xb1/0x110 [ 292.225300][ T7712] ? kmem_cache_free+0x127/0x6c0 [ 292.225337][ T7712] ? __x64_sys_mount+0x293/0x310 [ 292.225364][ T7712] __x64_sys_mount+0x293/0x310 [ 292.225393][ T7712] ? __pfx___x64_sys_mount+0x10/0x10 [ 292.225430][ T7712] do_syscall_64+0x123/0x790 [ 292.225453][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.225474][ T7712] RIP: 0033:0x7fc2bbf9f559 [ 292.225492][ T7712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.225511][ T7712] RSP: 002b:00007fc2bce3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.225531][ T7712] RAX: ffffffffffffffda RBX: 00007fc2bc225fa0 RCX: 00007fc2bbf9f559 [ 292.225545][ T7712] RDX: 00002000000004c0 RSI: 0000200000000440 RDI: 0000000000000000 [ 292.225556][ T7712] RBP: 00007fc2bc036b20 R08: 0000000000000000 R09: 0000000000000000 [ 292.225568][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.225579][ T7712] R13: 00007fc2bc226038 R14: 00007fc2bc225fa0 R15: 00007ffc5f9cdc88 [ 292.225607][ T7712] [ 292.348943][ T29] usb 2-1: device descriptor read/64, error -71 [ 292.612488][ T29] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 292.750837][ T29] usb 2-1: device descriptor read/64, error -71 [ 292.861014][ T29] usb usb2-port1: attempt power cycle [ 293.531195][ T7717] overlayfs: failed to resolve './file0': -2 [ 294.548140][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.473'. [ 296.343050][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 296.499495][ T29] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 296.502668][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.502693][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.502712][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.504009][ T29] usb 4-1: config 0 descriptor?? [ 296.563110][ T30] audit: type=1400 audit(1793361413.650:462): avc: denied { read write } for pid=7740 comm="syz.1.477" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 296.565247][ T30] audit: type=1400 audit(1793361413.650:463): avc: denied { open } for pid=7740 comm="syz.1.477" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 296.633824][ T30] audit: type=1400 audit(1793361413.720:464): avc: denied { ioctl } for pid=7740 comm="syz.1.477" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 296.672441][ T7746] xt_hashlimit: size too large, truncated to 1048576 [ 297.121501][ T7754] x9: renamed from bridge_slave_0 (while UP) [ 297.345665][ T29] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x2 [ 297.359329][ T29] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 297.388930][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 297.698692][ T30] audit: type=1400 audit(1793361414.780:465): avc: denied { setattr } for pid=7759 comm="syz.1.479" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.186969][ T9] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 298.197962][ T29] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 298.197999][ T29] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 298.200528][ T29] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 298.208802][ T29] usb 4-1: USB disconnect, device number 13 [ 298.234899][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.488925][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 298.507577][ T9] usb 3-1: USB disconnect, device number 14 [ 298.659259][ T5733] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 298.828660][ T5733] usb 2-1: Using ep0 maxpacket: 8 [ 298.829193][ T5733] usb 2-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 298.830085][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.830104][ T5733] usb 2-1: config 0 has no interfaces? [ 298.830126][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.835608][ T5733] usb 2-1: config 0 descriptor?? [ 299.234778][ T7769] FAULT_INJECTION: forcing a failure. [ 299.234778][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 299.234922][ T7769] CPU: 1 UID: 0 PID: 7769 Comm: syz.1.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.234951][ T7769] Tainted: [L]=SOFTLOCKUP [ 299.234957][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 299.234968][ T7769] Call Trace: [ 299.234975][ T7769] [ 299.234983][ T7769] dump_stack_lvl+0x100/0x190 [ 299.235025][ T7769] should_fail_ex.cold+0x5/0xa [ 299.235055][ T7769] should_failslab+0xc2/0x120 [ 299.235075][ T7769] __kvmalloc_node_noprof+0x113/0x9b0 [ 299.235105][ T7769] ? newary+0x185/0xc30 [ 299.235132][ T7769] newary+0x185/0xc30 [ 299.235153][ T7769] ? ipcget+0x7fc/0xe70 [ 299.235168][ T7769] ? ipcget+0x7fc/0xe70 [ 299.235188][ T7769] ipcget+0x85b/0xe70 [ 299.235212][ T7769] ? __pfx_ipcget+0x10/0x10 [ 299.235231][ T7769] ? __x64_sys_futex+0x34f/0x4d0 [ 299.235255][ T7769] __x64_sys_semget+0x1cb/0x260 [ 299.235280][ T7769] ? __pfx___x64_sys_semget+0x10/0x10 [ 299.235312][ T7769] do_syscall_64+0x123/0x790 [ 299.235333][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.235353][ T7769] RIP: 0033:0x7fa731b9f559 [ 299.235369][ T7769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.235387][ T7769] RSP: 002b:00007fa7329d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 299.235407][ T7769] RAX: ffffffffffffffda RBX: 00007fa731e25fa0 RCX: 00007fa731b9f559 [ 299.235419][ T7769] RDX: 00000000000006b4 RSI: 0000000000000005 RDI: 00000000798e2638 [ 299.235430][ T7769] RBP: 00007fa731c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 299.235441][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.235452][ T7769] R13: 00007fa731e26038 R14: 00007fa731e25fa0 R15: 00007ffc66327088 [ 299.235478][ T7769] [ 299.458773][ T10] usb 2-1: USB disconnect, device number 22 [ 299.746057][ T7799] netlink: 5856 bytes leftover after parsing attributes in process `syz.2.493'. [ 300.478751][ T7817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=7817 comm=syz.3.499 [ 300.558651][ T30] audit: type=1400 audit(1793361417.590:466): avc: denied { read } for pid=7811 comm="syz.3.499" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 300.723660][ T30] audit: type=1400 audit(1793361417.810:467): avc: denied { watch } for pid=7829 comm="syz.1.505" path="/105" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 300.723843][ T30] audit: type=1400 audit(1793361417.810:468): avc: denied { watch_sb watch_reads } for pid=7829 comm="syz.1.505" path="/105" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 300.727871][ T7834] scsi_strcpy_devinfo: vendor string 'F P?o;"Ӣژ' is too long [ 300.727887][ T7834] scsi_strcpy_devinfo: mode ** replaying previous printk message ** [ 300.727887][ T7834] scsi_strcpy_devinfo: model string 'rTegɁxRrba* [ 300.727887][ T7834] HƬ`UbE6X,Yud,^5hUaי' ^)OlqGVA4!y ѐS [ 300.727887][ T7834] '@H>3&wk' is too long [ 300.739345][ T30] audit: type=1400 audit(1793361417.820:469): avc: denied { write } for pid=7830 comm="syz.2.504" name="usb_gadget" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 300.754284][ T30] audit: type=1400 audit(1793361417.840:470): avc: denied { write } for pid=7830 comm="syz.2.504" name="functions" dev="configfs" ino=15035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 300.754997][ T30] audit: type=1400 audit(1793361417.840:471): avc: denied { write } for pid=7830 comm="syz.2.504" name="target" dev="configfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 300.768754][ T30] audit: type=1400 audit(1793361417.850:472): avc: denied { write } for pid=7830 comm="syz.2.504" name="usb_gadget" dev="configfs" ino=15041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 300.788743][ T7833] [ 300.905521][ T7833] ====================================================== [ 300.912542][ T7833] WARNING: possible circular locking dependency detected [ 300.919539][ T7833] syzkaller #0 Tainted: G L [ 300.925580][ T7833] ------------------------------------------------------ [ 300.932570][ T7833] syz.2.504/7833 is trying to acquire lock: [ 300.938436][ T7833] ffff888025c5cf80 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 300.949819][ T7833] [ 300.949819][ T7833] but task is already holding lock: [ 300.957159][ T7833] ffffffff916ae460 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 300.966441][ T7833] [ 300.966441][ T7833] which lock already depends on the new lock. [ 300.966441][ T7833] [ 300.976823][ T7833] [ 300.976823][ T7833] the existing dependency chain (in reverse order) is: [ 300.985810][ T7833] [ 300.985810][ T7833] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 300.993689][ T7833] lock_acquire+0x1d1/0x380 [ 300.998702][ T7833] __mutex_lock+0x19f/0x1c10 [ 301.003812][ T7833] usbg_make_tpg+0x10b/0x610 [ 301.008900][ T7833] target_fabric_make_tpg+0xab/0x8c0 [ 301.014693][ T7833] configfs_mkdir+0x525/0xd40 [ 301.019869][ T7833] vfs_mkdir+0x367/0x850 [ 301.024616][ T7833] filename_mkdirat+0x48b/0x5e0 [ 301.029967][ T7833] __x64_sys_mkdirat+0x89/0xc0 [ 301.035230][ T7833] do_syscall_64+0x123/0x790 [ 301.040321][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.046717][ T7833] [ 301.046717][ T7833] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 301.054521][ T7833] lock_acquire+0x1d1/0x380 [ 301.059528][ T7833] __mutex_lock+0x19f/0x1c10 [ 301.064617][ T7833] configfs_rmdir+0x5ae/0x950 [ 301.069790][ T7833] vfs_rmdir+0x328/0x8a0 [ 301.074535][ T7833] filename_rmdir+0x31a/0x5c0 [ 301.079711][ T7833] __x64_sys_rmdir+0x46/0x70 [ 301.084799][ T7833] do_syscall_64+0x123/0x790 [ 301.089886][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.096277][ T7833] [ 301.096277][ T7833] -> #0 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}: [ 301.104939][ T7833] check_prev_add+0xeb/0xe60 [ 301.110031][ T7833] __lock_acquire+0x1528/0x1f40 [ 301.115381][ T7833] lock_acquire+0x1d1/0x380 [ 301.120387][ T7833] down_write+0x86/0x1f0 [ 301.125127][ T7833] configfs_depend_item_unlocked+0xf3/0x6a0 [ 301.131530][ T7833] usbg_make_tpg+0x251/0x610 [ 301.136617][ T7833] target_fabric_make_tpg+0xab/0x8c0 [ 301.142405][ T7833] configfs_mkdir+0x525/0xd40 [ 301.147580][ T7833] vfs_mkdir+0x367/0x850 [ 301.152324][ T7833] filename_mkdirat+0x48b/0x5e0 [ 301.157673][ T7833] __x64_sys_mkdirat+0x89/0xc0 [ 301.162944][ T7833] do_syscall_64+0x123/0x790 [ 301.168030][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.174419][ T7833] [ 301.174419][ T7833] other info that might help us debug this: [ 301.174419][ T7833] [ 301.184622][ T7833] Chain exists of: [ 301.184622][ T7833] &sb->s_type->i_mutex_key#26 --> &subsys->su_mutex --> tpg_instances_lock [ 301.184622][ T7833] [ 301.199109][ T7833] Possible unsafe locking scenario: [ 301.199109][ T7833] [ 301.206533][ T7833] CPU0 CPU1 [ 301.211870][ T7833] ---- ---- [ 301.217208][ T7833] lock(tpg_instances_lock); [ 301.221861][ T7833] lock(&subsys->su_mutex); [ 301.228944][ T7833] lock(tpg_instances_lock); [ 301.236113][ T7833] lock(&sb->s_type->i_mutex_key#26); [ 301.241551][ T7833] [ 301.241551][ T7833] *** DEADLOCK *** [ 301.241551][ T7833] [ 301.249667][ T7833] locks held by syz.2.504/7833: 4, last CPU#0: [ 301.255792][ T7833] #0: ffff88801fbe6460 (sb_writers#16){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 301.265274][ T7833] #1: ffff8880454ca740 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 301.276052][ T7833] #2: ffffffff911de308 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 301.285768][ T7833] #3: ffffffff916ae460 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 301.295483][ T7833] [ 301.295483][ T7833] stack backtrace: [ 301.301354][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.2.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.312179][ T7833] Tainted: [L]=SOFTLOCKUP [ 301.316477][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 301.326511][ T7833] Call Trace: [ 301.329779][ T7833] [ 301.332689][ T7833] dump_stack_lvl+0x100/0x190 [ 301.337354][ T7833] print_circular_bug.cold+0x178/0x1be [ 301.342800][ T7833] check_noncircular+0x146/0x160 [ 301.347721][ T7833] check_prev_add+0xeb/0xe60 [ 301.352293][ T7833] __lock_acquire+0x1528/0x1f40 [ 301.357141][ T7833] ? rcu_is_watching+0x13/0xc0 [ 301.361887][ T7833] lock_acquire+0x1d1/0x380 [ 301.366371][ T7833] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 301.372415][ T7833] ? __pfx___might_resched+0x10/0x10 [ 301.377681][ T7833] down_write+0x86/0x1f0 [ 301.381901][ T7833] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 301.387943][ T7833] ? __pfx_down_write+0x10/0x10 [ 301.392770][ T7833] ? kstrtou16+0xde/0x130 [ 301.397081][ T7833] configfs_depend_item_unlocked+0xf3/0x6a0 [ 301.402953][ T7833] usbg_make_tpg+0x251/0x610 [ 301.407524][ T7833] ? __pfx_usbg_make_tpg+0x10/0x10 [ 301.412612][ T7833] ? find_held_lock+0x2b/0x80 [ 301.417266][ T7833] ? __pfx_usbg_make_tpg+0x10/0x10 [ 301.422354][ T7833] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 301.428231][ T7833] target_fabric_make_tpg+0xab/0x8c0 [ 301.433502][ T7833] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 301.439379][ T7833] configfs_mkdir+0x525/0xd40 [ 301.444046][ T7833] ? may_create+0x280/0x430 [ 301.448525][ T7833] ? __pfx_configfs_mkdir+0x10/0x10 [ 301.453705][ T7833] vfs_mkdir+0x367/0x850 [ 301.457935][ T7833] filename_mkdirat+0x48b/0x5e0 [ 301.462786][ T7833] ? __pfx_filename_mkdirat+0x10/0x10 [ 301.468153][ T7833] ? strncpy_from_user+0x19d/0x2d0 [ 301.473246][ T7833] ? do_getname+0x191/0x390 [ 301.477738][ T7833] __x64_sys_mkdirat+0x89/0xc0 [ 301.482481][ T7833] do_syscall_64+0x123/0x790 [ 301.487051][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.492920][ T7833] RIP: 0033:0x7fc2bbf9f559 [ 301.497311][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.516897][ T7833] RSP: 002b:00007fc2bce3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 301.525288][ T7833] RAX: ffffffffffffffda RBX: 00007fc2bc225fa0 RCX: 00007fc2bbf9f559 [ 301.533236][ T7833] RDX: 00000000000001ff RSI: 0000200000000500 RDI: ffffffffffffff9c [ 301.541185][ T7833] RBP: 00007fc2bc036b20 R08: 0000000000000000 R09: 0000000000000000 [ 301.549133][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.557080][ T7833] R13: 00007fc2bc226038 R14: 00007fc2bc225fa0 R15: 00007ffc5f9cdc88 [ 301.565033][ T7833] [ 301.568961][ T30] audit: type=1400 audit(1793361417.860:473): avc: denied { write } for pid=7830 comm="syz.2.504" name="naa.5001405000000001" dev="configfs" ino=15043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 301.645399][ T30] audit: type=1400 audit(1793361418.730:474): avc: denied { write } for pid=7830 comm="syz.2.504" name="functions" dev="configfs" ino=15035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1