last executing test programs: 6.583093661s ago: executing program 4 (id=519): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000940)=@multiplanar_mmap={0x7fff, 0xb, 0x4, 0x4000, 0x7, {}, {0x2, 0x8, 0x8, 0x3, 0x8, 0x9, "e3a7c804"}, 0x7, 0x1, {0x0}, 0xfffffff9}) 6.53194383s ago: executing program 1 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0xbb7073387ca201f2) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/current_tracer\x00', 0x2, 0x8) r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) 6.439835656s ago: executing program 1 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000380)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 6.439554944s ago: executing program 4 (id=523): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: Vest1234!', 0x35, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 6.071715411s ago: executing program 4 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000008040)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000008080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000080c0)='./file0\x00', &(0x7f0000008100), 0x8, &(0x7f0000008140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000008180)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000081c0)='./file1\x00', 0x0) 6.00598343s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x80004, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x36, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x84, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400000000000003, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f041}) 5.510028563s ago: executing program 1 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000005c0), 0x40, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000640)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x200) 4.976306498s ago: executing program 4 (id=532): r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000040)={[{0x5, 0x4e00, "ea430392bf"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 4.771791317s ago: executing program 2 (id=534): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0xb) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x149842, 0x0) write$dsp(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) 4.72266018s ago: executing program 2 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x707, 0x2}, 0x1c}, 0x1, 0x0, 0x0, 0x20080804}, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000600)=""/9, &(0x7f0000000640)=0x9) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000380)) 4.630774036s ago: executing program 1 (id=537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 3.963326456s ago: executing program 0 (id=539): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x6, 'bridge_slave_0\x00', {0xd3a9997}, 0xff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101c00, 0x0) ftruncate(r0, 0x46) set_mempolicy(0x1, 0x0, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x200900, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$kcm(0x29, 0x5, 0x0) 3.916337208s ago: executing program 0 (id=540): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x0, 0x0}, 0x10) 3.819507066s ago: executing program 0 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="200000001100010003000000000064000000000064"], 0x20}}, 0x0) 3.785635243s ago: executing program 2 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7c9a000004000000000000000100000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 3.671667599s ago: executing program 1 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="800001001800000018003480"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) 3.671045635s ago: executing program 2 (id=548): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) set_tid_address(0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2008800, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002500)="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", 0x2000, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004600)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffe, 0x0, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x10, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004680)='./file0\x00', 0x0, 0x17) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) umount2(&(0x7f00000046c0)='./file0\x00', 0x9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x514, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 3.65054386s ago: executing program 0 (id=549): mount(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_marker\x00', 0x1, 0x1a) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./sys_sec\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f00000004c0)=""/28, 0xfffffffffffffdee) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000c00)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xf582f2b530579bd4) 3.636558945s ago: executing program 3 (id=550): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 3.495594577s ago: executing program 1 (id=551): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x20, "", [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.49525711s ago: executing program 3 (id=552): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="610505f302"], 0x2a) 2.069562207s ago: executing program 0 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc0185502, &(0x7f0000000600)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffbffffffdfc, 0xfffffffc, 0x2a, 0x10000, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x402, 0x1, 0x0, 0x0, 0xffff, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x80, 0x7fffffffffffffff, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5691, 0x0, 0xffffffffffffffa5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x5, 0x3, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x400000, 0x0, 0x40008, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfff, 0xa2, 0x200, 0x7, 0x800, 0xfffffffffffffffc, 0x80, 0xc0ab, 0x0, 0x201, 0x0, 0xfffffffe, 0x0, 0xfffffffc]}) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='0x', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000380)=""/45, 0xfdef}, {0x0}], 0x2) 2.067743671s ago: executing program 2 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000019640)={0x1, 0x0, 0x0, &(0x7f0000019680)='\x00'/73, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000198c0)=0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000019a40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000192c0)=@assoc_value={0x0}, &(0x7f0000019300)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000019340)=@assoc_value={r5, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000019380)={r5, 0x6, 0x1}, 0x8) 1.091053064s ago: executing program 3 (id=554): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r0 = socket(0x2, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) socket(0x29, 0x805, 0xc2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace\x00', 0x1ff) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f00000001c0)=[{0x0, 0x3, 0x1c00}, {0x1, 0xbbda, 0x1000}, {0x1, 0x1000, 0x1800}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000002c0)=[0x7fff]) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000300)=0x2) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace/error_log\x00', 0x20202, 0x154) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="0305000000000000300012800c00200002800a000400aaaaaaaaaaaa000008000300000000000800010010000000000000000000000000004a4f8ae9edbb87edbcb5cec5f7e6a3a9aab68d97bc16"], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000200), 0x40000000000009f, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x99) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x40078, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) 1.088263064s ago: executing program 2 (id=565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$tipc(0x1e, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_test', 0x141a82, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80580, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r2, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 375.092241ms ago: executing program 3 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000400b70500000000000085000000630000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x4a, 0x0, &(0x7f00000006c0)="0011223344550011223344560800", 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 271.884117ms ago: executing program 3 (id=556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1380000}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 188.107033ms ago: executing program 0 (id=557): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, 0x0, 0x0) read$watch_queue(r2, 0x0, 0x0) 139.752771ms ago: executing program 3 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 0s ago: executing program 4 (id=559): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x105, &(0x7f0000019bc0)=ANY=[@ANYBLOB="1201000200000008820582054000010203010902f3000301018007080b0200012230090904000000010130000a24010d4500080000000c240b0702001000000701000a240c4005f59cc41ce511240a06062871efcb06f11e8a97036a00000000010000000000000014240204030406000e00000004000900050000010904010000010230000904010101010230000c2402010401fe073399691b092402010809030580092402010158060204062402010401090501091000ff06040a252501000000b70900090402000001023000090402010101023000062402010209"], &(0x7f0000000840)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xd4, 0x7, 0x40, 0x20, 0x78}, 0x142, &(0x7f0000000180)=ANY=[]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000a40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000a80), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) mknodat(0xffffffffffffffff, &(0x7f0000019ac0)='./file2\x00', 0x40, 0x2) r4 = semget(0x1, 0x4, 0x39c) semop(r4, &(0x7f0000019b80)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) kernel console output (not intermixed with test programs): 60][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.516168][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.516180][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.516196][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.594947][ T5627] hsr_slave_0: entered promiscuous mode [ 65.595635][ T5627] hsr_slave_1: entered promiscuous mode [ 65.596087][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 65.596098][ T5627] Cannot create hsr debugfs directory [ 65.626198][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.628327][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.629001][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.630531][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.631080][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.635332][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.658275][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.666745][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.790770][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.800177][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.803878][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.808150][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.814292][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.814834][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.817402][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.834918][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.839020][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.876869][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.905137][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.905241][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.906763][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.906816][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.926528][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.926608][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.929110][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.936518][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.947490][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.956029][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.971771][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.979083][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.003026][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.005230][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.026559][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.093657][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.097278][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.099912][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.100545][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.109593][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.118907][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.126998][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.127629][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.135482][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.139786][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.139862][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.186711][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.186793][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.228354][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.283652][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.311097][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.311320][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.344744][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.344829][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.391785][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.450380][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.488919][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.489018][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.519424][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.534848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.534972][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.541832][ T4941] Bluetooth: hci3: command tx timeout [ 66.541853][ T4941] Bluetooth: hci0: command tx timeout [ 66.541869][ T4941] Bluetooth: hci4: command tx timeout [ 66.541968][ T5622] Bluetooth: hci1: command tx timeout [ 66.585256][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.607990][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.608074][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.625598][ T5635] Bluetooth: hci2: command tx timeout [ 66.647567][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.647651][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.927341][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.073432][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.206960][ T5630] veth0_vlan: entered promiscuous mode [ 67.243262][ T5630] veth1_vlan: entered promiscuous mode [ 67.369701][ T5630] veth0_macvtap: entered promiscuous mode [ 67.385809][ T5630] veth1_macvtap: entered promiscuous mode [ 67.427447][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.464911][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.545999][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.585752][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.586205][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.586565][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.586596][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.606913][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.665503][ T5621] veth0_vlan: entered promiscuous mode [ 67.668900][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.668916][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.692266][ T5621] veth1_vlan: entered promiscuous mode [ 67.707516][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.758928][ T5625] veth0_vlan: entered promiscuous mode [ 67.763443][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.763457][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.777507][ T5621] veth0_macvtap: entered promiscuous mode [ 67.780854][ T5621] veth1_macvtap: entered promiscuous mode [ 67.791130][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.798990][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.822793][ T1110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.828000][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 67.828012][ T31] audit: type=1400 audit(1794332525.105:157): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/root/syzkaller.D1miYI/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.840602][ T31] audit: type=1400 audit(1794332525.115:158): avc: denied { mount } for pid=5630 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.840640][ T31] audit: type=1400 audit(1794332525.115:159): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/root/syzkaller.D1miYI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.859498][ T5620] veth0_vlan: entered promiscuous mode [ 67.868453][ T5620] veth1_vlan: entered promiscuous mode [ 67.875171][ T1110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.875418][ T5625] veth1_vlan: entered promiscuous mode [ 67.876398][ T5627] veth0_vlan: entered promiscuous mode [ 67.878169][ T31] audit: type=1400 audit(1794332525.115:160): avc: denied { mount } for pid=5630 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.878202][ T31] audit: type=1400 audit(1794332525.135:161): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/root/syzkaller.D1miYI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.878233][ T31] audit: type=1400 audit(1794332525.135:162): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/root/syzkaller.D1miYI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.878264][ T31] audit: type=1400 audit(1794332525.135:163): avc: denied { mount } for pid=5630 comm="syz-executor" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.878293][ T31] audit: type=1400 audit(1794332525.135:164): avc: denied { create } for pid=5630 comm="syz-executor" name="macvtap0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.878322][ T31] audit: type=1400 audit(1794332525.135:165): avc: denied { unmount } for pid=5630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.911330][ T31] audit: type=1400 audit(1794332525.185:166): avc: denied { unmount } for pid=5630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.995377][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.995430][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.059900][ T5627] veth1_vlan: entered promiscuous mode [ 68.114066][ T5620] veth0_macvtap: entered promiscuous mode [ 68.117388][ T5625] veth0_macvtap: entered promiscuous mode [ 68.143307][ T5620] veth1_macvtap: entered promiscuous mode [ 68.146046][ T5625] veth1_macvtap: entered promiscuous mode [ 68.181165][ T5630] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.207711][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.207728][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.236041][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.253511][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.266067][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.294678][ T5627] veth0_macvtap: entered promiscuous mode [ 68.298335][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.314105][ T1479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.314119][ T1479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.329508][ T5627] veth1_macvtap: entered promiscuous mode [ 68.353043][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353804][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434122][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434164][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434193][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434222][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.438894][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.452318][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.453641][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.462822][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.593998][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.594017][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.622328][ T5635] Bluetooth: hci1: command tx timeout [ 68.622352][ T5635] Bluetooth: hci4: command tx timeout [ 68.622376][ T5635] Bluetooth: hci0: command tx timeout [ 68.622392][ T5635] Bluetooth: hci3: command tx timeout [ 68.663701][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.663719][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.688256][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.712061][ T5622] Bluetooth: hci2: command tx timeout [ 68.712850][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.712863][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.742138][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.742171][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.742195][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.770871][ T3220] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.817442][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.817462][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.871250][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.871270][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.944600][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.944625][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.062219][ T3220] usb 4-1: Using ep0 maxpacket: 16 [ 69.216521][ T3220] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 69.240313][ T3220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.240403][ T3220] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.289028][ T3220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.289134][ T3220] usb 4-1: Product: syz [ 69.289208][ T3220] usb 4-1: Manufacturer: syz [ 69.289357][ T3220] usb 4-1: SerialNumber: syz [ 69.528462][ T3220] usb 4-1: 0:2 : does not exist [ 69.725974][ T3220] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 69.796703][ T3220] usb 4-1: USB disconnect, device number 2 [ 69.845096][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.941719][ T1221] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.093762][ T1221] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.093805][ T1221] usb 1-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 70.094818][ T1221] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.094837][ T1221] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.096642][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.096663][ T1221] usb 1-1: Product: syz [ 70.096677][ T1221] usb 1-1: Manufacturer: syz [ 70.096691][ T1221] usb 1-1: SerialNumber: syz [ 70.176035][ T1221] usb 1-1: selecting invalid altsetting 1 [ 70.177378][ T1221] usb 1-1: unit 6 not found! [ 71.311677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 71.551672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 71.641678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 71.707585][ T5622] Bluetooth: hci3: command tx timeout [ 71.707616][ T5622] Bluetooth: hci0: command tx timeout [ 71.707632][ T5622] Bluetooth: hci4: command tx timeout [ 71.707647][ T5622] Bluetooth: hci1: command tx timeout [ 71.707661][ T5622] Bluetooth: hci2: command tx timeout [ 71.972291][ T5862] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5863] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5862] [ 72.087324][ T5866] ======================================================= [ 72.087324][ T5866] WARNING: The mand mount option has been deprecated and [ 72.087324][ T5866] and is ignored by this kernel. Remove the mand [ 72.087324][ T5866] option from the mount to silence this warning. [ 72.087324][ T5866] ======================================================= [ 72.249290][ T1221] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.265883][ T1221] usb 1-1: USB disconnect, device number 2 [ 72.304824][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.778955][ T5874] i2c i2c-0: delete_device: Extra parameters [ 73.540756][ T31] kauditd_printk_skb: 71 callbacks suppressed [ 73.540774][ T31] audit: type=1400 audit(1794332530.055:238): avc: denied { read } for pid=5870 comm="syz.2.15" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.540811][ T31] audit: type=1400 audit(1794332530.055:239): avc: denied { open } for pid=5870 comm="syz.2.15" path="/3/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.540847][ T31] audit: type=1400 audit(1794332530.605:240): avc: denied { mount } for pid=5872 comm="syz.4.12" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 73.540890][ T31] audit: type=1400 audit(1794332530.715:241): avc: denied { read write } for pid=5872 comm="syz.4.12" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.540925][ T31] audit: type=1400 audit(1794332530.715:242): avc: denied { open } for pid=5872 comm="syz.4.12" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.540960][ T31] audit: type=1400 audit(1794332530.735:243): avc: denied { map } for pid=5872 comm="syz.4.12" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.573299][ T31] audit: type=1400 audit(1794332530.825:244): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 73.578958][ T5840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.653423][ T31] audit: type=1400 audit(1794332530.905:245): avc: denied { unmount } for pid=5627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.792911][ T31] audit: type=1400 audit(1794332531.075:246): avc: denied { map_read map_write } for pid=5880 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.857971][ T31] audit: type=1400 audit(1794332531.135:247): avc: denied { create } for pid=5882 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.937869][ T5721] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.064738][ T5883] netlink: 'syz.2.16': attribute type 32 has an invalid length. [ 74.064790][ T5883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16'. [ 75.077770][ T5930] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.077856][ T5930] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.691725][ T5823] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.845039][ T5823] usb 1-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 75.848533][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.848561][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.850906][ T5823] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 75.850925][ T5823] usb 1-1: Manufacturer: syz [ 75.901605][ T5823] usb 1-1: config 0 descriptor?? [ 75.950588][ T5936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.147669][ T11] cfg80211: failed to load regulatory.db [ 76.311785][ T1221] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.511098][ T1221] usb 5-1: New USB device found: idVendor=1d34, idProduct=000a, bcdDevice=0.00 [ 76.522823][ T1221] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 76.522935][ T1221] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 76.523039][ T1221] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 145, using maximum allowed: 30 [ 76.523259][ T1221] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.523287][ T1221] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.523378][ T1221] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 76.523423][ T1221] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.523537][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.541257][ T4953] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.727305][ T1221] usb 5-1: config 0 descriptor?? [ 76.825136][ T4953] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 76.874660][ T4953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.874692][ T4953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 76.874724][ T4953] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 76.874747][ T4953] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 77.028943][ T4953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.028970][ T4953] usb 2-1: Product: syz [ 77.028984][ T4953] usb 2-1: Manufacturer: syz [ 77.028996][ T4953] usb 2-1: SerialNumber: syz [ 77.346646][ T5946] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 77.361144][ T5823] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5 [ 77.381477][ T1221] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 77.381506][ T1221] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 77.381519][ T1221] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 77.449801][ T5823] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6 [ 77.453285][ T5965] FAULT_INJECTION: forcing a failure. [ 77.453285][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.453307][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(full) [ 77.453325][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 77.453334][ T5965] Call Trace: [ 77.453348][ T5965] [ 77.453354][ T5965] dump_stack_lvl+0x100/0x190 [ 77.453385][ T5965] should_fail_ex.cold+0x5/0xa [ 77.453411][ T5965] _copy_to_user+0x32/0xd0 [ 77.453433][ T5965] copy_siginfo_to_user+0x27/0xc0 [ 77.453455][ T5965] x64_setup_rt_frame+0xa03/0xce0 [ 77.453477][ T5965] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 77.453493][ T5965] ? find_held_lock+0x2b/0x80 [ 77.453511][ T5965] ? kill_pid_info_type+0xe9/0x290 [ 77.453532][ T5965] ? kill_pid_info_type+0xe9/0x290 [ 77.453555][ T5965] arch_do_signal_or_restart+0x5ee/0x7e0 [ 77.453573][ T5965] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.453595][ T5965] ? __pfx___x64_sys_rt_sigqueueinfo+0x10/0x10 [ 77.453617][ T5965] ? handle_softirqs+0x6bd/0xa20 [ 77.453640][ T5965] exit_to_user_mode_loop+0x139/0x700 [ 77.453656][ T5965] ? rcu_is_watching+0x13/0xc0 [ 77.453676][ T5965] do_syscall_64+0x661/0x7b0 [ 77.453697][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.453712][ T5965] RIP: 0033:0x7f0f415a8f19 [ 77.453725][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.453740][ T5965] RSP: 002b:00007f0f4242e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 77.453755][ T5965] RAX: 0000000000000000 RBX: 00007f0f41825fa0 RCX: 00007f0f415a8f19 [ 77.453765][ T5965] RDX: 00002000000003c0 RSI: 0000000000000021 RDI: 0000000000000029 [ 77.453774][ T5965] RBP: 00007f0f41637f6d R08: 0000000000000000 R09: 0000000000000000 [ 77.453783][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.453791][ T5965] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007ffda556a998 [ 77.453813][ T5965] [ 77.461535][ T5823] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input7 [ 77.478759][ T5823] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input8 [ 77.499395][ T5823] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 77.509878][ T5823] usb 1-1: USB disconnect, device number 3 [ 77.600670][ T1221] hid-led 0003:1D34:000A.0002: probe with driver hid-led failed with error -71 [ 77.621376][ T1221] usb 5-1: USB disconnect, device number 2 [ 77.833339][ T4953] cdc_ncm 2-1:1.0: bind() failure [ 77.848401][ T4953] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 77.848438][ T4953] cdc_ncm 2-1:1.1: bind() failure [ 77.868311][ T4953] usb 2-1: USB disconnect, device number 2 [ 78.178758][ T5980] fido_id[5980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 78.515756][ T5996] device-mapper: ioctl: Unable to rename non-existent device, syzb0 to CRP-syzb1 [ 78.556085][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 78.556102][ T31] audit: type=1400 audit(1794332535.835:300): avc: denied { read } for pid=5997 comm="syz.1.54" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.556661][ T31] audit: type=1400 audit(1794332535.835:301): avc: denied { open } for pid=5997 comm="syz.1.54" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.558635][ T31] audit: type=1400 audit(1794332535.835:302): avc: denied { ioctl } for pid=5997 comm="syz.1.54" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x80084504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.703298][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.787795][ T31] audit: type=1400 audit(1794332536.065:303): avc: denied { read write } for pid=5999 comm="syz.1.55" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.789571][ T31] audit: type=1400 audit(1794332536.065:304): avc: denied { open } for pid=5999 comm="syz.1.55" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.867932][ T31] audit: type=1400 audit(1794332536.075:305): avc: denied { read write } for pid=5999 comm="syz.1.55" name="radio0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.868189][ T31] audit: type=1400 audit(1794332536.145:306): avc: denied { open } for pid=5999 comm="syz.1.55" path="/dev/radio0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.536168][ T30] usb 1-1: New USB device found: idVendor=1d34, idProduct=000a, bcdDevice=0.00 [ 79.557864][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.557890][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.557918][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.704796][ T30] usb 1-1: config 0 descriptor?? [ 79.931557][ T31] audit: type=1400 audit(1794332537.205:307): avc: denied { write } for pid=6015 comm="syz.3.60" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 79.956827][ T31] audit: type=1400 audit(1794332537.245:308): avc: denied { open } for pid=6015 comm="syz.3.60" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 80.004807][ T6018] process 'syz.4.58' launched './file0' with NULL argv: empty string added [ 80.142498][ T30] hid-led 0003:1D34:000A.0003: item fetching failed at offset 0/3 [ 80.143105][ T30] hid-led 0003:1D34:000A.0003: probe with driver hid-led failed with error -22 [ 80.195612][ T31] audit: type=1400 audit(1794332537.475:309): avc: denied { watch } for pid=6024 comm="syz.2.63" path="/16" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.539207][ T11] usb 1-1: USB disconnect, device number 4 [ 80.741809][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.092895][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 81.108439][ T5823] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 81.153902][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.153928][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.246174][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.246200][ T5823] usb 4-1: Product: syz [ 81.246214][ T5823] usb 4-1: Manufacturer: syz [ 81.246227][ T5823] usb 4-1: SerialNumber: syz [ 81.340641][ T5823] usb 4-1: 0:2 : does not exist [ 81.445027][ T6033] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 82.251678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.351852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 82.645747][ T6044] syz.1.70 (6044): attempted to duplicate a private mapping with mremap. This is not supported. [ 82.734624][ T5823] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 82.814521][ T5823] usb 4-1: USB disconnect, device number 3 [ 82.861245][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.186421][ T6048] mmap: syz.0.72 (6048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.413791][ T6062] ./file0: Can't lookup blockdev [ 83.672464][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 83.672480][ T31] audit: type=1400 audit(1794332540.955:325): avc: denied { create } for pid=6068 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.674323][ T31] audit: type=1400 audit(1794332540.955:326): avc: denied { getopt } for pid=6068 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.734460][ T31] audit: type=1400 audit(1794332541.015:327): avc: denied { setopt } for pid=6068 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.838965][ T4953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.542848][ T4953] usb 5-1: Using ep0 maxpacket: 16 [ 84.543552][ T4953] usb 5-1: New USB device found: idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 84.547893][ T4953] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 84.547913][ T4953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.547928][ T4953] usb 5-1: config 0 has no interface number 0 [ 84.547949][ T4953] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 84.547962][ T4953] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.547974][ T4953] usb 5-1: config 0 interface 98 has no altsetting 0 [ 84.566439][ T4953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.566453][ T4953] usb 5-1: Product: syz [ 84.566462][ T4953] usb 5-1: Manufacturer: syz [ 84.566469][ T4953] usb 5-1: SerialNumber: syz [ 84.602600][ T4953] usb 5-1: config 0 descriptor?? [ 84.644750][ T6066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.644829][ T6066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.662098][ T3218] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.794287][ T31] audit: type=1400 audit(1794332542.075:328): avc: denied { setopt } for pid=6082 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.822525][ T3218] usb 2-1: New USB device found: idVendor=1294, idProduct=1320, bcdDevice=0.00 [ 84.827203][ T3218] usb 2-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.827221][ T3218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.827239][ T3218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.832038][ T3218] usb 2-1: config 0 descriptor?? [ 84.923781][ T6066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.923865][ T6066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.948878][ T4953] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 84.949001][ T4953] asix 5-1:0.98: probe with driver asix failed with error -71 [ 84.980904][ T4953] usb 5-1: USB disconnect, device number 3 [ 85.256093][ T3218] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 85.256112][ T3218] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 85.256123][ T3218] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 85.256134][ T3218] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 85.256146][ T3218] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 85.256157][ T3218] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 85.265981][ T3218] hid-led 0003:1294:1320.0004: hidraw0: USB HID v10.01 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 85.286696][ T3218] hid-led 0003:1294:1320.0004: Riso Kagaku Webmail Notifier initialized [ 85.330848][ T6092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.87'. [ 85.661778][ T31] audit: type=1400 audit(1794332542.825:329): avc: denied { create } for pid=6094 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.661900][ T31] audit: type=1400 audit(1794332542.835:330): avc: denied { getopt } for pid=6094 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.115977][ T3218] usb 2-1: USB disconnect, device number 3 [ 86.147940][ T1447] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 86.168538][ T1447] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 86.179515][ T1447] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 86.245944][ T31] audit: type=1400 audit(1794332543.525:331): avc: denied { map_create } for pid=6104 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.284823][ T31] audit: type=1400 audit(1794332543.565:332): avc: denied { map_read map_write } for pid=6104 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.331010][ T31] audit: type=1400 audit(1794332543.605:333): avc: denied { prog_run } for pid=6104 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.375820][ T6107] nbd2: detected capacity change from 0 to 8589934590 [ 86.423658][ T6110] block nbd2: shutting down sockets [ 86.443461][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.443546][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.448875][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.448894][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.449657][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.449672][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.449729][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.449741][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.449792][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.449805][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.449868][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.449880][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.449976][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.449993][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.450242][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.450263][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.450294][ T5643] ldm_validate_partition_table(): Disk read failed. [ 86.450349][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.450362][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.452669][ T2076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.452689][ T2076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 86.452876][ T5643] Dev nbd2: unable to read RDB block 0 [ 86.453230][ T5643] nbd2: unable to read partition table [ 86.511875][ T5643] ldm_validate_partition_table(): Disk read failed. [ 86.519746][ T5643] Dev nbd2: unable to read RDB block 0 [ 86.520074][ T5643] nbd2: unable to read partition table [ 86.661842][ T3218] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.827758][ T3218] usb 4-1: Using ep0 maxpacket: 8 [ 86.831060][ T3218] usb 4-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 86.887456][ T31] audit: type=1400 audit(1794332544.165:334): avc: denied { read } for pid=6115 comm="syz.4.95" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.889998][ T3218] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.890027][ T3218] usb 4-1: config 179 has no interface number 0 [ 86.920281][ T3218] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 86.920345][ T3218] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 86.920408][ T3218] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.920438][ T3218] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 86.920468][ T3218] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 86.920607][ T3218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.137196][ T6109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.314526][ T30] usb 4-1: USB disconnect, device number 4 [ 88.314604][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.314627][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 89.196630][ T6148] bridge0: entered promiscuous mode [ 89.196834][ T6148] bridge0: entered allmulticast mode [ 89.196858][ T6148] FAULT_INJECTION: forcing a failure. [ 89.196858][ T6148] name failslab, interval 1, probability 0, space 0, times 1 [ 89.196871][ T6148] CPU: 1 UID: 0 PID: 6148 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT(full) [ 89.196883][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 89.196890][ T6148] Call Trace: [ 89.196894][ T6148] [ 89.196899][ T6148] dump_stack_lvl+0x100/0x190 [ 89.196921][ T6148] should_fail_ex.cold+0x5/0xa [ 89.196939][ T6148] should_failslab+0xc2/0x120 [ 89.196953][ T6148] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 89.196965][ T6148] ? __alloc_skb+0x140/0x710 [ 89.196980][ T6148] __alloc_skb+0x140/0x710 [ 89.196992][ T6148] ? __alloc_skb+0x5b7/0x710 [ 89.197003][ T6148] ? __pfx___alloc_skb+0x10/0x10 [ 89.197016][ T6148] ? if_nlmsg_size+0x4b/0xdc0 [ 89.197034][ T6148] rtmsg_ifinfo_build_skb+0x81/0x260 [ 89.197047][ T6148] rtmsg_ifinfo+0xa4/0x1b0 [ 89.197059][ T6148] __dev_notify_flags+0x362/0x4b0 [ 89.197071][ T6148] ? netif_set_allmulti.cold+0x141/0x1b7 [ 89.197084][ T6148] ? __pfx___dev_notify_flags+0x10/0x10 [ 89.197097][ T6148] ? __dev_change_flags+0x548/0x850 [ 89.197111][ T6148] ? __pfx___dev_change_flags+0x10/0x10 [ 89.197123][ T6148] ? lock_acquire+0x1d1/0x380 [ 89.197138][ T6148] ? dev_ioctl+0x331/0x10e0 [ 89.197153][ T6148] netif_change_flags+0x108/0x160 [ 89.197168][ T6148] dev_change_flags+0xba/0x260 [ 89.197184][ T6148] dev_ifsioc+0x1666/0x1f70 [ 89.197199][ T6148] ? __pfx_dev_ifsioc+0x10/0x10 [ 89.197213][ T6148] ? __pfx___mutex_lock+0x10/0x10 [ 89.197228][ T6148] ? lock_acquire+0x1d1/0x380 [ 89.197243][ T6148] ? dev_load+0x8e/0x240 [ 89.197255][ T6148] ? dev_load+0x8e/0x240 [ 89.197271][ T6148] dev_ioctl+0x342/0x10e0 [ 89.197286][ T6148] sock_do_ioctl+0x1a0/0x280 [ 89.197301][ T6148] ? __pfx_sock_do_ioctl+0x10/0x10 [ 89.197317][ T6148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.197338][ T6148] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 89.197348][ T6148] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 89.197360][ T6148] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 89.197374][ T6148] sock_ioctl+0x599/0x6b0 [ 89.197384][ T6148] ? __pfx_sock_ioctl+0x10/0x10 [ 89.197397][ T6148] ? selinux_file_ioctl+0x1e0/0x290 [ 89.197407][ T6148] ? selinux_file_ioctl+0x1e7/0x290 [ 89.197418][ T6148] ? __pfx_sock_ioctl+0x10/0x10 [ 89.197428][ T6148] __x64_sys_ioctl+0x18e/0x210 [ 89.197440][ T6148] do_syscall_64+0x123/0x7b0 [ 89.197454][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.197466][ T6148] RIP: 0033:0x7f892a9a8f19 [ 89.197475][ T6148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.197484][ T6148] RSP: 002b:00007f892b7a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.197495][ T6148] RAX: ffffffffffffffda RBX: 00007f892ac25fa0 RCX: 00007f892a9a8f19 [ 89.197501][ T6148] RDX: 0000200000000200 RSI: 0000000000008914 RDI: 0000000000000004 [ 89.197507][ T6148] RBP: 00007f892aa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 89.197513][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.197519][ T6148] R13: 00007f892ac26038 R14: 00007f892ac25fa0 R15: 00007ffe9a4adec8 [ 89.197533][ T6148] [ 89.751791][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 89.751807][ T31] audit: type=1400 audit(1794332547.025:341): avc: denied { bind } for pid=6151 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.752494][ T31] audit: type=1400 audit(1794332547.035:342): avc: denied { write } for pid=6151 comm="syz.1.107" path="socket:[10711]" dev="sockfs" ino=10711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.837153][ T6152] FAULT_INJECTION: forcing a failure. [ 89.837153][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 89.837182][ T6152] CPU: 0 UID: 60928 PID: 6152 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 89.837204][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 89.837214][ T6152] Call Trace: [ 89.837219][ T6152] [ 89.837225][ T6152] dump_stack_lvl+0x100/0x190 [ 89.837257][ T6152] should_fail_ex.cold+0x5/0xa [ 89.837281][ T6152] should_failslab+0xc2/0x120 [ 89.837300][ T6152] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.837323][ T6152] ? key_alloc+0x3f2/0x1330 [ 89.837348][ T6152] key_alloc+0x3f2/0x1330 [ 89.837371][ T6152] ? __pfx_key_alloc+0x10/0x10 [ 89.837386][ T6152] ? __pfx_keyring_search_iterator+0x10/0x10 [ 89.837410][ T6152] keyring_alloc+0x44/0xc0 [ 89.837430][ T6152] look_up_user_keyrings+0x438/0x760 [ 89.837457][ T6152] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 89.837484][ T6152] ? __key_instantiate_and_link+0x142/0x510 [ 89.837504][ T6152] call_sbin_request_key+0x228/0xd80 [ 89.837523][ T6152] ? __pfx_call_sbin_request_key+0x10/0x10 [ 89.837546][ T6152] ? key_instantiate_and_link+0x39d/0x4b0 [ 89.837561][ T6152] ? key_alloc+0x573/0x1330 [ 89.837577][ T6152] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 89.837606][ T6152] ? request_key_auth_new+0x72d/0xb40 [ 89.837623][ T6152] ? __pfx_request_key_auth_new+0x10/0x10 [ 89.837644][ T6152] ? __pfx_call_sbin_request_key+0x10/0x10 [ 89.837666][ T6152] request_key_and_link+0x110b/0x13e0 [ 89.837684][ T6152] ? __pfx_request_key_and_link+0x10/0x10 [ 89.837697][ T6152] ? key_type_lookup+0x1e/0x100 [ 89.837716][ T6152] ? __pfx_key_default_cmp+0x10/0x10 [ 89.837732][ T6152] ? __pfx_keyring_search_iterator+0x10/0x10 [ 89.837749][ T6152] ? __pfx_down_read+0x10/0x10 [ 89.837771][ T6152] ? _copy_from_user+0x59/0xd0 [ 89.837793][ T6152] __do_sys_request_key+0x2a2/0x3c0 [ 89.837812][ T6152] ? __pfx___do_sys_request_key+0x10/0x10 [ 89.837839][ T6152] do_syscall_64+0x123/0x7b0 [ 89.837859][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.837873][ T6152] RIP: 0033:0x7f892a9a8f19 [ 89.837887][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.837900][ T6152] RSP: 002b:00007f892b7a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 89.837915][ T6152] RAX: ffffffffffffffda RBX: 00007f892ac25fa0 RCX: 00007f892a9a8f19 [ 89.837923][ T6152] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0 [ 89.837932][ T6152] RBP: 00007f892aa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 89.837940][ T6152] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 89.837949][ T6152] R13: 00007f892ac26038 R14: 00007f892ac25fa0 R15: 00007ffe9a4adec8 [ 89.837969][ T6152] [ 89.843764][ T31] audit: type=1400 audit(1794332547.125:343): avc: denied { load_policy } for pid=6153 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.982657][ T6155] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.982828][ T6155] SELinux: failed to load policy [ 90.152839][ T31] audit: type=1400 audit(1794332547.435:344): avc: denied { bind } for pid=6158 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.184951][ T31] audit: type=1400 audit(1794332547.465:345): avc: denied { setopt } for pid=6158 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.222207][ T31] audit: type=1400 audit(1794332547.495:346): avc: denied { write } for pid=6158 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.376062][ T6165] loop6: detected capacity change from 0 to 8 [ 90.541916][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.703011][ T30] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=1.00 [ 90.715817][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.732253][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.732276][ T30] usb 2-1: Product: syz [ 90.732290][ T30] usb 2-1: Manufacturer: syz [ 90.732303][ T30] usb 2-1: SerialNumber: syz [ 90.773311][ T30] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 90.773331][ T30] cdc_wdm 2-1:1.0: Unknown control protocol [ 90.847562][ T6177] input: syz1 as /devices/virtual/input/input10 [ 90.878341][ T31] audit: type=1400 audit(1794332548.155:347): avc: denied { sqpoll } for pid=6178 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.900089][ T31] audit: type=1400 audit(1794332548.175:348): avc: denied { map } for pid=6178 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.900233][ T31] audit: type=1400 audit(1794332548.175:349): avc: denied { read write } for pid=6178 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.033288][ T31] audit: type=1400 audit(1794332548.315:350): avc: denied { append } for pid=6184 comm="syz.4.120" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.172001][ T30] usb 2-1: USB disconnect, device number 4 [ 91.256288][ T6189] nvmet: Invalid value 'tc' for trtype [ 91.485036][ T6196] random: crng reseeded on system resumption [ 93.721802][ T5823] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.713415][ T5823] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 94.714280][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.714316][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.714339][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.714358][ T5823] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.716464][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.716484][ T5823] usb 3-1: Product: syz [ 94.716498][ T5823] usb 3-1: Manufacturer: syz [ 94.722776][ T5823] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 94.723794][ T5823] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 94.723836][ T5823] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 94.969296][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 94.969313][ T31] audit: type=1400 audit(1794332552.245:364): avc: denied { accept } for pid=6244 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.005808][ T5823] usb 3-1: USB disconnect, device number 2 [ 95.021537][ T5823] garmin_gps 3-1:1.0: device disconnected [ 95.226521][ T31] audit: type=1400 audit(1794332552.505:365): avc: denied { mounton } for pid=6247 comm="syz.1.147" path="/27/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.300277][ T31] audit: type=1400 audit(1794332552.575:366): avc: denied { ioctl } for pid=6231 comm="syz.4.140" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0xc00c642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.522172][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.674054][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 95.676412][ T11] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.679738][ T11] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 95.679763][ T11] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.679775][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.679787][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.679799][ T11] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.679818][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.788951][ T31] audit: type=1400 audit(1794332553.065:367): avc: denied { read } for pid=6265 comm="syz.2.154" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.814164][ T31] audit: type=1400 audit(1794332553.065:368): avc: denied { open } for pid=6265 comm="syz.2.154" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.890657][ T31] audit: type=1400 audit(1794332553.165:369): avc: denied { block_suspend } for pid=6265 comm="syz.2.154" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.933410][ T31] audit: type=1400 audit(1794332553.205:370): avc: denied { write } for pid=6270 comm="syz.4.155" path="socket:[11098]" dev="sockfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.985376][ T11] usb 1-1: GET_CAPABILITIES returned 0 [ 95.985415][ T11] usbtmc 1-1:16.0: can't read capabilities [ 96.207531][ T3218] usb 1-1: USB disconnect, device number 5 [ 96.239431][ T31] audit: type=1400 audit(1794332553.515:371): avc: denied { create } for pid=6274 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.263265][ T31] audit: type=1400 audit(1794332553.545:372): avc: denied { write } for pid=6274 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.885580][ T31] audit: type=1400 audit(1794332554.165:373): avc: denied { name_bind } for pid=6284 comm="syz.0.160" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 96.970984][ T6292] netlink: 'syz.4.159': attribute type 24 has an invalid length. [ 96.971004][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 97.016318][ T6292] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 100.517392][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 100.517409][ T31] audit: type=1400 audit(1794332557.395:400): avc: denied { mount } for pid=6319 comm="syz.3.171" name="/" dev="rpc_pipefs" ino=11306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 100.585385][ T3218] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.749981][ T3218] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 100.752182][ T3218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.752218][ T3218] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 100.752236][ T3218] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.755688][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 100.755706][ T3218] usb 1-1: Product: syz [ 100.755718][ T3218] usb 1-1: Manufacturer: syz [ 100.761506][ T6310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.763704][ T3218] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 100.777364][ T3218] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 101.000337][ T31] audit: type=1400 audit(1794332558.275:401): avc: denied { read } for pid=6336 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.001351][ T5823] usb 1-1: USB disconnect, device number 6 [ 101.015902][ T5823] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 101.016361][ T5823] garmin_gps 1-1:1.0: device disconnected [ 101.020061][ T6334] FAULT_INJECTION: forcing a failure. [ 101.020061][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 101.020082][ T6334] CPU: 1 UID: 0 PID: 6334 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT(full) [ 101.020100][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 101.020109][ T6334] Call Trace: [ 101.020115][ T6334] [ 101.020122][ T6334] dump_stack_lvl+0x100/0x190 [ 101.020156][ T6334] should_fail_ex.cold+0x5/0xa [ 101.020181][ T6334] should_failslab+0xc2/0x120 [ 101.020202][ T6334] __kmalloc_noprof+0xfc/0x840 [ 101.020219][ T6334] ? kvm_io_bus_register_dev+0x1d2/0x720 [ 101.020248][ T6334] kvm_io_bus_register_dev+0x1d2/0x720 [ 101.020278][ T6334] kvm_pic_init+0x1fd/0x380 [ 101.020301][ T6334] kvm_arch_vm_ioctl+0xdf2/0x1650 [ 101.020321][ T6334] ? __lock_acquire+0x5c0/0x1f40 [ 101.020344][ T6334] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 101.020368][ T6334] ? __lock_acquire+0x5c0/0x1f40 [ 101.020396][ T6334] ? __lock_acquire+0x5c0/0x1f40 [ 101.020420][ T6334] ? lock_acquire+0x1d1/0x380 [ 101.020440][ T6334] ? unwind_next_frame+0xbd/0x2090 [ 101.020462][ T6334] ? lock_acquire+0x1d1/0x380 [ 101.020483][ T6334] ? is_bpf_text_address+0x25/0x1a0 [ 101.020503][ T6334] ? find_held_lock+0x2b/0x80 [ 101.020520][ T6334] ? is_bpf_text_address+0x8a/0x1a0 [ 101.020539][ T6334] ? is_bpf_text_address+0x8a/0x1a0 [ 101.020559][ T6334] ? bpf_ksym_find+0x128/0x1c0 [ 101.020581][ T6334] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.020604][ T6334] ? is_bpf_text_address+0x94/0x1a0 [ 101.020638][ T6334] ? tomoyo_path_number_perm+0x46d/0x580 [ 101.020663][ T6334] ? stack_trace_save+0x8e/0xc0 [ 101.020684][ T6334] ? __pfx_stack_trace_save+0x10/0x10 [ 101.020705][ T6334] ? stack_depot_save_flags+0x27/0xa10 [ 101.020722][ T6334] ? __lock_acquire+0x5c0/0x1f40 [ 101.020744][ T6334] ? tomoyo_path_number_perm+0x46d/0x580 [ 101.020768][ T6334] ? kasan_save_stack+0x3f/0x50 [ 101.020785][ T6334] ? kasan_save_stack+0x30/0x50 [ 101.020802][ T6334] ? kasan_save_track+0x14/0x30 [ 101.020825][ T6334] ? kasan_save_free_info+0x3b/0x70 [ 101.020849][ T6334] ? __kasan_slab_free+0x5f/0x80 [ 101.020866][ T6334] ? kfree+0x22b/0x6d0 [ 101.020887][ T6334] ? tomoyo_path_number_perm+0x46d/0x580 [ 101.020910][ T6334] ? security_file_ioctl+0xd3/0x230 [ 101.020936][ T6334] ? __x64_sys_ioctl+0xb7/0x210 [ 101.020952][ T6334] ? do_syscall_64+0x123/0x7b0 [ 101.020970][ T6334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.021005][ T6334] kvm_vm_ioctl+0xdca/0x2950 [ 101.021034][ T6334] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 101.021061][ T6334] ? kasan_quarantine_put+0x104/0x240 [ 101.021077][ T6334] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.021098][ T6334] ? find_held_lock+0x2b/0x80 [ 101.021115][ T6334] ? tomoyo_path_number_perm+0x28f/0x580 [ 101.021138][ T6334] ? tomoyo_path_number_perm+0x28f/0x580 [ 101.021166][ T6334] ? tomoyo_path_number_perm+0x188/0x580 [ 101.021192][ T6334] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 101.021217][ T6334] ? __pfx_futex_wait+0x10/0x10 [ 101.021245][ T6334] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.021275][ T6334] ? do_vfs_ioctl+0x226/0x13e0 [ 101.021293][ T6334] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.021308][ T6334] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 101.021328][ T6334] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.021349][ T6334] ? __fget_files+0x34/0x3d0 [ 101.021380][ T6334] ? selinux_file_ioctl+0x1e0/0x290 [ 101.021396][ T6334] ? selinux_file_ioctl+0x1e7/0x290 [ 101.021413][ T6334] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 101.021435][ T6334] __x64_sys_ioctl+0x18e/0x210 [ 101.021454][ T6334] do_syscall_64+0x123/0x7b0 [ 101.021476][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.021492][ T6334] RIP: 0033:0x7f892a9a8f19 [ 101.021506][ T6334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.021521][ T6334] RSP: 002b:00007f892b7a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.021542][ T6334] RAX: ffffffffffffffda RBX: 00007f892ac25fa0 RCX: 00007f892a9a8f19 [ 101.021552][ T6334] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 101.021561][ T6334] RBP: 00007f892aa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 101.021571][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.021580][ T6334] R13: 00007f892ac26038 R14: 00007f892ac25fa0 R15: 00007ffe9a4adec8 [ 101.021604][ T6334] [ 101.079116][ T31] audit: type=1400 audit(1794332558.355:402): avc: denied { ioctl } for pid=6336 comm="syz.4.179" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=925 ioctlcmd=0x40146f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 101.314148][ T6341] Zero length message leads to an empty skb [ 101.968677][ T6347] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 101.971292][ T6347] exFAT-fs (nbd4): unable to read boot sector [ 101.971333][ T6347] exFAT-fs (nbd4): failed to read boot sector [ 101.971367][ T6347] exFAT-fs (nbd4): failed to recognize exfat type [ 102.095905][ T31] audit: type=1400 audit(1794332559.355:403): avc: denied { write } for pid=6342 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.096020][ T31] audit: type=1400 audit(1794332559.355:404): avc: denied { nlmsg_write } for pid=6342 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.666074][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 103.034223][ T31] audit: type=1400 audit(1794332560.315:405): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 103.091918][ T31] audit: type=1400 audit(1794332560.375:406): avc: denied { setopt } for pid=6353 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.288718][ T6367] block nbd4: shutting down sockets [ 103.476121][ T31] audit: type=1400 audit(1794332560.755:407): avc: denied { read write } for pid=6368 comm="syz.2.187" name="macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.505027][ T31] audit: type=1400 audit(1794332560.785:408): avc: denied { open } for pid=6368 comm="syz.2.187" path="/macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.794848][ T31] audit: type=1400 audit(1794332561.075:409): avc: denied { bind } for pid=6377 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.851324][ T6381] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 103.851339][ T6381] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 103.851350][ T6381] overlayfs: missing 'lowerdir' [ 104.831916][ T1221] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 105.029112][ T1221] usb 5-1: not running at top speed; connect to a high speed hub [ 105.029142][ T1221] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 105.037706][ T1221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.037727][ T1221] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.069208][ T1221] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 105.069229][ T1221] usb 5-1: Product: syz [ 105.069237][ T1221] usb 5-1: Manufacturer: syz [ 105.097553][ T1221] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 105.107364][ T1221] uvcvideo 5-1:1.0: No valid video chain found. [ 105.251714][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.303412][ T5728] usb 5-1: USB disconnect, device number 4 [ 105.404306][ T11] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 105.406822][ T11] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.537255][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 105.537272][ T11] usb 4-1: Product: syz [ 105.537281][ T11] usb 4-1: Manufacturer: syz [ 105.537288][ T11] usb 4-1: SerialNumber: syz [ 106.068978][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 106.069012][ T31] audit: type=1400 audit(1794332563.335:415): avc: denied { firmware_load } for pid=6419 comm="syz.0.209" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 106.433225][ T6423] syz.0.209 (6423) used greatest stack depth: 19280 bytes left [ 106.609069][ T11] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 106.666256][ T31] audit: type=1400 audit(1794332563.945:416): avc: denied { read write } for pid=6424 comm="syz.1.211" name="sg0" dev="devtmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.695573][ T31] audit: type=1400 audit(1794332563.955:417): avc: denied { open } for pid=6424 comm="syz.1.211" path="/dev/sg0" dev="devtmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.695619][ T31] audit: type=1400 audit(1794332563.955:418): avc: denied { ioctl } for pid=6424 comm="syz.1.211" path="/dev/sg0" dev="devtmpfs" ino=881 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.790967][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 106.806860][ T31] audit: type=1400 audit(1794332564.085:419): avc: denied { read write } for pid=6407 comm="syz.3.204" name="lp0" dev="devtmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 106.808594][ T31] audit: type=1400 audit(1794332564.085:420): avc: denied { open } for pid=6407 comm="syz.3.204" path="/dev/usb/lp0" dev="devtmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 107.238285][ T31] audit: type=1400 audit(1794332564.145:421): avc: denied { read } for pid=6431 comm="syz.0.214" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.292089][ T5823] usb 4-1: USB disconnect, device number 5 [ 107.301458][ T5823] usblp0: removed [ 107.317158][ T31] audit: type=1400 audit(1794332564.595:422): avc: denied { name_connect } for pid=6441 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 107.393410][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.543392][ T11] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.544240][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.547424][ T11] usb 2-1: config 0 descriptor?? [ 107.656648][ T31] audit: type=1400 audit(1794332564.935:423): avc: denied { mount } for pid=6448 comm="syz.0.220" name="/" dev="autofs" ino=11488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 107.755397][ T11] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 107.869742][ T31] audit: type=1400 audit(1794332565.145:424): avc: denied { bind } for pid=6453 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.980890][ T11] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 107.980914][ T11] [drm] Initialized udl on minor 1 [ 108.071791][ T5721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.201724][ T5721] usb 1-1: device descriptor read/64, error -71 [ 108.205203][ T6465] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.205217][ T6465] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 108.205380][ T6465] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.205389][ T6465] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 108.375336][ T6471] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 108.380705][ T6471] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 108.381307][ T6471] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 108.381335][ T6471] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 108.381353][ T6471] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 108.381370][ T6471] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 108.381388][ T6471] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 108.422579][ T6471] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 108.422630][ T6471] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 108.422661][ T6471] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 108.441730][ T5721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.571938][ T5721] usb 1-1: device descriptor read/64, error -71 [ 108.683003][ T5721] usb usb1-port1: attempt power cycle [ 109.010196][ T6486] : renamed from bond0 (while UP) [ 109.021754][ T5721] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 109.043925][ T5721] usb 1-1: device descriptor read/8, error -71 [ 109.281776][ T5721] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 109.302378][ T5721] usb 1-1: device descriptor read/8, error -71 [ 109.311761][ T4953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.413233][ T5721] usb usb1-port1: unable to enumerate USB device [ 109.474078][ T4953] usb 4-1: Using ep0 maxpacket: 32 [ 109.476187][ T4953] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 109.477111][ T4953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.477128][ T4953] usb 4-1: config 0 has no interfaces? [ 109.480184][ T4953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.480224][ T4953] usb 4-1: Product: syz [ 109.480236][ T4953] usb 4-1: Manufacturer: syz [ 109.480247][ T4953] usb 4-1: SerialNumber: syz [ 109.532470][ T4953] usb 4-1: config 0 descriptor?? [ 109.635685][ T6490] tipc: Started in network mode [ 109.635701][ T6490] tipc: Node identity 4, cluster identity 4711 [ 109.635707][ T6490] tipc: Node number set to 4 [ 110.781651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.801653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.480851][ T1221] usb 4-1: USB disconnect, device number 6 [ 112.855042][ T6530] sch_fq: defrate 16 ignored. [ 113.911265][ T11] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 113.921603][ T11] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 113.922104][ T5721] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 113.941944][ T11] usb 2-1: USB disconnect, device number 5 [ 113.953180][ T5721] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.953454][ T5721] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 114.161620][ T6544] ip6erspan0: entered allmulticast mode [ 114.190703][ T6547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'. [ 114.891832][ T3218] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.041865][ T3218] usb 4-1: Using ep0 maxpacket: 16 [ 115.050440][ T3218] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 115.115260][ T3218] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.115290][ T3218] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.172884][ T3218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.173251][ T3218] usb 4-1: Product: syz [ 115.173289][ T3218] usb 4-1: Manufacturer: syz [ 115.173323][ T3218] usb 4-1: SerialNumber: syz [ 115.311770][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 115.311797][ T31] audit: type=1400 audit(1794332572.535:429): avc: denied { unlink } for pid=6559 comm="syz.4.261" name="#6" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.426066][ T3218] usb 4-1: 0:2 : does not exist [ 115.555327][ T3218] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 115.679223][ T3218] usb 4-1: USB disconnect, device number 7 [ 115.728886][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.747079][ T6572] overlayfs: failed to resolve './file1/file0': -2 [ 115.791708][ T11] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 115.814633][ T6576] batman_adv: batadv0: Adding interface: syzkaller0 [ 115.814649][ T6576] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.814674][ T6576] batman_adv: batadv0: Interface activated: syzkaller0 [ 115.972160][ T11] usb 2-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 115.973172][ T11] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.973192][ T11] usb 2-1: config 0 has no interface number 0 [ 115.975079][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.975098][ T11] usb 2-1: Product: syz [ 115.975111][ T11] usb 2-1: Manufacturer: syz [ 115.975124][ T11] usb 2-1: SerialNumber: syz [ 115.977242][ T11] usb 2-1: config 0 descriptor?? [ 116.039469][ T11] usb 2-1: selecting invalid altsetting 1 [ 116.040321][ T11] dvb_ttusb_budget: ttusb_init_controller: error [ 116.040386][ T11] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 116.320288][ T11] DVB: Unable to find symbol stv0299_attach() [ 116.371159][ T11] DVB: Unable to find symbol tda8083_attach() [ 116.371168][ T11] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 116.379090][ T6575] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 116.400824][ T6575] batman_adv: batadv0: Removing interface: syzkaller0 [ 116.410484][ T11] usb 2-1: USB disconnect, device number 6 [ 116.498535][ T31] audit: type=1400 audit(1794332573.775:430): avc: denied { connect } for pid=6585 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.500715][ T6586] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 116.527263][ T31] audit: type=1400 audit(1794332573.805:431): avc: denied { connect } for pid=6587 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.535587][ T6588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 116.641592][ T31] audit: type=1400 audit(1794332573.915:432): avc: denied { ioctl } for pid=6593 comm="syz.4.275" path="socket:[11994]" dev="sockfs" ino=11994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.654264][ T31] audit: type=1400 audit(1794332573.935:433): avc: denied { create } for pid=6596 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.751206][ T6601] overlayfs: failed to resolve './file1/file0': -2 [ 117.069659][ T6618] IPVS: Scheduler module ip_vs_sip not found [ 117.070244][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 117.211750][ T4953] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 117.307951][ T6632] overlayfs: failed to resolve './file1/file0': -2 [ 117.892205][ T4953] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 117.893114][ T4953] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.895403][ T4953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 117.895424][ T4953] usb 1-1: Product: syz [ 117.895438][ T4953] usb 1-1: Manufacturer: syz [ 117.895451][ T4953] usb 1-1: SerialNumber: syz [ 117.964752][ T6640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.294'. [ 118.671190][ T31] audit: type=1400 audit(1794332575.335:434): avc: denied { write } for pid=6637 comm="syz.2.292" name="netlink" dev="proc" ino=4026533498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 118.707544][ T4953] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 118.707642][ T31] audit: type=1400 audit(1794332575.985:435): avc: denied { bind } for pid=6641 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.707905][ T31] audit: type=1400 audit(1794332575.985:436): avc: denied { name_bind } for pid=6641 comm="syz.3.295" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 118.709258][ T31] audit: type=1400 audit(1794332575.985:437): avc: denied { node_bind } for pid=6641 comm="syz.3.295" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 118.872960][ T31] audit: type=1400 audit(1794332576.155:438): avc: denied { create } for pid=6646 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 118.876302][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 118.876345][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 118.888871][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 118.896427][ T6647] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.896454][ T6647] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.896486][ T6647] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.982741][ T5823] usb 1-1: USB disconnect, device number 11 [ 118.988476][ T5823] usblp0: removed [ 119.051975][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 119.059055][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 119.059708][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 119.064859][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 119.067005][ T6647] wlan1 speed is unknown, defaulting to 1000 [ 119.336670][ T6658] kvm: pic: non byte write [ 121.807792][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 121.807808][ T31] audit: type=1400 audit(1794332579.085:442): avc: denied { watch } for pid=6722 comm="syz.4.331" path="/59/file1" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.810660][ T31] audit: type=1400 audit(1794332579.085:443): avc: denied { watch_sb watch_reads } for pid=6722 comm="syz.4.331" path="/59/file1" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.813007][ T31] audit: type=1400 audit(1794332579.095:444): avc: denied { execute } for pid=6722 comm="syz.4.331" path="/59/file1" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.223664][ T6773] nbd: socks must be embedded in a SOCK_ITEM attr [ 123.392845][ T4953] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.451877][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 123.545047][ T4953] usb 5-1: Using ep0 maxpacket: 32 [ 123.545636][ T4953] usb 5-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 123.549054][ T4953] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.549077][ T4953] usb 5-1: config 0 has no interface number 0 [ 123.549108][ T4953] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 123.549127][ T4953] usb 5-1: config 0 interface 1 has no altsetting 0 [ 123.550887][ T4953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.550908][ T4953] usb 5-1: Product: syz [ 123.550922][ T4953] usb 5-1: Manufacturer: syz [ 123.550936][ T4953] usb 5-1: SerialNumber: syz [ 123.712737][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 123.715169][ T4953] usb 5-1: config 0 descriptor?? [ 123.791689][ T11] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 123.901378][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 123.941708][ T5744] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 123.941858][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 123.942816][ T11] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.975959][ T11] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 123.976002][ T11] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.976022][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.976042][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.976060][ T11] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.976093][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.045324][ T4953] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 124.062887][ T4953] cx231xx 5-1:0.1: Failed to read PCB config [ 124.063000][ T4953] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 124.071959][ T4953] usb 5-1: USB disconnect, device number 5 [ 124.123879][ T5744] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.124344][ T5744] usb 2-1: not running at top speed; connect to a high speed hub [ 124.124368][ T5744] usb 2-1: New USB device found: idVendor=0421, idProduct=04b2, bcdDevice=ed.c2 [ 124.125255][ T5744] usb 2-1: config 3 has an invalid interface number: 26 but max is 1 [ 124.125293][ T5744] usb 2-1: config 3 has an invalid interface number: 156 but max is 1 [ 124.125311][ T5744] usb 2-1: config 3 has no interface number 0 [ 124.125325][ T5744] usb 2-1: config 3 has no interface number 1 [ 124.125363][ T5744] usb 2-1: config 3 interface 26 altsetting 31 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 124.125387][ T5744] usb 2-1: config 3 interface 26 altsetting 31 endpoint 0x81 has invalid maxpacket 8954, setting to 64 [ 124.125430][ T5744] usb 2-1: config 3 interface 26 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.125454][ T5744] usb 2-1: config 3 interface 26 has no altsetting 0 [ 124.125470][ T5744] usb 2-1: config 3 interface 156 has no altsetting 0 [ 124.128278][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.128298][ T5744] usb 2-1: Product: syz [ 124.128311][ T5744] usb 2-1: Manufacturer: syz [ 124.128324][ T5744] usb 2-1: SerialNumber: syz [ 124.268125][ T6788] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 124.271183][ T11] usb 1-1: GET_CAPABILITIES returned 0 [ 124.271218][ T11] usbtmc 1-1:16.0: can't read capabilities [ 124.280622][ T6798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.361'. [ 124.387728][ T6804] Bluetooth: MGMT ver 1.23 [ 124.474637][ T5744] rndis_host 2-1:3.26: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 124.475079][ T5744] cdc_acm 2-1:3.26: Zero length descriptor references [ 124.475100][ T5744] cdc_acm 2-1:3.26: probe with driver cdc_acm failed with error -22 [ 124.476038][ T31] audit: type=1400 audit(1794332581.755:445): avc: denied { write } for pid=6782 comm="syz.0.355" name="usbtmc0" dev="devtmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.482963][ T11] usb 1-1: USB disconnect, device number 12 [ 124.489594][ T5744] usb 2-1: USB disconnect, device number 7 [ 124.551947][ T4953] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.701784][ T4953] usb 5-1: Using ep0 maxpacket: 32 [ 124.702264][ T4953] usb 5-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 124.703082][ T4953] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.703102][ T4953] usb 5-1: config 0 has no interface number 0 [ 124.703131][ T4953] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.703148][ T4953] usb 5-1: config 0 interface 1 has no altsetting 0 [ 124.707732][ T4953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.707753][ T4953] usb 5-1: Product: syz [ 124.707766][ T4953] usb 5-1: Manufacturer: syz [ 124.707786][ T4953] usb 5-1: SerialNumber: syz [ 124.712148][ T4953] usb 5-1: config 0 descriptor?? [ 124.919077][ T4953] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 124.919862][ T4953] cx231xx 5-1:0.1: bad scenario!!!!! [ 124.919862][ T4953] config_info=0 [ 124.919874][ T4953] cx231xx 5-1:0.1: Failed to read PCB config [ 125.033656][ T3218] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.060042][ T31] audit: type=1400 audit(1794332582.335:446): avc: denied { create } for pid=6826 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.139166][ T11] usb 5-1: USB disconnect, device number 6 [ 125.227495][ T3218] usb 3-1: Using ep0 maxpacket: 32 [ 125.230046][ T3218] usb 3-1: New USB device found: idVendor=05ac, idProduct=1871, bcdDevice=82.84 [ 125.241560][ T3218] usb 3-1: config 7 has an invalid interface number: 6 but max is 0 [ 125.241576][ T3218] usb 3-1: config 7 has no interface number 0 [ 125.241590][ T3218] usb 3-1: config 7 interface 6 has no altsetting 0 [ 125.301344][ T3218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.301361][ T3218] usb 3-1: Product: syz [ 125.301369][ T3218] usb 3-1: Manufacturer: syz [ 125.301376][ T3218] usb 3-1: SerialNumber: syz [ 125.341834][ T3220] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.425228][ T5744] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.491696][ T3220] usb 1-1: Using ep0 maxpacket: 8 [ 125.492279][ T3220] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.493974][ T3220] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 125.494020][ T3220] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.494041][ T3220] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.494084][ T3220] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.494105][ T3220] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.494138][ T3220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.574600][ T5744] usb 2-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 125.575035][ T5744] usb 2-1: config 0 has no interfaces? [ 125.579209][ T5744] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 125.579228][ T5744] usb 2-1: Product: syz [ 125.579240][ T5744] usb 2-1: Manufacturer: syz [ 125.581113][ T5744] usb 2-1: config 0 descriptor?? [ 125.620343][ T3218] usb 3-1: USB disconnect, device number 3 [ 125.699567][ T3220] usb 1-1: GET_CAPABILITIES returned 0 [ 125.699608][ T3220] usbtmc 1-1:16.0: can't read capabilities [ 125.722647][ T31] audit: type=1400 audit(1794332583.005:447): avc: denied { create } for pid=6851 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.725208][ T31] audit: type=1400 audit(1794332583.005:448): avc: denied { connect } for pid=6851 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.725941][ T31] audit: type=1400 audit(1794332583.005:449): avc: denied { write } for pid=6851 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.772284][ T31] audit: type=1400 audit(1794332583.045:450): avc: denied { bind } for pid=6853 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.772327][ T31] audit: type=1400 audit(1794332583.045:451): avc: denied { setopt } for pid=6853 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.796874][ T5744] usb 2-1: USB disconnect, device number 8 [ 126.732484][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.733268][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.733309][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 126.740001][ T3220] usb 1-1: USB disconnect, device number 13 [ 127.355173][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.355241][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.880649][ T6884] FAULT_INJECTION: forcing a failure. [ 127.880649][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 127.880682][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.1.395 Not tainted syzkaller #0 PREEMPT(full) [ 127.880702][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.880713][ T6884] Call Trace: [ 127.880719][ T6884] [ 127.880726][ T6884] dump_stack_lvl+0x100/0x190 [ 127.880762][ T6884] should_fail_ex.cold+0x5/0xa [ 127.880791][ T6884] should_failslab+0xc2/0x120 [ 127.880814][ T6884] kmem_cache_alloc_noprof+0x92/0x6a0 [ 127.880844][ T6884] ? sk_prot_alloc+0x60/0x2a0 [ 127.880877][ T6884] sk_prot_alloc+0x60/0x2a0 [ 127.880907][ T6884] sk_alloc+0x36/0xe80 [ 127.880930][ T6884] inet_create+0x3a0/0x1060 [ 127.880956][ T6884] ? inet_create+0x94/0x1060 [ 127.880984][ T6884] __sock_create+0x339/0x860 [ 127.881016][ T6884] start_sync_thread+0x8d5/0x2b60 [ 127.881040][ T6884] ? __pfx_sync_thread_master+0x10/0x10 [ 127.881075][ T6884] ? __pfx_start_sync_thread+0x10/0x10 [ 127.881096][ T6884] ? lock_acquire+0x1d1/0x380 [ 127.881120][ T6884] ? __might_fault+0xc5/0x140 [ 127.881143][ T6884] ? find_held_lock+0x2b/0x80 [ 127.881163][ T6884] ? __might_fault+0xc5/0x140 [ 127.881197][ T6884] ? do_ip_vs_set_ctl+0x471/0xc90 [ 127.881222][ T6884] do_ip_vs_set_ctl+0x471/0xc90 [ 127.881251][ T6884] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 127.881275][ T6884] ? rcu_is_watching+0x13/0xc0 [ 127.881303][ T6884] ? find_held_lock+0x2b/0x80 [ 127.881323][ T6884] ? nf_sockopt_find.isra.0+0x222/0x290 [ 127.881355][ T6884] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.881395][ T6884] ? nf_setsockopt+0x8d/0xf0 [ 127.881410][ T6884] nf_setsockopt+0x8d/0xf0 [ 127.881431][ T6884] ip_setsockopt+0xcb/0xf0 [ 127.881459][ T6884] tcp_setsockopt+0xa7/0x100 [ 127.881486][ T6884] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 127.881521][ T6884] do_sock_setsockopt+0xf3/0x1d0 [ 127.881554][ T6884] __sys_setsockopt+0x195/0x220 [ 127.881582][ T6884] __x64_sys_setsockopt+0xbd/0x160 [ 127.881604][ T6884] ? do_syscall_64+0xae/0x7b0 [ 127.881628][ T6884] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.881647][ T6884] do_syscall_64+0x123/0x7b0 [ 127.881671][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.881690][ T6884] RIP: 0033:0x7f892a9a8f19 [ 127.881707][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.881725][ T6884] RSP: 002b:00007f89287d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.881744][ T6884] RAX: ffffffffffffffda RBX: 00007f892ac26270 RCX: 00007f892a9a8f19 [ 127.881756][ T6884] RDX: 000000000000048b RSI: 0000000000000000 RDI: 000000000000000b [ 127.881766][ T6884] RBP: 00007f892aa37f6d R08: 0000000000000018 R09: 0000000000000000 [ 127.881777][ T6884] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000000 [ 127.881788][ T6884] R13: 00007f892ac26308 R14: 00007f892ac26270 R15: 00007ffe9a4adec8 [ 127.881815][ T6884] [ 127.881994][ T6884] IPVS: Error during creation of socket; terminating [ 127.976363][ T11] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.153975][ T31] audit: type=1400 audit(1794332585.425:452): avc: denied { create } for pid=6886 comm="syz.2.396" name="#12" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.158463][ T31] audit: type=1400 audit(1794332585.435:453): avc: denied { link } for pid=6886 comm="syz.2.396" name="#12" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.158501][ T31] audit: type=1400 audit(1794332585.435:454): avc: denied { rename } for pid=6886 comm="syz.2.396" name="#13" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.686053][ T11] usb 4-1: New USB device found: idVendor=0ccd, idProduct=0080, bcdDevice=1.00 [ 128.686915][ T11] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.688624][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.688646][ T11] usb 4-1: Product: syz [ 128.688659][ T11] usb 4-1: Manufacturer: syz [ 128.688673][ T11] usb 4-1: SerialNumber: syz [ 128.947621][ T11] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 128.947654][ T11] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 128.970620][ T11] usb 4-1: USB disconnect, device number 8 [ 129.042012][ T5728] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 129.275665][ T5728] usb 2-1: New USB device found: idVendor=1294, idProduct=1320, bcdDevice=0.00 [ 129.302451][ T5728] usb 2-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.304198][ T5728] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.305834][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.374541][ T5728] usb 2-1: config 0 descriptor?? [ 129.402523][ T5823] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 129.460526][ T31] audit: type=1326 audit(1794332586.735:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.406" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ceda8f19 code=0x7ffc0000 [ 129.461282][ T31] audit: type=1326 audit(1794332586.735:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.406" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ceda8f19 code=0x7ffc0000 [ 129.490690][ T31] audit: type=1326 audit(1794332586.745:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.406" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00ceda8f19 code=0x7ffc0000 [ 129.490739][ T31] audit: type=1326 audit(1794332586.745:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.406" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ceda8f19 code=0x7ffc0000 [ 129.490777][ T31] audit: type=1326 audit(1794332586.745:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.406" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ceda8f19 code=0x7ffc0000 [ 129.490821][ T31] audit: type=1326 audit(1794332586.745:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.406" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f00ceda8f19 code=0x7ffc0000 [ 129.490859][ T31] audit: type=1326 audit(1794332586.745:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.406" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ceda8f19 code=0x7ffc0000 [ 129.629203][ T5823] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.670708][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.670733][ T5823] usb 5-1: Product: syz [ 129.670747][ T5823] usb 5-1: Manufacturer: syz [ 129.670760][ T5823] usb 5-1: SerialNumber: syz [ 129.702931][ T5823] usb 5-1: config 0 descriptor?? [ 129.833170][ T3218] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 129.936655][ T5823] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 129.992928][ T3218] usb 1-1: Using ep0 maxpacket: 16 [ 129.998834][ T3218] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.038359][ T3218] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 130.054522][ T3218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.106887][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.107041][ T3218] usb 1-1: Product: syz [ 130.107484][ T3218] usb 1-1: Manufacturer: syz [ 130.107597][ T3218] usb 1-1: SerialNumber: syz [ 130.194659][ T3218] usb 1-1: config 0 descriptor?? [ 130.196075][ T5728] usbhid 2-1:0.0: can't add hid device: -71 [ 130.196159][ T5728] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 130.200744][ T5728] usb 2-1: USB disconnect, device number 9 [ 130.242895][ T3218] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.242926][ T3218] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 130.792797][ T5635] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 130.793712][ T5635] Bluetooth: hci4: Injecting HCI hardware error event [ 130.797005][ T5635] Bluetooth: hci4: hardware error 0x00 [ 130.991797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.324244][ T6930] jffs2: notice: (6930) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.611639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.681654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.851681][ T6930] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 131.964665][ T3218] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 131.965049][ T3218] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 131.965575][ T3218] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 131.965589][ T3218] em28xx 1-1:0.0: No AC97 audio processor [ 132.160980][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 132.236087][ T6946] syz.1.419 uses obsolete (PF_INET,SOCK_PACKET) [ 132.255379][ T6946] TC_ACT_REPEAT abuse ? [ 132.397106][ T5823] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 132.404667][ T5823] usb 5-1: USB disconnect, device number 7 [ 132.468750][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.423'. [ 132.701907][ T5744] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 133.441435][ T5744] usb 4-1: New USB device found: idVendor=1294, idProduct=1320, bcdDevice=0.00 [ 133.468838][ T5744] usb 4-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.468903][ T5744] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.469014][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.560170][ T5744] usb 4-1: config 0 descriptor?? [ 133.660819][ T5728] usb 1-1: USB disconnect, device number 14 [ 133.663005][ T5728] em28xx 1-1:0.0: Disconnecting em28xx [ 133.686126][ T5728] em28xx: Freeing device [ 133.737992][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 133.738025][ T31] audit: type=1400 audit(1794332591.015:463): avc: denied { ioctl } for pid=6971 comm="syz.2.428" path="socket:[13788]" dev="sockfs" ino=13788 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.818427][ T6977] team0: entered allmulticast mode [ 133.818449][ T6977] team_slave_0: entered allmulticast mode [ 133.818464][ T6977] team_slave_1: entered allmulticast mode [ 133.927948][ T6978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 133.927977][ T6978] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 133.927992][ T6978] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 133.928011][ T6978] page_type: f5(slab) [ 133.928027][ T6978] raw: 00fff00000000040 ffff8880216a7a00 dead000000000100 dead000000000122 [ 133.928044][ T6978] raw: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 133.933087][ T6978] head: 00fff00000000040 ffff8880216a7a00 dead000000000100 dead000000000122 [ 133.933104][ T6978] head: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 133.933119][ T6978] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 133.933133][ T6978] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 133.933141][ T6978] page dumped because: unmovable page [ 133.933148][ T6978] page_owner tracks the page as allocated [ 133.933153][ T6978] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5358, tgid 5358 (kworker/0:3), ts 66834621217 [ 133.933179][ T6978] post_alloc_hook+0xfd/0x120 [ 133.933203][ T6978] get_page_from_freelist+0x112f/0x3640 [ 133.933224][ T6978] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 133.933245][ T6978] new_slab+0xb1/0x6d0 [ 133.933263][ T6978] refill_objects+0xe3/0x410 [ 133.933288][ T6978] __pcs_replace_empty_main+0x35e/0x650 [ 133.933307][ T6978] kmem_cache_alloc_node_noprof+0x4ed/0x6e0 [ 133.933321][ T6978] kmalloc_reserve+0x148/0x350 [ 133.933336][ T6978] __alloc_skb+0x185/0x710 [ 133.933352][ T6978] __pskb_copy_fclone+0xfa/0xf40 [ 133.933371][ T6978] hsr_create_tagged_frame+0x141/0xef0 [ 133.933386][ T6978] hsr_forward_skb+0x13ed/0x2a30 [ 133.933401][ T6978] hsr_dev_xmit+0x21c/0x410 [ 133.933421][ T6978] dev_hard_start_xmit+0x121/0x760 [ 133.933436][ T6978] __dev_queue_xmit+0x1bef/0x48d0 [ 133.933452][ T6978] neigh_connected_output+0x3b5/0x5d0 [ 133.933467][ T6978] page last free pid 1 tgid 1 ts 14263956366 stack trace: [ 133.933477][ T6978] free_pages_prepare+0x586/0xe00 [ 133.933496][ T6978] __free_contig_range_common+0x14f/0x250 [ 133.933515][ T6978] destroy_args+0xa8/0x7a0 [ 133.933535][ T6978] debug_vm_pgtable+0x1d69/0x3490 [ 133.933555][ T6978] do_one_initcall+0x11c/0x6f0 [ 133.936570][ T6978] kernel_init_freeable+0x6ea/0x7b0 [ 133.936597][ T6978] kernel_init+0x21/0x1e0 [ 133.936621][ T6978] ret_from_fork+0x730/0xd60 [ 133.936639][ T6978] ret_from_fork_asm+0x1a/0x30 [ 133.956613][ T31] audit: type=1400 audit(1794332591.215:464): avc: denied { read } for pid=4973 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.956656][ T31] audit: type=1400 audit(1794332591.215:465): avc: denied { search } for pid=4973 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.956691][ T31] audit: type=1400 audit(1794332591.215:466): avc: denied { write search } for pid=4973 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.956747][ T31] audit: type=1400 audit(1794332591.215:467): avc: denied { add_name } for pid=4973 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.956788][ T31] audit: type=1400 audit(1794332591.215:468): avc: denied { create } for pid=4973 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.956823][ T31] audit: type=1400 audit(1794332591.215:469): avc: denied { append open } for pid=4973 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.956879][ T31] audit: type=1400 audit(1794332591.215:470): avc: denied { getattr } for pid=4973 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.988838][ T5635] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 134.054383][ T31] audit: type=1400 audit(1794332591.305:471): avc: denied { append } for pid=6987 comm="syz.0.437" name="sg0" dev="devtmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.054427][ T31] audit: type=1400 audit(1794332591.305:472): avc: denied { open } for pid=6987 comm="syz.0.437" path="/dev/sg0" dev="devtmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.076888][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 134.090053][ T5744] usbhid 4-1:0.0: can't add hid device: -71 [ 134.090132][ T5744] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.191897][ T5744] usb 4-1: USB disconnect, device number 9 [ 134.837281][ T7021] input: syz0 as /devices/virtual/input/input12 [ 134.903473][ T5728] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.061744][ T5728] usb 5-1: Using ep0 maxpacket: 8 [ 135.063989][ T5728] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.065289][ T5728] usb 5-1: config 0 has no interfaces? [ 135.065317][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.070107][ T5728] usb 5-1: config 0 descriptor?? [ 135.153365][ T7031] FAULT_INJECTION: forcing a failure. [ 135.153365][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 135.153392][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(full) [ 135.153412][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 135.153423][ T7031] Call Trace: [ 135.153429][ T7031] [ 135.153437][ T7031] dump_stack_lvl+0x100/0x190 [ 135.153469][ T7031] should_fail_ex.cold+0x5/0xa [ 135.153496][ T7031] should_failslab+0xc2/0x120 [ 135.153518][ T7031] __kmalloc_cache_noprof+0x91/0x6d0 [ 135.153543][ T7031] ? io_uring_setup.cold+0x6c/0x1c7e [ 135.153571][ T7031] io_uring_setup.cold+0x6c/0x1c7e [ 135.153591][ T7031] ? lock_acquire+0x1d1/0x380 [ 135.153613][ T7031] ? avc_has_perm_noaudit+0x56/0x470 [ 135.153637][ T7031] ? __pfx_io_uring_setup+0x10/0x10 [ 135.153658][ T7031] ? find_held_lock+0x2b/0x80 [ 135.153676][ T7031] ? avc_has_perm_noaudit+0x11e/0x470 [ 135.153696][ T7031] ? avc_has_perm_noaudit+0x11e/0x470 [ 135.153732][ T7031] ? xfd_validate_state+0x129/0x190 [ 135.153762][ T7031] __x64_sys_io_uring_setup+0xc2/0x170 [ 135.153793][ T7031] do_syscall_64+0x123/0x7b0 [ 135.153817][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.153836][ T7031] RIP: 0033:0x7f00ceda8f19 [ 135.153850][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.153866][ T7031] RSP: 002b:00007f00cfc4afb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 135.153883][ T7031] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f00ceda8f19 [ 135.153894][ T7031] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000000000000224 [ 135.153905][ T7031] RBP: 00007f00cee37f6d R08: 0000000000000000 R09: 0000000000000000 [ 135.153915][ T7031] R10: 0000200000000100 R11: 0000000000000206 R12: 00002000000000c0 [ 135.153926][ T7031] R13: 0000200000000100 R14: 0000200000000080 R15: 00007fff4bf0d338 [ 135.153951][ T7031] [ 136.356029][ T5744] usb 5-1: USB disconnect, device number 8 [ 136.501702][ T30] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 136.662178][ T30] usb 3-1: New USB device found: idVendor=1294, idProduct=1320, bcdDevice=0.00 [ 136.663037][ T30] usb 3-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.663055][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.663070][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.665270][ T30] usb 3-1: config 0 descriptor?? [ 137.077004][ T30] usbhid 3-1:0.0: can't add hid device: -71 [ 137.077089][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 137.083398][ T30] usb 3-1: USB disconnect, device number 4 [ 138.248703][ T7080] bridge0: port 3(macvlan2) entered blocking state [ 138.248806][ T7080] bridge0: port 3(macvlan2) entered disabled state [ 138.248863][ T7080] macvlan2: entered allmulticast mode [ 138.248872][ T7080] bridge0: entered allmulticast mode [ 138.248905][ T7080] bridge0: entered promiscuous mode [ 138.251102][ T7080] macvlan2: left allmulticast mode [ 138.251112][ T7080] bridge0: left allmulticast mode [ 138.283239][ T1221] bridge0: left promiscuous mode [ 138.341390][ T7039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.103980][ T30] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 139.176649][ T4953] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.113752][ T30] usb 5-1: not running at top speed; connect to a high speed hub [ 140.113784][ T30] usb 5-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 140.117733][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.117771][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 140.119391][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.119408][ T30] usb 5-1: Product: syz [ 140.119421][ T30] usb 5-1: Manufacturer: syz [ 140.119432][ T30] usb 5-1: SerialNumber: syz [ 140.130240][ T30] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 140.135887][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 140.163171][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 140.163185][ T31] audit: type=1400 audit(1794332597.445:478): avc: denied { ioctl } for pid=7113 comm="syz.2.485" path="socket:[15067]" dev="sockfs" ino=15067 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.163611][ T30] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 140.174600][ T30] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 140.177759][ T4953] usb 4-1: Using ep0 maxpacket: 16 [ 140.182759][ T30] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 140.192450][ T30] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 140.271521][ T4953] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.295523][ T4953] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 140.295554][ T4953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.297359][ T4953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.297379][ T4953] usb 4-1: Product: syz [ 140.297392][ T4953] usb 4-1: Manufacturer: syz [ 140.297406][ T4953] usb 4-1: SerialNumber: syz [ 140.354632][ T4953] usb 4-1: config 0 descriptor?? [ 140.368142][ T4953] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.368172][ T4953] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 140.494114][ T31] audit: type=1400 audit(1794332597.765:479): avc: denied { mount } for pid=7101 comm="syz.4.479" name="/" dev="ramfs" ino=15080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 140.538041][ T5823] usb 5-1: USB disconnect, device number 9 [ 140.566463][ T5823] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 140.575948][ T5823] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 140.590191][ T5823] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 140.617330][ T5823] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 140.628623][ T5823] keyspan 5-1:1.0: device disconnected [ 140.644640][ T7124] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 140.644890][ T7124] CIFS: Attempting to mount //127.0.0.1/share [ 140.649816][ T7124] CIFS: VFS: Error connecting to socket. Aborting operation. [ 140.649912][ T7124] CIFS: VFS: cifs_mount failed w/return code = -111 [ 141.005003][ T31] audit: type=1400 audit(1794332598.285:480): avc: denied { mounton } for pid=7129 comm="syz.1.494" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 141.091321][ T4953] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 141.142399][ T4953] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 141.772869][ T4953] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 141.773828][ T4953] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 141.775881][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.776067][ T4953] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 141.779763][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.802848][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 141.802869][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.496'. [ 141.905056][ T7145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.179609][ T4953] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 142.179943][ T4953] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 142.180258][ T4953] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 142.202293][ T4953] usb 4-1: USB disconnect, device number 10 [ 142.684657][ T7171] FAULT_INJECTION: forcing a failure. [ 142.684657][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 142.684684][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.2.510 Not tainted syzkaller #0 PREEMPT(full) [ 142.684706][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 142.684718][ T7171] Call Trace: [ 142.684724][ T7171] [ 142.684732][ T7171] dump_stack_lvl+0x100/0x190 [ 142.684769][ T7171] should_fail_ex.cold+0x5/0xa [ 142.684798][ T7171] should_failslab+0xc2/0x120 [ 142.684826][ T7171] kmem_cache_alloc_noprof+0x92/0x6a0 [ 142.684857][ T7171] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 142.684882][ T7171] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 142.684908][ T7171] mmu_topup_memory_caches.part.0+0xf1/0x170 [ 142.684934][ T7171] kvm_mmu_load+0x11a/0x25b0 [ 142.684961][ T7171] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 142.684981][ T7171] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 142.685004][ T7171] ? __pfx_kvm_mmu_load+0x10/0x10 [ 142.685028][ T7171] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 142.685052][ T7171] ? kvm_check_and_inject_events+0x896/0x1050 [ 142.685082][ T7171] vcpu_run+0x4009/0x60d0 [ 142.685119][ T7171] ? __pfx_vcpu_run+0x10/0x10 [ 142.685143][ T7171] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 142.685166][ T7171] ? lock_acquire+0x1d1/0x380 [ 142.685191][ T7171] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 142.685221][ T7171] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 142.685240][ T7171] ? __local_bh_enable_ip+0xa5/0x120 [ 142.685267][ T7171] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 142.685293][ T7171] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 142.685326][ T7171] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 142.685351][ T7171] ? lock_acquire+0x1d1/0x380 [ 142.685377][ T7171] ? do_raw_write_lock+0x11e/0x260 [ 142.685395][ T7171] ? find_held_lock+0x2b/0x80 [ 142.685414][ T7171] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 142.685442][ T7171] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 142.685476][ T7171] kvm_vcpu_ioctl+0x735/0x17b0 [ 142.685508][ T7171] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 142.685537][ T7171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.685571][ T7171] ? do_vfs_ioctl+0x226/0x13e0 [ 142.685592][ T7171] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 142.685609][ T7171] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 142.685633][ T7171] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 142.685656][ T7171] ? __fget_files+0x34/0x3d0 [ 142.685693][ T7171] ? selinux_file_ioctl+0x1e0/0x290 [ 142.685711][ T7171] ? selinux_file_ioctl+0x1e7/0x290 [ 142.685731][ T7171] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 142.685761][ T7171] __x64_sys_ioctl+0x18e/0x210 [ 142.685782][ T7171] do_syscall_64+0x123/0x7b0 [ 142.685815][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.685835][ T7171] RIP: 0033:0x7f0f415a8f19 [ 142.685853][ T7171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.685874][ T7171] RSP: 002b:00007f0f4242e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.685893][ T7171] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f415a8f19 [ 142.685906][ T7171] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 142.685916][ T7171] RBP: 00007f0f41637f6d R08: 0000000000000000 R09: 0000000000000000 [ 142.685926][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.685936][ T7171] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007ffda556a998 [ 142.685962][ T7171] [ 142.959517][ T7184] overlayfs: failed to resolve './file1/file0': -2 [ 143.575614][ T7206] evm: overlay not supported [ 144.007408][ T7215] vivid-000: disconnect [ 144.506745][ T31] audit: type=1400 audit(1794332601.785:481): avc: denied { ioctl } for pid=7218 comm="syz.0.531" path="socket:[15348]" dev="sockfs" ino=15348 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.538602][ T7220] jffs2: notice: (7220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.554857][ T7208] vivid-000: reconnect [ 144.571727][ T31] audit: type=1400 audit(1794332601.825:482): avc: denied { write } for pid=7218 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 144.571777][ T31] audit: type=1400 audit(1794332601.825:483): avc: denied { read } for pid=7218 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 144.655592][ T31] audit: type=1400 audit(1794332601.915:484): avc: denied { write } for pid=7217 comm="syz.2.530" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.663457][ T31] audit: type=1400 audit(1794332601.935:485): avc: denied { add_name } for pid=7217 comm="syz.2.530" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.663497][ T31] audit: type=1400 audit(1794332601.935:486): avc: denied { create } for pid=7217 comm="syz.2.530" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.698413][ T31] audit: type=1400 audit(1794332601.975:487): avc: denied { read write open } for pid=7217 comm="syz.2.530" path="/131/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.946106][ T7237] overlayfs: failed to resolve './file1/file0': -2 [ 144.972717][ T4953] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.583316][ T4953] usb 5-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 145.584191][ T4953] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.584230][ T4953] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.584263][ T4953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.748150][ T7250] nvmet: Invalid value 'i' for adrfam [ 145.937823][ T7260] overlayfs: failed to resolve './file1/file0': -2 [ 145.995160][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 145.995176][ T31] audit: type=1400 audit(1794332603.275:490): avc: denied { ioctl } for pid=7261 comm="syz.1.546" path="socket:[14264]" dev="sockfs" ino=14264 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.941205][ T4953] rtsx_usb 5-1:1.0: probe with driver rtsx_usb failed with error -110 [ 147.148139][ T31] audit: type=1400 audit(1794332603.565:491): avc: denied { mounton } for pid=7263 comm="syz.2.548" path="/135/file0" dev="tmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 147.441796][ T3218] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 148.450626][ T31] audit: type=1400 audit(1794332605.055:492): avc: denied { create } for pid=7282 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.450675][ T31] audit: type=1400 audit(1794332605.105:493): avc: denied { connect } for pid=7282 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.452936][ T3218] usb 2-1: New USB device found: idVendor=1294, idProduct=1320, bcdDevice=0.00 [ 148.457422][ T3218] usb 2-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.457448][ T3218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.457472][ T3218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.459552][ T3218] usb 2-1: config 0 descriptor?? [ 148.657421][ T7292] i2c i2c-0: delete_device: Extra parameters [ 149.109327][ T7294] netlink: 'syz.3.554': attribute type 32 has an invalid length. [ 149.109412][ T7294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'. [ 149.176918][ T3218] usbhid 2-1:0.0: can't add hid device: -71 [ 149.177004][ T3218] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 149.182286][ T3218] usb 2-1: USB disconnect, device number 10 [ 149.538237][ T3218] usb 5-1: USB disconnect, device number 10 [ 149.681469][ T7307] [ 149.683825][ T7307] ====================================================== [ 149.690829][ T7307] WARNING: possible circular locking dependency detected [ 149.697832][ T7307] syzkaller #0 Not tainted [ 149.702232][ T7307] ------------------------------------------------------ [ 149.709233][ T7307] syz.2.565/7307 is trying to acquire lock: [ 149.715107][ T7307] ffff888057f25c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 149.723894][ T7307] [ 149.723894][ T7307] but task is already holding lock: [ 149.731245][ T7307] ffff88803394b878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 149.739684][ T7307] [ 149.739684][ T7307] which lock already depends on the new lock. [ 149.739684][ T7307] [ 149.750073][ T7307] [ 149.750073][ T7307] the existing dependency chain (in reverse order) is: [ 149.759072][ T7307] [ 149.759072][ T7307] -> #3 (&p->lock){+.+.}-{4:4}: [ 149.766104][ T7307] lock_acquire+0x1d1/0x380 [ 149.771130][ T7307] __mutex_lock+0x19f/0x1c10 [ 149.776237][ T7307] seq_read_iter+0xe1/0x1270 [ 149.781342][ T7307] proc_reg_read_iter+0x11b/0x310 [ 149.786882][ T7307] copy_splice_read+0x4ba/0xb90 [ 149.792252][ T7307] do_splice_read+0x285/0x370 [ 149.797450][ T7307] splice_file_to_pipe+0x82/0x120 [ 149.802993][ T7307] do_splice+0xda7/0x2090 [ 149.807839][ T7307] __do_splice+0x113/0x370 [ 149.812772][ T7307] __x64_sys_splice+0x187/0x250 [ 149.818143][ T7307] do_syscall_64+0x123/0x7b0 [ 149.823251][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.829655][ T7307] [ 149.829655][ T7307] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 149.837034][ T7307] lock_acquire+0x1d1/0x380 [ 149.842059][ T7307] __mutex_lock+0x19f/0x1c10 [ 149.847166][ T7307] anon_pipe_prefill_and_lock+0x16c/0x580 [ 149.853404][ T7307] anon_pipe_write+0x164/0x1bb0 [ 149.858772][ T7307] __kernel_write_iter+0x6b2/0x920 [ 149.864398][ T7307] __kernel_write+0xf6/0x140 [ 149.869505][ T7307] autofs_notify_daemon+0x51e/0xe00 [ 149.875218][ T7307] autofs_wait+0x10f8/0x1b30 [ 149.880323][ T7307] autofs_mount_wait+0x132/0x3b0 [ 149.885777][ T7307] autofs_d_automount+0x490/0x950 [ 149.891317][ T7307] __traverse_mounts+0x1b9/0x8a0 [ 149.896787][ T7307] step_into_slowpath+0xb7e/0xf90 [ 149.902340][ T7307] link_path_walk+0xe4a/0x1bd0 [ 149.907625][ T7307] path_lookupat+0x74/0xc40 [ 149.912643][ T7307] filename_lookup+0x202/0x590 [ 149.917923][ T7307] user_path_at+0x3c/0x60 [ 149.922768][ T7307] __x64_sys_mount+0x1fb/0x310 [ 149.928054][ T7307] do_syscall_64+0x123/0x7b0 [ 149.933163][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.939572][ T7307] [ 149.939572][ T7307] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 149.947300][ T7307] lock_acquire+0x1d1/0x380 [ 149.952323][ T7307] __mutex_lock+0x19f/0x1c10 [ 149.957438][ T7307] autofs_notify_daemon+0x509/0xe00 [ 149.963190][ T7307] autofs_wait+0x10f8/0x1b30 [ 149.968303][ T7307] autofs_mount_wait+0x132/0x3b0 [ 149.973758][ T7307] autofs_d_automount+0x490/0x950 [ 149.979302][ T7307] __traverse_mounts+0x1b9/0x8a0 [ 149.984764][ T7307] step_into_slowpath+0xb7e/0xf90 [ 149.990318][ T7307] path_lookupat+0x58b/0xc40 [ 149.995421][ T7307] filename_lookup+0x202/0x590 [ 150.000700][ T7307] kern_path+0x37/0x50 [ 150.005300][ T7307] lookup_bdev+0xd8/0x2a0 [ 150.010150][ T7307] resume_store+0x1f5/0x480 [ 150.015251][ T7307] kobj_attr_store+0x58/0x80 [ 150.020362][ T7307] sysfs_kf_write+0xf2/0x150 [ 150.025471][ T7307] kernfs_fop_write_iter+0x3e0/0x5f0 [ 150.031270][ T7307] vfs_write+0x6af/0x1040 [ 150.036110][ T7307] ksys_write+0x12a/0x250 [ 150.040951][ T7307] do_syscall_64+0x123/0x7b0 [ 150.046059][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.052464][ T7307] [ 150.052464][ T7307] -> #0 (&of->mutex){+.+.}-{4:4}: [ 150.059668][ T7307] check_prev_add+0xeb/0xe60 [ 150.064779][ T7307] __lock_acquire+0x1528/0x1f40 [ 150.070145][ T7307] lock_acquire+0x1d1/0x380 [ 150.075169][ T7307] __mutex_lock+0x19f/0x1c10 [ 150.080280][ T7307] kernfs_seq_start+0x4f/0x2a0 [ 150.085575][ T7307] seq_read_iter+0x2c1/0x1270 [ 150.090778][ T7307] kernfs_fop_read_iter+0x46c/0x610 [ 150.096497][ T7307] copy_splice_read+0x4ba/0xb90 [ 150.101870][ T7307] do_splice_read+0x285/0x370 [ 150.107066][ T7307] splice_direct_to_actor+0x29d/0xa30 [ 150.112959][ T7307] do_splice_direct+0x174/0x240 [ 150.118326][ T7307] do_sendfile+0xadc/0xe20 [ 150.123257][ T7307] __x64_sys_sendfile64+0x1d8/0x220 [ 150.128973][ T7307] do_syscall_64+0x123/0x7b0 [ 150.134083][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.140492][ T7307] [ 150.140492][ T7307] other info that might help us debug this: [ 150.140492][ T7307] [ 150.150706][ T7307] Chain exists of: [ 150.150706][ T7307] &of->mutex --> &pipe->mutex --> &p->lock [ 150.150706][ T7307] [ 150.162442][ T7307] Possible unsafe locking scenario: [ 150.162442][ T7307] [ 150.169877][ T7307] CPU0 CPU1 [ 150.175234][ T7307] ---- ---- [ 150.180593][ T7307] lock(&p->lock); [ 150.184396][ T7307] lock(&pipe->mutex); [ 150.191062][ T7307] lock(&p->lock); [ 150.197392][ T7307] lock(&of->mutex); [ 150.201365][ T7307] [ 150.201365][ T7307] *** DEADLOCK *** [ 150.201365][ T7307] [ 150.209506][ T7307] locks held by syz.2.565/7307: 1, on CPU#1: [ 150.215482][ T7307] #0: ffff88803394b878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 150.224384][ T7307] [ 150.224384][ T7307] stack backtrace: [ 150.230262][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.2.565 Not tainted syzkaller #0 PREEMPT(full) [ 150.239450][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 150.249507][ T7307] Call Trace: [ 150.252782][ T7307] [ 150.255704][ T7307] dump_stack_lvl+0x100/0x190 [ 150.260390][ T7307] print_circular_bug.cold+0x178/0x1be [ 150.265854][ T7307] check_noncircular+0x146/0x160 [ 150.270793][ T7307] check_prev_add+0xeb/0xe60 [ 150.275382][ T7307] __lock_acquire+0x1528/0x1f40 [ 150.280239][ T7307] ? seq_read_iter+0x819/0x1270 [ 150.285094][ T7307] ? kernfs_fop_read_iter+0x46c/0x610 [ 150.290474][ T7307] lock_acquire+0x1d1/0x380 [ 150.294983][ T7307] ? kernfs_seq_start+0x4f/0x2a0 [ 150.299924][ T7307] ? __pfx___might_resched+0x10/0x10 [ 150.305211][ T7307] __mutex_lock+0x19f/0x1c10 [ 150.309801][ T7307] ? kernfs_seq_start+0x4f/0x2a0 [ 150.314746][ T7307] ? kernfs_seq_start+0x4f/0x2a0 [ 150.319683][ T7307] ? __pfx___mutex_lock+0x10/0x10 [ 150.324711][ T7307] ? trace_kmalloc+0xeb/0x110 [ 150.329412][ T7307] ? __kasan_kmalloc+0xaa/0xb0 [ 150.334171][ T7307] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 150.339711][ T7307] ? kernfs_seq_start+0x4f/0x2a0 [ 150.344651][ T7307] kernfs_seq_start+0x4f/0x2a0 [ 150.349415][ T7307] seq_read_iter+0x2c1/0x1270 [ 150.354093][ T7307] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 150.360082][ T7307] kernfs_fop_read_iter+0x46c/0x610 [ 150.365282][ T7307] copy_splice_read+0x4ba/0xb90 [ 150.370135][ T7307] ? __pfx_copy_splice_read+0x10/0x10 [ 150.375505][ T7307] ? look_up_lock_class+0x55/0x120 [ 150.380617][ T7307] ? rcu_is_watching+0x13/0xc0 [ 150.385388][ T7307] ? lockdep_init_map_type+0x5c/0x250 [ 150.390770][ T7307] ? __pfx_copy_splice_read+0x10/0x10 [ 150.396142][ T7307] do_splice_read+0x285/0x370 [ 150.400825][ T7307] splice_direct_to_actor+0x29d/0xa30 [ 150.406201][ T7307] ? __pfx_direct_splice_actor+0x10/0x10 [ 150.411838][ T7307] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 150.417735][ T7307] ? lock_acquire+0x1d1/0x380 [ 150.422421][ T7307] do_splice_direct+0x174/0x240 [ 150.427273][ T7307] ? __pfx_do_splice_direct+0x10/0x10 [ 150.432643][ T7307] ? selinux_file_permission+0x30/0x6a0 [ 150.438185][ T7307] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 150.444079][ T7307] ? rw_verify_area+0xce/0x6d0 [ 150.448849][ T7307] do_sendfile+0xadc/0xe20 [ 150.453261][ T7307] ? __pfx_do_sendfile+0x10/0x10 [ 150.458192][ T7307] ? __x64_sys_futex+0x34f/0x4d0 [ 150.463124][ T7307] ? __x64_sys_futex+0x358/0x4d0 [ 150.468058][ T7307] __x64_sys_sendfile64+0x1d8/0x220 [ 150.473277][ T7307] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 150.478998][ T7307] do_syscall_64+0x123/0x7b0 [ 150.483587][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.489501][ T7307] RIP: 0033:0x7f0f415a8f19 [ 150.493909][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.513510][ T7307] RSP: 002b:00007f0f4240d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 150.521918][ T7307] RAX: ffffffffffffffda RBX: 00007f0f41826090 RCX: 00007f0f415a8f19 [ 150.529882][ T7307] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 150.537862][ T7307] RBP: 00007f0f41637f6d R08: 0000000000000000 R09: 0000000000000000 [ 150.546257][ T7307] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 150.554219][ T7307] R13: 00007f0f41826128 R14: 00007f0f41826090 R15: 00007ffda556a998 [ 150.562190][ T7307] [ 150.659541][ T31] audit: type=1400 audit(1794332607.855:494): avc: denied { create } for pid=7303 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.011684][ T3218] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.171676][ T3218] usb 5-1: Using ep0 maxpacket: 8 [ 151.172093][ T3218] usb 5-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 151.172859][ T3218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.172878][ T3218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.174322][ T3218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.174341][ T3218] usb 5-1: Product: syz [ 151.174353][ T3218] usb 5-1: Manufacturer: syz [ 151.174365][ T3218] usb 5-1: SerialNumber: syz [ 152.040544][ T3218] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 152.058932][ T3218] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 152.059957][ T3218] usb 5-1: USB disconnect, device number 11 [ 152.080926][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory