last executing test programs: 7.533410872s ago: executing program 3 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="8ee94cd032beb6e5ff658bb539e2a1485d4c922306dfe538a2e2fe", 0x1b}, {&(0x7f0000000280)="bdcfe861eb9c", 0x6}], 0x3}, 0x20008b88) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x1000)=nil) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7fffffffffffffff]}}) syz_usb_connect(0x3, 0x58, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa3, 0xd7, 0x67, 0x8, 0x257a, 0x360f, 0x88da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x2, 0x0, 0x40, 0x4, "", [{{0x9, 0x4, 0xd7, 0x7, 0x2, 0xcb, 0x51, 0x81, 0xaf, [], [{{0x9, 0x5, 0x1, 0x0, 0x10, 0xd, 0x9, 0xf5, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0xde, 0x5, [@generic={0x20, 0xe, "1ac64cdc33a23268cb1eaaa02cc38222edb5621eef611aa54e980263de51"}]}}]}}]}}]}}, 0x0) sendfile(r2, r3, 0x0, 0x3) 7.462492425s ago: executing program 1 (id=708): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgid(0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x400}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x81) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x400}, 0x8) 6.4681366s ago: executing program 2 (id=712): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000f80)) 6.332291715s ago: executing program 2 (id=714): r0 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x44081, 0x0, 0x0) 6.267919216s ago: executing program 0 (id=715): openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2040, 0x6c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) setuid(0xee01) setfsuid(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0xfffffffffffffd6c) unshare(0x2040400) select(0xe, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2710}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000300)) fcntl$lock(r2, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0xd, 0x3ff}) capset(&(0x7f0000000280)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x10000087, 0xffffffff, 0x2}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) 6.206362697s ago: executing program 2 (id=716): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="00060500"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.289970659s ago: executing program 0 (id=717): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.153520359s ago: executing program 0 (id=718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.121606622s ago: executing program 1 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x40}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r4, 0x3ff, 0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 4.884178184s ago: executing program 3 (id=720): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 4.755368007s ago: executing program 0 (id=721): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000100)={0x20, 0xe, 0x1, 'U'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.245095706s ago: executing program 3 (id=722): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x1, 0xffffffff, 0xd19, {{0x1d, 0x4, 0x1, 0x8, 0x74, 0x64, 0x0, 0x3, 0x2f, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x9a, 0x1, 0x2, [{@private=0xa010102, 0x7}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@empty, 0x2}, {@private=0xa010102, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0xfe, 0x1, 0xd, [{@local, 0x8e}, {@loopback, 0x5}, {@private=0xa010102, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0x3, [{@multicast2, 0xf3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}]}, @noop]}}}}}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x60, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x1, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}, @TCA_FW_MASK={0x8, 0x5, 0x80}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0xb27, 0x1, [0x3, 0x7, 0x82, 0xfffffffffffffffa, 0xeb7], [0x0, 0x49e, 0x7ff, 0x9f, 0x0, 0x5, 0x3, 0xe1267b0, 0x7, 0x100000000000, 0x10000, 0x47d6, 0xe, 0xc, 0x7, 0xffff, 0x5, 0x3, 0x8000000000000001, 0x100, 0x7fff, 0xfffffffffffffff8, 0x8b, 0x4, 0x7, 0x4, 0xb39c, 0xc, 0xcc5, 0xfffffffffffffff3, 0x938, 0x1ff, 0x81, 0x0, 0x9, 0xc4a, 0x0, 0x5ad, 0x0, 0x3, 0x2, 0x1, 0x3, 0x5, 0x2df, 0x5, 0x1, 0x2, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfffffffffffffffd, 0x6, 0x9b, 0x8, 0x3, 0x8, 0x7fffffff, 0x40d6, 0xf, 0x7, 0x1, 0x3, 0x9, 0x5, 0x0, 0xff, 0x94a, 0x80000001, 0xfffffffffffffffa, 0x8, 0xffffffffffffffff, 0x4ef5, 0x8, 0x5, 0x1, 0x0, 0x5, 0x49d1, 0x6, 0x4, 0x0, 0xb21, 0x5, 0xffffffff00000000, 0x4, 0x0, 0x8, 0x8, 0x48a, 0x40, 0xe, 0x0, 0x6, 0xfffffffeffffffff, 0x9331, 0xf6e4, 0x0, 0x7fff, 0xf50, 0x8, 0x8000000000000001, 0x1, 0x2, 0x747, 0x800, 0xf8, 0x101, 0x9, 0x8, 0xca, 0x46b, 0x4, 0x9, 0x2, 0x2, 0x71a2, 0x80000000, 0xfffffffffffff2d4]}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_HEADER={0x32, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) munlockall() io_setup(0x7ff, &(0x7f0000000000)) 4.098516511s ago: executing program 1 (id=723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xe, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_procfs(r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) 3.300394194s ago: executing program 4 (id=724): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x4a}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000140)={0x77359400}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.147824936s ago: executing program 1 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xfffffffffffffffd) 3.076386162s ago: executing program 4 (id=726): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x1, 0xffffffffffffffff, 0x3}) 2.915447946s ago: executing program 4 (id=727): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) listen(r0, 0x0) 2.906541035s ago: executing program 4 (id=728): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) 2.848679613s ago: executing program 3 (id=729): openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2040, 0x6c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) setuid(0xee01) setfsuid(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0xfffffffffffffd6c) unshare(0x2040400) select(0xe, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2710}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000300)) fcntl$lock(r2, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0xd, 0x3ff}) capset(&(0x7f0000000280)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x10000087, 0xffffffff, 0x2}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) 2.841147526s ago: executing program 4 (id=730): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000002c0)={0x4, 0x5, 0x8001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.039394314s ago: executing program 1 (id=731): openat(0xffffffffffffff9c, 0x0, 0xc042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f000000c580), &(0x7f000000c5c0), &(0x7f000000c600)) 2.039176522s ago: executing program 2 (id=732): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7aa}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="d2dcaafb519c2ec1800000002047", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.84653518s ago: executing program 2 (id=733): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c07, 0x3) 1.839762832s ago: executing program 3 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x40}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r7, 0x3ff, 0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46"], 0x78) close(r8) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x5, 0x0, 0xc000, 0x9, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') 1.674999151s ago: executing program 4 (id=735): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f00000005c0)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.674857639s ago: executing program 2 (id=736): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000040c0)=ANY=[@ANYBLOB="1201500200000040532b2400400001020301090269000301053009080b000101072000090400000001012000092401ff3f0409000709040100000102200009040101010102200009050109"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 1.104294402s ago: executing program 0 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.071170028s ago: executing program 1 (id=738): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000002700)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r5 = syz_open_pts(r4, 0x200) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) 319.838638ms ago: executing program 3 (id=739): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 0 (id=740): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): T30] audit: type=1400 audit(1777930887.352:466): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 158.539803][ T2284] usb 3-1: USB disconnect, device number 8 [ 158.636235][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 158.645284][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 159.668954][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.996879][ T6862] gfs2: error -5 reading superblock [ 161.143201][ T30] audit: type=1400 audit(1777930890.212:467): avc: denied { block_suspend } for pid=6886 comm="syz.4.300" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.276339][ T30] audit: type=1400 audit(1777930890.352:468): avc: denied { create } for pid=6879 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 161.280427][ T30] audit: type=1400 audit(1777930890.352:469): avc: denied { ioctl } for pid=6886 comm="syz.4.300" path="socket:[13040]" dev="sockfs" ino=13040 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.282339][ T30] audit: type=1400 audit(1777930890.362:470): avc: denied { ioctl } for pid=6879 comm="syz.1.298" path="socket:[13041]" dev="sockfs" ino=13041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 161.293551][ T6856] could not allocate digest TFM handle md5 [ 161.352103][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 161.354806][ T30] audit: type=1400 audit(1777930890.422:471): avc: denied { read write } for pid=6879 comm="syz.1.298" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.355453][ T30] audit: type=1400 audit(1777930890.422:472): avc: denied { open } for pid=6879 comm="syz.1.298" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.360530][ T30] audit: type=1400 audit(1777930890.422:473): avc: denied { write } for pid=6879 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 161.923793][ T30] audit: type=1400 audit(1777930891.002:474): avc: denied { sys_module } for pid=6886 comm="syz.4.300" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.022477][ T30] audit: type=1400 audit(1777930891.072:475): avc: denied { ioctl } for pid=6876 comm="syz.2.297" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 162.257515][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 162.409951][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 162.414184][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 162.448316][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 162.517836][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.304'. [ 162.517896][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.304'. [ 162.910597][ T5733] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.071229][ T5733] usb 2-1: Using ep0 maxpacket: 8 [ 163.091063][ T5733] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.588291][ T5733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.613559][ T5733] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.634222][ T5733] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 163.662352][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.683311][ T5733] usb 2-1: Product: syz [ 163.685539][ T6919] netlink: 296 bytes leftover after parsing attributes in process `syz.4.307'. [ 163.696613][ T5733] usb 2-1: Manufacturer: syz [ 163.714675][ T5733] usb 2-1: SerialNumber: syz [ 163.818424][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.826571][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.040710][ T30] audit: type=1400 audit(1777930893.062:476): avc: denied { write } for pid=6920 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.297408][ T5733] usb 2-1: USB disconnect, device number 4 [ 164.309662][ T5610] Bluetooth: hci4: Unable to find connection for big 0x00 [ 164.574063][ T6930] tipc: Enabling of bearer rejected, already enabled [ 165.754961][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.382498][ T6948] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 166.391173][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 166.410838][ T6948] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 166.424429][ T6948] netlink: 500 bytes leftover after parsing attributes in process `syz.2.315'. [ 166.448739][ T6948] unsupported nla_type 58 [ 166.488558][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.315'. [ 166.543947][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 166.543959][ T30] audit: type=1400 audit(1777930895.622:480): avc: denied { setopt } for pid=6953 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.589644][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.598816][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.615217][ T10] usb 2-1: Product: syz [ 166.899807][ T10] usb 2-1: Manufacturer: syz [ 166.915741][ T10] usb 2-1: SerialNumber: syz [ 166.996162][ T30] audit: type=1400 audit(1777930896.072:481): avc: denied { read write } for pid=6959 comm="syz.2.317" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.120549][ T30] audit: type=1400 audit(1777930896.192:482): avc: denied { open } for pid=6959 comm="syz.2.317" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.632564][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 167.646305][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 167.676865][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 167.685715][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 167.694515][ T6960] netlink: 'syz.2.317': attribute type 13 has an invalid length. [ 167.702305][ T6960] netlink: 'syz.2.317': attribute type 12 has an invalid length. [ 167.714288][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 167.783036][ T30] audit: type=1400 audit(1777930896.862:483): avc: denied { create } for pid=6968 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.730784][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.180705][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 169.603350][ T6990] netlink: 52 bytes leftover after parsing attributes in process `syz.0.323'. [ 169.769809][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 170.761439][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 170.762107][ T30] audit: type=1400 audit(1777930899.262:484): avc: denied { create } for pid=6992 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.774307][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.990506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 171.140441][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 171.175624][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.184405][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 171.193079][ T29] usb 5-1: can't read configurations, error -71 [ 171.300880][ T10] usb 2-1: USB disconnect, device number 5 [ 171.756912][ T7006] netlink: 260 bytes leftover after parsing attributes in process `syz.1.329'. [ 171.791238][ T7008] gfs2: error -5 reading superblock [ 172.372192][ T7015] comedi comedi0: 8255: I/O base address not correctly aligned [ 172.970774][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.308818][ T29] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 173.374989][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 173.635086][ T29] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 173.650807][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.658897][ T29] usb 5-1: Product: syz [ 173.664529][ T29] usb 5-1: Manufacturer: syz [ 173.669200][ T29] usb 5-1: SerialNumber: syz [ 173.806677][ T29] usb 5-1: config 0 descriptor?? [ 173.953625][ T29] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 174.405329][ T10] usb 5-1: USB disconnect, device number 7 [ 175.417321][ T7036] gfs2: error -5 reading superblock [ 175.503311][ T7037] syzkaller0: entered promiscuous mode [ 175.508894][ T7037] syzkaller0: entered allmulticast mode [ 175.978865][ T7046] gfs2: error -5 reading superblock [ 176.736672][ T7059] comedi comedi0: 8255: I/O base address not correctly aligned [ 176.920029][ T7061] FAULT_INJECTION: forcing a failure. [ 176.920029][ T7061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.070103][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT(full) [ 177.070128][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.070138][ T7061] Call Trace: [ 177.070142][ T7061] [ 177.070150][ T7061] dump_stack_lvl+0x100/0x190 [ 177.070176][ T7061] should_fail_ex.cold+0x5/0xa [ 177.070201][ T7061] _copy_from_user+0x2e/0xd0 [ 177.070227][ T7061] generic_map_update_batch+0x452/0x800 [ 177.070259][ T7061] ? __pfx_generic_map_update_batch+0x10/0x10 [ 177.070288][ T7061] ? __pfx_generic_map_update_batch+0x10/0x10 [ 177.070313][ T7061] bpf_map_do_batch+0x66f/0x6d0 [ 177.070335][ T7061] __sys_bpf+0x302/0x4b90 [ 177.070353][ T7061] ? __pfx___sys_bpf+0x10/0x10 [ 177.070375][ T7061] ? proc_fail_nth_write+0x9f/0x220 [ 177.070393][ T7061] ? find_held_lock+0x2b/0x80 [ 177.070412][ T7061] ? find_held_lock+0x2b/0x80 [ 177.070427][ T7061] ? ksys_write+0x190/0x250 [ 177.070443][ T7061] ? ksys_write+0x190/0x250 [ 177.070464][ T7061] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 177.070487][ T7061] ? kernel_write+0x653/0x6c0 [ 177.070503][ T7061] ? __fget_files+0x215/0x3d0 [ 177.070535][ T7061] ? fput+0x79/0x100 [ 177.070556][ T7061] ? ksys_write+0x1ac/0x250 [ 177.070573][ T7061] ? __pfx_ksys_write+0x10/0x10 [ 177.070596][ T7061] __x64_sys_bpf+0x7b/0xc0 [ 177.070618][ T7061] ? lockdep_hardirqs_on+0x78/0x100 [ 177.070639][ T7061] do_syscall_64+0x10b/0xf80 [ 177.070658][ T7061] ? clear_bhb_loop+0x40/0x90 [ 177.070680][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.070697][ T7061] RIP: 0033:0x7f5f7cd9cdd9 [ 177.070712][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.070727][ T7061] RSP: 002b:00007f5f7dbf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.070743][ T7061] RAX: ffffffffffffffda RBX: 00007f5f7d015fa0 RCX: 00007f5f7cd9cdd9 [ 177.070753][ T7061] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a [ 177.070763][ T7061] RBP: 00007f5f7dbf0090 R08: 0000000000000000 R09: 0000000000000000 [ 177.070772][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.070781][ T7061] R13: 00007f5f7d016038 R14: 00007f5f7d015fa0 R15: 00007ffdae6787a8 [ 177.070803][ T7061] [ 177.312329][ T30] audit: type=1400 audit(1777930906.392:485): avc: denied { name_bind } for pid=7064 comm="syz.0.349" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 177.344965][ T7071] FAULT_INJECTION: forcing a failure. [ 177.344965][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 177.416972][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.3.348 Not tainted syzkaller #0 PREEMPT(full) [ 177.416988][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.416995][ T7071] Call Trace: [ 177.416998][ T7071] [ 177.417003][ T7071] dump_stack_lvl+0x100/0x190 [ 177.417019][ T7071] should_fail_ex.cold+0x5/0xa [ 177.417035][ T7071] should_failslab+0xc2/0x120 [ 177.417047][ T7071] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 177.417062][ T7071] ? skb_clone+0x190/0x400 [ 177.417081][ T7071] skb_clone+0x190/0x400 [ 177.417098][ T7071] netlink_deliver_tap+0xaed/0xcc0 [ 177.417114][ T7071] netlink_unicast+0x62b/0x850 [ 177.417128][ T7071] ? __pfx_netlink_unicast+0x10/0x10 [ 177.417145][ T7071] netlink_sendmsg+0x8b0/0xda0 [ 177.417161][ T7071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.417172][ T7071] ? pti_set_user_pgtbl+0x30/0x50 [ 177.417193][ T7071] ____sys_sendmsg+0x9e1/0xb70 [ 177.417204][ T7071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.417218][ T7071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.417237][ T7071] ___sys_sendmsg+0x190/0x1e0 [ 177.417251][ T7071] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.417280][ T7071] __sys_sendmsg+0x170/0x220 [ 177.417297][ T7071] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.417319][ T7071] ? rcu_is_watching+0x12/0xc0 [ 177.417337][ T7071] do_syscall_64+0x10b/0xf80 [ 177.417350][ T7071] ? clear_bhb_loop+0x40/0x90 [ 177.417363][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.417374][ T7071] RIP: 0033:0x7f44e639cdd9 [ 177.417383][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.417394][ T7071] RSP: 002b:00007f44e71cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.417405][ T7071] RAX: ffffffffffffffda RBX: 00007f44e6615fa0 RCX: 00007f44e639cdd9 [ 177.417412][ T7071] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 177.417418][ T7071] RBP: 00007f44e71cd090 R08: 0000000000000000 R09: 0000000000000000 [ 177.417424][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.417429][ T7071] R13: 00007f44e6616038 R14: 00007f44e6615fa0 R15: 00007ffe224156a8 [ 177.417443][ T7071] [ 177.671026][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 177.715071][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 177.876066][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 177.951122][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 179.970305][ T7100] comedi comedi3: pcl726: I/O base address or length out of range [ 180.257910][ T7102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=7102 comm=syz.2.356 [ 180.310561][ T5718] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.780915][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 180.802955][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.825414][ T5718] usb 1-1: config 1 has an invalid descriptor of length 167, skipping remainder of the config [ 180.835986][ T5718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.850638][ T5718] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 180.860119][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.870729][ T5718] usb 1-1: Product: syz [ 180.890399][ T5718] usb 1-1: Manufacturer: syz [ 180.895865][ T5718] usb 1-1: SerialNumber: syz [ 181.574875][ T30] audit: type=1400 audit(1777930910.652:486): avc: denied { audit_control } for pid=7118 comm="syz.2.359" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 181.748744][ T7121] block nbd4: not configured, cannot reconfigure [ 181.776229][ T30] audit: type=1400 audit(1777930910.852:487): avc: denied { read write } for pid=7118 comm="syz.2.359" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 181.827849][ T30] audit: type=1400 audit(1777930910.882:488): avc: denied { open } for pid=7118 comm="syz.2.359" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 182.133843][ T30] audit: type=1400 audit(1777930911.202:489): avc: denied { create } for pid=7118 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.157063][ T30] audit: type=1400 audit(1777930911.202:490): avc: denied { write } for pid=7118 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.105840][ T30] audit: type=1400 audit(1777930913.172:491): avc: denied { connect } for pid=7140 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.125517][ T30] audit: type=1400 audit(1777930913.172:492): avc: denied { write } for pid=7140 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.241732][ T30] audit: type=1400 audit(1777930913.322:493): avc: denied { create } for pid=7140 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 184.340565][ T5777] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.501043][ T5777] usb 2-1: device descriptor read/64, error -71 [ 184.531079][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 184.710294][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 184.719893][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.362'. [ 184.729033][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.362'. [ 184.780557][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 184.808121][ T5777] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.824733][ T9] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 184.869484][ T9] usb 3-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 184.889991][ T30] audit: type=1400 audit(1777930913.962:494): avc: denied { accept } for pid=7144 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.903377][ T5718] usb 1-1: USB disconnect, device number 11 [ 184.921487][ T9] usb 3-1: config 0 has no interface number 0 [ 184.936031][ T9] usb 3-1: too many endpoints for config 0 interface 153 altsetting 68: 166, using maximum allowed: 30 [ 184.972869][ T9] usb 3-1: config 0 interface 153 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 166 [ 184.980570][ T5777] usb 2-1: device descriptor read/64, error -71 [ 185.010547][ T9] usb 3-1: config 0 interface 153 has no altsetting 0 [ 185.141971][ T5777] usb usb2-port1: attempt power cycle [ 185.166262][ T9] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 185.196645][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.218377][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.343292][ T7156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 185.356286][ T30] audit: type=1400 audit(1777930914.412:495): avc: denied { mount } for pid=7151 comm="syz.3.368" name="/" dev="rpc_pipefs" ino=14504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 185.563735][ T9] usb 3-1: Product: syz [ 185.576781][ T9] usb 3-1: Manufacturer: syz [ 185.592015][ T9] usb 3-1: SerialNumber: syz [ 185.604892][ T9] usb 3-1: config 0 descriptor?? [ 185.694613][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 185.700854][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 185.707832][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 185.714048][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 185.720359][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 185.810584][ T5777] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.865389][ T5777] usb 2-1: device descriptor read/8, error -71 [ 185.867834][ T7161] 9pnet_virtio: no channels available for device syz [ 185.996890][ T7162] netlink: 296 bytes leftover after parsing attributes in process `syz.4.370'. [ 186.068742][ T9] usb 3-1: USB disconnect, device number 9 [ 186.169411][ T30] audit: type=1400 audit(1777930915.242:496): avc: denied { sqpoll } for pid=7163 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.222468][ T5777] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.281066][ T5777] usb 2-1: device descriptor read/8, error -71 [ 186.340586][ T5733] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 186.391160][ T5777] usb usb2-port1: unable to enumerate USB device [ 186.515184][ T5733] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.531659][ T5733] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 186.567410][ T5733] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.584107][ T5733] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 186.605959][ T5733] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 186.628023][ T5733] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.640554][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.657148][ T5733] usb 1-1: Product: syz [ 186.666323][ T5733] usb 1-1: Manufacturer: syz [ 186.685647][ T5733] cdc_wdm 1-1:1.0: skipping garbage [ 186.700623][ T5733] cdc_wdm 1-1:1.0: skipping garbage [ 186.721189][ T5733] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 186.733977][ T5733] cdc_wdm 1-1:1.0: Unknown control protocol [ 187.522927][ T5777] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.737501][ T7182] warning: `syz.2.376' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.177811][ T5718] usb 1-1: USB disconnect, device number 12 [ 188.178456][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.200205][ T5777] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.210930][ T5777] usb 4-1: config 0 has no interface number 0 [ 188.217915][ T5777] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.230758][ T7182] libceph: resolve '0..' (ret=-3): failed [ 188.238437][ T5741] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 188.247641][ T5777] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.260403][ T5777] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.274653][ T5777] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 188.284323][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.302745][ T5777] usb 4-1: config 0 descriptor?? [ 188.422257][ T5741] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.430778][ T5741] usb 2-1: config 0 has no interface number 0 [ 188.436995][ T5741] usb 2-1: config 0 interface 41 has no altsetting 0 [ 188.541671][ T5741] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.552125][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.560232][ T5741] usb 2-1: Product: syz [ 188.566103][ T5741] usb 2-1: Manufacturer: syz [ 188.571089][ T5741] usb 2-1: SerialNumber: syz [ 188.577048][ T30] audit: type=1400 audit(1777930917.652:497): avc: denied { create } for pid=7185 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 188.584061][ T5741] usb 2-1: config 0 descriptor?? [ 188.628214][ T7188] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 188.644286][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.651696][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.658358][ T7188] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 188.745331][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.759975][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.768630][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.778715][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.786746][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.794703][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.803133][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.812006][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.827400][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.838035][ T5777] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 188.846812][ T30] audit: type=1400 audit(1777930917.922:498): avc: denied { write } for pid=7189 comm="syz.4.378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.906236][ T5777] holtek_mouse 0003:04D9:A04A.0001: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.3-1/input1 [ 189.082521][ T7198] binder: 7197:7198 ioctl c0306201 200000000140 returned -11 [ 189.142110][ T5611] Bluetooth: hci4: Unable to find connection for big 0x00 [ 189.231660][ T5718] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 189.354561][ T7202] tipc: Enabling of bearer rejected, already enabled [ 189.742051][ T5718] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 189.749577][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.760851][ T5718] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.772632][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.783989][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.795948][ T5718] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 189.803633][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.814359][ T5718] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.826148][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.838279][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.850318][ T5718] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 189.858385][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.869258][ T5718] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.881132][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.882030][ T5741] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 189.892329][ T5718] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.894720][ T5718] usb 1-1: string descriptor 0 read error: -22 [ 189.927927][ T5718] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 189.928020][ T5741] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 189.938492][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.952926][ T5741] usb 2-1: USB disconnect, device number 10 [ 190.044790][ T5718] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 190.091819][ T5718] usb 4-1: USB disconnect, device number 12 [ 190.300980][ T30] audit: type=1400 audit(1777930919.292:499): avc: denied { read } for pid=7203 comm="syz.4.383" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 190.683232][ T7210] fuseblk: block size(6656) > page size(4096) not supported by filesystem [ 190.683419][ T30] audit: type=1400 audit(1777930919.762:500): avc: denied { mounton } for pid=7192 comm="syz.0.379" path="/66/bus" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 190.734324][ T5777] usb 1-1: USB disconnect, device number 13 [ 190.950542][ T7214] trusted_key: encrypted_key: insufficient parameters specified [ 191.938423][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 192.111739][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 192.202314][ T5611] Bluetooth: hci4: Unable to find connection for big 0x00 [ 192.461343][ T7240] tipc: Enabling of bearer rejected, already enabled [ 192.480607][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 192.661519][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 192.808175][ T9] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 192.844024][ T7241] capability: warning: `syz.1.395' uses deprecated v2 capabilities in a way that may be insecure [ 192.855365][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.871045][ T9] usb 1-1: Product: 㐊 [ 192.876056][ T30] audit: type=1400 audit(1777930921.952:501): avc: denied { setopt } for pid=7243 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.897138][ T9] usb 1-1: SerialNumber: 鄺뛱ؒ丫館Ⰷ衱鵩䝊②㉔㸨떘ﹶ둳୚۲ꨋ粗໭﷛㫠㫥ဆพ䚈⥓䙺臦箎ﻣ胑䟸퇀玽嚝䐄叐״弐昿ؤ꾘먹䴿檖뫠裃怟㘿ᵺꙻ낌彞Ӯ똖 [ 192.918913][ T7244] tipc: Enabled bearer , priority 0 [ 192.926088][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 193.051106][ T7245] tipc: Disabling bearer [ 193.273259][ T7250] bridge0: port 3(netdevsim0) entered blocking state [ 193.280306][ T7250] bridge0: port 3(netdevsim0) entered disabled state [ 193.288702][ T7250] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 193.308117][ T7250] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 193.318725][ T7250] bridge0: port 3(netdevsim0) entered blocking state [ 193.325523][ T7250] bridge0: port 3(netdevsim0) entered forwarding state [ 193.672875][ T5741] usb 1-1: USB disconnect, device number 14 [ 196.358432][ T30] audit: type=1400 audit(1777930925.402:502): avc: denied { create } for pid=7279 comm="syz.4.407" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 196.448005][ T30] audit: type=1400 audit(1777930925.462:503): avc: denied { shutdown } for pid=7279 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.770138][ T30] audit: type=1400 audit(1777930925.462:504): avc: denied { read } for pid=7279 comm="syz.4.407" name="file0" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.048220][ T30] audit: type=1400 audit(1777930925.462:505): avc: denied { open } for pid=7279 comm="syz.4.407" path="/84/file0" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.086735][ T30] audit: type=1400 audit(1777930925.462:506): avc: denied { ioctl } for pid=7279 comm="syz.4.407" path="/84/file0" dev="tmpfs" ino=458 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.125710][ T30] audit: type=1400 audit(1777930925.482:507): avc: denied { unlink } for pid=5619 comm="syz-executor" name="file0" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.149138][ T30] audit: type=1400 audit(1777930925.842:508): avc: denied { setopt } for pid=7277 comm="syz.0.406" lport=36201 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 197.422550][ T30] audit: type=1400 audit(1777930926.322:509): avc: denied { map } for pid=7294 comm="syz.0.412" path="socket:[13928]" dev="sockfs" ino=13928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 197.999576][ T7300] comedi comedi0: 8255: I/O base address not correctly aligned [ 198.013726][ T30] audit: type=1400 audit(1777930926.532:510): avc: denied { append } for pid=7295 comm="syz.3.411" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 198.104873][ T7307] 9pnet_fd: Insufficient options for proto=fd [ 198.114534][ T30] audit: type=1400 audit(1777930926.592:511): avc: denied { map } for pid=7295 comm="syz.3.411" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 198.408598][ T7316] bridge0: port 3(netdevsim0) entered blocking state [ 198.415704][ T7316] bridge0: port 3(netdevsim0) entered disabled state [ 198.423120][ T7316] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 198.440726][ T7316] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 198.450434][ T7316] bridge0: port 3(netdevsim0) entered blocking state [ 198.457214][ T7316] bridge0: port 3(netdevsim0) entered forwarding state [ 199.954030][ T5732] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 200.120534][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 200.128877][ T5732] usb 3-1: config 0 has no interfaces? [ 200.136818][ T5732] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 200.206336][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 200.215418][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 200.520899][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.529630][ T5732] usb 3-1: Product: syz [ 200.535309][ T5732] usb 3-1: Manufacturer: syz [ 200.539929][ T5732] usb 3-1: SerialNumber: syz [ 200.549287][ T5732] usb 3-1: config 0 descriptor?? [ 201.005819][ T5718] usb 3-1: USB disconnect, device number 10 [ 201.449256][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 201.449273][ T30] audit: type=1400 audit(1777930930.522:543): avc: denied { mount } for pid=7311 comm="syz.2.416" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.719505][ T30] audit: type=1400 audit(1777930930.792:544): avc: denied { write } for pid=7349 comm="syz.3.425" name="rt6_stats" dev="proc" ino=4026533443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 201.769174][ T7354] overlayfs: failed to resolve './file0': -2 [ 201.786860][ T30] audit: type=1400 audit(1777930930.842:545): avc: denied { mounton } for pid=7352 comm="syz.0.427" path="/74/bus" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 201.832647][ T5718] IPVS: starting estimator thread 0... [ 201.859219][ T30] audit: type=1400 audit(1777930930.892:546): avc: denied { create } for pid=7349 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.886379][ T30] audit: type=1400 audit(1777930930.892:547): avc: denied { setopt } for pid=7349 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.908545][ T30] audit: type=1400 audit(1777930930.902:548): avc: denied { create } for pid=7351 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.931368][ T7358] IPVS: using max 77 ests per chain, 184800 per kthread [ 201.947056][ T30] audit: type=1400 audit(1777930930.912:549): avc: denied { getopt } for pid=7351 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.968092][ T30] audit: type=1400 audit(1777930930.962:550): avc: denied { append } for pid=7359 comm="syz.0.429" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.997918][ T30] audit: type=1400 audit(1777930930.962:551): avc: denied { open } for pid=7359 comm="syz.0.429" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.026616][ T30] audit: type=1400 audit(1777930930.962:552): avc: denied { read write } for pid=7359 comm="syz.0.429" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.029468][ T7355] comedi comedi0: 8255: I/O base address not correctly aligned [ 202.276848][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 202.862544][ T7379] tipc: Enabled bearer , priority 0 [ 202.872820][ T7373] syzkaller0: entered promiscuous mode [ 203.402837][ T7371] syz.1.430 (7371) used greatest stack depth: 19216 bytes left [ 203.818904][ T7373] syzkaller0: entered allmulticast mode [ 203.966921][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 203.975999][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 205.057461][ T7374] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 205.480285][ T7372] tipc: Resetting bearer [ 205.529305][ T7372] tipc: Disabling bearer [ 205.594353][ T5611] Bluetooth: hci2: ISO packet too small [ 205.660734][ T29] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 205.883323][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.165637][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 206.203508][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.274712][ T29] usb 2-1: config 0 descriptor?? [ 206.317500][ T7410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7410 comm=syz.2.442 [ 206.618954][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 206.618987][ T30] audit: type=1400 audit(1777930935.632:627): avc: denied { recv } for pid=7409 comm="syz.2.442" saddr=172.20.20.170 src=20001 daddr=172.20.20.170 dest=52220 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 207.589282][ T30] audit: type=1400 audit(1777930935.672:628): avc: denied { read } for pid=7409 comm="syz.2.442" dev="nsfs" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.662555][ T29] video4linux radio48: keene_cmd_main failed (-71) [ 207.671206][ T30] audit: type=1400 audit(1777930935.672:629): avc: denied { open } for pid=7409 comm="syz.2.442" path="net:[4026532906]" dev="nsfs" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.735439][ T29] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 207.755947][ T30] audit: type=1400 audit(1777930935.672:630): avc: denied { create } for pid=7409 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 207.767926][ T29] usb 2-1: USB disconnect, device number 11 [ 207.805212][ T5718] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.919456][ T30] audit: type=1400 audit(1777930935.692:631): avc: denied { bind } for pid=7409 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 207.939674][ T30] audit: type=1400 audit(1777930935.732:632): avc: denied { ioctl } for pid=7392 comm="syz.1.437" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.973334][ T30] audit: type=1400 audit(1777930935.772:633): avc: denied { recv } for pid=7409 comm="syz.2.442" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 208.000971][ T7421] sctp: [Deprecated]: syz.2.444 (pid 7421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.000971][ T7421] Use struct sctp_sack_info instead [ 208.428764][ T30] audit: type=1400 audit(1777930936.492:634): avc: denied { read write } for pid=7392 comm="syz.1.437" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 208.469086][ T30] audit: type=1400 audit(1777930936.492:635): avc: denied { open } for pid=7392 comm="syz.1.437" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 208.503588][ T30] audit: type=1400 audit(1777930936.582:636): avc: denied { recv } for pid=5596 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 208.542833][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.567301][ T5718] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 208.578881][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.645873][ T5718] usb 1-1: config 0 descriptor?? [ 209.243709][ T5718] smsusb:smsusb_probe: board id=8, interface number 0 [ 209.269417][ T5718] smsusb:smsusb_probe: Device initialized with return code -19 [ 210.137947][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 210.282625][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.320782][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.538696][ T5611] Bluetooth: hci2: ISO packet too small [ 211.011551][ T5718] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 211.094814][ T5741] usb 1-1: USB disconnect, device number 15 [ 211.330551][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 211.343951][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.357796][ T5718] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.402223][ T5718] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.418889][ T5718] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.433228][ T5718] usb 4-1: config 0 interface 0 has no altsetting 0 [ 211.443216][ T5718] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 211.454240][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.524615][ T5718] usb 4-1: config 0 descriptor?? [ 211.625392][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 211.625409][ T30] audit: type=1400 audit(1777930940.702:824): avc: denied { recv } for pid=5609 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 211.781963][ T30] audit: type=1400 audit(1777930940.702:825): avc: denied { recv } for pid=5609 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 211.829100][ T30] audit: type=1400 audit(1777930940.732:826): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.090737][ T5718] corsair-psu 0003:1B1C:1C09.0002: item fetching failed at offset 2/5 [ 212.103015][ T5718] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -22 [ 212.113603][ T30] audit: type=1400 audit(1777930940.732:827): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.227932][ T30] audit: type=1400 audit(1777930940.732:828): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.328977][ T7482] comedi comedi0: 8255: I/O base address not correctly aligned [ 212.358748][ T30] audit: type=1400 audit(1777930940.742:829): avc: denied { execmem } for pid=7470 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 212.399758][ T30] audit: type=1400 audit(1777930940.772:830): avc: denied { recv } for pid=7470 comm="syz.2.455" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.434788][ T30] audit: type=1400 audit(1777930940.852:831): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 212.472310][ T30] audit: type=1400 audit(1777930940.852:832): avc: denied { read } for pid=7470 comm="syz.2.455" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 212.495740][ T30] audit: type=1400 audit(1777930940.852:833): avc: denied { open } for pid=7470 comm="syz.2.455" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 212.723930][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 212.737499][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 212.760553][ T5718] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 212.951580][ T5718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.997780][ T5718] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 213.027475][ T5718] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.063200][ T5718] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 213.083947][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 213.104711][ T5718] usb 1-1: Product: syz [ 213.122048][ T5718] usb 1-1: Manufacturer: syz [ 213.152334][ T5718] usb 1-1: SerialNumber: syz [ 213.451268][ T5718] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 213.560493][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 213.841572][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.884997][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.015248][ T5611] Bluetooth: hci4: ISO packet too small [ 214.229891][ T7506] netlink: 'syz.0.457': attribute type 8 has an invalid length. [ 214.293146][ T9] usb 4-1: USB disconnect, device number 13 [ 214.960374][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 215.951676][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 216.130558][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 216.147908][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 216.176668][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.226206][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.275613][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.306466][ T9] usb 3-1: Product: syz [ 216.341394][ T9] usb 3-1: Manufacturer: syz [ 216.446118][ T9] usb 3-1: SerialNumber: syz [ 216.461592][ T9] usb 3-1: config 0 descriptor?? [ 216.479314][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 216.490575][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 216.657739][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 216.657758][ T30] audit: type=1400 audit(1777930945.702:1056): avc: denied { create } for pid=7525 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.881153][ T30] audit: type=1400 audit(1777930945.702:1057): avc: denied { write } for pid=7525 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.952165][ T30] audit: type=1400 audit(1777930945.712:1058): avc: denied { read write } for pid=7525 comm="syz.1.469" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.020769][ T30] audit: type=1400 audit(1777930945.712:1059): avc: denied { open } for pid=7525 comm="syz.1.469" path="/dev/cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.051556][ T7531] FAULT_INJECTION: forcing a failure. [ 217.051556][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 217.064547][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.1.471 Not tainted syzkaller #0 PREEMPT(full) [ 217.064570][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.064579][ T7531] Call Trace: [ 217.064585][ T7531] [ 217.064591][ T7531] dump_stack_lvl+0x100/0x190 [ 217.064619][ T7531] should_fail_ex.cold+0x5/0xa [ 217.064639][ T7531] should_failslab+0xc2/0x120 [ 217.064656][ T7531] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 217.064681][ T7531] ? sidtab_sid2str_get+0x17a/0x670 [ 217.064706][ T7531] kmemdup_noprof+0x29/0x60 [ 217.064720][ T7531] sidtab_sid2str_get+0x17a/0x670 [ 217.064742][ T7531] security_sid_to_context_core+0x35a/0x6d0 [ 217.064761][ T7531] ? avc_audit_post_callback+0x115/0x900 [ 217.064784][ T7531] avc_audit_post_callback+0x1aa/0x900 [ 217.064808][ T7531] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 217.064828][ T7531] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 217.064850][ T7531] ? skb_put+0x138/0x180 [ 217.064871][ T7531] ? audit_log_n_string+0x256/0x550 [ 217.064895][ T7531] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 217.064916][ T7531] common_lsm_audit+0x23f/0x2b0 [ 217.064937][ T7531] ? __pfx_common_lsm_audit+0x10/0x10 [ 217.064959][ T7531] ? lockdep_hardirqs_on+0x78/0x100 [ 217.064978][ T7531] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 217.064999][ T7531] slow_avc_audit+0x186/0x210 [ 217.065022][ T7531] ? __pfx_slow_avc_audit+0x10/0x10 [ 217.065046][ T7531] ? avc_denied+0x14a/0x190 [ 217.065068][ T7531] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 217.065094][ T7531] avc_has_perm+0x1a6/0x1e0 [ 217.065117][ T7531] ? __pfx_avc_has_perm+0x10/0x10 [ 217.065142][ T7531] ? is_bpf_text_address+0x94/0x1a0 [ 217.065168][ T7531] sock_has_perm+0x253/0x2f0 [ 217.065184][ T7531] ? __pfx_sock_has_perm+0x10/0x10 [ 217.065204][ T7531] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 217.065226][ T7531] ? import_ubuf+0x1b6/0x220 [ 217.065250][ T7531] ? pti_set_user_pgtbl+0x30/0x50 [ 217.065273][ T7531] ? __might_fault+0xc5/0x140 [ 217.065300][ T7531] security_socket_sendmsg+0xd3/0x230 [ 217.065319][ T7531] ____sys_sendmsg+0x862/0xb70 [ 217.065342][ T7531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.065373][ T7531] ___sys_sendmsg+0x190/0x1e0 [ 217.065394][ T7531] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.065446][ T7531] __sys_sendmsg+0x170/0x220 [ 217.065470][ T7531] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.065504][ T7531] ? rcu_is_watching+0x12/0xc0 [ 217.065530][ T7531] do_syscall_64+0x10b/0xf80 [ 217.065548][ T7531] ? clear_bhb_loop+0x40/0x90 [ 217.065567][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.065583][ T7531] RIP: 0033:0x7f9389d9cdd9 [ 217.065597][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.065613][ T7531] RSP: 002b:00007f938ac38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.065629][ T7531] RAX: ffffffffffffffda RBX: 00007f938a015fa0 RCX: 00007f9389d9cdd9 [ 217.065640][ T7531] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 217.065650][ T7531] RBP: 00007f938ac38090 R08: 0000000000000000 R09: 0000000000000000 [ 217.065659][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.065669][ T7531] R13: 00007f938a016038 R14: 00007f938a015fa0 R15: 00007ffc2c289fc8 [ 217.065696][ T7531] [ 217.390053][ T30] audit: type=1400 audit(1777930945.722:1060): avc: denied { ioctl } for pid=7525 comm="syz.1.469" path="/dev/cec0" dev="devtmpfs" ino=950 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.415169][ T30] audit: type=1400 audit(1777930945.722:1061): avc: denied { append } for pid=7525 comm="syz.1.469" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.438387][ T30] audit: type=1400 audit(1777930945.732:1062): avc: denied { prog_load } for pid=7525 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 217.457440][ T30] audit: type=1400 audit(1777930945.732:1063): avc: denied { bpf } for pid=7525 comm="syz.1.469" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.478105][ T30] audit: type=1400 audit(1777930945.732:1064): avc: denied { perfmon } for pid=7525 comm="syz.1.469" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.499063][ T30] audit: type=1400 audit(1777930945.762:1065): avc: denied { prog_load } for pid=7525 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 217.659770][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 217.869244][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 217.973695][ T7540] comedi comedi0: 8255: I/O base address not correctly aligned [ 218.683818][ T29] usb 1-1: USB disconnect, device number 16 [ 218.756565][ T29] usblp0: removed [ 219.424268][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 219.437971][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 219.608321][ T5611] Bluetooth: hci0: Unable to find connection for big 0x00 [ 219.850064][ T7553] tipc: Enabling of bearer rejected, already enabled [ 220.454122][ T29] usb 3-1: USB disconnect, device number 11 [ 220.566128][ T29] em28xx 3-1:0.0: Disconnecting em28xx [ 220.998745][ T29] em28xx 3-1:0.0: Freeing device [ 221.636352][ T7572] Unsupported ieee802154 address type: 0 [ 221.700348][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 221.700364][ T30] audit: type=1400 audit(1777930950.772:1244): avc: denied { create } for pid=7573 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.915355][ T30] audit: type=1400 audit(1777930950.802:1245): avc: denied { recv } for pid=7558 comm="syz.0.478" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.096045][ T7581] loop4: detected capacity change from 0 to 7 [ 222.291449][ T30] audit: type=1400 audit(1777930950.822:1246): avc: denied { execmem } for pid=7573 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 223.096780][ T30] audit: type=1400 audit(1777930950.932:1247): avc: denied { read } for pid=7573 comm="syz.2.482" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 223.163520][ T7579] block nbd0: not configured, cannot reconfigure [ 223.169745][ T30] audit: type=1400 audit(1777930950.932:1248): avc: denied { open } for pid=7573 comm="syz.2.482" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 223.199791][ T30] audit: type=1400 audit(1777930950.932:1249): avc: denied { create } for pid=7573 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.223652][ T30] audit: type=1400 audit(1777930950.932:1250): avc: denied { setopt } for pid=7573 comm="syz.2.482" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.226289][ T5614] Buffer I/O error on dev loop4, logical block 0, async page read [ 223.244023][ T30] audit: type=1400 audit(1777930950.932:1251): avc: denied { module_request } for pid=7573 comm="syz.2.482" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 223.304185][ T30] audit: type=1400 audit(1777930950.932:1252): avc: denied { recv } for pid=7529 comm="syz.4.470" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 223.488525][ T7588] comedi comedi0: 8255: I/O base address not correctly aligned [ 223.676192][ T5614] Buffer I/O error on dev loop4, logical block 0, async page read [ 223.703002][ T5614] Buffer I/O error on dev loop4, logical block 0, async page read [ 223.726061][ T30] audit: type=1400 audit(1777930950.942:1253): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.811410][ T5614] Buffer I/O error on dev loop4, logical block 0, async page read [ 224.282829][ T5614] Buffer I/O error on dev loop4, logical block 0, async page read [ 224.362077][ T7596] gfs2: error -5 reading superblock [ 224.382004][ T7598] gfs2: error -5 reading superblock [ 224.475892][ T7598] FAULT_INJECTION: forcing a failure. [ 224.475892][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 224.499170][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(full) [ 224.499192][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.499198][ T7598] Call Trace: [ 224.499202][ T7598] [ 224.499206][ T7598] dump_stack_lvl+0x100/0x190 [ 224.499224][ T7598] should_fail_ex.cold+0x5/0xa [ 224.499239][ T7598] ? tomoyo_realpath_from_path+0xb6/0x690 [ 224.499260][ T7598] should_failslab+0xc2/0x120 [ 224.499272][ T7598] __kmalloc_noprof+0xe0/0x850 [ 224.499287][ T7598] ? kfree+0x1dd/0x6c0 [ 224.499303][ T7598] tomoyo_realpath_from_path+0xb6/0x690 [ 224.499321][ T7598] tomoyo_path_number_perm+0x23c/0x580 [ 224.499332][ T7598] ? tomoyo_path_number_perm+0x22e/0x580 [ 224.499345][ T7598] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.499371][ T7598] ? find_held_lock+0x2b/0x80 [ 224.499381][ T7598] ? __fget_files+0x215/0x3d0 [ 224.499393][ T7598] ? hook_file_ioctl_common+0x149/0x410 [ 224.499409][ T7598] ? __fget_files+0x215/0x3d0 [ 224.499424][ T7598] ? __fget_files+0x21f/0x3d0 [ 224.499439][ T7598] security_file_ioctl+0xd3/0x230 [ 224.499453][ T7598] __x64_sys_ioctl+0xb7/0x210 [ 224.499465][ T7598] do_syscall_64+0x10b/0xf80 [ 224.499477][ T7598] ? clear_bhb_loop+0x40/0x90 [ 224.499490][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.499501][ T7598] RIP: 0033:0x7ff40c79cdd9 [ 224.499510][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.499520][ T7598] RSP: 002b:00007ff40d72b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.499531][ T7598] RAX: ffffffffffffffda RBX: 00007ff40ca15fa0 RCX: 00007ff40c79cdd9 [ 224.499538][ T7598] RDX: 0000200000000180 RSI: 0000000000004b70 RDI: 0000000000000006 [ 224.499544][ T7598] RBP: 00007ff40d72b090 R08: 0000000000000000 R09: 0000000000000000 [ 224.499550][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.499556][ T7598] R13: 00007ff40ca16038 R14: 00007ff40ca15fa0 R15: 00007ffe1193d8e8 [ 224.499570][ T7598] [ 224.499574][ T7598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.138126][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'. [ 226.148261][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 227.201956][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 227.201972][ T30] audit: type=1400 audit(1777930955.792:1440): avc: denied { recv } for pid=7628 comm="syz.2.496" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.417874][ T30] audit: type=1400 audit(1777930956.272:1441): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.471951][ T30] audit: type=1400 audit(1777930956.272:1442): avc: denied { open } for pid=5619 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.546886][ T30] audit: type=1400 audit(1777930956.272:1443): avc: denied { ioctl } for pid=5619 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.635481][ T30] audit: type=1400 audit(1777930956.282:1444): avc: denied { recv } for pid=7628 comm="syz.2.496" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.699867][ T30] audit: type=1400 audit(1777930956.472:1445): avc: denied { read write } for pid=5618 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.724473][ T5718] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 227.883838][ T7642] comedi comedi0: 8255: I/O base address not correctly aligned [ 228.171544][ T5718] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 228.182873][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.189945][ T7639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.212669][ T7639] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 228.220952][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.232544][ T5718] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 228.379642][ T5718] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 228.407727][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.466366][ T7632] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.680266][ T7632] netlink: 'syz.4.497': attribute type 1 has an invalid length. [ 228.701737][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 228.859304][ T7656] gfs2: error -5 reading superblock [ 228.896126][ T7656] FAULT_INJECTION: forcing a failure. [ 228.896126][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 228.909079][ T7656] CPU: 1 UID: 0 PID: 7656 Comm: syz.2.504 Not tainted syzkaller #0 PREEMPT(full) [ 228.909101][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.909111][ T7656] Call Trace: [ 228.909117][ T7656] [ 228.909123][ T7656] dump_stack_lvl+0x100/0x190 [ 228.909149][ T7656] should_fail_ex.cold+0x5/0xa [ 228.909172][ T7656] ? tomoyo_encode2+0xfb/0x3c0 [ 228.909193][ T7656] should_failslab+0xc2/0x120 [ 228.909212][ T7656] __kmalloc_noprof+0xe0/0x850 [ 228.909233][ T7656] ? d_absolute_path+0x136/0x1b0 [ 228.909253][ T7656] tomoyo_encode2+0xfb/0x3c0 [ 228.909282][ T7656] tomoyo_encode+0x29/0x50 [ 228.909302][ T7656] tomoyo_realpath_from_path+0x18c/0x690 [ 228.909329][ T7656] tomoyo_path_number_perm+0x23c/0x580 [ 228.909346][ T7656] ? tomoyo_path_number_perm+0x22e/0x580 [ 228.909369][ T7656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 228.909411][ T7656] ? irqentry_exit+0x246/0x790 [ 228.909435][ T7656] ? hook_file_ioctl_common+0x149/0x410 [ 228.909466][ T7656] ? __x64_sys_ioctl+0x94/0x210 [ 228.909484][ T7656] ? security_file_ioctl+0x18/0x230 [ 228.909509][ T7656] security_file_ioctl+0xd3/0x230 [ 228.909531][ T7656] __x64_sys_ioctl+0xb7/0x210 [ 228.909551][ T7656] do_syscall_64+0x10b/0xf80 [ 228.909570][ T7656] ? clear_bhb_loop+0x40/0x90 [ 228.909592][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.909609][ T7656] RIP: 0033:0x7ff40c79cdd9 [ 228.909624][ T7656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.909640][ T7656] RSP: 002b:00007ff40d72b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.909658][ T7656] RAX: ffffffffffffffda RBX: 00007ff40ca15fa0 RCX: 00007ff40c79cdd9 [ 228.909669][ T7656] RDX: 0000200000000180 RSI: 0000000000004b70 RDI: 0000000000000006 [ 228.909680][ T7656] RBP: 00007ff40d72b090 R08: 0000000000000000 R09: 0000000000000000 [ 228.909690][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.909699][ T7656] R13: 00007ff40ca16038 R14: 00007ff40ca15fa0 R15: 00007ffe1193d8e8 [ 228.909724][ T7656] [ 228.909795][ T7656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.056161][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 229.318797][ T7663] netlink: 'syz.1.508': attribute type 3 has an invalid length. [ 229.327750][ T7665] sctp: [Deprecated]: syz.2.507 (pid 7665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.327750][ T7665] Use struct sctp_sack_info instead [ 229.336827][ T7663] netlink: 'syz.1.508': attribute type 3 has an invalid length. [ 229.393366][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 229.522407][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 230.179680][ T7688] netlink: 296 bytes leftover after parsing attributes in process `syz.0.513'. [ 230.421665][ T7693] trusted_key: encrypted_key: insufficient parameters specified [ 230.616891][ T5718] usb 5-1: string descriptor 0 read error: -71 [ 230.639178][ T5718] hub 5-1:32.0: USB hub found [ 230.665867][ T5718] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 230.887517][ T5718] usb 5-1: USB disconnect, device number 8 [ 231.237315][ T7709] gfs2: error -5 reading superblock [ 231.380532][ T5718] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 231.400080][ T7714] binder: 7713:7714 ioctl c0306201 200000000140 returned -11 [ 231.554036][ T5718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.604199][ T5718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.642410][ T5718] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 231.669467][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.696515][ T5718] usb 5-1: SerialNumber: syz [ 231.737940][ T5718] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 231.780875][ T5718] usb-storage 5-1:1.0: USB Mass Storage device detected [ 231.906816][ T5718] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 231.926773][ T5718] scsi host1: usb-storage 5-1:1.0 [ 231.971320][ T5718] usb 5-1: USB disconnect, device number 9 [ 232.214438][ T30] kauditd_printk_skb: 544 callbacks suppressed [ 232.214453][ T30] audit: type=1400 audit(1777930961.282:1985): avc: denied { map_create } for pid=7728 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 232.294380][ T30] audit: type=1400 audit(1777930961.322:1986): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 232.367019][ T30] audit: type=1400 audit(1777930961.332:1987): avc: denied { map_read map_write } for pid=7728 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 232.396151][ T30] audit: type=1400 audit(1777930961.352:1988): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.452007][ T30] audit: type=1400 audit(1777930961.352:1989): avc: denied { open } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.488955][ T30] audit: type=1400 audit(1777930961.352:1990): avc: denied { ioctl } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.518918][ T30] audit: type=1400 audit(1777930961.402:1991): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 232.575091][ T30] audit: type=1400 audit(1777930961.432:1992): avc: denied { search } for pid=7742 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.622242][ T30] audit: type=1400 audit(1777930961.432:1993): avc: denied { search } for pid=7742 comm="rm" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.684921][ T30] audit: type=1400 audit(1777930961.432:1994): avc: denied { search } for pid=7742 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.092941][ T5611] Bluetooth: hci4: Unable to find connection for big 0x00 [ 233.700740][ T7765] syz.3.526 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 234.324211][ T7766] tipc: Enabling of bearer rejected, already enabled [ 234.352062][ T7763] ubi31: attaching mtd0 [ 234.359717][ T7763] ubi31: scanning is finished [ 234.364537][ T7763] ubi31: empty MTD device detected [ 234.657809][ T5611] Bluetooth: Frame is too long (len 12, expected len 4) [ 234.807734][ T7763] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 235.236942][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.529'. [ 235.245929][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.529'. [ 235.610316][ T7775] binder: 7773:7775 ioctl c0306201 200000000140 returned -11 [ 236.136787][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 236.145811][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 236.163752][ T29] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 236.452530][ T7788] xt_hashlimit: size too large, truncated to 1048576 [ 236.632953][ T29] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 236.656061][ T29] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.167717][ T29] usb 1-1: can't read configurations, error -61 [ 237.261235][ T30] kauditd_printk_skb: 297 callbacks suppressed [ 237.261250][ T30] audit: type=1400 audit(1777930966.342:2292): avc: denied { ioctl } for pid=7784 comm="syz.0.533" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.395845][ T30] audit: type=1400 audit(1777930966.372:2293): avc: denied { module_request } for pid=7787 comm="syz.2.535" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 237.400573][ T29] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 237.878334][ T30] audit: type=1400 audit(1777930966.392:2294): avc: denied { create } for pid=7787 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.972987][ T30] audit: type=1400 audit(1777930966.392:2295): avc: denied { write } for pid=7787 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.042524][ T30] audit: type=1400 audit(1777930966.472:2296): avc: denied { create } for pid=7798 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.092072][ T29] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 238.113951][ T29] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 238.125663][ T29] usb 1-1: can't read configurations, error -61 [ 238.132800][ T29] usb usb1-port1: attempt power cycle [ 238.210021][ T5733] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.480798][ T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 238.609643][ T30] audit: type=1400 audit(1777930966.502:2297): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.647520][ T30] audit: type=1400 audit(1777930966.502:2298): avc: denied { open } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.672211][ T29] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 238.874806][ T30] audit: type=1400 audit(1777930966.502:2299): avc: denied { ioctl } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.026554][ T5733] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 239.077357][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.095762][ T30] audit: type=1400 audit(1777930966.502:2300): avc: denied { execmem } for pid=7798 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 239.124319][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.140000][ T29] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 239.142359][ T5608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.163615][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 239.165308][ T29] usb 1-1: can't read configurations, error -71 [ 239.237947][ T5733] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 239.290526][ T5733] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 239.542277][ T5733] usb 2-1: Manufacturer: syz [ 239.859622][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.544'. [ 239.868545][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.544'. [ 239.881218][ T5733] usb 2-1: config 0 descriptor?? [ 239.909002][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 240.293571][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 240.562598][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 240.571556][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 240.987348][ T5733] hid_parser_main: 222 callbacks suppressed [ 240.987363][ T5733] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 241.097587][ T5733] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 241.164910][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 241.409937][ T5733] usb 2-1: USB disconnect, device number 12 [ 242.003957][ T7835] netlink: 'syz.3.545': attribute type 13 has an invalid length. [ 242.360683][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 242.360716][ T30] audit: type=1400 audit(1777930971.392:2496): avc: denied { prog_load } for pid=7856 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 242.772450][ T30] audit: type=1400 audit(1777930971.392:2497): avc: denied { bpf } for pid=7856 comm="syz.1.550" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.819371][ T7861] fido_id[7861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 242.911518][ T30] audit: type=1400 audit(1777930971.402:2498): avc: denied { prog_load } for pid=7856 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 242.946941][ T30] audit: type=1400 audit(1777930971.402:2499): avc: denied { bpf } for pid=7856 comm="syz.1.550" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.971584][ T30] audit: type=1400 audit(1777930971.412:2500): avc: denied { perfmon } for pid=7856 comm="syz.1.550" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.014979][ T30] audit: type=1400 audit(1777930971.712:2501): avc: denied { read } for pid=7858 comm="syz.2.551" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 243.096249][ T30] audit: type=1400 audit(1777930971.712:2502): avc: denied { read open } for pid=7858 comm="syz.2.551" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 243.122157][ T30] audit: type=1400 audit(1777930971.762:2503): avc: denied { read } for pid=7860 comm="syz.0.552" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 243.143411][ T30] audit: type=1400 audit(1777930971.762:2504): avc: denied { open } for pid=7860 comm="syz.0.552" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 243.167257][ T30] audit: type=1400 audit(1777930971.772:2505): avc: denied { create } for pid=7858 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.256927][ T2284] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 243.446580][ T2284] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 243.465862][ T2284] usb 2-1: config 0 has no interface number 0 [ 243.493280][ T2284] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 43297, setting to 64 [ 243.496734][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 243.531746][ T2284] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 243.564087][ T2284] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 243.662784][ T2284] usb 2-1: Product: syz [ 243.667390][ T2284] usb 2-1: SerialNumber: syz [ 243.681408][ T2284] usb 2-1: config 0 descriptor?? [ 243.687360][ T7872] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.706613][ T2284] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 243.721304][ T5741] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 243.886321][ T5741] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.000324][ T5741] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.010133][ T7872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.554'. [ 244.013016][ T5741] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.030948][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.038976][ T5741] usb 3-1: Product: syz [ 244.044068][ T5741] usb 3-1: Manufacturer: syz [ 244.048755][ T5741] usb 3-1: SerialNumber: syz [ 244.124042][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'. [ 244.133035][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'. [ 244.442482][ T5741] usb 3-1: 0:2 : does not exist [ 244.453115][ T5741] usb 3-1: unit 9 not found! [ 244.528087][ T7872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=7872 comm=syz.1.554 [ 244.594670][ T29] usb 2-1: USB disconnect, device number 13 [ 244.646012][ T7880] Bluetooth: MGMT ver 1.23 [ 244.805608][ T5741] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 244.820554][ T5732] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 244.824600][ T5741] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 244.952731][ T5741] usb 3-1: USB disconnect, device number 12 [ 245.018102][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 245.037096][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.073312][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.105202][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.140578][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 245.174646][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 245.215578][ T5732] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 245.318015][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 245.350940][ T5732] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 246.017746][ T5732] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 246.029545][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.038488][ T5732] usb 4-1: Product: syz [ 246.042851][ T5732] usb 4-1: Manufacturer: syz [ 246.049633][ T5732] usb 4-1: SerialNumber: syz [ 246.500066][ T5732] usb 4-1: config 0 descriptor?? [ 246.510938][ T7897] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 246.535522][ T5732] usb 4-1: NFC: Reader power on cmd error -90 [ 246.541768][ T5732] pn533_usb 4-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 246.561369][ T5732] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 247.248605][ T7923] could not allocate digest TFM handle md5 [ 247.269849][ T9] usb 4-1: USB disconnect, device number 14 [ 247.407924][ T30] kauditd_printk_skb: 380 callbacks suppressed [ 247.407940][ T30] audit: type=1400 audit(1777930976.482:2886): avc: denied { read write } for pid=7947 comm="syz.2.568" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.593884][ T30] audit: type=1400 audit(1777930976.482:2887): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.677760][ T30] audit: type=1400 audit(1777930976.482:2888): avc: denied { read write open } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.712094][ T5741] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 247.753304][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 247.755556][ T30] audit: type=1400 audit(1777930976.482:2889): avc: denied { ioctl } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.796869][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.813230][ T7958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.822635][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.830428][ T7958] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 247.831642][ T30] audit: type=1400 audit(1777930976.512:2890): avc: denied { read write open } for pid=7947 comm="syz.2.568" path="/dev/raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.842137][ T7958] audit: backlog limit exceeded [ 247.873262][ T7960] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.881125][ T5741] usb 3-1: Using ep0 maxpacket: 8 [ 247.881300][ T7958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.896651][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.908240][ T5741] usb 3-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 247.930409][ T5741] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.940011][ T5741] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.956901][ T5741] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.976304][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 248.009351][ T5741] usb 3-1: Product: syz [ 248.014375][ T5741] usb 3-1: Manufacturer: syz [ 248.019096][ T5741] usb 3-1: SerialNumber: syz [ 248.060815][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.222578][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 248.229449][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.244511][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 248.253896][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.262019][ T9] usb 5-1: Product: syz [ 248.266378][ T9] usb 5-1: Manufacturer: syz [ 248.271051][ T9] usb 5-1: SerialNumber: syz [ 248.286223][ T9] usb 5-1: config 0 descriptor?? [ 248.294588][ T5741] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 248.296521][ T9] usb 5-1: selecting invalid altsetting 1 [ 248.303979][ T5741] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 248.309420][ T9] usb 5-1: Can not set alternate setting to 1, error: -22 [ 248.326148][ T5741] cdc_ncm 3-1:1.0: bind() failure [ 248.422540][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 248.431523][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 248.729988][ T9] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -22 [ 248.780525][ T5732] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 248.793070][ T5741] usb 3-1: USB disconnect, device number 13 [ 248.954840][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.977655][ T5732] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 126, changing to 7 [ 248.991112][ T5732] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.002360][ T5732] usb 4-1: config 1 interface 2 has no altsetting 0 [ 249.011811][ T5732] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 249.022024][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.030062][ T5732] usb 4-1: Product: syz [ 249.034601][ T5732] usb 4-1: Manufacturer: syz [ 249.039539][ T5732] usb 4-1: SerialNumber: syz [ 249.176920][ T7973] program syz.1.576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.200173][ T7973] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 250.152544][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.158930][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.882541][ T5732] snd-ua101 4-1:1.1: sample format descriptor not found [ 250.889694][ T5732] snd-ua101 4-1:1.0: invalid num_altsetting [ 250.897635][ T5732] usb 4-1: selecting invalid altsetting 0 [ 250.912343][ T5732] usb 4-1: selecting invalid altsetting 0 [ 250.918151][ T5732] usbtest 4-1:1.2: probe with driver usbtest failed with error -22 [ 250.934346][ T5732] usb 4-1: selecting invalid altsetting 0 [ 250.948557][ T5732] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 250.982967][ T5732] usb 4-1: selecting invalid altsetting 0 [ 251.001453][ T5732] snd-ua101 4-1:1.2: probe with driver snd-ua101 failed with error -22 [ 251.048243][ T29] usb 5-1: USB disconnect, device number 10 [ 251.069697][ T5732] usb 4-1: USB disconnect, device number 15 [ 251.403185][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 251.791752][ T8011] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 252.124041][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'. [ 252.133029][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'. [ 252.449722][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 252.449733][ T30] audit: type=1400 audit(1777930981.522:3172): avc: denied { create } for pid=7984 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.483180][ T30] audit: type=1400 audit(1777930981.552:3173): avc: denied { write } for pid=7984 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.516684][ T30] audit: type=1400 audit(1777930981.562:3174): avc: denied { create } for pid=8020 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.563904][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 252.626604][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 252.790223][ T30] audit: type=1400 audit(1777930981.562:3175): avc: denied { write } for pid=8020 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.856942][ T30] audit: type=1400 audit(1777930981.562:3176): avc: denied { read } for pid=8020 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.155818][ T5611] Bluetooth: hci1: Unable to find connection for big 0x00 [ 253.904583][ T30] audit: type=1400 audit(1777930981.582:3177): avc: denied { create } for pid=8020 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.087137][ T30] audit: type=1400 audit(1777930981.592:3178): avc: denied { write } for pid=7984 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.108119][ T30] audit: type=1400 audit(1777930981.592:3179): avc: denied { module_request } for pid=7984 comm="syz.2.578" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 254.131188][ T30] audit: type=1400 audit(1777930981.592:3180): avc: denied { ioctl } for pid=8020 comm="syz.0.589" path="socket:[17122]" dev="sockfs" ino=17122 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.157772][ T30] audit: type=1400 audit(1777930981.622:3181): avc: denied { write } for pid=8016 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.030707][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 256.413428][ T8064] netlink: 296 bytes leftover after parsing attributes in process `syz.3.598'. [ 256.990674][ T8068] comedi comedi3: pcl812: I/O base address or length out of range [ 257.473302][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 257.473327][ T30] audit: type=1400 audit(1777930986.502:3357): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.821786][ T30] audit: type=1400 audit(1777930986.522:3358): avc: denied { read write open } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.887545][ T30] audit: type=1400 audit(1777930986.542:3359): avc: denied { ioctl } for pid=5617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.112364][ T30] audit: type=1400 audit(1777930986.692:3360): avc: denied { read } for pid=8077 comm="syz.3.602" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.222736][ T30] audit: type=1400 audit(1777930986.692:3361): avc: denied { read open } for pid=8077 comm="syz.3.602" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.305513][ T8086] libceph: resolve '0..' (ret=-3): failed [ 258.352626][ T30] audit: type=1400 audit(1777930986.702:3362): avc: denied { create } for pid=8077 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.461945][ T30] audit: type=1400 audit(1777930986.702:3363): avc: denied { write } for pid=8077 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.576278][ T30] audit: type=1400 audit(1777930986.702:3364): avc: denied { read } for pid=8077 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.580000][ T5618] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.596658][ T30] audit: type=1400 audit(1777930986.752:3365): avc: denied { write } for pid=8077 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.350259][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 260.359282][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 261.852275][ T8123] netlink: 296 bytes leftover after parsing attributes in process `syz.0.612'. [ 262.214990][ T8121] gfs2: error -5 reading superblock [ 262.271666][ T8121] x_tables: duplicate underflow at hook 2 [ 262.533959][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 262.533976][ T30] audit: type=1400 audit(1777930991.502:3570): avc: denied { recv } for pid=8128 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 262.579715][ T30] audit: type=1400 audit(1777930991.532:3571): avc: denied { recv } for pid=8126 comm="syz.1.615" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 262.606727][ T30] audit: type=1400 audit(1777930991.572:3572): avc: denied { create } for pid=8126 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.628923][ T30] audit: type=1400 audit(1777930991.582:3573): avc: denied { read write } for pid=8126 comm="syz.1.615" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 262.653843][ T30] audit: type=1400 audit(1777930991.582:3574): avc: denied { open } for pid=8126 comm="syz.1.615" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 262.687054][ T30] audit: type=1400 audit(1777930991.592:3575): avc: denied { map } for pid=8126 comm="syz.1.615" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 262.687642][ T1329] Bluetooth: hci5: Frame reassembly failed (-84) [ 263.039457][ T8139] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 263.513192][ T30] audit: type=1400 audit(1777930991.592:3576): avc: denied { execute } for pid=8126 comm="syz.1.615" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.537949][ T30] audit: type=1400 audit(1777930991.632:3577): avc: denied { read write } for pid=5618 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.563034][ T30] audit: type=1400 audit(1777930991.632:3578): avc: denied { read write open } for pid=5618 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.588954][ T30] audit: type=1400 audit(1777930991.632:3579): avc: denied { ioctl } for pid=5618 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.529402][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 264.538398][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 264.713349][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.721560][ T4931] Bluetooth: hci5: command 0x1003 tx timeout [ 265.172894][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 267.580914][ T5718] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 267.672149][ T8185] netlink: 296 bytes leftover after parsing attributes in process `syz.4.628'. [ 267.683685][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 267.683715][ T30] audit: type=1400 audit(1777930996.632:3823): avc: denied { map_create } for pid=8178 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.884852][ T30] audit: type=1400 audit(1777930996.632:3824): avc: denied { bpf } for pid=8178 comm="syz.4.628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.906660][ T30] audit: type=1400 audit(1777930996.632:3825): avc: denied { map_create } for pid=8178 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.926902][ T30] audit: type=1400 audit(1777930996.632:3826): avc: denied { map_read map_write } for pid=8178 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.116734][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.630'. [ 268.178464][ T30] audit: type=1400 audit(1777930996.642:3827): avc: denied { prog_load } for pid=8178 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.296297][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 268.352775][ T30] audit: type=1400 audit(1777930996.642:3828): avc: denied { bpf } for pid=8178 comm="syz.4.628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.404713][ T30] audit: type=1400 audit(1777930996.642:3829): avc: denied { perfmon } for pid=8178 comm="syz.4.628" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.455117][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.496389][ T30] audit: type=1400 audit(1777930996.652:3830): avc: denied { create } for pid=8178 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.676035][ T30] audit: type=1400 audit(1777930996.652:3831): avc: denied { write } for pid=8178 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.988454][ T30] audit: type=1400 audit(1777930996.732:3832): avc: denied { read } for pid=8178 comm="syz.4.628" dev="nsfs" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 269.032703][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.044768][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.056143][ T5718] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 269.065250][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.073281][ T5718] usb 2-1: Product: syz [ 269.077436][ T5718] usb 2-1: Manufacturer: syz [ 269.087019][ T5718] usb 2-1: SerialNumber: syz [ 269.540911][ T5718] usb 2-1: USB disconnect, device number 14 [ 269.669427][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.856776][ T8217] 9p: Bad value for 'wfdno' [ 270.177472][ T8227] random: crng reseeded on system resumption [ 270.457204][ T8230] bridge0: port 3(netdevsim0) entered disabled state [ 270.465458][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.473564][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.567521][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.578019][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.965946][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.036247][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.060241][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.073819][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.692763][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 272.692781][ T30] audit: type=1400 audit(1777931001.772:4154): avc: denied { recv } for pid=5596 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 272.798633][ T30] audit: type=1400 audit(1777931001.772:4155): avc: denied { mounton } for pid=8263 comm="syz.3.659" path="/135/bus" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 272.864698][ T30] audit: type=1400 audit(1777931001.772:4156): avc: denied { create } for pid=8266 comm="syz.4.658" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 272.917155][ T30] audit: type=1400 audit(1777931001.782:4157): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.025184][ T30] audit: type=1400 audit(1777931001.782:4158): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.110621][ T30] audit: type=1400 audit(1777931001.782:4159): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.266410][ T30] audit: type=1400 audit(1777931001.782:4160): avc: denied { write } for pid=8266 comm="syz.4.658" name="file2" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.444617][ T30] audit: type=1400 audit(1777931001.782:4161): avc: denied { open } for pid=8266 comm="syz.4.658" path="/129/file2" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.596173][ T30] audit: type=1400 audit(1777931001.782:4162): avc: denied { ioctl } for pid=8266 comm="syz.4.658" path="/129/file2" dev="tmpfs" ino=691 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.931417][ T30] audit: type=1400 audit(1777931001.812:4163): avc: denied { recv } for pid=5596 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 275.879569][ T8299] kvm: pic: non byte write [ 275.970548][ T5733] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 276.160741][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 276.177987][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.211457][ T5733] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.228727][ T5733] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.258390][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.289066][ T5733] usb 4-1: Product: syz [ 276.297850][ T5733] usb 4-1: Manufacturer: syz [ 276.313901][ T5733] usb 4-1: SerialNumber: syz [ 276.374439][ T5733] usb 4-1: 0:2 : does not exist [ 276.566795][ T5733] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 276.650556][ T8244] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 276.689131][ T5733] usb 4-1: USB disconnect, device number 16 [ 276.816916][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.855183][ T8244] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.881942][ T8244] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 276.912604][ T8244] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.963398][ T8244] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 276.981189][ T8244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 277.000492][ T8244] usb 1-1: Product: syz [ 277.009629][ T8244] usb 1-1: Manufacturer: syz [ 277.021263][ T8244] usb 1-1: SerialNumber: syz [ 277.305351][ T8244] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 277.560040][ T8244] usb 1-1: USB disconnect, device number 21 [ 277.600695][ T8244] usblp0: removed [ 277.713611][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 277.713628][ T30] audit: type=1400 audit(1777931006.782:4420): avc: denied { recv } for pid=8338 comm="syz.2.682" saddr=::1 src=20002 daddr=::1 dest=20002 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 277.838131][ T30] audit: type=1400 audit(1777931006.822:4421): avc: denied { recv } for pid=8338 comm="syz.2.682" saddr=::1 src=20002 daddr=::1 dest=20002 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.196270][ T30] audit: type=1400 audit(1777931006.842:4422): avc: denied { recv } for pid=8338 comm="syz.2.682" saddr=::1 src=20002 daddr=::1 dest=20002 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.470248][ T30] audit: type=1400 audit(1777931006.852:4423): avc: denied { recv } for pid=8338 comm="syz.2.682" saddr=::1 src=20002 daddr=::1 dest=20002 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.564321][ T30] audit: type=1400 audit(1777931006.852:4424): avc: denied { execmem } for pid=8340 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 278.658373][ T30] audit: type=1400 audit(1777931006.862:4425): avc: denied { recv } for pid=8338 comm="syz.2.682" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.742917][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 278.907165][ T30] audit: type=1400 audit(1777931006.882:4426): avc: denied { read write } for pid=5618 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.933332][ T30] audit: type=1400 audit(1777931006.882:4427): avc: denied { open } for pid=5618 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.967305][ T30] audit: type=1400 audit(1777931006.882:4428): avc: denied { ioctl } for pid=5618 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.354085][ T30] audit: type=1400 audit(1777931006.952:4429): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.556917][ T8367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=64 (128 ns) > initial count (4 ns). Using initial count to start timer. [ 279.814107][ T8371] syzkaller0: entered promiscuous mode [ 279.840550][ T8371] syzkaller0: entered allmulticast mode [ 279.862290][ T8373] Invalid logical block size (516) [ 281.423689][ T8402] loop9: detected capacity change from 0 to 7 [ 281.465550][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.474815][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.497254][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.506771][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.549717][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.558999][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.570195][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.579429][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.598226][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.607432][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.717311][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.726566][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.776764][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.785984][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.794065][ T8402] ldm_validate_partition_table(): Disk read failed. [ 281.961342][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.970617][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.986163][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.995375][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.010123][ T8408] input: syz1 as /devices/virtual/input/input6 [ 282.021391][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.030642][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 282.071429][ T8402] Dev loop9: unable to read RDB block 0 [ 282.088757][ T8402] loop9: unable to read partition table [ 282.100898][ T5733] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.111603][ T8402] loop9: partition table beyond EOD, truncated [ 282.119832][ T8402] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 282.323174][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 282.331939][ T5733] usb 4-1: config 2 has an invalid interface number: 215 but max is 0 [ 282.350337][ T5733] usb 4-1: config 2 has an invalid interface descriptor of length 2, skipping [ 282.366419][ T5733] usb 4-1: config 2 has no interface number 0 [ 282.374050][ T5733] usb 4-1: config 2 interface 215 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.397554][ T5733] usb 4-1: config 2 interface 215 has no altsetting 0 [ 282.420519][ T5733] usb 4-1: New USB device found, idVendor=257a, idProduct=360f, bcdDevice=88.da [ 282.438007][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.451821][ T5733] usb 4-1: Product: syz [ 282.464180][ T5733] usb 4-1: Manufacturer: syz [ 282.476630][ T5733] usb 4-1: SerialNumber: syz [ 282.713454][ T30] kauditd_printk_skb: 311 callbacks suppressed [ 282.713471][ T30] audit: type=1400 audit(1777931011.792:4741): avc: denied { ioctl } for pid=8424 comm="syz.2.716" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.814810][ T5733] option 4-1:2.215: GSM modem (1-port) converter detected [ 282.846965][ T5733] usb 4-1: USB disconnect, device number 17 [ 282.847999][ T30] audit: type=1400 audit(1777931011.862:4742): avc: denied { recv } for pid=8423 comm="syz.0.715" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 282.858717][ T5733] option 4-1:2.215: device disconnected [ 283.096023][ T30] audit: type=1400 audit(1777931012.012:4743): avc: denied { lock } for pid=8423 comm="syz.0.715" path="socket:[19097]" dev="sockfs" ino=19097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 283.342576][ T30] audit: type=1400 audit(1777931012.022:4744): avc: denied { create } for pid=8423 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.425574][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 283.486320][ T30] audit: type=1400 audit(1777931012.032:4745): avc: denied { setopt } for pid=8423 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.511841][ T30] audit: type=1400 audit(1777931012.362:4746): avc: denied { recv } for pid=8423 comm="syz.0.715" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 283.592446][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 283.599159][ T30] audit: type=1400 audit(1777931012.422:4747): avc: denied { ioctl } for pid=8424 comm="syz.2.716" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.613453][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.669167][ T9] usb 3-1: config 0 has no interface number 0 [ 283.685374][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.693718][ T30] audit: type=1400 audit(1777931012.512:4748): avc: denied { ioctl } for pid=8424 comm="syz.2.716" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.714774][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.736066][ T8433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.718'. [ 283.748757][ T9] usb 3-1: Product: syz [ 283.757407][ T30] audit: type=1400 audit(1777931012.512:4749): avc: denied { ioctl } for pid=8424 comm="syz.2.716" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.761007][ T9] usb 3-1: Manufacturer: syz [ 283.799926][ T9] usb 3-1: SerialNumber: syz [ 283.807637][ T30] audit: type=1400 audit(1777931012.552:4750): avc: denied { recv } for pid=5596 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 283.813095][ T9] usb 3-1: config 0 descriptor?? [ 284.479764][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 284.490511][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 284.760564][ T5732] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 285.118514][ T8445] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 285.383346][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 285.397376][ T5732] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 285.408179][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.412964][ T8448] batadv_slave_0: Caught tx_queue_len zero misconfig [ 285.418951][ T5732] usb 1-1: config 0 has no interfaces? [ 285.434858][ T5732] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 285.454557][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.474388][ T5732] usb 1-1: Product: syz [ 285.481774][ T5732] usb 1-1: Manufacturer: syz [ 285.490281][ T5732] usb 1-1: SerialNumber: syz [ 285.501593][ T5732] r8152-cfgselector 1-1: Unknown version 0x0000 [ 285.507995][ T5732] r8152-cfgselector 1-1: config 0 descriptor?? [ 285.901658][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 285.929244][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 285.957520][ T9] usb 3-1: USB disconnect, device number 14 [ 286.633111][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 286.646674][ T8471] kvm_intel: kvm [8467]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xad62 [ 286.660984][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 286.692137][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa6d2 [ 286.752112][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 286.766284][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc080062 [ 286.777379][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 286.792561][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x595 [ 286.820415][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa6d2 [ 286.835230][ T8471] kvm: kvm [8467]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 287.180107][ T8486] process 'syz.3.734' launched './file0' with NULL argv: empty string added [ 287.390644][ T802] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 287.645702][ T8244] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 287.665298][ T802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 287.690354][ T802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.704458][ T802] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 287.714966][ T802] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 287.726550][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 287.726564][ T30] audit: type=1400 audit(1777931016.792:4934): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.762235][ T802] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 287.895087][ T802] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 287.906014][ T30] audit: type=1400 audit(1777931016.792:4935): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.913915][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 287.938780][ T802] usb 5-1: config 1 interface 1 has no altsetting 0 [ 288.449040][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 288.537297][ T8500] loop3: detected capacity change from 0 to 7 [ 288.560304][ C0] blk_print_req_error: 11 callbacks suppressed [ 288.560324][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.575789][ C0] buffer_io_error: 10 callbacks suppressed [ 288.575807][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 288.588108][ T30] audit: type=1400 audit(1777931016.792:4936): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.643099][ T802] usb 5-1: string descriptor 0 read error: -22 [ 288.650216][ T802] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 288.659365][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.673645][ T30] audit: type=1400 audit(1777931016.842:4937): avc: denied { ioctl } for pid=8487 comm="syz.2.736" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.698876][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.708050][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 288.729753][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.733952][ T8501] [ 288.739736][ T8501] ====================================================== [ 288.746746][ T8501] WARNING: possible circular locking dependency detected [ 288.753751][ T8501] syzkaller #0 Not tainted [ 288.758142][ T8501] ------------------------------------------------------ [ 288.765139][ T8501] syz.3.739/8501 is trying to acquire lock: [ 288.771012][ T8501] ffff88801c6a7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 288.781195][ T8501] [ 288.781195][ T8501] but task is already holding lock: [ 288.788548][ T8501] ffff888027bf9c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 288.799766][ T8501] [ 288.799766][ T8501] which lock already depends on the new lock. [ 288.799766][ T8501] [ 288.810162][ T8501] [ 288.810162][ T8501] the existing dependency chain (in reverse order) is: [ 288.819151][ T8501] [ 288.819151][ T8501] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 288.827734][ T8501] blk_alloc_queue+0x610/0x790 [ 288.833012][ T8501] blk_mq_alloc_queue+0x174/0x290 [ 288.838547][ T8501] __blk_mq_alloc_disk+0x29/0x120 [ 288.844073][ T8501] loop_add+0x498/0xb60 [ 288.848731][ T8501] loop_init+0x1d3/0x200 [ 288.853476][ T8501] do_one_initcall+0x121/0x750 [ 288.858751][ T8501] kernel_init_freeable+0x6ea/0x7b0 [ 288.864453][ T8501] kernel_init+0x1f/0x1e0 [ 288.869290][ T8501] ret_from_fork+0x72b/0xd50 [ 288.874384][ T8501] ret_from_fork_asm+0x1a/0x30 [ 288.879671][ T8501] [ 288.879671][ T8501] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 288.886862][ T8501] fs_reclaim_acquire+0xc4/0x100 [ 288.892300][ T8501] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 288.898179][ T8501] __kernfs_iattrs+0x124/0x3e0 [ 288.903453][ T8501] __kernfs_setattr+0x4d/0x3c0 [ 288.908718][ T8501] kernfs_iop_setattr+0xda/0x130 [ 288.914171][ T8501] notify_change+0xb25/0x1330 [ 288.919351][ T8501] do_truncate+0x1df/0x240 [ 288.924289][ T8501] path_openat+0x2a55/0x31a0 [ 288.929383][ T8501] do_file_open+0x20e/0x430 [ 288.934395][ T8501] do_sys_openat2+0x10d/0x1e0 [ 288.939599][ T8501] __x64_sys_openat+0x12d/0x210 [ 288.944971][ T8501] do_syscall_64+0x10b/0xf80 [ 288.950067][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.956474][ T8501] [ 288.956474][ T8501] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 288.964966][ T8501] __lock_acquire+0x14b8/0x2630 [ 288.970328][ T8501] lock_acquire+0x1b1/0x370 [ 288.975335][ T8501] down_read+0x99/0x450 [ 288.979995][ T8501] kernfs_iop_getattr+0x9c/0xf0 [ 288.985349][ T8501] vfs_getattr_nosec+0x2d4/0x430 [ 288.990794][ T8501] vfs_getattr+0x4a/0x60 [ 288.995542][ T8501] loop_query_min_dio_size.isra.0+0x117/0x250 [ 289.002115][ T8501] lo_ioctl+0x13aa/0x1bc0 [ 289.006965][ T8501] blkdev_ioctl+0x5ad/0x6f0 [ 289.011997][ T8501] __x64_sys_ioctl+0x18e/0x210 [ 289.017268][ T8501] do_syscall_64+0x10b/0xf80 [ 289.022365][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.028772][ T8501] [ 289.028772][ T8501] other info that might help us debug this: [ 289.028772][ T8501] [ 289.038976][ T8501] Chain exists of: [ 289.038976][ T8501] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 289.038976][ T8501] [ 289.053380][ T8501] Possible unsafe locking scenario: [ 289.053380][ T8501] [ 289.060808][ T8501] CPU0 CPU1 [ 289.066151][ T8501] ---- ---- [ 289.071500][ T8501] lock(&q->q_usage_counter(io)#20); [ 289.076861][ T8501] lock(fs_reclaim); [ 289.083341][ T8501] lock(&q->q_usage_counter(io)#20); [ 289.091215][ T8501] rlock(&root->kernfs_iattr_rwsem); [ 289.096564][ T8501] [ 289.096564][ T8501] *** DEADLOCK *** [ 289.096564][ T8501] [ 289.104681][ T8501] 3 locks held by syz.3.739/8501: [ 289.109676][ T8501] #0: ffff888027ce9430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 289.119833][ T8501] #1: ffff888027bf9c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 289.131472][ T8501] #2: ffff888027bf9c88 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 289.143285][ T8501] [ 289.143285][ T8501] stack backtrace: [ 289.149158][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.3.739 Not tainted syzkaller #0 PREEMPT(full) [ 289.149175][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.149183][ T8501] Call Trace: [ 289.149188][ T8501] [ 289.149194][ T8501] dump_stack_lvl+0x100/0x190 [ 289.149211][ T8501] print_circular_bug.cold+0x178/0x1c7 [ 289.149233][ T8501] check_noncircular+0x146/0x160 [ 289.149252][ T8501] __lock_acquire+0x14b8/0x2630 [ 289.149279][ T8501] lock_acquire+0x1b1/0x370 [ 289.149296][ T8501] ? kernfs_iop_getattr+0x9c/0xf0 [ 289.149312][ T8501] ? __pfx___might_resched+0x10/0x10 [ 289.149333][ T8501] down_read+0x99/0x450 [ 289.149351][ T8501] ? kernfs_iop_getattr+0x9c/0xf0 [ 289.149365][ T8501] ? find_held_lock+0x2b/0x80 [ 289.149377][ T8501] ? __pfx_down_read+0x10/0x10 [ 289.149394][ T8501] ? kernfs_root+0xee/0x2a0 [ 289.149412][ T8501] kernfs_iop_getattr+0x9c/0xf0 [ 289.149428][ T8501] vfs_getattr_nosec+0x2d4/0x430 [ 289.149445][ T8501] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 289.149462][ T8501] vfs_getattr+0x4a/0x60 [ 289.149479][ T8501] loop_query_min_dio_size.isra.0+0x117/0x250 [ 289.149497][ T8501] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 289.149522][ T8501] lo_ioctl+0x13aa/0x1bc0 [ 289.149543][ T8501] ? __pfx_lo_ioctl+0x10/0x10 [ 289.149560][ T8501] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 289.149583][ T8501] ? kasan_quarantine_put+0x104/0x240 [ 289.149604][ T8501] ? blk_get_meta_cap+0xd4/0x6c0 [ 289.149624][ T8501] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 289.149646][ T8501] ? blkdev_common_ioctl+0x515/0x2b80 [ 289.149670][ T8501] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 289.149695][ T8501] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.149711][ T8501] ? do_vfs_ioctl+0x226/0x13e0 [ 289.149724][ T8501] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 289.149738][ T8501] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 289.149759][ T8501] ? __fget_files+0x215/0x3d0 [ 289.149775][ T8501] ? __pfx_lo_ioctl+0x10/0x10 [ 289.149792][ T8501] blkdev_ioctl+0x5ad/0x6f0 [ 289.149805][ T8501] ? __pfx_blkdev_ioctl+0x10/0x10 [ 289.149827][ T8501] ? selinux_file_ioctl+0x13b/0x290 [ 289.149843][ T8501] ? selinux_file_ioctl+0xb6/0x290 [ 289.149859][ T8501] ? __pfx_blkdev_ioctl+0x10/0x10 [ 289.149880][ T8501] __x64_sys_ioctl+0x18e/0x210 [ 289.149894][ T8501] do_syscall_64+0x10b/0xf80 [ 289.149909][ T8501] ? clear_bhb_loop+0x40/0x90 [ 289.149924][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.149938][ T8501] RIP: 0033:0x7f44e639cdd9 [ 289.149952][ T8501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.149965][ T8501] RSP: 002b:00007f44e71ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.149978][ T8501] RAX: ffffffffffffffda RBX: 00007f44e6616090 RCX: 00007f44e639cdd9 [ 289.149987][ T8501] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 289.149995][ T8501] RBP: 00007f44e6432d69 R08: 0000000000000000 R09: 0000000000000000 [ 289.150003][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.150011][ T8501] R13: 00007f44e6616128 R14: 00007f44e6616090 R15: 00007ffe224156a8 [ 289.150024][ T8501] [ 289.457522][ T30] audit: type=1400 audit(1777931016.862:4938): avc: denied { execmem } for pid=8490 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 289.477837][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.488240][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 289.498064][ T30] audit: type=1400 audit(1777931016.862:4939): avc: denied { recv } for pid=8489 comm="dhcpcd" saddr=10.128.0.169 src=30006 daddr=10.128.1.153 dest=45336 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 289.523185][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 289.534069][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.545401][ T30] audit: type=1400 audit(1777931016.922:4940): avc: denied { ioctl } for pid=8487 comm="syz.2.736" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.580626][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.589783][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.597874][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.607009][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.614973][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.624106][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.632067][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.640479][ T30] audit: type=1400 audit(1777931017.082:4941): avc: denied { prog_load } for pid=8490 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.641230][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.669021][ T8500] ldm_validate_partition_table(): Disk read failed. [ 289.675776][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.684917][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.687717][ T30] audit: type=1400 audit(1777931017.082:4942): avc: denied { bpf } for pid=8490 comm="syz.0.737" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.720060][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.729254][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.741113][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.750267][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.767103][ T30] audit: type=1400 audit(1777931017.082:4943): avc: denied { prog_load } for pid=8490 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.788857][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.798020][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 289.805953][ T8500] Dev loop3: unable to read RDB block 0 [ 289.815718][ T9] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 289.825026][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.833157][ T9] usb 3-1: Product: syz [ 289.837313][ T9] usb 3-1: Manufacturer: syz [ 289.842031][ T9] usb 3-1: SerialNumber: syz [ 289.850745][ T8500] loop3: unable to read partition table [ 289.856937][ T8500] loop3: partition table beyond EOD, truncated [ 289.865305][ T8500] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 289.881093][ T8501] ldm_validate_partition_table(): Disk read failed. [ 289.888051][ T8501] Dev loop3: unable to read RDB block 0 [ 289.894467][ T8501] loop3: unable to read partition table [ 289.900279][ T8501] loop3: partition table beyond EOD, truncated [ 289.908202][ T8501] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 289.968150][ T802] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 290.012871][ T802] usb 5-1: USB disconnect, device number 11 [ 290.112121][ T9] usb 3-1: USB disconnect, device number 15 [ 290.140075][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.470720][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 290.470808][ T4931] Bluetooth: hci5: command 0x1003 tx timeout [ 294.230999][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 294.231018][ T30] audit: type=1400 audit(1777931023.312:4996): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1