last executing test programs: 12.173427559s ago: executing program 1 (id=562): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x80000) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a}, 0x20) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r2, &(0x7f0000000180)="aa131fd2222953972e434ed7973ec947e2fca463eb38b0c57a5375640607fa79f65b1e90817ec2266f90b20bb6e4f554720d3197bde013a6e2fa812879e35e29bf5285e6289ba537591bcbf3534e3f60833687e40c49cf53fb26a3cd59fe5529ee321f84746ab316bb0eec0c6c3c4ae4c4c4df42fc056b02aea0f4244276d356c56e795eaa9a45f91f9296cc245e823983ef18fd0ed2d2733f32264c78d79aef902df3a48883a47390eb65b131f6c712534dc10a5d0a1188b7a34927f080e9234264923ace2304b7624fdaf6f734d168896de6a5c24ae2114248bf3d5e643e007b9827386d294e2b4286b9", 0xeb, 0x4000000, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) 10.259400937s ago: executing program 1 (id=565): openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 8.943331126s ago: executing program 1 (id=568): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 8.083957182s ago: executing program 2 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9140010040000000140003007665746830000000000000dd00000000400034801400350014003500636169663000000000000000000000001400350076657468305f746f5f7465616d000000"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 7.98588134s ago: executing program 3 (id=574): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x11}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.870493436s ago: executing program 0 (id=576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f907800006558001890780400"], 0xfdef) 7.823499545s ago: executing program 1 (id=577): unshare(0x20000400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000640)='.\x00', 0x80000001) 6.696010973s ago: executing program 4 (id=578): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) setuid(0xee01) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) 5.62321869s ago: executing program 1 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r0, 0xe, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b000004040001"], 0x18}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x54}}, 0x20040040) socket(0x2c, 0x3, 0x0) 5.474025181s ago: executing program 2 (id=580): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0xac7, 0x1, 0x100001, 0x8fd, 0x0, 0x3ffff}}) 5.114064363s ago: executing program 2 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') 4.619281978s ago: executing program 0 (id=582): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, 0x0) 4.619002684s ago: executing program 3 (id=583): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="36f83f020200000001000000000000", @ANYBLOB="040000000000000010000300"], 0x2c, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(r0, &(0x7f00000064c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="cd", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000000000000ac1414aa00000000"], 0x18}], 0x1, 0x0) 4.379040297s ago: executing program 1 (id=584): sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB=')'], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201002"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.919232413s ago: executing program 4 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=', 0x18) 3.803841793s ago: executing program 4 (id=586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.803503446s ago: executing program 2 (id=587): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 3.757768551s ago: executing program 2 (id=588): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/196, 0x0, 0xeeee0000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.709365704s ago: executing program 2 (id=589): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) 3.61972372s ago: executing program 0 (id=590): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c1eb37479342c7600725007f31d2853cd6435366b2bd8a4"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 3.619424837s ago: executing program 3 (id=591): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.782367256s ago: executing program 3 (id=592): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x62003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xa}, {0xfff3}}}, 0x24}}, 0x0) 2.601415198s ago: executing program 4 (id=593): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000001500)={0x5, 0x80, 0x0, 0x5, 0xf, "0075a805693fc526fe0d64ff00"}) 2.523044354s ago: executing program 0 (id=594): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='7777\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0\x00', 0x2) 2.517193059s ago: executing program 4 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) 1.107537061s ago: executing program 4 (id=596): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.070623903s ago: executing program 0 (id=597): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0xffff) 186.603323ms ago: executing program 3 (id=598): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x784, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x3, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 7.331862ms ago: executing program 0 (id=599): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) 0s ago: executing program 3 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', 0x0) symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') kernel console output (not intermixed with test programs): _t tclass=dir permissive=1 [ 106.109392][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.127552][ T29] audit: type=1400 audit(1785284416.295:313): avc: denied { search } for pid=6175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.163496][ T29] audit: type=1400 audit(1785284416.295:314): avc: denied { search } for pid=6175 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.193843][ T6185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.102'. [ 106.803199][ T806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.836328][ T806] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 106.850203][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.897284][ T806] usb 4-1: config 0 descriptor?? [ 106.919480][ T6180] vlan2: entered allmulticast mode [ 106.951556][ T6180] bond0: entered allmulticast mode [ 106.969548][ T6180] bond_slave_0: entered allmulticast mode [ 106.981476][ T6180] bond_slave_1: entered allmulticast mode [ 107.002694][ T5734] hid-generic 0000:0001:0005.0003: unknown main item tag 0x0 [ 107.021618][ T5734] hid-generic 0000:0001:0005.0003: unknown main item tag 0x0 [ 107.042129][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.051688][ T5734] hid-generic 0000:0001:0005.0003: hidraw0: HID v8.06 Device [syz1] on syz0 [ 107.190899][ T6201] fido_id[6201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.241794][ T10] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 107.265720][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.277412][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.310120][ T6185] bond_slave_0: left allmulticast mode [ 107.328803][ T10] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 107.361510][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.372597][ T806] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 107.383377][ T6185] bond_slave_1: left allmulticast mode [ 107.400867][ T6185] bond0 (unregistering): Released all slaves [ 107.408639][ T806] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 107.436327][ T806] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 107.464833][ T6174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.488470][ T806] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 107.494106][ T6174] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 107.585010][ T806] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input5 [ 107.585735][ T6174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.632633][ T6174] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 107.681145][ T806] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 107.699285][ T6174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.716469][ T6174] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 107.752425][ T6174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.761047][ T806] usb 4-1: USB disconnect, device number 5 [ 107.820957][ T6174] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 107.841467][ T6210] fido_id[6210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 107.895306][ T6174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.916964][ T6174] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 109.043327][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 109.043355][ T29] audit: type=1400 audit(1785284418.495:341): avc: denied { read } for pid=6215 comm="syz.2.107" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.118048][ T29] audit: type=1400 audit(1785284418.495:342): avc: denied { open } for pid=6215 comm="syz.2.107" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.147214][ T29] audit: type=1400 audit(1785284418.495:343): avc: denied { ioctl } for pid=6215 comm="syz.2.107" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.321206][ T6232] fuse: Bad value for 'fd' [ 109.680375][ T29] audit: type=1400 audit(1785284419.905:344): avc: denied { write } for pid=6211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.974972][ T29] audit: type=1400 audit(1785284420.205:345): avc: denied { write } for pid=6237 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.329073][ T6261] 9p: Bad value for 'port' [ 111.336138][ T29] audit: type=1400 audit(1785284421.565:346): avc: denied { mounton } for pid=6260 comm="syz.4.117" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 112.178884][ T6269] kvm: MWAIT instruction emulated as NOP! [ 112.288370][ T29] audit: type=1400 audit(1785284422.505:347): avc: denied { write } for pid=6249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.426344][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.512890][ T29] audit: type=1400 audit(1785284422.745:348): avc: denied { write } for pid=6281 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.634184][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.363753][ T29] audit: type=1400 audit(1785284424.605:349): avc: denied { remount } for pid=6303 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.051828][ T29] audit: type=1400 audit(1785284425.285:350): avc: denied { write } for pid=6294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.539007][ T6331] FAULT_INJECTION: forcing a failure. [ 115.539007][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.615857][ T6332] overlayfs: overlapping lowerdir path [ 115.657283][ T6331] CPU: 0 UID: 60928 PID: 6331 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT(full) [ 115.657314][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.657327][ T6331] Call Trace: [ 115.657334][ T6331] [ 115.657342][ T6331] dump_stack_lvl+0x100/0x190 [ 115.657374][ T6331] should_fail_ex.cold+0x5/0xa [ 115.657401][ T6331] strncpy_from_user+0x3b/0x2d0 [ 115.657433][ T6331] do_getname+0x78/0x390 [ 115.657465][ T6331] __x64_sys_chdir+0xaa/0x280 [ 115.657489][ T6331] ? __pfx___x64_sys_chdir+0x10/0x10 [ 115.657522][ T6331] do_syscall_64+0x115/0x870 [ 115.657545][ T6331] ? clear_bhb_loop+0x40/0x90 [ 115.657574][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.657597][ T6331] RIP: 0033:0x7f5b7a59de99 [ 115.657615][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.657634][ T6331] RSP: 002b:00007f5b7b4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 115.657655][ T6331] RAX: ffffffffffffffda RBX: 00007f5b7a825fa0 RCX: 00007f5b7a59de99 [ 115.657669][ T6331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 115.657682][ T6331] RBP: 00007f5b7b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.657695][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.657708][ T6331] R13: 00007f5b7a826038 R14: 00007f5b7a825fa0 R15: 00007fffb83c14b8 [ 115.657743][ T6331] [ 115.831099][ T994] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.875169][ T29] audit: type=1400 audit(1785284426.115:351): avc: denied { write } for pid=6327 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.983640][ T994] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 116.039072][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.108993][ T994] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 119.197717][ T29] audit: type=1400 audit(1785284429.345:352): avc: denied { write } for pid=6338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.397872][ T6377] FAULT_INJECTION: forcing a failure. [ 119.397872][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.553715][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT(full) [ 119.553739][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.553749][ T6377] Call Trace: [ 119.553755][ T6377] [ 119.553762][ T6377] dump_stack_lvl+0x100/0x190 [ 119.553798][ T6377] should_fail_ex.cold+0x5/0xa [ 119.553822][ T6377] _copy_from_user+0x2e/0xd0 [ 119.553853][ T6377] video_usercopy+0x98e/0x1730 [ 119.553875][ T6377] ? __pfx___video_do_ioctl+0x10/0x10 [ 119.553896][ T6377] ? __pfx_video_usercopy+0x10/0x10 [ 119.553931][ T6377] v4l2_ioctl+0x1bd/0x250 [ 119.553953][ T6377] ? __pfx_v4l2_ioctl+0x10/0x10 [ 119.553979][ T6377] __x64_sys_ioctl+0x18e/0x210 [ 119.554008][ T6377] do_syscall_64+0x115/0x870 [ 119.554030][ T6377] ? clear_bhb_loop+0x40/0x90 [ 119.554056][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.554078][ T6377] RIP: 0033:0x7f5b7a59de99 [ 119.554100][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.554119][ T6377] RSP: 002b:00007f5b7b4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.554139][ T6377] RAX: ffffffffffffffda RBX: 00007f5b7a825fa0 RCX: 00007f5b7a59de99 [ 119.554152][ T6377] RDX: 00002000000000c0 RSI: 00000000c0205648 RDI: 0000000000000003 [ 119.554164][ T6377] RBP: 00007f5b7b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.554176][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.554187][ T6377] R13: 00007f5b7a826038 R14: 00007f5b7a825fa0 R15: 00007fffb83c14b8 [ 119.554210][ T6377] [ 119.870302][ T29] audit: type=1400 audit(1785284429.995:353): avc: denied { write } for pid=6381 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.070218][ T29] audit: type=1400 audit(1785284433.305:354): avc: denied { nlmsg_write } for pid=6416 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.569642][ T29] audit: type=1400 audit(1785284433.805:355): avc: denied { write } for pid=6395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.830091][ T29] audit: type=1326 audit(1785284434.065:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.0.148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b7a59de99 code=0x0 [ 123.894293][ T29] audit: type=1400 audit(1785284434.135:357): avc: denied { write } for pid=6431 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.206575][ T6440] No source specified [ 125.435053][ T6454] capability: warning: `syz.0.152' uses deprecated v2 capabilities in a way that may be insecure [ 127.062287][ T29] audit: type=1400 audit(1785284437.295:358): avc: denied { getopt } for pid=6466 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.683031][ T29] audit: type=1400 audit(1785284437.915:359): avc: denied { kexec_image_load } for pid=6471 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 128.219998][ T29] audit: type=1400 audit(1785284438.455:360): avc: denied { append } for pid=6471 comm="syz.3.158" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 128.300905][ T29] audit: type=1400 audit(1785284438.485:361): avc: denied { setopt } for pid=6471 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.356552][ T29] audit: type=1400 audit(1785284438.485:362): avc: denied { read } for pid=6471 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.408529][ T29] audit: type=1400 audit(1785284438.645:363): avc: denied { create } for pid=6481 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.157842][ T29] audit: type=1400 audit(1785284438.895:364): avc: denied { setopt } for pid=6481 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.352006][ T29] audit: type=1400 audit(1785284438.905:365): avc: denied { connect } for pid=6481 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.741915][ T6499] fuse: Bad value for 'fd' [ 132.991846][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.015662][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.222091][ T29] audit: type=1400 audit(1785284447.355:366): avc: denied { create } for pid=6537 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.578295][ T29] audit: type=1400 audit(1785284448.815:367): avc: denied { write } for pid=6554 comm="syz.3.182" name="snmp" dev="proc" ino=4026533247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 139.818804][ T6570] evm: overlay not supported [ 140.100584][ T29] audit: type=1400 audit(1785284449.955:368): avc: denied { unlink } for pid=6567 comm="syz.2.185" name="#1" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.131132][ T29] audit: type=1400 audit(1785284449.965:369): avc: denied { mount } for pid=6567 comm="syz.2.185" name="/" dev="overlay" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.153711][ T29] audit: type=1400 audit(1785284450.075:370): avc: denied { watch } for pid=6567 comm="syz.2.185" path="/41/bus/file1" dev="overlay" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.195009][ T29] audit: type=1400 audit(1785284450.075:371): avc: denied { watch_sb watch_reads } for pid=6567 comm="syz.2.185" path="/41/bus/file1" dev="overlay" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.353256][ T29] audit: type=1400 audit(1785284450.595:372): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.441057][ T29] audit: type=1400 audit(1785284450.675:373): avc: denied { create } for pid=6573 comm="syz.1.187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.471126][ T29] audit: type=1400 audit(1785284450.705:374): avc: denied { write } for pid=6573 comm="syz.1.187" name="file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.501936][ T29] audit: type=1400 audit(1785284450.705:375): avc: denied { open } for pid=6573 comm="syz.1.187" path="/39/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.768168][ T10] usb 5-1: emi26_load_firmware - request_firmware() failed [ 142.776011][ T5742] usb 2-1: emi26_load_firmware - request_firmware() failed [ 143.103222][ T5804] usb 3-1: emi26_load_firmware - request_firmware() failed [ 143.110491][ T994] usb 4-1: emi26_load_firmware - request_firmware() failed [ 143.120617][ T5804] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 143.129400][ T994] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 143.137512][ T5804] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 143.228558][ T9] usb 1-1: emi26_load_firmware - request_firmware() failed [ 143.235972][ T10] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 143.340949][ T994] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 143.621608][ T5742] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 143.631121][ T9] usb 1-1: emi26_load_firmware - error loading firmware: error = -110 [ 143.639379][ T10] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 143.650243][ T5742] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 143.661432][ T9] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 143.685062][ T5742] usb 2-1: USB disconnect, device number 3 [ 143.698826][ T10] usb 5-1: USB disconnect, device number 4 [ 143.699536][ T5804] usb 3-1: USB disconnect, device number 3 [ 143.712762][ T9] usb 1-1: USB disconnect, device number 2 [ 143.716154][ T994] usb 4-1: USB disconnect, device number 6 [ 143.958818][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 143.958834][ T29] audit: type=1400 audit(1785284454.195:378): avc: denied { listen } for pid=6602 comm="syz.4.194" lport=53147 faddr=::ffff:172.30.0.5 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.030184][ T29] audit: type=1400 audit(1785284454.235:379): avc: denied { accept } for pid=6602 comm="syz.4.194" lport=53147 faddr=::ffff:172.30.0.5 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.071965][ T29] audit: type=1400 audit(1785284454.235:380): avc: denied { setopt } for pid=6602 comm="syz.4.194" lport=53147 faddr=::ffff:172.30.0.5 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 144.107140][ T29] audit: type=1400 audit(1785284454.235:381): avc: denied { create } for pid=6602 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.168501][ T29] audit: type=1400 audit(1785284454.235:382): avc: denied { write } for pid=6602 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.251968][ T994] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.261999][ T5742] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.374648][ T6614] udc usbip-vudc.0: soft-connect without a gadget driver [ 144.414259][ T994] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.428013][ T994] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.442189][ T5742] usb 2-1: Using ep0 maxpacket: 32 [ 144.446488][ T994] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.454471][ T5742] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.467447][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.533885][ T6593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.539458][ T5742] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 144.575521][ T5742] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 144.592403][ T5742] usb 2-1: config 14 has no interface number 0 [ 144.653001][ T6615] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.197'. [ 144.657068][ T994] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.748270][ T5742] usb 2-1: config 14 has no interface number 1 [ 144.762142][ T5742] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 144.783079][ T5742] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 144.796625][ T5742] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 144.820493][ T5742] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 144.833058][ T5742] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 144.891211][ T5742] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.067006][ T5742] usb 2-1: config 14 interface 57 has no altsetting 0 [ 145.105480][ T5742] usb 2-1: config 14 interface 228 has no altsetting 0 [ 145.139526][ T5742] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 145.170619][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.205926][ T5742] usb 2-1: Product: syz [ 145.225330][ T5742] usb 2-1: Manufacturer: syz [ 145.248030][ T5742] usb 2-1: SerialNumber: syz [ 145.355519][ T994] usb 4-1: USB disconnect, device number 7 [ 145.667860][ T29] audit: type=1400 audit(1785284455.785:383): avc: denied { accept } for pid=6619 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.841773][ T5742] legousbtower 2-1:14.57: interrupt endpoints not found [ 146.268956][ T5742] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 146.291330][ T5742] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 146.450876][ T29] audit: type=1400 audit(1785284456.685:384): avc: denied { create } for pid=6630 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.512183][ T29] audit: type=1400 audit(1785284456.745:385): avc: denied { write } for pid=6630 comm="syz.0.203" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.104938][ T6607] usb 2-1: LEGO USB Tower reset control request failed [ 147.105955][ T806] usb 2-1: USB disconnect, device number 4 [ 147.165843][ T806] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 148.280795][ T5742] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 148.298374][ T5742] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 148.336585][ T5742] hid-generic 0000:0001:0005.0005: hidraw0: HID v8.06 Device [syz1] on syz0 [ 148.500431][ T6649] fido_id[6649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.626825][ T6653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.634712][ T6653] IPv6: NLM_F_CREATE should be set when creating new route [ 149.260523][ T29] audit: type=1400 audit(1785284459.415:386): avc: denied { execute } for pid=6654 comm="syz.3.210" name="file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.464627][ T29] audit: type=1400 audit(1785284459.415:387): avc: denied { execute_no_trans } for pid=6654 comm="syz.3.210" path="/38/file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.626671][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.772607][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.787476][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.872712][ T1162] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.891852][ T1162] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.911967][ T5804] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 149.912067][ T1162] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.919512][ T806] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 149.949272][ T1162] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.982677][ T994] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.075674][ T806] usb 4-1: config 127 has an invalid interface number: 168 but max is 0 [ 150.090678][ T806] usb 4-1: config 127 has no interface number 0 [ 150.091143][ T5804] usb 1-1: config 127 has an invalid interface number: 168 but max is 0 [ 150.106358][ T806] usb 4-1: config 127 interface 168 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 150.143044][ T994] usb 2-1: device descriptor read/64, error -71 [ 150.159394][ T5804] usb 1-1: config 127 has no interface number 0 [ 150.167412][ T806] usb 4-1: config 127 interface 168 has no altsetting 0 [ 150.210206][ T5804] usb 1-1: config 127 interface 168 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 150.237437][ T806] usb 4-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=30.d7 [ 150.304255][ T5804] usb 1-1: config 127 interface 168 has no altsetting 0 [ 150.322652][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.386283][ T806] usb 4-1: Product: syz [ 150.399135][ T5804] usb 1-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=30.d7 [ 150.422342][ T806] usb 4-1: Manufacturer: syz [ 150.442179][ T806] usb 4-1: SerialNumber: syz [ 150.454069][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.462591][ T994] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.510293][ T5804] usb 1-1: Product: syz [ 150.527660][ T5804] usb 1-1: Manufacturer: syz [ 150.532608][ T5804] usb 1-1: SerialNumber: syz [ 150.533272][ T6660] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.546061][ T6666] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.632549][ T994] usb 2-1: device descriptor read/64, error -71 [ 150.764593][ T994] usb usb2-port1: attempt power cycle [ 151.142490][ T994] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.185498][ T994] usb 2-1: device descriptor read/8, error -71 [ 151.453482][ T994] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.520491][ T994] usb 2-1: device descriptor read/8, error -71 [ 151.655184][ T994] usb usb2-port1: unable to enumerate USB device [ 152.026505][ T29] audit: type=1400 audit(1785284461.995:388): avc: denied { connect } for pid=6675 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.054690][ T5804] hdpvr 1-1:127.168: Could not find bulk-in endpoint [ 152.090635][ T806] hdpvr 4-1:127.168: Could not find bulk-in endpoint [ 152.101709][ T5804] hdpvr 1-1:127.168: probe with driver hdpvr failed with error -12 [ 152.121525][ T806] hdpvr 4-1:127.168: probe with driver hdpvr failed with error -12 [ 152.157846][ T5804] usb 1-1: USB disconnect, device number 3 [ 152.338514][ T806] usb 4-1: USB disconnect, device number 8 [ 153.305569][ T29] audit: type=1400 audit(1785284463.545:389): avc: denied { mount } for pid=6696 comm="syz.0.219" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 153.359409][ T29] audit: type=1400 audit(1785284463.565:390): avc: denied { search } for pid=6696 comm="syz.0.219" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 153.549219][ T29] audit: type=1400 audit(1785284463.565:391): avc: denied { search } for pid=6696 comm="syz.0.219" name="events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 153.664140][ T29] audit: type=1400 audit(1785284463.585:392): avc: denied { search } for pid=6696 comm="syz.0.219" name="task" dev="tracefs" ino=14368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.716867][ T29] audit: type=1400 audit(1785284463.635:393): avc: denied { search } for pid=6696 comm="syz.0.219" name="task_rename" dev="tracefs" ino=14374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.796359][ T29] audit: type=1400 audit(1785284463.635:394): avc: denied { write } for pid=6696 comm="syz.0.219" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 154.989258][ T29] audit: type=1400 audit(1785284463.635:395): avc: denied { open } for pid=6696 comm="syz.0.219" path="/41/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.103030][ T29] audit: type=1400 audit(1785284463.715:396): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 155.195647][ T29] audit: type=1400 audit(1785284464.775:397): avc: denied { nlmsg_write } for pid=6703 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.234338][ T6722] tipc: Can't bind to reserved service type 0 [ 155.271962][ T806] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.319178][ T29] audit: type=1400 audit(1785284465.475:398): avc: denied { bind } for pid=6721 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.451933][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 155.462201][ T806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.473091][ T806] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.496886][ T806] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.506482][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.552514][ T29] audit: type=1400 audit(1785284465.765:399): avc: denied { bind } for pid=6725 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.674028][ T806] usb 4-1: config 0 descriptor?? [ 155.849453][ T806] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 156.481997][ T29] audit: type=1400 audit(1785284466.715:400): avc: denied { setopt } for pid=6725 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.535328][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 156.566898][ T29] audit: type=1400 audit(1785284466.745:401): avc: denied { listen } for pid=6725 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.602637][ T806] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 156.774657][ T806] usb 3-1: config 127 has an invalid interface number: 168 but max is 0 [ 156.783394][ T806] usb 3-1: config 127 has no interface number 0 [ 156.801868][ T806] usb 3-1: config 127 interface 168 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 156.850593][ T806] usb 3-1: config 127 interface 168 has no altsetting 0 [ 156.880619][ T806] usb 3-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=30.d7 [ 156.910803][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.936543][ T806] usb 3-1: Product: syz [ 156.952631][ T806] usb 3-1: Manufacturer: syz [ 156.968917][ T806] usb 3-1: SerialNumber: syz [ 157.034617][ T6734] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.549086][ T5719] usb 4-1: USB disconnect, device number 9 [ 158.602229][ T994] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.800247][ T806] hdpvr 3-1:127.168: Could not find bulk-in endpoint [ 158.857075][ T806] hdpvr 3-1:127.168: probe with driver hdpvr failed with error -12 [ 158.922049][ T806] usb 3-1: USB disconnect, device number 4 [ 158.937690][ T994] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.960893][ T994] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.974946][ T994] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.984102][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.997399][ T6738] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 159.007937][ T994] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.568347][ T6755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.409463][ T9] usb 5-1: USB disconnect, device number 5 [ 161.811642][ T29] audit: type=1400 audit(1785284472.045:402): avc: denied { ioctl } for pid=6747 comm="syz.1.232" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.824621][ T6748] EXT4-fs (loop1): unable to read superblock [ 161.927288][ T29] audit: type=1400 audit(1785284472.065:403): avc: denied { mounton } for pid=6747 comm="syz.1.232" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 162.921947][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.939454][ T6789] FAULT_INJECTION: forcing a failure. [ 162.939454][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 162.952113][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.2.241 Not tainted syzkaller #0 PREEMPT(full) [ 162.952129][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 162.952137][ T6789] Call Trace: [ 162.952141][ T6789] [ 162.952146][ T6789] dump_stack_lvl+0x100/0x190 [ 162.952165][ T6789] should_fail_ex.cold+0x5/0xa [ 162.952180][ T6789] should_failslab+0xc2/0x120 [ 162.952201][ T6789] __kmalloc_noprof+0xfc/0x820 [ 162.952215][ T6789] ? tomoyo_encode2+0xfb/0x3c0 [ 162.952230][ T6789] tomoyo_encode2+0xfb/0x3c0 [ 162.952243][ T6789] tomoyo_encode+0x29/0x50 [ 162.952253][ T6789] tomoyo_realpath_from_path+0x18c/0x690 [ 162.952269][ T6789] tomoyo_path_number_perm+0x23c/0x580 [ 162.952285][ T6789] ? tomoyo_path_number_perm+0x22e/0x580 [ 162.952303][ T6789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.952335][ T6789] ? find_held_lock+0x2b/0x80 [ 162.952354][ T6789] ? __fget_files+0x215/0x3d0 [ 162.952365][ T6789] ? hook_file_ioctl_common+0x140/0x440 [ 162.952378][ T6789] ? __fget_files+0x215/0x3d0 [ 162.952392][ T6789] ? __fget_files+0x21f/0x3d0 [ 162.952407][ T6789] security_file_ioctl+0xd3/0x230 [ 162.952426][ T6789] __x64_sys_ioctl+0xb7/0x210 [ 162.952445][ T6789] do_syscall_64+0x115/0x870 [ 162.952458][ T6789] ? clear_bhb_loop+0x40/0x90 [ 162.952473][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.952485][ T6789] RIP: 0033:0x7f1b1db9de99 [ 162.952496][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.952506][ T6789] RSP: 002b:00007f1b1eb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.952518][ T6789] RAX: ffffffffffffffda RBX: 00007f1b1de26090 RCX: 00007f1b1db9de99 [ 162.952526][ T6789] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 162.952533][ T6789] RBP: 00007f1b1eb1f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.952540][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.952546][ T6789] R13: 00007f1b1de26128 R14: 00007f1b1de26090 R15: 00007fff436f3a68 [ 162.952562][ T6789] [ 162.952575][ T6789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.343469][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 163.368858][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.382360][ T29] audit: type=1400 audit(1785284473.605:404): avc: denied { read } for pid=6794 comm="syz.1.244" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.418848][ T9] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 163.471351][ T9] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 164.113899][ T6796] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 164.225332][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 164.783064][ T9] usb 5-1: config 4 has no interface number 0 [ 165.076084][ T29] audit: type=1400 audit(1785284473.605:405): avc: denied { open } for pid=6794 comm="syz.1.244" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.286097][ T29] audit: type=1400 audit(1785284473.615:406): avc: denied { create } for pid=6794 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.540352][ T29] audit: type=1400 audit(1785284473.645:407): avc: denied { setopt } for pid=6794 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.746475][ T29] audit: type=1400 audit(1785284475.875:408): avc: denied { cmd } for pid=6802 comm="syz.1.246" path="socket:[15612]" dev="sockfs" ino=15612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.929081][ T9] usb 5-1: string descriptor 0 read error: -71 [ 166.414561][ T9] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 166.423724][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.436463][ T9] usb 5-1: can't set config #4, error -71 [ 166.445907][ T9] usb 5-1: USB disconnect, device number 6 [ 167.027735][ T29] audit: type=1400 audit(1785284477.265:409): avc: denied { mount } for pid=6820 comm="syz.1.250" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 167.131319][ T29] audit: type=1400 audit(1785284477.365:410): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 168.469690][ T6817] EXT4-fs (loop0): unable to read superblock [ 168.481982][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.653620][ T9] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 168.662924][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.717125][ T9] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 168.744394][ T9] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 168.806925][ T9] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 169.102015][ T806] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.273915][ T806] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.310104][ T806] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.338267][ T806] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.360665][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.385571][ T6841] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.408246][ T806] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.208302][ T189] usb 1-1: USB disconnect, device number 4 [ 170.321464][ T6860] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 170.512043][ T806] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 170.736194][ T806] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 4 [ 170.766419][ T806] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 170.792099][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.800121][ T806] usb 5-1: Product: syz [ 170.806792][ T806] usb 5-1: Manufacturer: syz [ 170.823036][ T806] usb 5-1: SerialNumber: syz [ 171.047030][ T29] audit: type=1400 audit(1785284481.285:411): avc: denied { setopt } for pid=6857 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.092555][ T806] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 171.110047][ T29] audit: type=1400 audit(1785284481.285:412): avc: denied { create } for pid=6857 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.138475][ T806] usb 5-1: unit 255 not found! [ 171.147549][ T806] usb 5-1: unit 5 not found! [ 171.241704][ T806] usb 5-1: USB disconnect, device number 7 [ 171.329924][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.332509][ T189] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.521941][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 171.533415][ T189] usb 3-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.558536][ T189] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.570578][ T189] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 171.587465][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.611838][ T189] usb 3-1: config 0 descriptor?? [ 171.892731][ T6878] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 172.080685][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: unknown main item tag 0x2 [ 172.089067][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: reserved main item tag 0xd [ 172.097152][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: unknown main item tag 0x0 [ 172.105310][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: unknown main item tag 0x1 [ 172.123118][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: unknown main item tag 0x0 [ 172.131197][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: unknown main item tag 0x0 [ 172.139283][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: unknown main item tag 0x3 [ 172.147348][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: item fetching failed at offset 43/44 [ 172.157901][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: parse failed (reason: -22) [ 172.168319][ T189] hid-corsair-void 0003:1B1C:0A0C.0006: probe with driver hid-corsair-void failed with error -22 [ 173.329606][ T6739] usb 3-1: USB disconnect, device number 5 [ 173.990081][ T806] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.362698][ T5742] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 174.633949][ T806] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.633956][ T5742] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 174.633987][ T806] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.659797][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.664961][ T806] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.682697][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.696254][ T6890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.696439][ T5742] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 174.710249][ T806] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.947128][ T6902] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 174.959986][ T9] usb 4-1: emi26_load_firmware - request_firmware() failed [ 174.967690][ T5742] usb 2-1: emi26_load_firmware - request_firmware() failed [ 175.388924][ T5742] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 175.397649][ T9] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 175.405753][ T9] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 175.416432][ T5742] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 175.432603][ T9] usb 4-1: USB disconnect, device number 10 [ 175.438900][ T5742] usb 2-1: USB disconnect, device number 9 [ 176.792013][ T806] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 176.967202][ T806] usb 5-1: config 127 has an invalid interface number: 168 but max is 0 [ 176.978975][ T806] usb 5-1: config 127 has no interface number 0 [ 176.998021][ T806] usb 5-1: config 127 interface 168 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 177.063365][ T9] usb 1-1: USB disconnect, device number 5 [ 177.120191][ T806] usb 5-1: config 127 interface 168 has no altsetting 0 [ 177.318726][ T806] usb 5-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=30.d7 [ 177.344054][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.866093][ T806] usb 5-1: Product: syz [ 177.870368][ T806] usb 5-1: Manufacturer: syz [ 177.875101][ T806] usb 5-1: SerialNumber: syz [ 177.888440][ T6903] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 177.953769][ T806] usb 5-1: can't set config #127, error -71 [ 177.978887][ T806] usb 5-1: USB disconnect, device number 8 [ 178.151747][ T6930] ¾x9ÿ: renamed from bridge_slave_0 [ 180.794472][ T29] audit: type=1326 audit(1785284491.035:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d1559de99 code=0x0 [ 181.741939][ T806] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.903913][ T806] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.923563][ T806] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.943698][ T806] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.961912][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.983439][ T6967] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.007290][ T806] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.534721][ T6985] No control pipe specified [ 184.575816][ T5742] usb 5-1: USB disconnect, device number 9 [ 186.225963][ T29] audit: type=1400 audit(1785284496.375:414): avc: denied { mount } for pid=6997 comm="syz.4.302" name="/" dev="ramfs" ino=15207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.941623][ T29] audit: type=1400 audit(1785284497.175:415): avc: denied { read } for pid=7018 comm="syz.3.307" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 186.965247][ T29] audit: type=1400 audit(1785284497.175:416): avc: denied { open } for pid=7018 comm="syz.3.307" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 186.989194][ T29] audit: type=1400 audit(1785284497.185:417): avc: denied { ioctl } for pid=7018 comm="syz.3.307" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.059136][ T29] audit: type=1400 audit(1785284497.295:418): avc: denied { write } for pid=7018 comm="syz.3.307" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.102788][ T806] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.382577][ T806] usb 2-1: Using ep0 maxpacket: 8 [ 187.428998][ T806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.495008][ T806] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 187.528510][ T806] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 187.562850][ T806] usb 2-1: config 4 has no interface number 0 [ 187.592520][ T806] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 187.609404][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.646088][ T806] usb 2-1: Product: syz [ 187.664076][ T806] usb 2-1: Manufacturer: syz [ 187.677021][ T806] usb 2-1: SerialNumber: syz [ 187.942009][ T6739] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.057895][ T806] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 188.070114][ T806] uvcvideo 2-1:4.147: No valid video chain found. [ 188.081001][ T806] usb 2-1: USB disconnect, device number 10 [ 188.112060][ T6739] usb 5-1: Using ep0 maxpacket: 32 [ 188.128295][ T6739] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.157064][ T6739] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 188.171936][ T6739] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 188.184414][ T6739] usb 5-1: config 14 has no interface number 0 [ 188.190704][ T6739] usb 5-1: config 14 has no interface number 1 [ 188.215899][ T6739] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 188.238476][ T6739] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 188.262081][ T6739] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 188.287502][ T6739] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 188.322125][ T6739] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 188.334427][ T6739] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.349924][ T6739] usb 5-1: config 14 interface 57 has no altsetting 0 [ 188.357356][ T6739] usb 5-1: config 14 interface 228 has no altsetting 0 [ 188.367118][ T6739] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 188.380628][ T6739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.400342][ T6739] usb 5-1: Product: syz [ 188.408947][ T6739] usb 5-1: Manufacturer: syz [ 188.417559][ T6739] usb 5-1: SerialNumber: syz [ 188.640460][ T5742] hid-generic 0000:0001:0005.0007: unknown main item tag 0x0 [ 188.649381][ T5742] hid-generic 0000:0001:0005.0007: unknown main item tag 0x0 [ 188.660648][ T5742] hid-generic 0000:0001:0005.0007: hidraw0: HID v8.06 Device [syz1] on syz0 [ 188.707143][ T7040] fido_id[7040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.842247][ T6739] legousbtower 5-1:14.57: interrupt endpoints not found [ 189.770296][ T6739] legousbtower 5-1:14.228: get version request failed: -32 [ 189.947078][ T6739] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -32 [ 190.626509][ T6739] usb 5-1: USB disconnect, device number 10 [ 191.756144][ T5719] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.020784][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 192.028723][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.052193][ T5719] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 192.061512][ T5719] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 192.070305][ T5719] usb 4-1: config 14 has no interface number 0 [ 192.077749][ T5719] usb 4-1: config 14 has no interface number 1 [ 192.084506][ T5719] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 192.095636][ T5719] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 192.110101][ T5719] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 192.122433][ T5719] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 192.134234][ T5719] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 192.145880][ T5719] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.159357][ T5719] usb 4-1: config 14 interface 57 has no altsetting 0 [ 192.166420][ T5719] usb 4-1: config 14 interface 228 has no altsetting 0 [ 192.175757][ T5719] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 192.186234][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.194485][ T5719] usb 4-1: Product: syz [ 192.198767][ T5719] usb 4-1: Manufacturer: syz [ 192.203731][ T5719] usb 4-1: SerialNumber: syz [ 192.871350][ T7073] FAULT_INJECTION: forcing a failure. [ 192.871350][ T7073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.889281][ T5719] legousbtower 4-1:14.57: interrupt endpoints not found [ 192.922000][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT(full) [ 192.922028][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 192.922041][ T7073] Call Trace: [ 192.922048][ T7073] [ 192.922056][ T7073] dump_stack_lvl+0x100/0x190 [ 192.922088][ T7073] should_fail_ex.cold+0x5/0xa [ 192.922116][ T7073] _copy_to_user+0x32/0xd0 [ 192.922146][ T7073] simple_read_from_buffer+0xcb/0x170 [ 192.922172][ T7073] proc_fail_nth_read+0x1af/0x230 [ 192.922205][ T7073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.922240][ T7073] ? rw_verify_area+0xce/0x6d0 [ 192.922268][ T7073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.922300][ T7073] vfs_read+0x1e4/0xb40 [ 192.922337][ T7073] ? __pfx_vfs_read+0x10/0x10 [ 192.922368][ T7073] ? __fget_files+0x215/0x3d0 [ 192.922397][ T7073] ? __fget_files+0x21f/0x3d0 [ 192.922429][ T7073] ksys_read+0x12a/0x250 [ 192.922461][ T7073] ? __pfx_ksys_read+0x10/0x10 [ 192.922502][ T7073] do_syscall_64+0x115/0x870 [ 192.922526][ T7073] ? clear_bhb_loop+0x40/0x90 [ 192.922553][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.922575][ T7073] RIP: 0033:0x7f1b1db5e6ce [ 192.922594][ T7073] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.922614][ T7073] RSP: 002b:00007f1b1eb3ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.922635][ T7073] RAX: ffffffffffffffda RBX: 00007f1b1eb406c0 RCX: 00007f1b1db5e6ce [ 192.922650][ T7073] RDX: 000000000000000f RSI: 00007f1b1eb400a0 RDI: 000000000000000a [ 192.922663][ T7073] RBP: 00007f1b1eb40090 R08: 0000000000000000 R09: 0000000000000000 [ 192.922676][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.922689][ T7073] R13: 00007f1b1de26038 R14: 00007f1b1de25fa0 R15: 00007fff436f3a68 [ 192.922720][ T7073] [ 193.321333][ T5719] legousbtower 4-1:14.228: get version request failed: -32 [ 193.330576][ T5719] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -32 [ 193.358167][ T5719] usb 4-1: USB disconnect, device number 11 [ 193.614956][ T29] audit: type=1400 audit(1785284503.855:419): avc: denied { append } for pid=7083 comm="syz.4.326" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.662987][ T29] audit: type=1400 audit(1785284503.885:420): avc: denied { ioctl } for pid=7083 comm="syz.4.326" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.698991][ T5742] hid-generic 0000:0001:0005.0008: unknown main item tag 0x0 [ 193.706539][ T5742] hid-generic 0000:0001:0005.0008: unknown main item tag 0x0 [ 193.714002][ T29] audit: type=1400 audit(1785284503.945:421): avc: denied { write } for pid=7083 comm="syz.4.326" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.739747][ T5742] hid-generic 0000:0001:0005.0008: hidraw0: HID v8.06 Device [syz1] on syz0 [ 193.798592][ T7087] fido_id[7087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.982564][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.990706][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.712040][ T5719] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 194.911102][ T7101] FAULT_INJECTION: forcing a failure. [ 194.911102][ T7101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.940169][ T7101] CPU: 1 UID: 0 PID: 7101 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT(full) [ 194.940197][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.940209][ T7101] Call Trace: [ 194.940216][ T7101] [ 194.940223][ T7101] dump_stack_lvl+0x100/0x190 [ 194.940253][ T7101] should_fail_ex.cold+0x5/0xa [ 194.940279][ T7101] _copy_from_user+0x2e/0xd0 [ 194.940307][ T7101] memdup_user+0x6b/0xe0 [ 194.940331][ T7101] strndup_user+0x78/0xe0 [ 194.940354][ T7101] __x64_sys_mount+0x136/0x310 [ 194.940381][ T7101] ? __pfx___x64_sys_mount+0x10/0x10 [ 194.940416][ T7101] do_syscall_64+0x115/0x870 [ 194.940439][ T7101] ? clear_bhb_loop+0x40/0x90 [ 194.940464][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.940487][ T7101] RIP: 0033:0x7f9e1379de99 [ 194.940505][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.940525][ T7101] RSP: 002b:00007f9e119f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.940547][ T7101] RAX: ffffffffffffffda RBX: 00007f9e13a25fa0 RCX: 00007f9e1379de99 [ 194.940562][ T7101] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 0000000000000000 [ 194.940576][ T7101] RBP: 00007f9e119f6090 R08: 0000200000000180 R09: 0000000000000000 [ 194.940590][ T7101] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 194.940604][ T7101] R13: 00007f9e13a26038 R14: 00007f9e13a25fa0 R15: 00007ffea6956b98 [ 194.940634][ T7101] [ 195.133943][ T5719] usb 1-1: config 127 has an invalid interface number: 168 but max is 0 [ 195.142570][ T5719] usb 1-1: config 127 has no interface number 0 [ 195.148943][ T5719] usb 1-1: config 127 interface 168 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 195.160700][ T5719] usb 1-1: config 127 interface 168 has no altsetting 0 [ 195.169985][ T5719] usb 1-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=30.d7 [ 195.179438][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.187559][ T5719] usb 1-1: Product: syz [ 195.191848][ T5719] usb 1-1: Manufacturer: syz [ 195.196622][ T5719] usb 1-1: SerialNumber: syz [ 195.205909][ T7097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.343679][ T7111] FAULT_INJECTION: forcing a failure. [ 195.343679][ T7111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.356804][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(full) [ 195.356831][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 195.356845][ T7111] Call Trace: [ 195.356852][ T7111] [ 195.356860][ T7111] dump_stack_lvl+0x100/0x190 [ 195.356894][ T7111] should_fail_ex.cold+0x5/0xa [ 195.356921][ T7111] _copy_from_iter+0x1f4/0x1690 [ 195.356954][ T7111] ? irqentry_exit+0x24d/0xa00 [ 195.356982][ T7111] ? __pfx__copy_from_iter+0x10/0x10 [ 195.357026][ T7111] netlink_sendmsg+0x808/0xda0 [ 195.357054][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.357080][ T7111] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.357118][ T7111] ____sys_sendmsg+0xa4d/0xbe0 [ 195.357149][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.357174][ T7111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.357211][ T7111] ? trace_sched_exit_tp+0x120/0x160 [ 195.357246][ T7111] ? __schedule+0x126e/0x6730 [ 195.357277][ T7111] ___sys_sendmsg+0x190/0x1e0 [ 195.357313][ T7111] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.357345][ T7111] ? __lock_acquire+0x49f/0x1a40 [ 195.357408][ T7111] __sys_sendmsg+0x160/0x210 [ 195.357436][ T7111] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.357480][ T7111] do_syscall_64+0x115/0x870 [ 195.357503][ T7111] ? clear_bhb_loop+0x40/0x90 [ 195.357530][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.357553][ T7111] RIP: 0033:0x7f7d1559de99 [ 195.357571][ T7111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.357603][ T7111] RSP: 002b:00007f7d137f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.357625][ T7111] RAX: ffffffffffffffda RBX: 00007f7d15826180 RCX: 00007f7d1559de99 [ 195.357640][ T7111] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 000000000000000a [ 195.357654][ T7111] RBP: 00007f7d137f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.357668][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.357680][ T7111] R13: 00007f7d15826218 R14: 00007f7d15826180 R15: 00007ffe222d0a98 [ 195.357712][ T7111] [ 195.651051][ T29] audit: type=1400 audit(1785284505.885:422): avc: denied { read } for pid=7112 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.861030][ T29] audit: type=1400 audit(1785284506.095:423): avc: denied { ioctl } for pid=7112 comm="syz.2.335" path="mnt:[4026533676]" dev="nsfs" ino=4026533676 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 195.950384][ T29] audit: type=1400 audit(1785284506.125:424): avc: denied { connect } for pid=7112 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.109362][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.116955][ T7118] bridge0: port 1(1¾x9ÿ) entered disabled state [ 196.476459][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.556660][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.708150][ T7132] xt_hashlimit: size too large, truncated to 1048576 [ 197.578731][ T5719] hdpvr 1-1:127.168: Could not find bulk-in endpoint [ 197.602729][ T5719] hdpvr 1-1:127.168: probe with driver hdpvr failed with error -12 [ 197.652762][ T5719] usb 1-1: USB disconnect, device number 6 [ 198.405931][ T156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.425164][ T156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.472584][ T156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.508323][ T156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.712294][ T994] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.235583][ T994] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 199.252703][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.288564][ T994] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 199.310471][ T994] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 199.329791][ T994] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 199.339706][ T5719] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.515822][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 199.589289][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.610896][ T7168] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 199.696298][ T5719] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 199.726056][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 199.755472][ T5719] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 199.790437][ T5719] usb 1-1: config 14 has no interface number 0 [ 199.806135][ T5719] usb 1-1: config 14 has no interface number 1 [ 199.860972][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 200.915713][ T7173] syz.3.352 (7173): /proc/7173/oom_adj is deprecated, please use /proc/7173/oom_score_adj instead. [ 201.468633][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 201.480613][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 201.492025][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 201.503472][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 201.515185][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.528661][ T5719] usb 1-1: config 14 interface 57 has no altsetting 0 [ 201.535478][ T5719] usb 1-1: config 14 interface 228 has no altsetting 0 [ 201.544429][ T5719] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 201.555161][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.563216][ T5719] usb 1-1: Product: syz [ 201.567542][ T5719] usb 1-1: Manufacturer: syz [ 201.572190][ T5719] usb 1-1: SerialNumber: syz [ 202.101786][ T5719] legousbtower 1-1:14.57: interrupt endpoints not found [ 202.348645][ T7186] FAULT_INJECTION: forcing a failure. [ 202.348645][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 202.362614][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.4.356 Not tainted syzkaller #0 PREEMPT(full) [ 202.362642][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 202.362653][ T7186] Call Trace: [ 202.362660][ T7186] [ 202.362667][ T7186] dump_stack_lvl+0x100/0x190 [ 202.362701][ T7186] should_fail_ex.cold+0x5/0xa [ 202.362727][ T7186] should_failslab+0xc2/0x120 [ 202.362754][ T7186] __kmalloc_noprof+0xfc/0x820 [ 202.362777][ T7186] ? __pfx_dynamic_dname+0x10/0x10 [ 202.362807][ T7186] ? tomoyo_encode2+0xfb/0x3c0 [ 202.362832][ T7186] tomoyo_encode2+0xfb/0x3c0 [ 202.362856][ T7186] tomoyo_encode+0x29/0x50 [ 202.362876][ T7186] tomoyo_realpath_from_path+0x18c/0x690 [ 202.362904][ T7186] tomoyo_path_number_perm+0x23c/0x580 [ 202.362932][ T7186] ? tomoyo_path_number_perm+0x22e/0x580 [ 202.362964][ T7186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.363028][ T7186] ? find_held_lock+0x2b/0x80 [ 202.363060][ T7186] ? __fget_files+0x215/0x3d0 [ 202.363081][ T7186] ? hook_file_ioctl_common+0x140/0x440 [ 202.363104][ T7186] ? __fget_files+0x215/0x3d0 [ 202.363130][ T7186] ? __fget_files+0x21f/0x3d0 [ 202.363155][ T7186] security_file_ioctl+0xd3/0x230 [ 202.363190][ T7186] __x64_sys_ioctl+0xb7/0x210 [ 202.363219][ T7186] do_syscall_64+0x115/0x870 [ 202.363233][ T7186] ? clear_bhb_loop+0x40/0x90 [ 202.363248][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.363269][ T7186] RIP: 0033:0x7f9e1379de99 [ 202.363287][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.363308][ T7186] RSP: 002b:00007f9e119f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.363330][ T7186] RAX: ffffffffffffffda RBX: 00007f9e13a25fa0 RCX: 00007f9e1379de99 [ 202.363341][ T7186] RDX: 0000200000001a00 RSI: 00000000000089eb RDI: 0000000000000004 [ 202.363349][ T7186] RBP: 00007f9e119f6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.363356][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.363363][ T7186] R13: 00007f9e13a26038 R14: 00007f9e13a25fa0 R15: 00007ffea6956b98 [ 202.363379][ T7186] [ 202.363733][ T29] audit: type=1400 audit(1785284512.605:425): avc: denied { name_bind } for pid=7185 comm="syz.1.355" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 202.378547][ T7186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.618698][ T5719] legousbtower 1-1:14.228: get version request failed: -32 [ 202.639769][ T5719] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -32 [ 202.680634][ T5719] usb 1-1: USB disconnect, device number 7 [ 203.553157][ T29] audit: type=1400 audit(1785284513.795:426): avc: denied { append } for pid=7214 comm="syz.0.363" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 204.855666][ T29] audit: type=1400 audit(1785284515.095:427): avc: denied { mount } for pid=7236 comm="syz.4.369" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 204.966775][ T29] audit: type=1400 audit(1785284515.145:428): avc: denied { search } for pid=7236 comm="syz.4.369" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.054157][ T29] audit: type=1400 audit(1785284515.145:429): avc: denied { search } for pid=7236 comm="syz.4.369" name="usb_gadget" dev="configfs" ino=3671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.096224][ T7240] netlink: 'syz.2.371': attribute type 4 has an invalid length. [ 205.114317][ T7230] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 205.218438][ T7245] warning: `syz.3.370' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.372369][ T7237] syzkaller1: entered promiscuous mode [ 205.388753][ T7237] syzkaller1: entered allmulticast mode [ 205.830883][ T29] audit: type=1400 audit(1785284516.065:430): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 206.042552][ T29] audit: type=1400 audit(1785284516.285:431): avc: denied { setopt } for pid=7262 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.106347][ T29] audit: type=1400 audit(1785284516.305:432): avc: denied { getopt } for pid=7262 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.282214][ T5704] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.456680][ T5704] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 207.485196][ T5704] usb 2-1: config 0 has no interface number 0 [ 207.504627][ T5704] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 207.515131][ T5704] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.564112][ T5704] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.627618][ T5704] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 207.662109][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.684991][ T5704] usb 2-1: Product: syz [ 207.696297][ T5704] usb 2-1: Manufacturer: syz [ 207.716767][ T5704] usb 2-1: SerialNumber: syz [ 207.739578][ T5704] usb 2-1: config 0 descriptor?? [ 207.763440][ T7283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.795551][ T5704] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 207.844979][ T5704] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 207.888555][ T5704] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 207.971456][ T29] audit: type=1400 audit(1785284518.205:433): avc: denied { append } for pid=7295 comm="syz.3.386" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 208.046340][ T5704] usb 2-1: USB disconnect, device number 11 [ 208.058248][ T29] audit: type=1400 audit(1785284518.295:434): avc: denied { bind } for pid=7295 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.082211][ T5804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 208.097082][ T5704] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 208.135403][ T5704] cyberjack 2-1:0.69: device disconnected [ 208.141611][ T29] audit: type=1400 audit(1785284518.355:435): avc: denied { write } for pid=7295 comm="syz.3.386" path="socket:[19797]" dev="sockfs" ino=19797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.284117][ T5804] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 208.294399][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.350234][ T5804] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 208.750024][ T7305] IPVS: set_ctl: invalid protocol: 8 172.30.1.2:20004 [ 208.771808][ T29] audit: type=1400 audit(1785284519.005:436): avc: denied { bind } for pid=7304 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.892736][ T29] audit: type=1400 audit(1785284519.115:437): avc: denied { write } for pid=7304 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.954930][ T29] audit: type=1400 audit(1785284519.115:438): avc: denied { read } for pid=7304 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.433180][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.440861][ T7325] bridge0: port 1(1¾x9ÿ) entered disabled state [ 211.892149][ T7325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.240979][ T7325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.420161][ T7345] FAULT_INJECTION: forcing a failure. [ 212.420161][ T7345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.460459][ T7345] CPU: 1 UID: 0 PID: 7345 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(full) [ 212.460497][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.460510][ T7345] Call Trace: [ 212.460518][ T7345] [ 212.460527][ T7345] dump_stack_lvl+0x100/0x190 [ 212.460560][ T7345] should_fail_ex.cold+0x5/0xa [ 212.460587][ T7345] _copy_from_user+0x2e/0xd0 [ 212.460618][ T7345] copy_msghdr_from_user+0x9f/0x4c0 [ 212.460654][ T7345] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 212.460694][ T7345] ? __pfx__kstrtoull+0x10/0x10 [ 212.460722][ T7345] ___sys_sendmsg+0x106/0x1e0 [ 212.460757][ T7345] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.460806][ T7345] ? find_held_lock+0x2b/0x80 [ 212.460858][ T7345] __sys_sendmmsg+0x20c/0x440 [ 212.460890][ T7345] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.460916][ T7345] ? ksys_write+0x190/0x250 [ 212.460970][ T7345] ? fput+0x79/0x100 [ 212.460994][ T7345] ? ksys_write+0x1ac/0x250 [ 212.461026][ T7345] ? __pfx_ksys_write+0x10/0x10 [ 212.461064][ T7345] __x64_sys_sendmmsg+0x9c/0x100 [ 212.461092][ T7345] ? lockdep_hardirqs_on+0x78/0x100 [ 212.461116][ T7345] do_syscall_64+0x115/0x870 [ 212.461140][ T7345] ? clear_bhb_loop+0x40/0x90 [ 212.461167][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.461190][ T7345] RIP: 0033:0x7f5ff2b9de99 [ 212.461209][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.461230][ T7345] RSP: 002b:00007f5ff3b42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.461252][ T7345] RAX: ffffffffffffffda RBX: 00007f5ff2e25fa0 RCX: 00007f5ff2b9de99 [ 212.461267][ T7345] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 212.461281][ T7345] RBP: 00007f5ff3b42090 R08: 0000000000000000 R09: 0000000000000000 [ 212.461295][ T7345] R10: 00000000000c8844 R11: 0000000000000246 R12: 0000000000000001 [ 212.461309][ T7345] R13: 00007f5ff2e26038 R14: 00007f5ff2e25fa0 R15: 00007ffece353778 [ 212.461339][ T7345] [ 212.711960][ T189] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 212.749022][ T29] audit: type=1400 audit(1785284522.975:439): avc: denied { getopt } for pid=7346 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.785781][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.794743][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.803674][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.812610][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.873865][ T189] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 212.893693][ T29] audit: type=1400 audit(1785284523.125:440): avc: denied { mounton } for pid=7346 comm="syz.1.400" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 213.054035][ T29] audit: type=1400 audit(1785284523.125:441): avc: denied { ioctl } for pid=7346 comm="syz.1.400" path="socket:[22081]" dev="sockfs" ino=22081 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.661271][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.939078][ T189] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 214.264045][ T7357] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 214.351704][ T189] usb 3-1: emi26_load_firmware - request_firmware() failed [ 214.352190][ T994] usb 5-1: emi26_load_firmware - request_firmware() failed [ 214.366430][ T5804] usb 1-1: emi26_load_firmware - request_firmware() failed [ 214.471647][ T189] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 214.484693][ T5804] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 214.496494][ T189] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 214.521660][ T29] audit: type=1400 audit(1785284524.755:442): avc: denied { getopt } for pid=7363 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.542533][ T994] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 214.550584][ T5804] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 214.578418][ T994] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 214.601125][ T5804] usb 1-1: USB disconnect, device number 8 [ 214.613629][ T994] usb 5-1: USB disconnect, device number 11 [ 214.619600][ T29] audit: type=1400 audit(1785284524.755:443): avc: denied { read } for pid=7363 comm="syz.4.405" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 214.648272][ T29] audit: type=1400 audit(1785284524.755:444): avc: denied { open } for pid=7363 comm="syz.4.405" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 214.677363][ T29] audit: type=1400 audit(1785284524.755:445): avc: denied { ioctl } for pid=7363 comm="syz.4.405" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 214.720057][ T189] usb 3-1: USB disconnect, device number 6 [ 214.983020][ T994] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 215.191441][ T994] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 215.217796][ T994] usb 5-1: can't read configurations, error -71 [ 215.254057][ T29] audit: type=1400 audit(1785284525.495:446): avc: denied { create } for pid=7375 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.621343][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.628970][ T7381] bridge0: port 1(1¾x9ÿ) entered disabled state [ 216.682887][ T29] audit: type=1400 audit(1785284526.895:447): avc: denied { bind } for pid=7392 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.913551][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.930472][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.287470][ T134] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.299293][ T134] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.839752][ T134] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.869675][ T134] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.427938][ T7426] FAULT_INJECTION: forcing a failure. [ 220.427938][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 220.440862][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.2.421 Not tainted syzkaller #0 PREEMPT(full) [ 220.440890][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.440903][ T7426] Call Trace: [ 220.440911][ T7426] [ 220.440918][ T7426] dump_stack_lvl+0x100/0x190 [ 220.440937][ T7426] should_fail_ex.cold+0x5/0xa [ 220.440953][ T7426] should_failslab+0xc2/0x120 [ 220.440969][ T7426] __kmalloc_noprof+0xfc/0x820 [ 220.440982][ T7426] ? rcu_is_watching+0x12/0xc0 [ 220.441000][ T7426] ? tomoyo_realpath_from_path+0xb6/0x690 [ 220.441016][ T7426] tomoyo_realpath_from_path+0xb6/0x690 [ 220.441031][ T7426] tomoyo_path_number_perm+0x23c/0x580 [ 220.441048][ T7426] ? tomoyo_path_number_perm+0x22e/0x580 [ 220.441065][ T7426] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.441082][ T7426] ? trace_sched_exit_tp+0x120/0x160 [ 220.441101][ T7426] ? __schedule+0x126e/0x6730 [ 220.441126][ T7426] ? find_held_lock+0x2b/0x80 [ 220.441145][ T7426] ? __fget_files+0x215/0x3d0 [ 220.441156][ T7426] ? hook_file_ioctl_common+0x140/0x440 [ 220.441170][ T7426] ? __fget_files+0x215/0x3d0 [ 220.441184][ T7426] ? __fget_files+0x21f/0x3d0 [ 220.441199][ T7426] security_file_ioctl+0xd3/0x230 [ 220.441230][ T7426] __x64_sys_ioctl+0xb7/0x210 [ 220.441249][ T7426] do_syscall_64+0x115/0x870 [ 220.441262][ T7426] ? clear_bhb_loop+0x40/0x90 [ 220.441277][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.441289][ T7426] RIP: 0033:0x7f1b1db9db2b [ 220.441299][ T7426] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 220.441311][ T7426] RSP: 002b:00007f1b1eb1d450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.441323][ T7426] RAX: ffffffffffffffda RBX: 0000200000fd7000 RCX: 00007f1b1db9db2b [ 220.441330][ T7426] RDX: 00007f1b1eb1da90 RSI: 000000008138ae83 RDI: 0000000000000007 [ 220.441337][ T7426] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000000 [ 220.441345][ T7426] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000fec00000 [ 220.441352][ T7426] R13: 00007f1b1eb1dbd0 R14: 0000200000fef000 R15: 0000000000000018 [ 220.441367][ T7426] [ 220.441387][ T7426] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.967006][ T7447] syz.3.426(7447): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 224.568853][ T29] audit: type=1400 audit(1785284534.805:448): avc: denied { open } for pid=7453 comm="syz.3.429" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 224.962903][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 227.331398][ T994] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 227.504421][ T994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.531991][ T994] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.575247][ T994] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 227.632787][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.251417][ T994] usb 5-1: USB disconnect, device number 14 [ 230.792195][ T994] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 231.044964][ T994] usb 1-1: config 127 has an invalid interface number: 168 but max is 0 [ 231.085089][ T994] usb 1-1: config 127 has no interface number 0 [ 231.143824][ T994] usb 1-1: config 127 interface 168 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 231.193739][ T994] usb 1-1: config 127 interface 168 has no altsetting 0 [ 231.225384][ T994] usb 1-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=30.d7 [ 231.253396][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.272139][ T994] usb 1-1: Product: syz [ 231.276320][ T994] usb 1-1: Manufacturer: syz [ 231.286510][ T994] usb 1-1: SerialNumber: syz [ 231.445995][ T7525] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.292048][ T5804] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.493150][ T5804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.583600][ T5804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.661532][ T5804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.750662][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.804925][ T7542] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.845929][ T5804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.254386][ T994] hdpvr 1-1:127.168: Could not find bulk-in endpoint [ 233.274964][ T994] hdpvr 1-1:127.168: probe with driver hdpvr failed with error -12 [ 233.319882][ T994] usb 1-1: USB disconnect, device number 9 [ 233.874187][ T29] audit: type=1400 audit(1785284544.115:449): avc: denied { read append } for pid=7555 comm="syz.0.458" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 234.280955][ T29] audit: type=1400 audit(1785284544.145:450): avc: denied { open } for pid=7555 comm="syz.0.458" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.052539][ T189] usb 3-1: USB disconnect, device number 7 [ 236.222643][ T189] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 236.404467][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 236.434561][ T189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 236.448346][ T189] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 236.458694][ T189] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 236.775275][ T189] usb 3-1: config 14 has no interface number 0 [ 236.824743][ T189] usb 3-1: config 14 has no interface number 1 [ 236.889782][ T189] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 236.972703][ T189] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 237.051990][ T189] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 237.116100][ T189] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 237.210580][ T189] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 237.267380][ T189] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.331776][ T189] usb 3-1: config 14 interface 57 has no altsetting 0 [ 237.364076][ T189] usb 3-1: config 14 interface 228 has no altsetting 0 [ 237.390526][ T189] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 237.403791][ T994] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 237.421000][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.431302][ T189] usb 3-1: Product: syz [ 237.443698][ T189] usb 3-1: Manufacturer: syz [ 237.458667][ T189] usb 3-1: SerialNumber: syz [ 237.581943][ T994] usb 4-1: Using ep0 maxpacket: 32 [ 237.604531][ T994] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.634166][ T994] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 237.642782][ T994] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 237.651055][ T994] usb 4-1: config 14 has no interface number 0 [ 237.657573][ T994] usb 4-1: config 14 has no interface number 1 [ 237.665664][ T994] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 237.678018][ T994] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 237.691508][ T994] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 237.704839][ T994] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 237.737931][ T994] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 237.821088][ T994] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.884904][ T994] usb 4-1: config 14 interface 57 has no altsetting 0 [ 237.916982][ T994] usb 4-1: config 14 interface 228 has no altsetting 0 [ 237.968014][ T994] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 238.007844][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.057066][ T994] usb 4-1: Product: syz [ 238.093647][ T994] usb 4-1: Manufacturer: syz [ 238.136607][ T994] usb 4-1: SerialNumber: syz [ 238.241918][ T189] legousbtower 3-1:14.57: interrupt endpoints not found [ 238.762828][ T29] audit: type=1400 audit(1785284548.875:451): avc: denied { accept } for pid=7611 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.919285][ T994] legousbtower 4-1:14.57: interrupt endpoints not found [ 238.972156][ T5804] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 239.535683][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.565271][ T994] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 239.581120][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 239.600276][ T994] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 239.622701][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 239.677684][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 239.699766][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.716970][ T5804] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 239.737465][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.928624][ T5804] usb 5-1: Product: syz [ 239.956647][ T5804] usb 5-1: Manufacturer: syz [ 239.984822][ T5804] usb 5-1: SerialNumber: syz [ 240.037670][ T5804] usb 5-1: config 0 descriptor?? [ 240.065152][ T7613] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 240.112743][ T189] legousbtower 3-1:14.228: get version request failed: -71 [ 240.120189][ T189] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 240.139968][ T189] usb 3-1: USB disconnect, device number 8 [ 240.140111][ T806] usb 4-1: USB disconnect, device number 12 [ 240.145879][ C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 240.618472][ T806] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 240.841977][ T5804] rc_core: IR keymap rc-xbox-dvd not found [ 240.849240][ T5804] Registered IR keymap rc-empty [ 240.864479][ T5804] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 240.898242][ T5804] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 241.101135][ T29] audit: type=1400 audit(1785284551.335:452): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=3049 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.125746][ T29] audit: type=1400 audit(1785284551.335:453): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3049 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.300885][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 241.338446][ T29] audit: type=1400 audit(1785284551.335:454): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3049 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.364950][ T5804] usb 5-1: USB disconnect, device number 15 [ 241.754118][ T29] audit: type=1400 audit(1785284551.985:455): avc: denied { map } for pid=7645 comm="syz.0.483" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.909344][ T7658] Bluetooth: MGMT ver 1.23 [ 243.564484][ T5742] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 243.646371][ T29] audit: type=1326 audit(1785284553.885:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.2.492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1db9de99 code=0x7ffc0000 [ 243.697664][ T29] audit: type=1326 audit(1785284553.885:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.2.492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1db9de99 code=0x7ffc0000 [ 243.728286][ T29] audit: type=1326 audit(1785284553.885:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.2.492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1db9de99 code=0x7ffc0000 [ 243.761992][ T29] audit: type=1326 audit(1785284553.885:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.2.492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1db9de99 code=0x7ffc0000 [ 243.801991][ T5742] usb 2-1: Using ep0 maxpacket: 32 [ 243.802426][ T29] audit: type=1326 audit(1785284553.885:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.2.492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1db9de99 code=0x7ffc0000 [ 243.843932][ T29] audit: type=1326 audit(1785284553.885:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.2.492" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f1b1db9de99 code=0x7ffc0000 [ 243.876452][ T5742] usb 2-1: unable to get BOS descriptor or descriptor too short [ 243.936590][ T5742] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 243.966606][ T5742] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 243.973527][ T7684] FAULT_INJECTION: forcing a failure. [ 243.973527][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 243.975097][ T5742] usb 2-1: config 14 has no interface number 0 [ 243.993926][ T5742] usb 2-1: config 14 has no interface number 1 [ 244.012259][ T7684] CPU: 1 UID: 0 PID: 7684 Comm: syz.0.494 Not tainted syzkaller #0 PREEMPT(full) [ 244.012267][ T5742] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 244.012288][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 244.012309][ T7684] Call Trace: [ 244.012315][ T7684] [ 244.012322][ T7684] dump_stack_lvl+0x100/0x190 [ 244.012353][ T7684] should_fail_ex.cold+0x5/0xa [ 244.012380][ T7684] should_failslab+0xc2/0x120 [ 244.012408][ T7684] __kmalloc_noprof+0xfc/0x820 [ 244.012432][ T7684] ? __pfx_dynamic_dname+0x10/0x10 [ 244.012463][ T7684] ? tomoyo_encode2+0xfb/0x3c0 [ 244.012488][ T7684] tomoyo_encode2+0xfb/0x3c0 [ 244.012513][ T7684] tomoyo_encode+0x29/0x50 [ 244.012532][ T7684] tomoyo_realpath_from_path+0x18c/0x690 [ 244.012560][ T7684] tomoyo_path_number_perm+0x23c/0x580 [ 244.012589][ T7684] ? tomoyo_path_number_perm+0x22e/0x580 [ 244.012620][ T7684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.012680][ T7684] ? find_held_lock+0x2b/0x80 [ 244.012712][ T7684] ? __fget_files+0x215/0x3d0 [ 244.012732][ T7684] ? hook_file_ioctl_common+0x140/0x440 [ 244.012755][ T7684] ? __fget_files+0x215/0x3d0 [ 244.012781][ T7684] ? __fget_files+0x21f/0x3d0 [ 244.012807][ T7684] security_file_ioctl+0xd3/0x230 [ 244.012840][ T7684] __x64_sys_ioctl+0xb7/0x210 [ 244.012872][ T7684] do_syscall_64+0x115/0x870 [ 244.012895][ T7684] ? clear_bhb_loop+0x40/0x90 [ 244.012921][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.012953][ T7684] RIP: 0033:0x7f5b7a59de99 [ 244.012977][ T7684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.012996][ T7684] RSP: 002b:00007f5b7b4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.013017][ T7684] RAX: ffffffffffffffda RBX: 00007f5b7a825fa0 RCX: 00007f5b7a59de99 [ 244.013031][ T7684] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 244.013045][ T7684] RBP: 00007f5b7b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.013058][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.013071][ T7684] R13: 00007f5b7a826038 R14: 00007f5b7a825fa0 R15: 00007fffb83c14b8 [ 244.013100][ T7684] [ 244.014074][ T7684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.021599][ T5742] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 244.253612][ T5742] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 244.265306][ T5742] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 244.279414][ T5742] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 244.291315][ T5742] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.376045][ T5742] usb 2-1: config 14 interface 57 has no altsetting 0 [ 244.390854][ T5742] usb 2-1: config 14 interface 228 has no altsetting 0 [ 244.407162][ T5742] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 244.416542][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.431745][ T5742] usb 2-1: Product: syz [ 244.442662][ T5742] usb 2-1: Manufacturer: syz [ 244.452700][ T5742] usb 2-1: SerialNumber: syz [ 244.884828][ T5742] legousbtower 2-1:14.57: interrupt endpoints not found [ 245.363237][ T5742] legousbtower 2-1:14.228: get version request failed: -121 [ 245.446725][ T5742] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 246.696104][ T5742] usb 2-1: USB disconnect, device number 12 [ 248.423155][ T5704] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 248.506563][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 248.506574][ T29] audit: type=1400 audit(1785284558.745:484): avc: denied { ioctl } for pid=7728 comm="syz.1.509" path="socket:[26395]" dev="sockfs" ino=26395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.553899][ T5704] usb 3-1: device descriptor read/64, error -71 [ 248.622135][ T994] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 248.893915][ T994] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.905001][ T994] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.915387][ T994] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.957065][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.993544][ T7725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.011544][ T994] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.111958][ T5704] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.161206][ T29] audit: type=1400 audit(1785284559.395:485): avc: denied { write } for pid=7737 comm="syz.1.511" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.203147][ T7738] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 249.236603][ T29] audit: type=1400 audit(1785284559.465:486): avc: denied { map } for pid=7737 comm="syz.1.511" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.306510][ T5704] usb 3-1: device descriptor read/64, error -71 [ 249.463879][ T5704] usb usb3-port1: attempt power cycle [ 249.832023][ T5704] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 249.909220][ T5704] usb 3-1: device descriptor read/8, error -71 [ 250.212534][ T5704] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 250.374742][ T5704] usb 3-1: device descriptor read/8, error -71 [ 250.525067][ T5704] usb usb3-port1: unable to enumerate USB device [ 250.568520][ T29] audit: type=1400 audit(1785284560.805:487): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 251.401258][ T5704] usb 4-1: USB disconnect, device number 13 [ 251.701981][ T994] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 251.801989][ T806] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.903076][ T994] usb 1-1: Using ep0 maxpacket: 32 [ 251.911334][ T994] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 251.932728][ T994] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.952014][ T994] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.960243][ T994] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 251.969743][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 252.353891][ T806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 253.154378][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.165320][ T994] usb 1-1: config 0 descriptor?? [ 253.188262][ T806] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 253.205913][ T806] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 253.234080][ T806] usb 3-1: config 14 has no interface number 0 [ 253.246902][ T806] usb 3-1: config 14 has no interface number 1 [ 253.265944][ T806] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 253.290931][ T806] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 253.324260][ T806] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 253.355206][ T806] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 253.408416][ T806] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 253.435515][ T806] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.451708][ T806] usb 3-1: config 14 interface 57 has no altsetting 0 [ 253.462494][ T806] usb 3-1: config 14 interface 228 has no altsetting 0 [ 253.474544][ T806] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 253.483817][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.492605][ T806] usb 3-1: Product: syz [ 253.497020][ T806] usb 3-1: Manufacturer: syz [ 253.501694][ T806] usb 3-1: SerialNumber: syz [ 253.599419][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.614695][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.666780][ T29] audit: type=1400 audit(1785284563.905:488): avc: denied { create } for pid=7744 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 253.715248][ T29] audit: type=1400 audit(1785284563.925:489): avc: denied { bind } for pid=7744 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.544430][ T806] legousbtower 3-1:14.57: interrupt endpoints not found [ 254.551487][ T29] audit: type=1400 audit(1785284564.245:490): avc: denied { write } for pid=7744 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.595609][ T806] legousbtower 3-1:14.228: get version request failed: -121 [ 254.614612][ T806] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121 [ 254.998437][ T806] usb 3-1: USB disconnect, device number 13 [ 255.394619][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.400979][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.650402][ T994] usbhid 1-1:0.0: can't add hid device: -71 [ 255.691047][ T994] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.882033][ T994] usb 1-1: USB disconnect, device number 10 [ 256.027204][ T7792] FAULT_INJECTION: forcing a failure. [ 256.027204][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 256.039953][ T7792] CPU: 0 UID: 0 PID: 7792 Comm: syz.1.526 Not tainted syzkaller #0 PREEMPT(full) [ 256.039981][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 256.039994][ T7792] Call Trace: [ 256.040001][ T7792] [ 256.040010][ T7792] dump_stack_lvl+0x100/0x190 [ 256.040042][ T7792] should_fail_ex.cold+0x5/0xa [ 256.040070][ T7792] should_failslab+0xc2/0x120 [ 256.040099][ T7792] kmem_cache_alloc_noprof+0x91/0x6a0 [ 256.040126][ T7792] ? alloc_empty_file+0x5b/0x1c0 [ 256.040160][ T7792] alloc_empty_file+0x5b/0x1c0 [ 256.040188][ T7792] path_openat+0xe7/0x4280 [ 256.040210][ T7792] ? kasan_save_track+0x14/0x30 [ 256.040234][ T7792] ? __kasan_slab_alloc+0x89/0x90 [ 256.040259][ T7792] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 256.040283][ T7792] ? do_getname+0x35/0x390 [ 256.040308][ T7792] ? do_sys_openat2+0xc7/0x1e0 [ 256.040339][ T7792] ? __x64_sys_open+0xfe/0x1d0 [ 256.040365][ T7792] ? do_syscall_64+0x115/0x870 [ 256.040399][ T7792] ? __pfx_path_openat+0x10/0x10 [ 256.040431][ T7792] do_file_open+0x20e/0x430 [ 256.040452][ T7792] ? __lock_acquire+0x49f/0x1a40 [ 256.040481][ T7792] ? __pfx_do_file_open+0x10/0x10 [ 256.040524][ T7792] ? _raw_spin_unlock+0x28/0x50 [ 256.040557][ T7792] ? alloc_fd+0x471/0x7a0 [ 256.040588][ T7792] do_sys_openat2+0x10f/0x1e0 [ 256.040616][ T7792] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.040646][ T7792] ? __fget_files+0x21f/0x3d0 [ 256.040674][ T7792] __x64_sys_open+0xfe/0x1d0 [ 256.040701][ T7792] ? __pfx___x64_sys_open+0x10/0x10 [ 256.040727][ T7792] ? ksys_write+0x1ac/0x250 [ 256.040770][ T7792] do_syscall_64+0x115/0x870 [ 256.040793][ T7792] ? clear_bhb_loop+0x40/0x90 [ 256.040819][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.040842][ T7792] RIP: 0033:0x7f5ff2b9de99 [ 256.040860][ T7792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.040881][ T7792] RSP: 002b:00007f5ff3b21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 256.040902][ T7792] RAX: ffffffffffffffda RBX: 00007f5ff2e26090 RCX: 00007f5ff2b9de99 [ 256.040916][ T7792] RDX: 0000000000000080 RSI: 0000000000143142 RDI: 0000200000000040 [ 256.040930][ T7792] RBP: 00007f5ff3b21090 R08: 0000000000000000 R09: 0000000000000000 [ 256.040944][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.040957][ T7792] R13: 00007f5ff2e26128 R14: 00007f5ff2e26090 R15: 00007ffece353778 [ 256.040986][ T7792] [ 256.783707][ T7791] macsec1: entered promiscuous mode [ 256.804099][ T7791] macsec1: entered allmulticast mode [ 257.091988][ T806] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 257.252364][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 257.258931][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.269886][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.279646][ T806] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 257.288761][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.298389][ T806] usb 3-1: config 0 descriptor?? [ 257.342343][ T5742] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 257.451972][ T994] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 257.491938][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 257.498651][ T5742] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 257.510532][ T5742] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.523523][ T5742] usb 1-1: config 0 interface 0 has no altsetting 0 [ 257.530174][ T5742] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 257.539309][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.550000][ T5742] usb 1-1: config 0 descriptor?? [ 257.603723][ T994] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.614801][ T994] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.624678][ T994] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.634124][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.645943][ T7813] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 257.658581][ T994] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.715328][ T806] usbhid 3-1:0.0: can't add hid device: -71 [ 257.734142][ T806] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 257.766530][ T806] usb 3-1: USB disconnect, device number 14 [ 257.943506][ T5704] usb 4-1: USB disconnect, device number 14 [ 257.975381][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.992520][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.202021][ T994] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 258.294703][ T5704] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 258.362213][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 258.362563][ T5704] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.666038][ T994] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.688141][ T994] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 258.708662][ T994] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 258.735689][ T994] usb 2-1: config 4 has no interface number 0 [ 258.754390][ T994] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 258.773024][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.787679][ T994] usb 2-1: Product: syz [ 258.792262][ T994] usb 2-1: Manufacturer: syz [ 258.796962][ T994] usb 2-1: SerialNumber: syz [ 259.074439][ T7823] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 259.113708][ T7823] syzkaller0: entered promiscuous mode [ 259.121127][ T7823] syzkaller0: entered allmulticast mode [ 259.126984][ T994] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 259.136653][ T994] uvcvideo 2-1:4.147: No valid video chain found. [ 259.147220][ T7823] 0: reclassify loop, rule prio 0, protocol 800 [ 259.157566][ T994] usb 2-1: USB disconnect, device number 13 [ 259.189717][ T29] audit: type=1400 audit(1785284569.425:491): avc: denied { setattr } for pid=7822 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 259.364325][ T7840] netlink: 104 bytes leftover after parsing attributes in process `syz.4.542'. [ 260.119363][ T5742] usbhid 1-1:0.0: can't add hid device: -71 [ 260.125646][ T5742] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 260.161058][ T5742] usb 1-1: USB disconnect, device number 11 [ 261.219577][ T7856] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42007 sclass=netlink_xfrm_socket pid=7856 comm=syz.4.548 [ 261.251956][ T29] audit: type=1400 audit(1785284571.445:492): avc: denied { name_bind 0x1000000 } for pid=7855 comm="syz.4.548" path="socket:[27924]" dev="sockfs" ino=27924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.644172][ T29] audit: type=1400 audit(1785284571.445:493): avc: denied { setattr } for pid=7855 comm="syz.4.548" name="NETLINK" dev="sockfs" ino=27616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 263.185999][ T7898] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 263.224327][ T29] audit: type=1400 audit(1785284573.425:494): avc: denied { mounton } for pid=7897 comm="syz.3.559" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.312384][ T5704] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 263.921936][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 263.928720][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.937435][ T5704] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 263.950476][ T5704] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 264.012543][ T5742] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 264.020178][ T5704] usb 5-1: config 4 has no interface number 0 [ 264.030168][ T5704] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 264.043767][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.051820][ T5704] usb 5-1: Product: syz [ 264.056085][ T5704] usb 5-1: Manufacturer: syz [ 264.060731][ T5704] usb 5-1: SerialNumber: syz [ 264.333221][ T5742] usb 3-1: Using ep0 maxpacket: 32 [ 264.416732][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 264.511243][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 265.790259][ T5742] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 265.801695][ T5742] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.822548][ T5742] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.837832][ T5742] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 265.874525][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.901806][ T5742] usb 3-1: config 0 descriptor?? [ 265.961522][ T29] audit: type=1400 audit(1785284576.195:495): avc: denied { getopt } for pid=7926 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.065559][ T29] audit: type=1400 audit(1785284576.295:496): avc: denied { ioctl } for pid=7926 comm="syz.0.566" path="socket:[28976]" dev="sockfs" ino=28976 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.469389][ T5704] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 266.599326][ T5704] uvcvideo 5-1:4.147: No valid video chain found. [ 266.824548][ T5704] usb 5-1: USB disconnect, device number 16 [ 267.203767][ T5742] usbhid 3-1:0.0: can't add hid device: -71 [ 267.222602][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.567'. [ 267.230560][ T5742] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 267.319691][ T5742] usb 3-1: USB disconnect, device number 15 [ 267.344046][ T29] audit: type=1400 audit(1785284577.585:497): avc: denied { bind } for pid=7936 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 267.463321][ T29] audit: type=1400 audit(1785284577.695:498): avc: denied { listen } for pid=7936 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 268.239041][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 268.383631][ T5742] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 268.436773][ T7962] syz.0.576 uses obsolete (PF_INET,SOCK_PACKET) [ 268.468482][ T5742] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.004305][ T29] audit: type=1400 audit(1785284582.215:499): avc: denied { append } for pid=7982 comm="syz.3.583" name="sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 272.164605][ T29] audit: type=1400 audit(1785284582.235:500): avc: denied { name_connect } for pid=7982 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 272.342823][ T29] audit: type=1400 audit(1785284582.535:501): avc: denied { read } for pid=7994 comm="syz.4.585" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 272.402705][ T5804] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 272.622346][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 272.650071][ T5804] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 272.676979][ T5804] usb 2-1: config 0 has no interface number 0 [ 272.717137][ T5804] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 272.732048][ T5704] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 272.775665][ T5804] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 272.795142][ T994] IPVS: starting estimator thread 0... [ 272.813656][ T5804] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 272.824400][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.880811][ T5804] usb 2-1: Product: syz [ 272.898485][ T5804] usb 2-1: Manufacturer: syz [ 272.904440][ T8012] IPVS: using max 34 ests per chain, 81600 per kthread [ 272.927735][ T5804] usb 2-1: SerialNumber: syz [ 272.934948][ T29] audit: type=1400 audit(1785284583.095:502): avc: denied { setopt } for pid=8009 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.006280][ T5804] usb 2-1: config 0 descriptor?? [ 273.054574][ T7991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.126618][ T7991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.509399][ T7991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.569919][ T7991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.683951][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 273.717363][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.743463][ T5704] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.750517][ T29] audit: type=1400 audit(1785284583.985:503): avc: denied { write } for pid=8020 comm="syz.0.594" name="cluster" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.777060][ T29] audit: type=1400 audit(1785284584.005:504): avc: denied { add_name } for pid=8020 comm="syz.0.594" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.002942][ T5804] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 275.006271][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.027501][ T5704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 275.040333][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.041625][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 275.055444][ T5704] usb 3-1: Product: syz [ 275.059632][ T5704] usb 3-1: Manufacturer: syz [ 275.064300][ T5704] usb 3-1: SerialNumber: syz [ 275.083890][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.094984][ T29] audit: type=1400 audit(1785284584.005:505): avc: denied { create } for pid=8020 comm="syz.0.594" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 275.122675][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.129593][ T29] audit: type=1400 audit(1785284584.505:506): avc: denied { write } for pid=8022 comm="syz.4.595" name="core" dev="configfs" ino=3595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.158990][ T29] audit: type=1400 audit(1785284584.515:507): avc: denied { write } for pid=8022 comm="syz.4.595" name="rd_mcp_0" dev="configfs" ino=29118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.215032][ T29] audit: type=1400 audit(1785284584.545:508): avc: denied { write } for pid=8022 comm="syz.4.595" name="enable" dev="configfs" ino=29130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 275.240606][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.250433][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.282452][ T8016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.303475][ T8016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.331681][ T8016] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 275.353258][ T5704] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 275.442360][ T35] bridge0: port 1(1¾x9ÿ) entered blocking state [ 275.448840][ T35] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 275.457704][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.464847][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.925882][ T806] usb 3-1: USB disconnect, device number 16 [ 275.958327][ T806] usblp0: removed [ 276.267902][ T8037] [ 276.270252][ T8037] ====================================================== [ 276.273435][ T8035] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 276.277259][ T8037] WARNING: possible circular locking dependency detected [ 276.277271][ T8037] syzkaller #0 Not tainted [ 276.277282][ T8037] ------------------------------------------------------ [ 276.277290][ T8037] syz.3.600/8037 is trying to acquire lock: [ 276.309308][ T8037] ffffffff901d0908 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 276.320552][ T8037] [ 276.320552][ T8037] but task is already holding lock: [ 276.327907][ T8037] ffff888053c82740 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 276.338363][ T8037] [ 276.338363][ T8037] which lock already depends on the new lock. [ 276.338363][ T8037] [ 276.348749][ T8037] [ 276.348749][ T8037] the existing dependency chain (in reverse order) is: [ 276.357746][ T8037] [ 276.357746][ T8037] -> #2 (&sb->s_type->i_mutex_key#30){++++}-{4:4}: [ 276.366442][ T8037] lock_acquire+0x1b9/0x370 [ 276.371467][ T8037] down_write+0x8b/0x1f0 [ 276.376221][ T8037] configfs_depend_item_unlocked+0xf3/0x6a0 [ 276.382632][ T8037] usbg_make_tpg+0x261/0x620 [ 276.387740][ T8037] target_fabric_make_tpg+0xab/0x8c0 [ 276.393548][ T8037] configfs_mkdir+0x51e/0xb70 [ 276.398749][ T8037] vfs_mkdir+0x361/0x850 [ 276.403507][ T8037] filename_mkdirat+0x48b/0x5e0 [ 276.408875][ T8037] __x64_sys_mkdir+0x6b/0x90 [ 276.413974][ T8037] do_syscall_64+0x115/0x870 [ 276.419077][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.425482][ T8037] [ 276.425482][ T8037] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 276.433116][ T8037] lock_acquire+0x1b9/0x370 [ 276.438132][ T8037] __mutex_lock+0x1a4/0x1bd0 [ 276.443236][ T8037] tcm_set_name+0x29/0xb0 [ 276.448071][ T8037] function_make+0x21c/0x3f0 [ 276.453174][ T8037] configfs_mkdir+0x51e/0xb70 [ 276.458364][ T8037] vfs_mkdir+0x361/0x850 [ 276.463120][ T8037] filename_mkdirat+0x48b/0x5e0 [ 276.468486][ T8037] __x64_sys_mkdir+0x6b/0x90 [ 276.473592][ T8037] do_syscall_64+0x115/0x870 [ 276.478692][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.485094][ T8037] [ 276.485094][ T8037] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 276.493334][ T8037] check_prev_add+0xeb/0xe60 [ 276.498436][ T8037] __lock_acquire+0x136c/0x1a40 [ 276.503825][ T8037] lock_acquire+0x1b9/0x370 [ 276.508851][ T8037] __mutex_lock+0x1a4/0x1bd0 [ 276.513971][ T8037] uvcg_streaming_header_allow_link+0x7c/0x650 [ 276.520646][ T8037] configfs_symlink+0x540/0x11f0 [ 276.526100][ T8037] vfs_symlink+0x178/0x4d0 [ 276.531033][ T8037] filename_symlinkat+0x2a6/0x560 [ 276.536578][ T8037] __x64_sys_symlink+0x79/0xb0 [ 276.541853][ T8037] do_syscall_64+0x115/0x870 [ 276.546957][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.553362][ T8037] [ 276.553362][ T8037] other info that might help us debug this: [ 276.553362][ T8037] [ 276.563570][ T8037] Chain exists of: [ 276.563570][ T8037] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#30 [ 276.563570][ T8037] [ 276.578253][ T8037] Possible unsafe locking scenario: [ 276.578253][ T8037] [ 276.585683][ T8037] CPU0 CPU1 [ 276.591026][ T8037] ---- ---- [ 276.596373][ T8037] lock(&sb->s_type->i_mutex_key#30); [ 276.601824][ T8037] lock(&opts->dep_lock); [ 276.608748][ T8037] lock(&sb->s_type->i_mutex_key#30); [ 276.616809][ T8037] lock(gadget_subsys.su_mutex); [ 276.621822][ T8037] [ 276.621822][ T8037] *** DEADLOCK *** [ 276.621822][ T8037] [ 276.629941][ T8037] 2 locks held by syz.3.600/8037: [ 276.634944][ T8037] #0: ffff88801eb60450 (sb_writers#21){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 276.644440][ T8037] #1: ffff888053c82740 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 276.655324][ T8037] [ 276.655324][ T8037] stack backtrace: [ 276.661192][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) [ 276.661217][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 276.661231][ T8037] Call Trace: [ 276.661238][ T8037] [ 276.661245][ T8037] dump_stack_lvl+0x100/0x190 [ 276.661270][ T8037] print_circular_bug.cold+0x178/0x1c7 [ 276.661304][ T8037] check_noncircular+0x146/0x160 [ 276.661326][ T8037] ? audit_log_end+0x24/0x30 [ 276.661362][ T8037] check_prev_add+0xeb/0xe60 [ 276.661387][ T8037] __lock_acquire+0x136c/0x1a40 [ 276.661416][ T8037] lock_acquire+0x1b9/0x370 [ 276.661439][ T8037] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 276.661467][ T8037] ? __pfx___might_resched+0x10/0x10 [ 276.661491][ T8037] ? audit_inode_permission+0x1ea/0x2a0 [ 276.661518][ T8037] __mutex_lock+0x1a4/0x1bd0 [ 276.661541][ T8037] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 276.661566][ T8037] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 276.661591][ T8037] ? lockdep_unlock+0x5a/0xc0 [ 276.661610][ T8037] ? __lock_acquire+0xd5b/0x1a40 [ 276.661635][ T8037] ? __pfx___mutex_lock+0x10/0x10 [ 276.661657][ T8037] ? selinux_inode_permission+0x14a/0x1130 [ 276.661686][ T8037] ? __pfx___might_resched+0x10/0x10 [ 276.661710][ T8037] ? make_vfsgid+0xf1/0x140 [ 276.661742][ T8037] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 276.661767][ T8037] ? security_inode_permission+0xbf/0x250 [ 276.661798][ T8037] uvcg_streaming_header_allow_link+0x7c/0x650 [ 276.661824][ T8037] ? inode_permission+0x374/0x620 [ 276.661855][ T8037] ? mntput_no_expire+0xe7/0x220 [ 276.661876][ T8037] configfs_symlink+0x540/0x11f0 [ 276.661907][ T8037] ? __pfx_configfs_symlink+0x10/0x10 [ 276.661938][ T8037] vfs_symlink+0x178/0x4d0 [ 276.661966][ T8037] filename_symlinkat+0x2a6/0x560 [ 276.661992][ T8037] ? __pfx_filename_symlinkat+0x10/0x10 [ 276.662016][ T8037] ? strncpy_from_user+0x19d/0x2d0 [ 276.662043][ T8037] ? do_getname+0x191/0x390 [ 276.662069][ T8037] __x64_sys_symlink+0x79/0xb0 [ 276.662093][ T8037] do_syscall_64+0x115/0x870 [ 276.662115][ T8037] ? clear_bhb_loop+0x40/0x90 [ 276.662139][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.662160][ T8037] RIP: 0033:0x7f7d1559de99 [ 276.662177][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.662197][ T8037] RSP: 002b:00007f7d163b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 276.662217][ T8037] RAX: ffffffffffffffda RBX: 00007f7d15825fa0 RCX: 00007f7d1559de99 [ 276.662232][ T8037] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400 [ 276.662246][ T8037] RBP: 00007f7d15633eaf R08: 0000000000000000 R09: 0000000000000000 [ 276.662259][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.662272][ T8037] R13: 00007f7d15826038 R14: 00007f7d15825fa0 R15: 00007ffe222d0a98 [ 276.662292][ T8037] [ 276.955564][ T5804] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 276.965719][ T5804] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 276.976130][ T5804] asix 2-1:0.34: probe with driver asix failed with error -71 [ 276.993026][ T5804] usb 2-1: USB disconnect, device number 14 [ 277.016044][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 277.016061][ T29] audit: type=1400 audit(1785284587.255:533): avc: denied { write } for pid=8036 comm="syz.3.600" name="c.1" dev="configfs" ino=28360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.045950][ T29] audit: type=1400 audit(1785284587.255:534): avc: denied { write } for pid=8036 comm="syz.3.600" name="c.1" dev="configfs" ino=28360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1