last executing test programs: 5.971258942s ago: executing program 3 (id=155): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) 4.619452002s ago: executing program 2 (id=165): r0 = syz_open_dev$loop(&(0x7f0000000300), 0x4, 0x62902) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 3.936975108s ago: executing program 2 (id=167): setreuid(0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) ptrace(0x11, r0) 3.936408668s ago: executing program 2 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003b4000000b403"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f00000001c0)={0x3, 0x1}) 3.863651634s ago: executing program 3 (id=168): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 3.164985182s ago: executing program 3 (id=172): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3", @ANYRES8], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2001030000"], 0x0}) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 2.071015911s ago: executing program 0 (id=184): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.022800545s ago: executing program 0 (id=185): r0 = syz_open_dev$loop(&(0x7f0000000300), 0x4, 0x62902) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 1.876361697s ago: executing program 0 (id=188): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x40000) 1.854960708s ago: executing program 0 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) write$binfmt_elf32(r1, 0x0, 0x58) 1.779341935s ago: executing program 0 (id=190): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r0, &(0x7f0000000440), 0x4) pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000480)="fe", 0x1}], 0x1, 0x8, 0x2) 1.742665888s ago: executing program 2 (id=192): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.684200252s ago: executing program 0 (id=193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x4, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x5, "c629503965"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.415743944s ago: executing program 1 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="baa100ecb8e5008ed8643ef367640f09ba400066ed67ad640f350fae56e40fc76df70fc775bcb818008ee0", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.369324748s ago: executing program 1 (id=195): syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x8e, 0x40, 0xe9, 0x20, 0x7c4, 0xa001, 0x9576, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0xa0, 0x1, [{{0x9, 0x4, 0x22, 0x1, 0x0, 0x2, 0x6, 0x0, 0xfd}}]}}]}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 204.465104ms ago: executing program 1 (id=196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 115.70242ms ago: executing program 2 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 115.436951ms ago: executing program 1 (id=198): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10c) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 115.06248ms ago: executing program 3 (id=199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x3a}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 92.900792ms ago: executing program 3 (id=200): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 88.244423ms ago: executing program 2 (id=201): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000140)={0x2, 0xffffffff, 0x5, 0x8000, 0xbab1, 0x7, 0x2, 0x1, 0x1, 0x9, 0x7f, 0x0, 0x3, 0xfff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 40.505347ms ago: executing program 1 (id=202): lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 7.38293ms ago: executing program 3 (id=203): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) close(r0) 0s ago: executing program 1 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0xeeef0000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x10000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5, 0x3}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0x11, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 28.048577][ T36] audit: type=1400 audit(1756411425.050:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.050359][ T282] cgroup: Unknown subsys name 'net' [ 28.071949][ T36] audit: type=1400 audit(1756411425.060:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.101630][ T36] audit: type=1400 audit(1756411425.090:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.101811][ T282] cgroup: Unknown subsys name 'devices' [ 28.291262][ T282] cgroup: Unknown subsys name 'hugetlb' [ 28.297236][ T282] cgroup: Unknown subsys name 'rlimit' [ 28.452831][ T36] audit: type=1400 audit(1756411425.460:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.477365][ T36] audit: type=1400 audit(1756411425.460:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.502982][ T36] audit: type=1400 audit(1756411425.460:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.514492][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.536929][ T36] audit: type=1400 audit(1756411425.540:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.563619][ T36] audit: type=1400 audit(1756411425.540:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.596038][ T36] audit: type=1400 audit(1756411425.610:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.623536][ T36] audit: type=1400 audit(1756411425.610:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.623576][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.504115][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.511582][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.519036][ T290] bridge_slave_0: entered allmulticast mode [ 29.525519][ T290] bridge_slave_0: entered promiscuous mode [ 29.533610][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.540930][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.548398][ T290] bridge_slave_1: entered allmulticast mode [ 29.555023][ T290] bridge_slave_1: entered promiscuous mode [ 29.601000][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.608082][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.615288][ T289] bridge_slave_0: entered allmulticast mode [ 29.621787][ T289] bridge_slave_0: entered promiscuous mode [ 29.636791][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.644106][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.651924][ T289] bridge_slave_1: entered allmulticast mode [ 29.658342][ T289] bridge_slave_1: entered promiscuous mode [ 29.722319][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.729684][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.736957][ T291] bridge_slave_0: entered allmulticast mode [ 29.743593][ T291] bridge_slave_0: entered promiscuous mode [ 29.752332][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.759457][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.766645][ T291] bridge_slave_1: entered allmulticast mode [ 29.773050][ T291] bridge_slave_1: entered promiscuous mode [ 29.801864][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.809089][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.816719][ T292] bridge_slave_0: entered allmulticast mode [ 29.823405][ T292] bridge_slave_0: entered promiscuous mode [ 29.832569][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.839795][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.846965][ T292] bridge_slave_1: entered allmulticast mode [ 29.853338][ T292] bridge_slave_1: entered promiscuous mode [ 29.994778][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.002304][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.018018][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.025267][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.032692][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.039879][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.052048][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.059432][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.067107][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.074850][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.113495][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.120722][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.128330][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.136219][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.159779][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.168447][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.178427][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.188405][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.196838][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.204682][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.212088][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.235970][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.243264][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.251198][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.258534][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.266563][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.273879][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.282806][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.290280][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.315881][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.323727][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.332278][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.339495][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.373056][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.380443][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.389033][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.397156][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.415756][ T289] veth0_vlan: entered promiscuous mode [ 30.426537][ T290] veth0_vlan: entered promiscuous mode [ 30.449607][ T291] veth0_vlan: entered promiscuous mode [ 30.464258][ T289] veth1_macvtap: entered promiscuous mode [ 30.476236][ T290] veth1_macvtap: entered promiscuous mode [ 30.498551][ T291] veth1_macvtap: entered promiscuous mode [ 30.532751][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.553807][ T292] veth0_vlan: entered promiscuous mode [ 30.598516][ T292] veth1_macvtap: entered promiscuous mode [ 30.669780][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.703041][ T31] rust_binder: 331: removing orphan mapping 0:24 [ 30.712375][ T31] rust_binder: 0: removing orphan mapping 24:96 [ 30.899425][ T370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.198856][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.279086][ T44] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.360188][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.371694][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.380925][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.390674][ T31] usb 2-1: config 0 descriptor?? [ 31.802295][ T31] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 31.812044][ T411] overlayfs: statfs failed on './file0' [ 31.813668][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input4 [ 31.895974][ T31] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 31.953528][ T417] ./file0: Can't lookup blockdev [ 32.049709][ T422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 32.070234][ T424] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0 [ 32.081002][ T424] rust_binder: Error while translating object. [ 32.091200][ T424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.097696][ T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 32.347814][ T10] usb 2-1: USB disconnect, device number 2 [ 32.499115][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.658942][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 32.665440][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.676695][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 32.686594][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 32.698057][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.707437][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.715769][ T31] usb 1-1: Product: syz [ 32.720385][ T31] usb 1-1: Manufacturer: syz [ 32.725271][ T31] usb 1-1: SerialNumber: syz [ 33.208800][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.298843][ T393] Bluetooth: hci0: command 0x1003 tx timeout [ 33.299042][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.356439][ T457] rust_binder: Error while translating object. [ 33.356506][ T457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.372213][ T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 33.380097][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.403106][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 33.415257][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.424560][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.432964][ T10] usb 3-1: Product: syz [ 33.438896][ T10] usb 3-1: Manufacturer: syz [ 33.451299][ T10] usb 3-1: SerialNumber: syz [ 33.464580][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 33.640056][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 33.640085][ T36] audit: type=1400 audit(1756411430.650:167): avc: denied { unlink } for pid=473 comm="syz.1.59" name="#1" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.666274][ T446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 33.680421][ T36] audit: type=1400 audit(1756411430.650:168): avc: denied { mount } for pid=473 comm="syz.1.59" name="/" dev="overlay" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.729899][ T36] audit: type=1400 audit(1756411430.730:169): avc: denied { read } for pid=475 comm="syz.1.60" path="socket:[4818]" dev="sockfs" ino=4818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.766014][ T36] audit: type=1400 audit(1756411430.770:170): avc: denied { write } for pid=477 comm="syz.1.61" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.789490][ T403] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.797714][ T36] audit: type=1400 audit(1756411430.770:171): avc: denied { read write } for pid=477 comm="syz.1.61" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.822287][ T36] audit: type=1400 audit(1756411430.770:172): avc: denied { open } for pid=477 comm="syz.1.61" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.849221][ T36] audit: type=1400 audit(1756411430.770:173): avc: denied { ioctl } for pid=477 comm="syz.1.61" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.953842][ T31] cdc_ncm 1-1:1.0: bind() failure [ 33.960503][ T31] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 33.968725][ T31] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 33.979420][ T31] usb 1-1: USB disconnect, device number 2 [ 33.985865][ T403] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 33.998715][ T403] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 34.011283][ T403] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 34.024418][ T403] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 34.034339][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.047673][ T461] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 34.074503][ T36] audit: type=1400 audit(1756411431.080:174): avc: denied { create } for pid=487 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.094721][ T36] audit: type=1400 audit(1756411431.080:175): avc: denied { ioctl } for pid=487 comm="syz.1.65" path="socket:[4840]" dev="sockfs" ino=4840 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.135027][ T46] kernel write not supported for file /syz1 (pid: 46 comm: kworker/1:1) [ 34.135061][ T36] audit: type=1400 audit(1756411431.140:176): avc: denied { mounton } for pid=487 comm="syz.1.65" path="/24/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 34.283575][ T446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.291315][ T10] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 34.300042][ T10] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 34.499052][ T502] Source file dentry negative [ 34.504453][ T10] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 34.517234][ T10] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 34.532776][ T10] wwan wwan0: port wwan0mbim0 attached [ 34.547262][ T10] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, be:37:72:d9:2d:86 [ 34.722594][ T10] usb 3-1: USB disconnect, device number 2 [ 34.740937][ T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 34.842237][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 34.920866][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 35.072974][ T403] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 35.090090][ T403] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5 [ 35.110598][ T403] usb 4-1: USB disconnect, device number 2 [ 35.238809][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.373529][ T561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.84'. [ 35.412018][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.427780][ T9] usb 1-1: config 0 has no interfaces? [ 35.436302][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 35.446503][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 35.455226][ T9] usb 1-1: Manufacturer: syz [ 35.460847][ T9] usb 1-1: config 0 descriptor?? [ 35.618873][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.687681][ T552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.696890][ T552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.734952][ T44] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.800176][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.810657][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.820346][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.829876][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.838002][ T31] usb 3-1: SerialNumber: syz [ 35.841119][ T10] usb 1-1: USB disconnect, device number 3 [ 36.052862][ T31] usb 3-1: 0:2 : does not exist [ 36.060506][ T31] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 36.070695][ T31] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 36.080393][ T31] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 36.091340][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 36.103227][ T31] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 36.115401][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 36.128670][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 36.140302][ T31] usb 3-1: USB disconnect, device number 3 [ 36.150559][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.478889][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.629899][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.641050][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.657216][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 36.670724][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.680077][ T10] usb 1-1: config 0 descriptor?? [ 36.777393][ T600] input: syz1 as /devices/virtual/input/input7 [ 36.900685][ T615] rust_binder: Write failure EINVAL in pid:51 [ 37.089485][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.103988][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.111649][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.119180][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.127042][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.139176][ T10] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 37.248927][ T403] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.288510][ T586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.297150][ T586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.398940][ T403] usb 2-1: Using ep0 maxpacket: 16 [ 37.405588][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.416932][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.427875][ T403] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 37.439074][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.449046][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 37.460172][ T403] usb 2-1: config 0 descriptor?? [ 37.610154][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 37.621526][ T31] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 37.630751][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.640183][ T31] usb 3-1: config 0 descriptor?? [ 37.645538][ T633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 37.707629][ T10] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 37.717566][ T10] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 37.727680][ T10] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 37.736954][ T10] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 37.745711][ T10] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 37.757122][ T10] usb 1-1: USB disconnect, device number 4 [ 37.768818][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.768996][ T393] Bluetooth: hci0: command 0x1003 tx timeout [ 37.873831][ T403] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0003/input/input8 [ 37.886874][ T403] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0003/input/input9 [ 37.904563][ T403] kye 0003:0458:5012.0003: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 38.038857][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.058154][ T31] hid-generic 0003:04F3:0755.0004: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 38.083761][ T31] usb 2-1: USB disconnect, device number 3 [ 38.188899][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 38.195525][ T46] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 38.205903][ T46] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.217376][ T46] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.227674][ T46] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 38.241366][ T46] usb 4-1: config 7 interface 0 has no altsetting 0 [ 38.248397][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 38.258001][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.679915][ T46] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0005/input/input10 [ 38.683630][ T36] kauditd_printk_skb: 545 callbacks suppressed [ 38.683662][ T36] audit: type=1400 audit(1756411435.690:722): avc: denied { write } for pid=645 comm="syz.1.119" name="tcp6" dev="proc" ino=4026532597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.694039][ T46] kye 0003:0458:5010.0005: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 38.939773][ T31] usb 4-1: USB disconnect, device number 3 [ 39.476501][ T36] audit: type=1400 audit(1756411436.480:723): avc: denied { ioctl } for pid=656 comm="syz.3.123" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.517100][ T36] audit: type=1400 audit(1756411436.520:724): avc: denied { mount } for pid=660 comm="syz.3.125" name="/" dev="configfs" ino=2481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.541547][ T36] audit: type=1400 audit(1756411436.550:725): avc: denied { search } for pid=660 comm="syz.3.125" name="/" dev="configfs" ino=2481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.566575][ T36] audit: type=1400 audit(1756411436.550:726): avc: denied { read } for pid=660 comm="syz.3.125" name="/" dev="configfs" ino=2481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.590071][ T36] audit: type=1400 audit(1756411436.550:727): avc: denied { open } for pid=660 comm="syz.3.125" path="/" dev="configfs" ino=2481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.680346][ T36] audit: type=1400 audit(1756411436.680:728): avc: denied { create } for pid=668 comm="syz.2.129" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.701529][ T36] audit: type=1400 audit(1756411436.690:729): avc: denied { mounton } for pid=668 comm="syz.2.129" path="/27/file0" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.727133][ T36] audit: type=1400 audit(1756411436.740:730): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.843769][ T9] rust_binder: 675: removing orphan mapping 0:4120 [ 39.908888][ T637] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.970197][ T685] capability: warning: `syz.0.136' uses deprecated v2 capabilities in a way that may be insecure [ 40.058820][ T637] usb 2-1: Using ep0 maxpacket: 32 [ 40.066205][ T637] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 40.075806][ T36] audit: type=1400 audit(1756411437.080:731): avc: denied { create } for pid=688 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.096398][ T472] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.104079][ T637] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 40.113117][ T637] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 40.122775][ T637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.134366][ T637] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.146252][ T637] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.160610][ T637] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.170944][ T637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.185518][ T637] usb 2-1: config 0 descriptor?? [ 40.199174][ T46] usb 3-1: USB disconnect, device number 4 [ 40.268834][ T472] usb 4-1: Using ep0 maxpacket: 16 [ 40.275328][ T472] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 40.285095][ T472] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.296589][ T472] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.307387][ T472] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.316935][ T472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.325270][ T472] usb 4-1: Product: syz [ 40.329820][ T472] usb 4-1: Manufacturer: syz [ 40.334528][ T472] usb 4-1: SerialNumber: syz [ 40.339568][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.398833][ T637] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.415876][ T637] usb 2-1: USB disconnect, device number 4 [ 40.424062][ T637] usblp0: removed [ 40.500062][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.511227][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.521650][ T46] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 40.531876][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.540746][ T46] usb 3-1: SerialNumber: syz [ 40.751739][ T472] usb 4-1: 0:2 : does not exist [ 40.888854][ T637] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.038915][ T637] usb 2-1: Using ep0 maxpacket: 32 [ 41.046069][ T637] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.054743][ T637] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.063975][ T637] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.073820][ T637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.084572][ T637] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.094579][ T637] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.108178][ T637] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.117510][ T637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.126752][ T637] usb 2-1: config 0 descriptor?? [ 41.188872][ T403] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 41.327865][ T700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 41.341605][ T403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 41.359606][ T403] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 41.385358][ T46] usb 3-1: 0:2 : does not exist [ 41.393717][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.404472][ T46] usb 3-1: USB disconnect, device number 5 [ 41.411720][ T403] usb 1-1: config 0 descriptor?? [ 41.419341][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 41.419788][ T694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 41.543700][ T637] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.556260][ T637] usb 2-1: USB disconnect, device number 5 [ 41.563430][ T637] usblp0: removed [ 41.575056][ T472] usb 4-1: USB disconnect, device number 4 [ 41.853986][ T403] hid-generic 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 42.059599][ T9] usb 1-1: USB disconnect, device number 5 [ 42.145067][ T717] loop4: detected capacity change from 0 to 7 [ 42.196247][ T50] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.205888][ T50] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.218838][ T717] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.237168][ T717] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.245725][ T717] loop4: unable to read partition table [ 42.254546][ T717] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 42.301452][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.578841][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 42.589041][ T472] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.740180][ T472] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 42.749393][ T472] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 42.758806][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 42.758803][ T472] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 42.758844][ T472] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.765988][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.777715][ T472] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.786788][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.798610][ T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.809329][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.818720][ T472] usb 3-1: Product: syz [ 42.827092][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.836343][ T472] usb 3-1: Manufacturer: syz [ 42.846622][ T9] usb 2-1: config 0 descriptor?? [ 42.848660][ T472] usb 3-1: SerialNumber: syz [ 42.858904][ T9] hub 2-1:0.0: USB hub found [ 43.055962][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 43.079410][ T472] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 43.088126][ T472] usb 3-1: found format II with max.bitrate = 12, frame size=2610 [ 43.096062][ T472] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 43.111693][ T472] usb 3-1: USB disconnect, device number 6 [ 43.128195][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.462875][ T9] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 43.604556][ T749] input: syz0 as /devices/virtual/input/input11 [ 43.628823][ T472] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.648851][ T753] loop4: detected capacity change from 0 to 7 [ 43.699474][ T60] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.709477][ T60] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.718039][ T753] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.728312][ T753] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.737076][ T753] loop4: unable to read partition table [ 43.743655][ T753] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 43.790925][ T472] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 43.801824][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.810884][ T403] usb 2-1: USB disconnect, device number 6 [ 43.820075][ T472] usb 1-1: config 0 descriptor?? [ 44.328798][ T393] Bluetooth: hci0: command 0x1003 tx timeout [ 44.329187][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.431478][ T403] usb 1-1: USB disconnect, device number 6 [ 44.558987][ T472] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.711291][ T472] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 44.725731][ T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.737191][ T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.747488][ T472] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 44.762476][ T472] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 44.771675][ T472] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 44.780001][ T472] usb 3-1: Manufacturer: syz [ 44.785872][ T472] usb 3-1: config 0 descriptor?? [ 44.953222][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 44.953243][ T36] audit: type=1400 audit(1756411441.960:740): avc: denied { setattr } for pid=764 comm="syz.1.170" name="/" dev="configfs" ino=2481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.039302][ T36] audit: type=1400 audit(1756411442.050:741): avc: denied { load_policy } for pid=766 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.039438][ T771] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 45.069583][ T771] SELinux: failed to load policy [ 45.195352][ T472] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 45.203576][ T472] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 45.212667][ T472] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 45.338812][ T500] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.500576][ T500] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 45.513329][ T500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 45.525273][ T500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 45.535569][ T500] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.548983][ T500] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.558229][ T500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.568970][ T500] usb 4-1: config 0 descriptor?? [ 45.821694][ T779] loop4: detected capacity change from 0 to 7 [ 45.873329][ T60] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.883809][ T60] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.892485][ T779] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.902479][ T779] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.910682][ T779] loop4: unable to read partition table [ 45.917255][ T779] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 45.978148][ T500] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 45.991434][ T500] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 46.000731][ T500] plantronics 0003:047F:FFFF.000A: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 46.003896][ T403] usb 3-1: USB disconnect, device number 7 [ 46.247373][ T804] loop4: detected capacity change from 0 to 7 [ 46.253297][ T806] rust_binder: Error while translating object. [ 46.253864][ T806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.261090][ T806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:157 [ 46.302328][ T60] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.322491][ T60] Buffer I/O error on dev loop4, logical block 0, async page read [ 46.330653][ T804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.340468][ T804] Buffer I/O error on dev loop4, logical block 0, async page read [ 46.349078][ T804] loop4: unable to read partition table [ 46.354968][ T804] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 46.387518][ T811] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 46.421327][ T36] audit: type=1400 audit(1756411443.430:742): avc: denied { read write } for pid=814 comm="syz.0.190" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.423892][ T500] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 46.446186][ T36] audit: type=1400 audit(1756411443.430:743): avc: denied { open } for pid=814 comm="syz.0.190" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.482682][ T500] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.759029][ T403] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.818875][ T500] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 46.918849][ T403] usb 3-1: Using ep0 maxpacket: 16 [ 46.925160][ T403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.932005][ T403] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 46.941529][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.950703][ T403] usb 3-1: config 0 descriptor?? [ 46.980074][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.991187][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.001473][ T500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.014723][ T500] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.024035][ T500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.033360][ T500] usb 1-1: config 0 descriptor?? [ 47.129108][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.278835][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 47.285557][ T46] usb 2-1: config 5 has an invalid interface number: 34 but max is 0 [ 47.294139][ T46] usb 2-1: config 5 has no interface number 0 [ 47.300405][ T46] usb 2-1: config 5 interface 34 has no altsetting 0 [ 47.308997][ T46] usb 2-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=95.76 [ 47.318305][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.326463][ T46] usb 2-1: Product: syz [ 47.330699][ T46] usb 2-1: Manufacturer: syz [ 47.335607][ T46] usb 2-1: SerialNumber: syz [ 47.365797][ T403] hid (null): global environment stack underflow [ 47.372418][ T403] hid (null): report_id 0 is invalid [ 47.380038][ T403] hid (null): global environment stack underflow [ 47.386734][ T403] hid (null): unknown global tag 0xc [ 47.392188][ T403] hid (null): report_id 25068 is invalid [ 47.398143][ T403] hid (null): report_id 0 is invalid [ 47.403722][ T403] hid (null): global environment stack overflow [ 47.412123][ T403] hid (null): unknown global tag 0xc [ 47.417705][ T403] hid (null): unknown global tag 0x58 [ 47.442945][ T500] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 47.452836][ T500] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 47.546271][ T46] usb 2-1: bad CDC descriptors [ 47.551339][ T46] ums-datafab 2-1:5.34: USB Mass Storage device detected [ 47.559895][ T46] ums-datafab 2-1:5.34: This device (07c4,a001,9576 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 47.559895][ T46] Please send a copy of this message to and [ 47.563632][ T500] usb 3-1: USB disconnect, device number 8 [ 47.631660][ T46] usb 2-1: USB disconnect, device number 7 [ 47.951499][ T403] usb 1-1: USB disconnect, device number 7 [ 48.127200][ T500] usb 4-1: USB disconnect, device number 5 [ 48.185786][ T846] overlayfs: workdir and upperdir must reside under the same mount [ 48.188890][ T36] audit: type=1400 audit(1756411445.190:744): avc: denied { mount } for pid=844 comm="syz.3.200" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.196608][ T845] SELinux: Context ϧ is not valid (left unmapped). [ 48.227572][ T36] audit: type=1400 audit(1756411445.230:745): avc: denied { create } for pid=842 comm="syz.1.202" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 48.257892][ T292] ------------[ cut here ]------------ [ 48.263620][ T292] WARNING: CPU: 1 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 48.269068][ T36] audit: type=1400 audit(1756411445.230:746): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.273138][ T292] Modules linked in: [ 48.297242][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 48.300235][ T36] audit: type=1400 audit(1756411445.230:747): avc: denied { associate } for pid=842 comm="syz.1.202" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 48.309054][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.332806][ T36] audit: type=1400 audit(1756411445.230:748): avc: denied { mounton } for pid=842 comm="syz.1.202" path="/75/bus" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 48.342222][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 48.366797][ T36] audit: type=1400 audit(1756411445.230:749): avc: denied { write } for pid=842 comm="syz.1.202" name="bus" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 48.371995][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 48.415668][ T292] RSP: 0018:ffffc9000b5ffb68 EFLAGS: 00010293 [ 48.422029][ T292] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff888128059300 [ 48.430859][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.438781][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.447253][ T292] RBP: ffffc9000b5ffb90 R08: ffff88811c644f3f R09: 1ffff110238c89e7 [ 48.455333][ T292] R10: dffffc0000000000 R11: ffffed10238c89e8 R12: 0000000000000000 [ 48.463454][ T292] R13: dffffc0000000000 R14: ffff88811c644ea0 R15: ffff888113697aa0 [ 48.471600][ T292] FS: 00005555587a2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.480696][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.487563][ T292] CR2: 00005555587bd4a8 CR3: 0000000110268000 CR4: 00000000003526b0 [ 48.496527][ T292] Call Trace: [ 48.500165][ T292] [ 48.503148][ T292] ovl_do_remove+0x7b8/0xcf0 [ 48.508159][ T292] ? ovl_set_redirect+0x780/0x780 [ 48.513593][ T292] ? down_write+0xe9/0x2a0 [ 48.518156][ T292] ? __cfi_down_write+0x10/0x10 [ 48.523317][ T292] ovl_rmdir+0x1e/0x30 [ 48.527531][ T292] vfs_rmdir+0x3e0/0x560 [ 48.532129][ T292] incfs_kill_sb+0x109/0x230 [ 48.536790][ T292] deactivate_locked_super+0xd5/0x2a0 [ 48.542334][ T292] deactivate_super+0xb8/0xe0 [ 48.547239][ T292] cleanup_mnt+0x3f1/0x480 [ 48.551991][ T292] __cleanup_mnt+0x1d/0x40 [ 48.556439][ T292] task_work_run+0x1e3/0x250 [ 48.561182][ T292] ? __cfi_task_work_run+0x10/0x10 [ 48.566561][ T292] ? __x64_sys_umount+0x126/0x170 [ 48.571855][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 48.577391][ T292] ? __kasan_check_read+0x15/0x20 [ 48.582669][ T292] resume_user_mode_work+0x36/0x50 [ 48.588203][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 48.594080][ T292] do_syscall_64+0x64/0xf0 [ 48.598704][ T292] ? clear_bhb_loop+0x50/0xa0 [ 48.600442][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.603788][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.603827][ T292] RIP: 0033:0x7f3ec218ff17 [ 48.615475][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.621077][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 48.625910][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.635297][ T292] RSP: 002b:00007ffddc48b008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 48.635331][ T292] RAX: 0000000000000000 RBX: 00007f3ec2211c05 RCX: 00007f3ec218ff17 [ 48.656815][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.669769][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddc48b0c0 [ 48.669796][ T292] RBP: 00007ffddc48b0c0 R08: 0000000000000000 R09: 0000000000000000 [ 48.679144][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.686834][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddc48c150 [ 48.700987][ T9] usb 3-1: config 0 descriptor?? [ 48.704484][ T292] R13: 00007f3ec2211c05 R14: 000000000000bc14 R15: 00007ffddc48c190 [ 48.743450][ T292] [ 48.746624][ T292] ---[ end trace 0000000000000000 ]--- [ 48.753257][ T292] ------------[ cut here ]------------ [ 48.759085][ T292] WARNING: CPU: 1 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 48.769295][ T292] Modules linked in: [ 48.773390][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 48.788863][ T292] Tainted: [W]=WARN [ 48.793585][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.805270][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 48.811851][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 48.832470][ T292] RSP: 0018:ffffc9000b5ffb68 EFLAGS: 00010293 [ 48.838689][ T292] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff888128059300 [ 48.846991][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.855310][ T292] RBP: ffffc9000b5ffb90 R08: ffff88811c644f3f R09: 1ffff110238c89e7 [ 48.863550][ T292] R10: dffffc0000000000 R11: ffffed10238c89e8 R12: 0000000000000000 [ 48.871708][ T292] R13: dffffc0000000000 R14: ffff88811c644ea0 R15: ffff888113697aa0 [ 48.879796][ T292] FS: 00005555587a2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.889058][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.895781][ T292] CR2: 00005555587bd4a8 CR3: 0000000110268000 CR4: 00000000003526b0 [ 48.904274][ T292] Call Trace: [ 48.907595][ T292] [ 48.910880][ T292] ovl_do_remove+0x7b8/0xcf0 [ 48.915786][ T292] ? ovl_set_redirect+0x780/0x780 [ 48.921086][ T292] ? down_write+0xe9/0x2a0 [ 48.925562][ T292] ? __cfi_down_write+0x10/0x10 [ 48.930592][ T292] ovl_rmdir+0x1e/0x30 [ 48.934807][ T292] vfs_rmdir+0x3e0/0x560 [ 48.939223][ T292] incfs_kill_sb+0x1a0/0x230 [ 48.943956][ T292] deactivate_locked_super+0xd5/0x2a0 [ 48.949622][ T292] deactivate_super+0xb8/0xe0 [ 48.954620][ T292] cleanup_mnt+0x3f1/0x480 [ 48.959720][ T292] __cleanup_mnt+0x1d/0x40 [ 48.964452][ T292] task_work_run+0x1e3/0x250 [ 48.969385][ T292] ? __cfi_task_work_run+0x10/0x10 [ 48.974728][ T292] ? __x64_sys_umount+0x126/0x170 [ 48.979937][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 48.985732][ T292] ? __kasan_check_read+0x15/0x20 [ 48.991158][ T292] resume_user_mode_work+0x36/0x50 [ 48.996407][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 49.002050][ T292] do_syscall_64+0x64/0xf0 [ 49.006693][ T292] ? clear_bhb_loop+0x50/0xa0 [ 49.011564][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.017649][ T292] RIP: 0033:0x7f3ec218ff17 [ 49.022177][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 49.042134][ T292] RSP: 002b:00007ffddc48b008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.051114][ T292] RAX: 0000000000000000 RBX: 00007f3ec2211c05 RCX: 00007f3ec218ff17 [ 49.060060][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddc48b0c0 [ 49.070365][ T292] RBP: 00007ffddc48b0c0 R08: 0000000000000000 R09: 0000000000000000 [ 49.080339][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddc48c150 [ 49.090246][ T292] R13: 00007f3ec2211c05 R14: 000000000000bc14 R15: 00007ffddc48c190 [ 49.098813][ T292] [ 49.102017][ T292] ---[ end trace 0000000000000000 ]--- [ 49.125381][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.135127][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.143076][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.151056][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.159317][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.166988][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.175084][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.183025][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.190966][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.198637][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.206120][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.214323][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.222293][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.230895][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.238773][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 49.246533][ T9] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 49.257033][ T9] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 49.389620][ T46] usb 3-1: USB disconnect, device number 9