last executing test programs: 6.679453923s ago: executing program 2 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 6.110205247s ago: executing program 2 (id=129): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x10, 0x8, 0xc5, 0x0, 0xffff8000, 0xfc, 0x4, 0xfb, 0x1, 0xf8, 0x4, 0x1, 0x0, 0x3, 0x6, 0x46, 0x8, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.846549953s ago: executing program 2 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) 5.833593253s ago: executing program 2 (id=133): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x28a, 0x1, 0x0, 0x0, 0x1) 5.817507914s ago: executing program 2 (id=134): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1a, &(0x7f0000000240)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf7, 0x40, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x8, 0x8, 0x6, 0x38}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.617483142s ago: executing program 3 (id=143): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x28040680) eventfd2(0x0, 0x80800) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x25000, 0x89, &(0x7f0000000100)=""/137}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.209255521s ago: executing program 2 (id=145): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x3, "c41d21"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000240)={0x20, 0xe, 0x9, "46858273a24770ec83"}, 0x0, 0x0}) 3.910155828s ago: executing program 1 (id=149): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40080) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}, {0x400, 0x7, 0x7, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x140060c1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) 3.909865548s ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='high-speed', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') write(0xffffffffffffffff, &(0x7f0000000340)='dummy_udc.0\x00', 0xc) nanosleep(0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x0, 0x3e8, 0x0}) syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) 3.84369878s ago: executing program 3 (id=151): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f0000000500)='cgroup2\x00', 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9b", 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r5 = socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, r7, 0xc}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x3008804, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r9, 0x8, 0x0) 2.825181584s ago: executing program 1 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) write(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) 2.435738043s ago: executing program 3 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x6, 0x9, 0x40, 0x0, 0x7, 0x9, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) 2.265297957s ago: executing program 3 (id=158): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b"], 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002d80)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.458573816s ago: executing program 1 (id=160): r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9e}], 0x1, 0x40, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x173e000) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 1.402046607s ago: executing program 1 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl(0xffffffffffffffff, 0x3b8e, &(0x7f0000000580)="10") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x2, 0x57, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x10005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400007, 0x5, 0x1003, 0x40000101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount(&(0x7f0000000000)=@md0, &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000001c0)='xfs\x00', 0x1088000, &(0x7f0000000200)='(-]\'.\\\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 1.353125268s ago: executing program 0 (id=163): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000"], 0x509) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.352872408s ago: executing program 0 (id=164): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 903.123029ms ago: executing program 1 (id=165): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 883.321969ms ago: executing program 1 (id=166): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fdatasync(r1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x0, 0x0, 0x12, 0x0, "7c44c885d2967be8b3384b185e496ab45b9c27e7e102e079ef166077e2b21ae9eb363bb9076bc8a5ad0ff3997a83e5e008df627dafbbc113ba22165c31fee8561df31f18c9c9082d54db5b99396e7dba"}, 0xd8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 357.539611ms ago: executing program 0 (id=167): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x2000, 0x4) 292.186463ms ago: executing program 0 (id=168): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x1081410, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000140)={0x283, 0x7}) mount$cgroup(0x0, 0x0, 0x0, 0x1020021, &(0x7f0000000100)={[{@name={'name', 0x3d, 'noprefix'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xc802, 0x102, 0x2}, 0x18) open$dir(&(0x7f00000002c0)='./file0\x00', 0x4b0000, 0x84) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01220100"], 0xa) 157.262436ms ago: executing program 3 (id=169): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14, &(0x7f0000000100)={[{0xe, 0x4e00, "b3e2673507e0718211748abe7000"}]}) 109.529017ms ago: executing program 0 (id=170): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10093ea, 0x2000, 0x4003bfff, 0x40299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=171): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha512\x00'], 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 29.060947][ T36] audit: type=1400 audit(1788746984.120:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.064253][ T287] cgroup: Unknown subsys name 'net' [ 29.083822][ T36] audit: type=1400 audit(1788746984.120:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.111460][ T36] audit: type=1400 audit(1788746984.150:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.112006][ T287] cgroup: Unknown subsys name 'devices' [ 29.230900][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.236553][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.352291][ T36] audit: type=1400 audit(1788746984.410:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.375497][ T36] audit: type=1400 audit(1788746984.410:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.400267][ T36] audit: type=1400 audit(1788746984.410:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.431049][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.440106][ T36] audit: type=1400 audit(1788746984.500:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.465600][ T36] audit: type=1400 audit(1788746984.500:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.543458][ T36] audit: type=1400 audit(1788746984.610:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.544722][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.569017][ T36] audit: type=1400 audit(1788746984.610:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.915881][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.923092][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.930236][ T297] bridge_slave_0: entered allmulticast mode [ 30.936644][ T297] bridge_slave_0: entered promiscuous mode [ 30.943947][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.951145][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.958233][ T297] bridge_slave_1: entered allmulticast mode [ 30.964601][ T297] bridge_slave_1: entered promiscuous mode [ 30.970903][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.977951][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.985119][ T295] bridge_slave_0: entered allmulticast mode [ 30.991564][ T295] bridge_slave_0: entered promiscuous mode [ 31.008626][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.015690][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.022866][ T295] bridge_slave_1: entered allmulticast mode [ 31.029145][ T295] bridge_slave_1: entered promiscuous mode [ 31.085724][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.092846][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.100039][ T294] bridge_slave_0: entered allmulticast mode [ 31.106309][ T294] bridge_slave_0: entered promiscuous mode [ 31.113129][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.120249][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.127335][ T294] bridge_slave_1: entered allmulticast mode [ 31.133827][ T294] bridge_slave_1: entered promiscuous mode [ 31.157779][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.164917][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.172086][ T296] bridge_slave_0: entered allmulticast mode [ 31.178428][ T296] bridge_slave_0: entered promiscuous mode [ 31.196286][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.203394][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.210533][ T296] bridge_slave_1: entered allmulticast mode [ 31.216807][ T296] bridge_slave_1: entered promiscuous mode [ 31.346818][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.353935][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.361286][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.368343][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.382131][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.389219][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.396509][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.403590][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.420460][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.427532][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.434866][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.441972][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.464738][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.471832][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.479156][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.486202][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.509458][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.516962][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.524569][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.532206][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.539557][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.546736][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.554217][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.561557][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.600610][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.607689][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.615884][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.622960][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.630614][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.637668][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.645764][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.652833][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.675617][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.682746][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.690932][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.698001][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.713843][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.720954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.728824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.735906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.758120][ T297] veth0_vlan: entered promiscuous mode [ 31.783542][ T294] veth0_vlan: entered promiscuous mode [ 31.796364][ T297] veth1_macvtap: entered promiscuous mode [ 31.821966][ T294] veth1_macvtap: entered promiscuous mode [ 31.840452][ T296] veth0_vlan: entered promiscuous mode [ 31.863751][ T295] veth0_vlan: entered promiscuous mode [ 31.887780][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.904226][ T295] veth1_macvtap: entered promiscuous mode [ 31.912696][ T296] veth1_macvtap: entered promiscuous mode [ 31.949227][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.012390][ T320] 9pnet_fd: p9_fd_create_unix (320): problem connecting socket: ./file0: -91 [ 32.278749][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.429864][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.438494][ T31] usb 3-1: config 4 has an invalid interface number: 73 but max is 0 [ 32.446613][ T31] usb 3-1: config 4 has no interface number 0 [ 32.452992][ T31] usb 3-1: config 4 interface 73 altsetting 3 endpoint 0xF has an invalid bInterval 129, changing to 11 [ 32.464223][ T31] usb 3-1: config 4 interface 73 has no altsetting 0 [ 32.472583][ T31] usb 3-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=8e.c5 [ 32.481805][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.489854][ T31] usb 3-1: Product: syz [ 32.494034][ T31] usb 3-1: Manufacturer: syz [ 32.498460][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.498856][ T31] usb 3-1: SerialNumber: syz [ 32.689855][ T311] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 32.701677][ T311] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 32.718433][ T311] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 32.729992][ T31] usb 3-1: USB disconnect, device number 2 [ 32.743468][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.752935][ T311] usb 1-1: Product: syz [ 32.757141][ T311] usb 1-1: Manufacturer: syz [ 32.763512][ T311] usb 1-1: SerialNumber: syz [ 33.098457][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.269121][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.304119][ T66] usb 4-1: config 9 has an invalid interface number: 175 but max is 0 [ 33.312403][ T66] usb 4-1: config 9 has no interface number 0 [ 33.320225][ T66] usb 4-1: New USB device found, idVendor=10c4, idProduct=85f8, bcdDevice=2b.8f [ 33.329363][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.337389][ T66] usb 4-1: Product: syz [ 33.341646][ T66] usb 4-1: Manufacturer: syz [ 33.346273][ T66] usb 4-1: SerialNumber: syz [ 33.563406][ T66] usb 4-1: USB disconnect, device number 2 [ 33.948328][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 33.954784][ T311] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 33.965482][ T311] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 33.977675][ T311] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 33.989911][ T311] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 34.004727][ T311] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 34.014045][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.022249][ T311] usb 2-1: Product: syz [ 34.026580][ T311] usb 2-1: Manufacturer: syz [ 34.031349][ T311] usb 2-1: SerialNumber: syz [ 34.082316][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 34.082335][ T36] audit: type=1400 audit(1788746989.140:152): avc: denied { read } for pid=380 comm="syz.3.30" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.116293][ T36] audit: type=1400 audit(1788746989.140:153): avc: denied { open } for pid=380 comm="syz.3.30" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.158357][ T36] audit: type=1400 audit(1788746989.210:154): avc: denied { create } for pid=385 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.198733][ T36] audit: type=1400 audit(1788746989.210:155): avc: denied { write } for pid=385 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.218759][ T36] audit: type=1400 audit(1788746989.210:156): avc: denied { nlmsg_write } for pid=385 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.297587][ T36] audit: type=1400 audit(1788746989.350:157): avc: denied { read write } for pid=389 comm="syz.3.33" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.320837][ T36] audit: type=1400 audit(1788746989.350:158): avc: denied { open } for pid=389 comm="syz.3.33" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.343810][ T36] audit: type=1400 audit(1788746989.350:159): avc: denied { mounton } for pid=389 comm="syz.3.33" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.448352][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.599589][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 34.609506][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 34.619301][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 34.629185][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 34.638937][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 34.648695][ T311] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 34.657752][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.667267][ T388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.674523][ T388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.681798][ T388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.943130][ T36] audit: type=1400 audit(1788746990.000:160): avc: denied { create } for pid=368 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.962299][ T36] audit: type=1400 audit(1788746990.000:161): avc: denied { setopt } for pid=368 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.091681][ T66] usb 3-1: USB disconnect, device number 3 [ 35.245380][ T311] usb 1-1: USB disconnect, device number 2 [ 35.998346][ T66] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 36.076456][ T46] usb 2-1: USB disconnect, device number 2 [ 36.157102][ T66] usb 3-1: no configurations [ 36.173761][ T66] usb 3-1: can't read configurations, error -22 [ 36.189425][ T422] FAULT_INJECTION: forcing a failure. [ 36.189425][ T422] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.202596][ T422] CPU: 0 UID: 0 PID: 422 Comm: syz.1.43 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 36.202632][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.202657][ T422] Call Trace: [ 36.202665][ T422] [ 36.202674][ T422] __dump_stack+0x21/0x30 [ 36.202721][ T422] dump_stack_lvl+0x140/0x1c0 [ 36.202757][ T422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.202794][ T422] dump_stack+0x19/0x20 [ 36.202828][ T422] should_fail_ex+0x3c2/0x510 [ 36.202859][ T422] should_fail+0xf/0x20 [ 36.202886][ T422] should_fail_usercopy+0x1e/0x30 [ 36.202917][ T422] copy_page_from_iter_atomic+0x34b/0x1780 [ 36.202957][ T422] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 36.202994][ T422] ? inode_to_bdi+0x6d/0x100 [ 36.203032][ T422] ? __kasan_check_read+0x15/0x20 [ 36.203059][ T422] generic_perform_write+0x588/0x970 [ 36.203098][ T422] ? __cfi_generic_perform_write+0x10/0x10 [ 36.203133][ T422] ? generic_write_checks_count+0x426/0x540 [ 36.203169][ T422] ? file_update_time+0xa3/0x210 [ 36.203207][ T422] shmem_file_write_iter+0x105/0x130 [ 36.203243][ T422] vfs_write+0x762/0xfd0 [ 36.203270][ T422] ? __cfi_vfs_write+0x10/0x10 [ 36.203296][ T422] ? __cfi_mutex_lock+0x10/0x10 [ 36.203326][ T422] ksys_write+0x145/0x260 [ 36.203350][ T422] ? xfd_validate_state+0x68/0x140 [ 36.203384][ T422] ? __cfi_ksys_write+0x10/0x10 [ 36.203418][ T422] ? __kasan_check_write+0x18/0x20 [ 36.203443][ T422] ? fpregs_restore_userregs+0x11c/0x260 [ 36.203475][ T422] __x64_sys_write+0x7f/0x90 [ 36.203501][ T422] x64_sys_call+0x271c/0x2ee0 [ 36.203524][ T422] do_syscall_64+0x57/0xf0 [ 36.203561][ T422] ? clear_bhb_loop+0x50/0xa0 [ 36.203591][ T422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.203617][ T422] RIP: 0033:0x7f3179d9e159 [ 36.203643][ T422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.203682][ T422] RSP: 002b:00007f317ac87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.203717][ T422] RAX: ffffffffffffffda RBX: 00007f317a025fa0 RCX: 00007f3179d9e159 [ 36.203737][ T422] RDX: 0000000000032600 RSI: 0000200000000380 RDI: 0000000000000004 [ 36.203754][ T422] RBP: 00007f3179e35024 R08: 0000000000000000 R09: 0000000000000000 [ 36.203771][ T422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.203787][ T422] R13: 00007f317a026038 R14: 00007f317a025fa0 R15: 00007ffc4ecaa0d8 [ 36.203809][ T422] [ 36.318441][ T66] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.653426][ T432] syzkaller0: entered promiscuous mode [ 36.678324][ T432] syzkaller0: entered allmulticast mode [ 36.688939][ T66] usb 3-1: no configurations [ 36.693595][ T66] usb 3-1: can't read configurations, error -22 [ 36.700265][ T66] usb usb3-port1: attempt power cycle [ 37.087047][ T66] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 37.119121][ T66] usb 3-1: no configurations [ 37.123772][ T66] usb 3-1: can't read configurations, error -22 [ 37.252465][ T10] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0001/input/input4 [ 37.278939][ T10] hid-generic 0018:0B05:0101.0001: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 37.347868][ T448] fido_id[448]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.358472][ T66] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 37.389977][ T66] usb 3-1: no configurations [ 37.398813][ T66] usb 3-1: can't read configurations, error -22 [ 37.408407][ T66] usb usb3-port1: unable to enumerate USB device [ 37.658378][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.339700][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 38.345937][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.368369][ T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.389826][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 38.399105][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.407135][ T10] usb 1-1: Product: syz [ 38.428301][ T10] usb 1-1: Manufacturer: syz [ 38.432947][ T10] usb 1-1: SerialNumber: syz [ 38.645420][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 38.663929][ T10] usb 1-1: USB disconnect, device number 3 [ 38.678850][ T365] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.686519][ T474] udevd[474]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.829434][ T365] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 38.838381][ T365] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 38.848823][ T365] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 38.857864][ T365] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 38.870402][ T365] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 38.882628][ T365] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 38.891719][ T365] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 38.899781][ T365] usb 2-1: Product: syz [ 38.903966][ T365] usb 2-1: Manufacturer: syz [ 38.910526][ T365] cdc_wdm 2-1:1.0: skipping garbage [ 38.915764][ T365] cdc_wdm 2-1:1.0: skipping garbage [ 38.921672][ T365] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 38.927614][ T365] cdc_wdm 2-1:1.0: Unknown control protocol [ 39.178347][ T378] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.311800][ T311] usb 2-1: USB disconnect, device number 3 [ 39.314448][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 39.314494][ T36] audit: type=1400 audit(1788746994.370:191): avc: denied { create } for pid=491 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.330570][ T378] usb 3-1: Using ep0 maxpacket: 32 [ 39.348679][ T36] audit: type=1400 audit(1788746994.410:192): avc: denied { bind } for pid=491 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.374203][ T378] usb 3-1: descriptor type invalid, skip [ 39.387645][ T378] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 39.397128][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.405382][ T378] usb 3-1: Product: syz [ 39.409797][ T378] usb 3-1: Manufacturer: syz [ 39.414495][ T378] usb 3-1: SerialNumber: syz [ 39.414912][ T496] ======================================================= [ 39.414912][ T496] WARNING: The mand mount option has been deprecated and [ 39.414912][ T496] and is ignored by this kernel. Remove the mand [ 39.414912][ T496] option from the mount to silence this warning. [ 39.414912][ T496] ======================================================= [ 39.456156][ T36] audit: type=1400 audit(1788746994.510:193): avc: denied { unlink } for pid=495 comm="syz.0.74" name="#1" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.483266][ T36] audit: type=1400 audit(1788746994.510:194): avc: denied { mount } for pid=495 comm="syz.0.74" name="/" dev="overlay" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.505332][ T36] audit: type=1400 audit(1788746994.540:195): avc: denied { mount } for pid=497 comm="syz.3.75" name="/" dev="ramfs" ino=3946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.553395][ T36] audit: type=1400 audit(1788746994.610:196): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.597712][ T36] audit: type=1400 audit(1788746994.650:197): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.623745][ T36] audit: type=1400 audit(1788746994.680:198): avc: denied { wake_alarm } for pid=497 comm="syz.3.75" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.644934][ T36] audit: type=1400 audit(1788746994.680:199): avc: denied { execute } for pid=497 comm="syz.3.75" path="/16/file1" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.667905][ T378] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.682537][ T378] usb 3-1: USB disconnect, device number 8 [ 39.795580][ T36] audit: type=1400 audit(1788746994.850:200): avc: denied { write } for pid=511 comm="syz.0.80" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 39.795912][ T512] random: crng reseeded on system resumption [ 40.218412][ T378] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.380591][ T378] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 40.405409][ T378] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 40.416007][ T378] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 40.425624][ T378] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 40.437400][ T378] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 40.450806][ T378] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 40.460808][ T378] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 40.472254][ T378] usb 1-1: Product: syz [ 40.476601][ T378] usb 1-1: Manufacturer: syz [ 41.439312][ T378] cdc_wdm 1-1:1.0: skipping garbage [ 41.444581][ T378] cdc_wdm 1-1:1.0: skipping garbage [ 41.455097][ T378] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 41.466451][ T378] cdc_wdm 1-1:1.0: Unknown control protocol [ 41.641967][ T378] usb 1-1: USB disconnect, device number 4 [ 42.210241][ T555] SELinux: policydb version 33446979 does not match my version range 15-33 [ 42.219133][ T555] SELinux: failed to load policy [ 42.309092][ T571] fuse: blksize only supported for fuseblk [ 42.358020][ T577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 43.048447][ T588] random: crng reseeded on system resumption [ 43.155391][ T595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 43.348346][ T365] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 43.468708][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.499894][ T365] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.508352][ T365] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 43.516567][ T365] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 43.526699][ T365] usb 2-1: config 8 has no interface number 0 [ 43.532841][ T365] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 43.543899][ T365] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 43.555226][ T365] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 43.569167][ T365] usb 2-1: string descriptor 0 read error: -22 [ 43.575374][ T365] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 43.584489][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.594018][ T593] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.598525][ T364] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.628387][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 43.634755][ T66] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 43.642900][ T66] usb 1-1: config 0 has no interface number 0 [ 43.650405][ T66] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 43.659504][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.667527][ T66] usb 1-1: Product: syz [ 43.671737][ T66] usb 1-1: Manufacturer: syz [ 43.676345][ T66] usb 1-1: SerialNumber: syz [ 43.681778][ T66] usb 1-1: config 0 descriptor?? [ 43.758370][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 43.764915][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.775880][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.785662][ T364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.811806][ T378] usb 2-1: USB disconnect, device number 4 [ 43.831795][ T364] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.841170][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.850986][ T364] usb 4-1: config 0 descriptor?? [ 44.069235][ T364] usbhid 4-1:0.0: can't add hid device: -71 [ 44.075383][ T364] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 44.084329][ T364] usb 4-1: USB disconnect, device number 3 [ 44.578346][ T378] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 44.760707][ T378] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 44.778296][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.795112][ T378] usb 2-1: Product: syz [ 44.803865][ T378] usb 2-1: Manufacturer: syz [ 44.813992][ T378] usb 2-1: SerialNumber: syz [ 44.824578][ T378] usb 2-1: config 0 descriptor?? [ 45.548430][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 45.548451][ T36] audit: type=1400 audit(1788747000.600:229): avc: denied { remove_name } for pid=634 comm="syz.3.131" name="acm.0" dev="configfs" ino=5369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.581896][ T36] audit: type=1400 audit(1788747000.600:230): avc: denied { rmdir } for pid=634 comm="syz.3.131" name="acm.0" dev="configfs" ino=5369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.938349][ T311] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.089536][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 46.100726][ T311] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 46.109812][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.118739][ T311] usb 3-1: config 0 descriptor?? [ 46.124145][ T645] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 46.249380][ T612] usb 1-1: USB disconnect, device number 5 [ 46.525044][ T378] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.541895][ T378] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.555409][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.564400][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.571577][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.578757][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.585843][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.593047][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.600177][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.607350][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.614609][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.621812][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.637624][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.644816][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.652140][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.659355][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.666439][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.673631][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.680750][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.687925][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.695096][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.702291][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.709469][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.716635][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.723777][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.730955][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.738037][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.745697][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.752833][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.760024][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.767114][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.774335][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.782194][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.789435][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.796532][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.803879][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.811078][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.818245][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.825356][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.832548][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.839686][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.846936][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.854068][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.861251][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.868393][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.875595][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.882777][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.889966][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.897056][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.904231][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.911348][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.918523][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.933353][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.940560][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.947694][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.954936][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.962092][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.969236][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.976302][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.983415][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.990544][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 46.997637][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.005372][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.012485][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.019659][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.026728][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.033832][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.040975][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.048054][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.055260][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.062384][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.069498][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.076562][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.083663][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.090782][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.097834][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.104948][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.112036][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.119134][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.126217][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.133308][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.140396][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.147462][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.154559][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.161734][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.171813][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.178956][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.186041][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.193191][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.200433][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.205070][ T674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 47.207573][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.223546][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.230649][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.237729][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.244818][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.251943][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.259367][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.266466][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.273595][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.280707][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.287790][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.295148][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.302372][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.309623][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.323950][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.331221][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.338630][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.345729][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.358315][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.365435][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.380248][ T10] usb 2-1: USB disconnect, device number 5 [ 47.387242][ T36] audit: type=1400 audit(1788747002.440:231): avc: denied { ioctl } for pid=678 comm="syz.0.146" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.412018][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.419291][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.426420][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.434276][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.443260][ T36] audit: type=1400 audit(1788747002.510:232): avc: denied { append } for pid=680 comm="syz.0.147" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.465935][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.473875][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.481456][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.488732][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.495822][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.503151][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.510478][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.517567][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.524854][ T311] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 47.541772][ T311] uclogic 0003:5543:0064.0003: unexpected long global item [ 47.549712][ T311] uclogic 0003:5543:0064.0003: parse failed [ 47.555705][ T311] uclogic 0003:5543:0064.0003: probe with driver uclogic failed with error -22 [ 47.573213][ T36] audit: type=1400 audit(1788747002.630:233): avc: denied { read write } for pid=684 comm="syz.3.150" name="idVendor" dev="configfs" ino=5617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 47.615435][ T36] audit: type=1400 audit(1788747002.660:234): avc: denied { open } for pid=684 comm="syz.3.150" path="/38/config/usb_gadget/g1/idVendor" dev="configfs" ino=5617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 47.640802][ T36] audit: type=1400 audit(1788747002.660:235): avc: denied { create } for pid=684 comm="syz.3.150" name="uac2.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 48.237805][ T311] usb 3-1: USB disconnect, device number 9 [ 48.787301][ T36] audit: type=1400 audit(1788747003.840:236): avc: denied { connect } for pid=689 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.836667][ T694] fuse: Bad value for 'fd' [ 48.848947][ T36] audit: type=1400 audit(1788747003.890:237): avc: denied { write } for pid=689 comm="syz.3.151" laddr=fe80::a8aa:aaff:feaa:aa0c lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.927482][ T36] audit: type=1400 audit(1788747003.890:238): avc: denied { create } for pid=689 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 49.138346][ T311] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 49.569364][ T311] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 49.578607][ T311] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 49.588490][ T612] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 49.598365][ T311] usb 3-1: config 4 has no interface number 0 [ 49.608702][ T311] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 49.654996][ T311] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 49.665179][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.674356][ T311] usb 3-1: Product: syz [ 49.679609][ T311] usb 3-1: Manufacturer: syz [ 49.686371][ T311] usb 3-1: SerialNumber: syz [ 49.770278][ T612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.780326][ T612] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.790593][ T612] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.804464][ T612] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 49.815419][ T612] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 49.828638][ T612] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 49.839513][ T612] usb 4-1: config 1 interface 1 has no altsetting 0 [ 49.848318][ T612] usb 4-1: string descriptor 0 read error: -22 [ 49.854583][ T612] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 49.863713][ T612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.082906][ T736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.091573][ T736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.128867][ T748] overlay: Unknown parameter '++-[&*'þ%*})' [ 50.149385][ T750] process 'syz.0.163' launched './file0' with NULL argv: empty string added [ 50.701483][ T612] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 50.721337][ T612] usb 4-1: USB disconnect, device number 4 [ 51.175174][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 51.175222][ T36] audit: type=1400 audit(1788747006.230:243): avc: denied { setopt } for pid=778 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.267786][ T36] audit: type=1400 audit(1788747006.320:244): avc: denied { shutdown } for pid=780 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.289210][ T36] audit: type=1400 audit(1788747006.330:245): avc: denied { read } for pid=780 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.538073][ T36] audit: type=1400 audit(1788747006.590:246): avc: denied { write } for pid=786 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.559487][ T787] ------------[ cut here ]------------ [ 51.565022][ T787] WARNING: CPU: 1 PID: 787 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 51.574527][ T787] Modules linked in: [ 51.578473][ T787] CPU: 1 UID: 0 PID: 787 Comm: syz.0.171 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 51.589903][ T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.600103][ T787] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 51.605705][ T787] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 0f 26 03 cc e8 3a 35 06 ff 0f 0b b8 ea ff ff ff eb de e8 2c 35 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 51.625485][ T787] RSP: 0018:ffffc9000e33f728 EFLAGS: 00010283 [ 51.631724][ T787] RAX: ffffffff82814234 RBX: ffff888120e09800 RCX: 0000000000080000 [ 51.639752][ T787] RDX: ffffc90001671000 RSI: 0000000000000c03 RDI: 0000000000000c04 [ 51.647761][ T787] RBP: ffffc9000e33f770 R08: ffffc9000e33f82f R09: 0000000000000000 [ 51.656016][ T787] R10: 0000000000000000 R11: ffffffff82813d50 R12: ffff88810af7f488 [ 51.664050][ T787] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888120e09838 [ 51.672072][ T787] FS: 00007fb13d23e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 51.681154][ T787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.687857][ T787] CR2: 000000110c2c1ec8 CR3: 0000000121278000 CR4: 00000000003526b0 [ 51.695931][ T787] Call Trace: [ 51.699262][ T787] [ 51.702234][ T787] ? __asan_memcpy+0x5a/0x80 [ 51.706889][ T787] crypto_sig_verify+0x1cd/0x260 [ 51.711919][ T787] ? __cfi_crypto_sig_verify+0x10/0x10 [ 51.717436][ T787] ? crypto_sig_set_pubkey+0x9a/0xb0 [ 51.722820][ T787] public_key_verify_signature+0x654/0xa40 [ 51.728713][ T787] ? __cfi_public_key_verify_signature+0x10/0x10 [ 51.735097][ T787] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 51.740739][ T787] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 51.747297][ T787] public_key_verify_signature_2+0x47/0x60 [ 51.753196][ T787] verify_signature+0xf0/0x120 [ 51.758103][ T787] asymmetric_key_verify_signature+0x160/0x200 [ 51.760690][ T10] usb 3-1: USB disconnect, device number 10 [ 51.764339][ T787] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 51.776974][ T787] ? should_fail+0xf/0x20 [ 51.781388][ T787] ? __kasan_check_write+0x18/0x20 [ 51.786565][ T787] ? _copy_from_user+0x87/0xa0 [ 51.791443][ T787] ? memdup_user+0xb1/0x170 [ 51.795989][ T787] keyctl_pkey_verify+0x200/0x290 [ 51.801188][ T787] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 51.806799][ T787] __se_sys_keyctl+0x743/0xe40 [ 51.811641][ T787] ? __x64_sys_keyctl+0xf0/0xf0 [ 51.816535][ T787] ? __cfi_do_futex+0x10/0x10 [ 51.821306][ T787] ? kvfree_sensitive+0x51/0x70 [ 51.826214][ T787] ? __se_sys_futex+0x13c/0x320 [ 51.831178][ T787] ? xfd_validate_state+0x68/0x140 [ 51.836352][ T787] ? __kasan_check_write+0x18/0x20 [ 51.838449][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.841546][ T787] ? fpregs_restore_userregs+0x11c/0x260 [ 51.854687][ T787] __x64_sys_keyctl+0xc3/0xf0 [ 51.859420][ T787] x64_sys_call+0x996/0x2ee0 [ 51.864045][ T787] do_syscall_64+0x57/0xf0 [ 51.868531][ T787] ? clear_bhb_loop+0x50/0xa0 [ 51.873251][ T787] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.879203][ T787] RIP: 0033:0x7fb13c39e159 [ 51.883661][ T787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.903346][ T787] RSP: 002b:00007fb13d23e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 51.911841][ T787] RAX: ffffffffffffffda RBX: 00007fb13c625fa0 RCX: 00007fb13c39e159 [ 51.919906][ T787] RDX: 0000200000000780 RSI: 0000200000000000 RDI: 000000000000001c [ 51.927907][ T787] RBP: 00007fb13c435024 R08: 0000000000000000 R09: 0000000000000000 [ 51.935959][ T787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.944027][ T787] R13: 00007fb13c626038 R14: 00007fb13c625fa0 R15: 00007ffca6993338 [ 51.952077][ T787] [ 51.955121][ T787] ---[ end trace 0000000000000000 ]--- [ 52.000790][ T311] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.009904][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.017892][ T311] usb 4-1: Product: syz [ 52.022110][ T311] usb 4-1: Manufacturer: syz [ 52.026746][ T311] usb 4-1: SerialNumber: syz [ 54.407334][ T364] usb 4-1: USB disconnect, device number 5