last executing test programs: 3.301123141s ago: executing program 2 (id=224): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022180000008501150015ff0904a1010901a1007508750109307502c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x8000) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000280)={0x2, 0x100}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) 2.752091478s ago: executing program 3 (id=235): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="23000000010007", 0x7) 2.751955428s ago: executing program 3 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x5e3f8b2d08cbb781) mount(0x0, &(0x7f0000000200)='./trace\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.751828668s ago: executing program 3 (id=239): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x60442, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = open(&(0x7f0000000300)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000000400)=""/36, 0x24) getdents(r2, &(0x7f0000019480)=""/184, 0xb8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000019540)={0x10000, 0x5, 0xdddd1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, &(0x7f0000000440)) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1a7) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/fib_trie\x00') pread64(r6, &(0x7f0000000480)=""/102400, 0x19000, 0xffffffff8) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}}) 1.872421128s ago: executing program 3 (id=263): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000046b000/0x2000)=nil, 0x2000}, 0x5}) 1.837047572s ago: executing program 3 (id=264): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 1.764058529s ago: executing program 3 (id=265): syz_open_pts(0xffffffffffffffff, 0x4000) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff0009050d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x2, 0x1000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.55873804s ago: executing program 2 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x104, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.550613101s ago: executing program 2 (id=267): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x6000000d}) 1.480071039s ago: executing program 2 (id=268): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x805}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 1.479978828s ago: executing program 2 (id=269): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000080)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x2) 732.014455ms ago: executing program 0 (id=286): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000180)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x2d891dc90fe8a01, 0x19, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 679.575541ms ago: executing program 2 (id=287): fdatasync(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x1, 0x12) write$cgroup_int(r0, 0x0, 0x0) io_setup(0x2, &(0x7f00000005c0)) io_setup(0x7f7b, &(0x7f0000000600)) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000740), 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000780)="02c0") close_range(r2, 0xffffffffffffffff, 0x400000000000000) lseek(r1, 0x5, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x400, 0x115) readv(r0, 0x0, 0x0) close(r4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) 650.448624ms ago: executing program 0 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/irq/default_smp_affinity\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/265, 0x109) 642.780064ms ago: executing program 0 (id=289): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000003c0)=0xb, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000400)=0xffffffffffffffff, 0x12) read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020) 635.379365ms ago: executing program 0 (id=290): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x91, 0x4) r1 = socket(0x1, 0x2, 0x1e) write(r1, 0x0, 0x0) 627.922456ms ago: executing program 0 (id=291): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) fcntl$getown(r1, 0x9) userfaultfd(0x801) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xa300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000180)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) 575.984001ms ago: executing program 0 (id=292): pidfd_send_signal(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x84) fchdir(r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="acad4bacd5414cafc11f972d7f0e3d2a", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) munmap$IORING_OFF_CQ_RING(0x0, 0x2175) 199.9637ms ago: executing program 1 (id=298): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000e80)={0x3, 0x0, &(0x7f0000000ec0)={&(0x7f0000002340)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x6c, 0x80}]}, 0x28}, 0x1, 0x7}, 0x0) 148.028915ms ago: executing program 1 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000023c0)=[{&(0x7f0000002400)='w', 0x1}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000002500)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 127.277267ms ago: executing program 1 (id=300): mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='proc\x00', 0x800000, 0x0) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000240)='proc\x00', 0x800004, 0x0) 119.189258ms ago: executing program 1 (id=301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001780)}, 0x9}, {{0x0, 0x0, 0x0}, 0x1d2338be}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001e40)=""/63, 0x3f}], 0x1, &(0x7f0000001ec0)=""/129, 0x81}, 0x1}], 0x3, 0x12000, &(0x7f00000020c0)={0x0, 0x3938700}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000080000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000003c000e800c000280050009"], 0x140}}, 0x0) 77.35µs ago: executing program 1 (id=302): r0 = socket(0x840000000002, 0x3, 0xff) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x7fff, @any, 0x9}, 0xe) 0s ago: executing program 1 (id=303): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x81, 0xffffffff, 0x20000}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 21.905198][ T36] audit: type=1400 audit(1793152868.470:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.906281][ T286] cgroup: Unknown subsys name 'net' [ 21.927844][ T36] audit: type=1400 audit(1793152868.470:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.955088][ T36] audit: type=1400 audit(1793152868.510:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.955256][ T286] cgroup: Unknown subsys name 'devices' [ 22.079790][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.085390][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.197700][ T36] audit: type=1400 audit(1793152868.760:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.220860][ T36] audit: type=1400 audit(1793152868.760:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.245600][ T36] audit: type=1400 audit(1793152868.760:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.254686][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.277441][ T36] audit: type=1400 audit(1793152868.840:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.302884][ T36] audit: type=1400 audit(1793152868.840:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.339367][ T36] audit: type=1400 audit(1793152868.910:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.364885][ T36] audit: type=1400 audit(1793152868.910:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.365168][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.206927][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.214191][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.221338][ T295] bridge_slave_0: entered allmulticast mode [ 23.227548][ T295] bridge_slave_0: entered promiscuous mode [ 23.236470][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.243573][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.250652][ T295] bridge_slave_1: entered allmulticast mode [ 23.256768][ T295] bridge_slave_1: entered promiscuous mode [ 23.265933][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.272980][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.280032][ T296] bridge_slave_0: entered allmulticast mode [ 23.286140][ T296] bridge_slave_0: entered promiscuous mode [ 23.294871][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.301909][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.309025][ T296] bridge_slave_1: entered allmulticast mode [ 23.315134][ T296] bridge_slave_1: entered promiscuous mode [ 23.346610][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.353734][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.360977][ T294] bridge_slave_0: entered allmulticast mode [ 23.367217][ T294] bridge_slave_0: entered promiscuous mode [ 23.373681][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.380763][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.387796][ T294] bridge_slave_1: entered allmulticast mode [ 23.394137][ T294] bridge_slave_1: entered promiscuous mode [ 23.414962][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.422004][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.429060][ T293] bridge_slave_0: entered allmulticast mode [ 23.435286][ T293] bridge_slave_0: entered promiscuous mode [ 23.443988][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.451062][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.458191][ T293] bridge_slave_1: entered allmulticast mode [ 23.464292][ T293] bridge_slave_1: entered promiscuous mode [ 23.592886][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.599941][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.607200][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.614226][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.624800][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.631851][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.639114][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.646130][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.659428][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.666444][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.673730][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.680765][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.717327][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.724386][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.731652][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.738678][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.750949][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.758227][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.765333][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.773075][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.780221][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.787306][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.794758][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.801965][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.821567][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.828609][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.836089][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.843115][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.850901][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.857918][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.865415][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.872445][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.915295][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.922353][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.936068][ T296] veth0_vlan: entered promiscuous mode [ 23.942449][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.949475][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.960391][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.967414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.979844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.986872][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.995361][ T293] veth0_vlan: entered promiscuous mode [ 24.016855][ T296] veth1_macvtap: entered promiscuous mode [ 24.026212][ T293] veth1_macvtap: entered promiscuous mode [ 24.054523][ T295] veth0_vlan: entered promiscuous mode [ 24.073265][ T294] veth0_vlan: entered promiscuous mode [ 24.086398][ T295] veth1_macvtap: entered promiscuous mode [ 24.095915][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.120499][ T294] veth1_macvtap: entered promiscuous mode [ 24.166718][ T317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.182852][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.458152][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.478134][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.486736][ T9] rust_binder: 339: undelivered TRANSACTION_ERROR: 29189 [ 24.549114][ T344] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 24.609760][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 24.619568][ T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 24.630877][ T311] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 24.640178][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.648253][ T311] usb 1-1: Product: syz [ 24.652485][ T311] usb 1-1: Manufacturer: syz [ 24.657083][ T311] usb 1-1: SerialNumber: syz [ 24.660839][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 24.675656][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 42492, setting to 1024 [ 24.676372][ T311] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 24.689696][ T64] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 24.703801][ T311] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 24.703801][ T311] Please send a copy of this message to and [ 24.705153][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.738250][ T64] usb 2-1: Product: syz [ 24.742530][ T64] usb 2-1: Manufacturer: syz [ 24.747279][ T64] usb 2-1: SerialNumber: syz [ 24.756497][ T327] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 24.764968][ T64] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 24.775083][ T64] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input4 [ 24.784559][ T64] scsi host2: usb-storage 2-1:1.0 [ 25.021333][ T371] loop6: detected capacity change from 0 to 1 [ 25.131855][ T31] usb 2-1: USB disconnect, device number 2 [ 25.131894][ C0] input input4: can't resubmit intr, dummy_hcd.1-1/input0, retval -19 [ 25.158091][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.308082][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 25.314666][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.323093][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.333367][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.342984][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.353114][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.363813][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=3f19, bcdDevice= 0.40 [ 25.372953][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.381299][ T9] usb 4-1: Product: syz [ 25.385484][ T9] usb 4-1: Manufacturer: syz [ 25.390261][ T9] usb 4-1: SerialNumber: syz [ 25.601499][ T9] usb 4-1: cannot find UAC_HEADER [ 25.614714][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.629361][ T9] usb 4-1: USB disconnect, device number 2 [ 25.643766][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.907864][ T383] .30: renamed from bond_slave_0 [ 25.988088][ T64] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.137209][ T399] ptp ptp0: max value is 20 [ 26.150428][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.159401][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.169552][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 26.178766][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.193026][ T64] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 26.202439][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 26.211005][ T64] usb 2-1: Product: syz [ 26.215281][ T64] usb 2-1: Manufacturer: syz [ 26.222158][ T64] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 26.228706][ T403] coredump: 35(syz.3.34): Core dump to |“¯¤ disabled [ 26.258092][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.410507][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 26.423070][ T9] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 26.433283][ T64] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 26.442189][ T9] usb 3-1: Product: syz [ 26.446383][ T9] usb 3-1: Manufacturer: syz [ 26.451507][ T64] usb 2-1: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1). [ 26.460575][ T9] usb 3-1: SerialNumber: syz [ 26.465525][ T64] usb 2-1: No streaming interface found for terminal 2. [ 26.472795][ T9] usb 3-1: config 0 descriptor?? [ 26.481977][ T64] usb 2-1: USB disconnect, device number 3 [ 26.658077][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.809025][ T31] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 26.817249][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.827393][ T31] usb 4-1: config 0 has no interface number 0 [ 26.833500][ T31] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 26.843321][ T31] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 26.857511][ T31] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 26.866583][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.874597][ T31] usb 4-1: Product: syz [ 26.878794][ T31] usb 4-1: Manufacturer: syz [ 26.883384][ T31] usb 4-1: SerialNumber: syz [ 26.888572][ T31] usb 4-1: config 0 descriptor?? [ 26.936128][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 26.936158][ T36] audit: type=1400 audit(1793152873.500:165): avc: denied { mount } for pid=418 comm="syz.1.41" name="/" dev="configfs" ino=2369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.964723][ T36] audit: type=1400 audit(1793152873.500:166): avc: denied { search } for pid=418 comm="syz.1.41" name="/" dev="configfs" ino=2369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.986578][ T36] audit: type=1400 audit(1793152873.520:167): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.096620][ T31] usb 4-1: USB disconnect, device number 3 [ 27.198089][ T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.225390][ T311] scsi host1: usb-storage 1-1:1.0 [ 27.242039][ T311] usb 1-1: USB disconnect, device number 2 [ 27.253353][ T36] audit: type=1400 audit(1793152873.820:168): avc: denied { relabelfrom } for pid=423 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 27.280691][ T36] audit: type=1400 audit(1793152873.820:169): avc: denied { relabelto } for pid=423 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 27.361694][ T36] audit: type=1400 audit(1793152873.930:170): avc: denied { mount } for pid=429 comm="syz.0.46" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.383752][ T36] audit: type=1400 audit(1793152873.930:171): avc: denied { search } for pid=429 comm="syz.0.46" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 27.384621][ T64] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 27.405238][ T36] audit: type=1400 audit(1793152873.930:172): avc: denied { append } for pid=429 comm="syz.0.46" name="uprobe_events" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.415387][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.437235][ T36] audit: type=1400 audit(1793152873.930:173): avc: denied { open } for pid=429 comm="syz.0.46" path="/6/tracing/uprobe_events" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.449735][ T64] usb 2-1: config 0 descriptor?? [ 27.471557][ T36] audit: type=1400 audit(1793152873.990:174): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.878118][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.029171][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.039372][ T311] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.049789][ T311] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 28.058884][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.066850][ T311] usb 4-1: Product: syz [ 28.071024][ T311] usb 4-1: Manufacturer: syz [ 28.075636][ T311] usb 4-1: SerialNumber: syz [ 28.080854][ T311] usb 4-1: config 0 descriptor?? [ 28.287651][ T311] usb 4-1: USB disconnect, device number 4 [ 28.827546][ T464] ======================================================= [ 28.827546][ T464] WARNING: The mand mount option has been deprecated and [ 28.827546][ T464] and is ignored by this kernel. Remove the mand [ 28.827546][ T464] option from the mount to silence this warning. [ 28.827546][ T464] ======================================================= [ 29.039403][ T311] usb 3-1: USB disconnect, device number 2 8[ 29.728599][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.889248][ T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 29.901705][ T311] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 29.911713][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.920570][ T311] usb 1-1: Product: syz [ 29.925138][ T311] usb 1-1: Manufacturer: syz [ 29.930313][ T311] usb 1-1: SerialNumber: syz [ 29.936213][ T546] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 29.978004][ T9] usb 2-1: USB disconnect, device number 4 [ 30.148379][ T311] usb 1-1: MIDIStreaming interface descriptor not found [ 30.158522][ T311] usb 1-1: USB disconnect, device number 3 [ 30.170670][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.211633][ T590] process 'syz.2.105' launched './file0' with NULL argv: empty string added syzkaller syzkaller login: [ 30.258544][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.269260][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.277469][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.285863][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.294460][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.302849][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.312332][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.324371][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.332704][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.340968][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.349189][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.357382][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.365694][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.373859][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.382072][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.390224][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.398388][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.406518][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.414675][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.422832][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.430973][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.439147][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.447264][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.456191][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.464345][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.472497][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.480656][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.488808][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.496934][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.505073][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.513223][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.521367][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.529517][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.537639][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.545800][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.553949][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.562094][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.570248][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.578391][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.586518][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.594661][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.602810][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.610969][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.619116][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.627226][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.635366][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.643495][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.651652][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.659802][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.668267][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.673418][ T597] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.676436][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.697524][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.705955][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.714156][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.722507][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.731022][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.739262][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.747567][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.755765][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.763948][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.772106][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.780297][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.788458][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.796593][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.806890][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.05 Device [syz1] on syz1 [ 30.864413][ T601] fido_id[601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.280972][ T687] sit: non-ECT from 0.0.0.0 with TOS=0xcd [ 31.328234][ T311] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 31.438109][ T312] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 31.479050][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.491154][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.503114][ T311] usb 4-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 31.513124][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.522547][ T311] usb 4-1: config 0 descriptor?? [ 31.528239][ T670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.599040][ T312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.611214][ T312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 31.623137][ T312] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 31.635046][ T312] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 31.648114][ T312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.658089][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.658114][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.666323][ T312] usb 1-1: Product: syz [ 31.666341][ T312] usb 1-1: Manufacturer: syz [ 31.684736][ T312] usb 1-1: SerialNumber: syz [ 31.690713][ T681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.818077][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 31.824821][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 31.837761][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.849189][ T9] usb 2-1: config 0 has no interface number 0 [ 31.857644][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 31.867652][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.876530][ T9] usb 2-1: Product: syz [ 31.881106][ T9] usb 2-1: Manufacturer: syz [ 31.886197][ T9] usb 2-1: SerialNumber: syz [ 31.891947][ T9] usb 2-1: config 0 descriptor?? [ 31.898942][ T9] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 31.906111][ T9] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 31.914034][ T681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.914791][ T9] usb 2-1: No valid video chain found. [ 31.922157][ T681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.940903][ T311] lenovo 0003:04B3:3109.0002: No inputs registered, leaving [ 31.949460][ T311] lenovo 0003:04B3:3109.0002: hidraw0: USB HID v0.00 Device [HID 04b3:3109] on usb-dummy_hcd.3-1/input0 [ 32.105251][ T9] usb 2-1: USB disconnect, device number 5 [ 32.139484][ T311] usb 4-1: USB disconnect, device number 5 [ 32.538954][ T681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.546896][ T681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.616943][ T700] capability: warning: `syz.1.154' uses deprecated v2 capabilities in a way that may be insecure [ 32.675437][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 32.675453][ T36] audit: type=1400 audit(1793152879.240:232): avc: denied { bind } for pid=711 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.710467][ T36] audit: type=1400 audit(1793152879.240:233): avc: denied { name_bind } for pid=711 comm="syz.1.160" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 32.733212][ T36] audit: type=1400 audit(1793152879.240:234): avc: denied { node_bind } for pid=711 comm="syz.1.160" saddr=fc00:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 32.758474][ T312] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 32.765568][ T312] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 32.774564][ T36] audit: type=1400 audit(1793152879.310:235): avc: denied { setopt } for pid=724 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.796866][ T312] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 32.820002][ T36] audit: type=1400 audit(1793152879.380:236): avc: denied { checkpoint_restore } for pid=733 comm="syz.2.171" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.937355][ T36] audit: type=1400 audit(1793152879.500:237): avc: denied { setopt } for pid=741 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.959001][ T360] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 32.967893][ T312] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 32.976823][ T312] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 32.992056][ T312] usb 1-1: USB disconnect, device number 4 [ 33.008380][ T312] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 33.022496][ T36] audit: type=1400 audit(1793152879.590:238): avc: denied { bind } for pid=747 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.044288][ T36] audit: type=1400 audit(1793152879.590:239): avc: denied { name_bind } for pid=747 comm="syz.1.177" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 33.067323][ T36] audit: type=1400 audit(1793152879.590:240): avc: denied { node_bind } for pid=747 comm="syz.1.177" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 33.102946][ T36] audit: type=1400 audit(1793153135.671:241): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.119373][ T360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.126306][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.139196][ T360] usb 4-1: not running at top speed; connect to a high speed hub [ 33.151750][ T360] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 4 [ 33.163846][ T360] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 4 [ 33.178205][ T360] usb 4-1: string descriptor 0 read error: -22 [ 33.185038][ T360] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 33.195021][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.288077][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 33.294739][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.306873][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.317607][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.327562][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.336998][ T311] usb 3-1: config 0 descriptor?? [ 33.343527][ T311] hub 3-1:0.0: USB hub found [ 33.543916][ T311] hub 3-1:0.0: 1 port detected [ 33.768077][ T312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.808691][ T360] usb 4-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 33.816952][ T360] usb 4-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 33.829617][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.833361][ T360] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.861736][ T360] usb 4-1: USB disconnect, device number 6 [ 33.918091][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 33.926341][ T312] usb 1-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 33.936591][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.947826][ T312] usb 1-1: Product: syz [ 33.952546][ T311] usb 3-1: USB disconnect, device number 3 [ 33.958979][ T312] usb 1-1: Manufacturer: syz [ 33.964009][ T312] usb 1-1: SerialNumber: syz [ 34.174668][ T312] usb 1-1: MIDIStreaming interface descriptor not found [ 34.184449][ T312] usb 1-1: USB disconnect, device number 5 [ 34.459358][ T774] coredump: 108(syz.2.189): Core dump to |“¯¤ disabled [ 34.618181][ T312] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.768124][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 35.003941][ T312] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 35.013038][ T312] usb 4-1: config 0 has no interface number 0 [ 35.020131][ T312] usb 4-1: config 0 interface 184 has no altsetting 0 [ 35.029344][ T312] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.039338][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.048162][ T312] usb 4-1: Product: syz [ 35.052800][ T312] usb 4-1: Manufacturer: syz [ 35.057908][ T312] usb 4-1: SerialNumber: syz [ 35.063721][ T312] usb 4-1: config 0 descriptor?? [ 35.069948][ T312] smsc75xx v1.0.0 [ 35.258931][ T801] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 35.269320][ T801] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 35.278227][ T801] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 35.286967][ T801] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 35.295907][ T801] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 35.304595][ T801] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 35.313221][ T801] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 35.321805][ T801] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 35.579902][ T815] zero sized request [ 35.688654][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 35.700754][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.912048][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 35.924085][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 35.934704][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 35.945145][ T312] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 35.955540][ T312] usb 4-1: USB disconnect, device number 7 [ 35.968281][ T360] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.128106][ T360] usb 1-1: Using ep0 maxpacket: 32 [ 36.134913][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.146956][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.157725][ T360] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.167715][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.177003][ T360] usb 1-1: config 0 descriptor?? [ 36.183415][ T360] hub 1-1:0.0: USB hub found [ 36.290917][ T839] rust_binder: 838:839 got transaction to invalid handle 1 [ 36.298902][ T839] rust_binder: 838:839 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 36.311178][ T839] rust_binder: 838: undelivered TRANSACTION_ERROR: 29201 [ 36.336269][ T843] loop5: detected capacity change from 0 to 7 [ 36.360305][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.370946][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.381020][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 36.390136][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.392581][ T360] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 36.400200][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 36.400499][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.427231][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 36.445036][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.455117][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 36.464474][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.474584][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 36.475764][ T852] FAULT_INJECTION: forcing a failure. [ 36.475764][ T852] name fail_futex, interval 1, probability 0, space 0, times 1 [ 36.497486][ T852] CPU: 0 UID: 0 PID: 852 Comm: syz.3.221 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 36.497514][ T852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.497532][ T852] Call Trace: [ 36.497538][ T852] [ 36.497545][ T852] __dump_stack+0x21/0x30 [ 36.497575][ T852] dump_stack_lvl+0x140/0x1c0 [ 36.497597][ T852] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.497623][ T852] dump_stack+0x19/0x20 [ 36.497643][ T852] should_fail_ex+0x3c2/0x510 [ 36.497659][ T852] should_fail+0xf/0x20 [ 36.497674][ T852] get_futex_key+0x178/0x940 [ 36.497689][ T852] ? __cfi_get_futex_key+0x10/0x10 [ 36.497705][ T852] futex_wake+0x150/0x950 [ 36.497724][ T852] ? __cfi_futex_wake+0x10/0x10 [ 36.497747][ T852] do_futex+0x37d/0x510 [ 36.497765][ T852] ? __cfi_do_futex+0x10/0x10 [ 36.497782][ T852] ? __kasan_slab_free+0x6a/0x80 [ 36.497803][ T852] __se_sys_futex+0x13c/0x320 [ 36.497822][ T852] ? __x64_sys_futex+0x110/0x110 [ 36.497838][ T852] ? do_execveat_common+0x6e5/0xae0 [ 36.497859][ T852] ? getname_flags+0x203/0x6b0 [ 36.497881][ T852] __x64_sys_futex+0xe9/0x110 [ 36.497898][ T852] x64_sys_call+0x227f/0x2ee0 [ 36.497914][ T852] do_syscall_64+0x57/0xf0 [ 36.497932][ T852] ? clear_bhb_loop+0x50/0xa0 [ 36.497953][ T852] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.497975][ T852] RIP: 0033:0x7fda4259f559 [ 36.498001][ T852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.498016][ T852] RSP: 002b:00007fda4344d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.498040][ T852] RAX: ffffffffffffffda RBX: 00007fda42825fa8 RCX: 00007fda4259f559 [ 36.498054][ T852] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda42825fac [ 36.498065][ T852] RBP: 00007fda42825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 36.498077][ T852] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 36.498088][ T852] R13: 00007fda42826038 R14: 00007ffdd6f969c0 R15: 00007ffdd6f96aa8 [ 36.498105][ T852] [ 36.727901][ T360] usbhid 1-1:0.0: can't add hid device: -71 [ 36.769185][ T360] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.780929][ T860] syzkaller1: entered promiscuous mode [ 36.786928][ T860] syzkaller1: entered allmulticast mode [ 36.798847][ T360] usb 1-1: USB disconnect, device number 6 [ 37.018125][ T691] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.179151][ T691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.191331][ T691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.202163][ T691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.216431][ T691] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.226530][ T691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.244907][ T691] usb 3-1: config 0 descriptor?? [ 37.722515][ T691] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 37.738371][ T691] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 37.988660][ T691] usb 3-1: USB disconnect, device number 4 [ 38.498094][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.659197][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.670393][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 38.681001][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.696327][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=a0.27 [ 38.706368][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.715246][ T10] usb 4-1: Product: syz [ 38.719828][ T10] usb 4-1: Manufacturer: syz [ 38.724858][ T10] usb 4-1: SerialNumber: syz [ 38.730399][ T10] usb 4-1: config 0 descriptor?? [ 38.975362][ T979] sock: sock_timestamping_bind_phc: sock not bind to device [ 39.281465][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 39.281480][ T36] audit: type=1400 audit(1793153909.850:260): avc: denied { mount } for pid=993 comm="syz.0.285" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.312534][ T36] audit: type=1400 audit(1793153909.892:261): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.629889][ T691] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.792965][ T691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.805114][ T691] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 39.808028][ T36] audit: type=1400 audit(1793153910.406:262): avc: granted { setsecparam } for pid=1020 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 39.815275][ T691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.847491][ T1023] mmap: syz.1.297 (1023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.950975][ T36] audit: type=1400 audit(1793153910.553:263): avc: denied { read } for pid=1031 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.998970][ T1033] netlink: 112 bytes leftover after parsing attributes in process `syz.1.301'. [ 40.008955][ T1033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.301'. [ 40.230003][ T691] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 40.241059][ T691] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 40.254261][ T691] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0004/input/input7 [ 40.274350][ T36] audit: type=1400 audit(1793153910.889:264): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=506 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.298798][ T36] audit: type=1400 audit(1793153910.889:265): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=506 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.325636][ T36] audit: type=1400 audit(1793153910.952:266): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=506 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.651140][ T691] usb 3-1: USB disconnect, device number 5 [ 41.181689][ T360] usb 4-1: USB disconnect, device number 8 [ 159.305767][ T37] INFO: task syz-executor:286 blocked for more than 122 seconds. [ 159.314319][ T37] Not tainted syzkaller #0 [ 159.319724][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 159.329250][ T37] task:syz-executor state:D stack:0 pid:286 tgid:286 ppid:285 flags:0x00000000 [ 159.340434][ T37] Call Trace: [ 159.344041][ T37] [ 159.347256][ T37] __schedule+0x16fe/0x23d0 [ 159.352245][ T37] ? __sched_text_start+0x10/0x10 [ 159.357770][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 159.363619][ T37] ? __kasan_check_write+0x18/0x20 [ 159.369263][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 159.375326][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 159.381834][ T37] ? folio_mark_accessed+0x35f/0x620 [ 159.387640][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 159.394427][ T37] schedule+0xc1/0x170 [ 159.398896][ T37] io_schedule+0x85/0x150 [ 159.403661][ T37] bit_wait_io+0x17/0xd0 [ 159.408320][ T37] __wait_on_bit+0xb3/0x2e0 [ 159.413277][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 159.418739][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 159.424733][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 159.430160][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 159.436726][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 159.442744][ T37] do_get_write_access+0x558/0xd70 [ 159.448375][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 159.454927][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 159.461747][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 159.469103][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 159.474604][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 159.480811][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 159.486924][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 159.492811][ T37] ext4_dirty_inode+0xc9/0x110 [ 159.498037][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 159.503939][ T37] __mark_inode_dirty+0x251/0xc50 [ 159.509458][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 159.515564][ T37] ? avc_has_perm_noaudit+0x289/0x360 [ 159.521456][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 159.527838][ T37] ? _raw_spin_unlock_bh+0x54/0x60 [ 159.533465][ T37] file_update_time+0x1d3/0x210 [ 159.538771][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 159.544289][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 159.550278][ T37] do_wp_page+0xb40/0x2e80 [ 159.555137][ T37] ? __check_object_size+0xdc/0x870 [ 159.560842][ T37] ? sock_read_iter+0x25e/0x320 [ 159.566171][ T37] ? folio_put+0x90/0x90 [ 159.570849][ T37] ? __kasan_check_write+0x18/0x20 [ 159.576457][ T37] ? _raw_spin_lock+0x92/0x120 [ 159.581702][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 159.587409][ T37] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 159.593732][ T37] handle_mm_fault+0x1017/0x1ba0 [ 159.599178][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 159.604970][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 159.610748][ T37] ? __kasan_check_read+0x15/0x20 [ 159.616272][ T37] do_user_addr_fault+0x951/0x1230 [ 159.622028][ T37] ? __cfi_ksys_read+0x10/0x10 [ 159.627275][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 159.633946][ T37] exc_page_fault+0x58/0xc0 [ 159.638906][ T37] asm_exc_page_fault+0x2b/0x30 [ 159.644219][ T37] RIP: 0033:0x7f298007dad6 [ 159.649066][ T37] RSP: 002b:00007ffe49bb4970 EFLAGS: 00010246 [ 159.655727][ T37] RAX: 00007f297e038000 RBX: 0000555571b8c590 RCX: 0000000000000000 [ 159.664494][ T37] RDX: 0000000000000303 RSI: 0000555571b84c28 RDI: 0000000000000001 [ 159.673274][ T37] RBP: 00007ffe49bb4e70 R08: 0000555571b84c58 R09: 0000000000000049 [ 159.682058][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe49bb4cb0 [ 159.690844][ T37] R13: 00007ffe49bb4aa0 R14: 585858582e7a7973 R15: 00007ffe49bb49f0 [ 159.699676][ T37] [ 159.703002][ T37] INFO: task syz.1.303:1036 blocked for more than 123 seconds. [ 159.711302][ T37] Not tainted syzkaller #0 [ 159.716733][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 159.726291][ T37] task:syz.1.303 state:D stack:0 pid:1036 tgid:1036 ppid:295 flags:0x00000004 [ 159.737475][ T37] Call Trace: [ 159.741077][ T37] [ 159.744296][ T37] __schedule+0x16fe/0x23d0 [ 159.749245][ T37] ? __sched_text_start+0x10/0x10 [ 159.754812][ T37] ? __kasan_check_write+0x18/0x20 [ 159.760429][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 159.766642][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 159.773379][ T37] ? folio_mark_accessed+0x35f/0x620 [ 159.779190][ T37] schedule+0xc1/0x170 [ 159.783667][ T37] io_schedule+0x85/0x150 [ 159.788448][ T37] bit_wait_io+0x17/0xd0 [ 159.793146][ T37] __wait_on_bit+0xb3/0x2e0 [ 159.798103][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 159.803550][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 159.809575][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 159.815000][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 159.821601][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 159.827604][ T37] do_get_write_access+0x558/0xd70 [ 159.833233][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 159.839833][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 159.846580][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 159.853939][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 159.859479][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 159.865652][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 159.871795][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 159.877713][ T37] ext4_dirty_inode+0xc9/0x110 [ 159.882930][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 159.888841][ T37] __mark_inode_dirty+0x251/0xc50 [ 159.894362][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 159.900471][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 159.906868][ T37] ? __kasan_check_read+0x15/0x20 [ 159.912372][ T37] file_update_time+0x1d3/0x210 [ 159.917704][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 159.923249][ T37] ? __kasan_check_write+0x18/0x20 [ 159.928879][ T37] ? folio_unlock+0x137/0x1b0 [ 159.934022][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 159.940076][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 159.946003][ T37] do_pte_missing+0x12c1/0x4440 [ 159.951334][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 159.956905][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 159.963396][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 159.968801][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 159.975662][ T37] handle_mm_fault+0x1189/0x1ba0 [ 159.981093][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 159.986877][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 159.992614][ T37] do_user_addr_fault+0x951/0x1230 [ 159.998221][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 160.004910][ T37] exc_page_fault+0x58/0xc0 [ 160.009875][ T37] asm_exc_page_fault+0x2b/0x30 [ 160.015192][ T37] RIP: 0033:0x7fc8ae86cea3 [ 160.020087][ T37] RSP: 002b:00007ffc89daef40 EFLAGS: 00010246 [ 160.026747][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ee64000 [ 160.035520][ T37] RDX: 0000001b2ee24000 RSI: 0000000000400000 RDI: 00007fc8aebe7708 [ 160.044299][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.053092][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 160.061864][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc89daf1d0 [ 160.070634][ T37] [ 160.073957][ T37] NMI backtrace for cpu 1 [ 160.073965][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 160.073981][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.073988][ T37] Call Trace: [ 160.073991][ T37] [ 160.073995][ T37] __dump_stack+0x21/0x30 [ 160.074014][ T37] dump_stack_lvl+0x140/0x1c0 [ 160.074027][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.074042][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 160.074053][ T37] dump_stack+0x19/0x20 [ 160.074066][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 160.074076][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 160.074086][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 160.074097][ T37] ? sched_show_task+0x380/0x540 [ 160.074111][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 160.074125][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 160.074138][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 160.074148][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 160.074161][ T37] cpumask_backtrace+0x1f/0x30 [ 160.074171][ T37] watchdog+0xe45/0xf90 [ 160.074183][ T37] ? __kasan_check_write+0x18/0x20 [ 160.074198][ T37] ? __cfi_watchdog+0x10/0x10 [ 160.074210][ T37] ? __kasan_check_read+0x15/0x20 [ 160.074222][ T37] ? __kthread_parkme+0x12f/0x180 [ 160.074233][ T37] kthread+0x2c4/0x360 [ 160.074244][ T37] ? __cfi_watchdog+0x10/0x10 [ 160.074257][ T37] ? __cfi_kthread+0x10/0x10 [ 160.074268][ T37] ret_from_fork+0x64/0xa0 [ 160.074277][ T37] ? __cfi_kthread+0x10/0x10 [ 160.074288][ T37] ret_from_fork_asm+0x1a/0x30 [ 160.074299][ T37] [ 160.074303][ T37] Sending NMI from CPU 1 to CPUs 0: [ 160.255092][ C0] NMI backtrace for cpu 0 [ 160.255118][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 160.255136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.255145][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 160.255169][ C0] Code: cc cc cc cc cc cc cc b8 1a 90 35 dd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 59 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 160.255180][ C0] RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 [ 160.255193][ C0] RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85a9053d [ 160.255203][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000009803c [ 160.255213][ C0] RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df [ 160.255223][ C0] R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 [ 160.255232][ C0] R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886da8e8 [ 160.255243][ C0] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 160.255254][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.255264][ C0] CR2: 00007f4febba7e80 CR3: 000000010cfd8000 CR4: 00000000003526b0 [ 160.255276][ C0] Call Trace: [ 160.255282][ C0] [ 160.255288][ C0] default_idle+0x17/0x30 [ 160.255301][ C0] arch_cpu_idle+0xd/0x20 [ 160.255313][ C0] default_idle_call+0x3e/0x80 [ 160.255324][ C0] do_idle+0x1df/0x570 [ 160.255340][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 160.255356][ C0] cpu_startup_entry+0x47/0x60 [ 160.255371][ C0] rest_init+0x10b/0x130 [ 160.255383][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 160.255399][ C0] start_kernel+0x46a/0x4bb [ 160.255416][ C0] x86_64_start_reservations+0x2e/0x30 [ 160.255429][ C0] x86_64_start_kernel+0x6a/0x7b [ 160.255441][ C0] common_startup_64+0x13b/0x157 [ 160.255461][ C0]