last executing test programs: 4.538421698s ago: executing program 0 (id=833): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x604, 0x0) 3.756974308s ago: executing program 3 (id=842): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_add_dev(r5, 0x0, r7, 0x0, &(0x7f0000000140)={0x2e, 0x4, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x72d1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x1, 0xaef, 0x0, 0x0, 0x1000, 0xb, r2, 0x0, 0x60}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r9, r10, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1045, 0x20, 0x1, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x338, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x1, 0xf4}}], 0x1, 0x0, 0x0) 2.913407294s ago: executing program 3 (id=847): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000280)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r0, 0x3) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='loginuid\x00') 2.899961685s ago: executing program 3 (id=848): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f00000001c0)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000640)=@ll={0x11, 0x3, r1, 0x1, 0xe4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000700)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000740)="2cf2565b0e508224b706a643e9a8c932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777439cc590257a0641579678f72a", 0x34}, {0x0}], 0x3}, 0x40400) 2.887760637s ago: executing program 3 (id=849): r0 = fsopen(&(0x7f0000000800)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x8800, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r0]) 2.846722521s ago: executing program 3 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/can/rcvlist_all\x00', 0x0, 0x0) read(r0, &(0x7f00000006c0)=""/4096, 0x1000) 2.834167692s ago: executing program 3 (id=852): r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x4, 0x800) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0xce, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.519608685s ago: executing program 0 (id=866): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000"], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 1.449001283s ago: executing program 1 (id=869): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0d1, 0x4000, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040001, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xfffffffb}}], 0x1, 0x0, 0x0) 1.358969382s ago: executing program 1 (id=870): r0 = fsopen(&(0x7f0000000800)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x8800, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r0]) 1.344914353s ago: executing program 1 (id=871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000100070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c000380480000800800034000000002"], 0x128}}, 0x0) 1.337522324s ago: executing program 1 (id=873): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000f0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000007030000000000000000000a0000090900010073797a30"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c00030073797a30"], 0x120}}, 0x0) 1.292623069s ago: executing program 1 (id=874): prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.292428209s ago: executing program 1 (id=875): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x604, 0x0) 1.140337834s ago: executing program 2 (id=881): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x3, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100"], 0x18}}], 0x2, 0x0) 1.132999535s ago: executing program 2 (id=882): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 1.093932139s ago: executing program 2 (id=883): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000600), 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000640)={0x1, 0x1, 0x0, &(0x7f0000000680), 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000740)=0x10000001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x2}) 1.093649269s ago: executing program 2 (id=884): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x100}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) 1.093559729s ago: executing program 2 (id=885): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) write(r0, &(0x7f00000001c0)='0 0', 0x3) 1.093113139s ago: executing program 2 (id=886): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ec13060000000000000109022400010000600209040005020350840009210000050122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000780), 0xa, 0x62080) 126.274857ms ago: executing program 0 (id=887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000007c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 59.459564ms ago: executing program 0 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 10.999058ms ago: executing program 0 (id=889): r0 = fsopen(&(0x7f0000000800)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x8800, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r0]) 0s ago: executing program 0 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000a80)='./myproc\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./myproc/interrupts\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000bc0)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1, 0x1, 0x80000002) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.852884][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 14.852901][ T36] audit: type=1400 audit(1794419995.290:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.856924][ T36] audit: type=1400 audit(1794419995.290:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.859704][ T36] audit: type=1400 audit(1794419995.290:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[1493]" dev="pipefs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.862650][ T36] audit: type=1400 audit(1794419995.290:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.865139][ T36] audit: type=1400 audit(1794419995.290:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 21.754302][ T36] audit: type=1400 audit(1794420002.190:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.777255][ T36] audit: type=1400 audit(1794420002.220:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.778168][ T287] cgroup: Unknown subsys name 'net' [ 21.804962][ T36] audit: type=1400 audit(1794420002.240:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.805094][ T287] cgroup: Unknown subsys name 'devices' [ 21.931204][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.936828][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.089767][ T36] audit: type=1400 audit(1794420002.530:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.112985][ T36] audit: type=1400 audit(1794420002.530:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.137792][ T36] audit: type=1400 audit(1794420002.530:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.146052][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.170194][ T36] audit: type=1400 audit(1794420002.610:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.195628][ T36] audit: type=1400 audit(1794420002.610:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.259300][ T36] audit: type=1400 audit(1794420002.690:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.284860][ T36] audit: type=1400 audit(1794420002.690:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.285116][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.997506][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.019661][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.026788][ T294] bridge_slave_0: entered allmulticast mode [ 23.033430][ T294] bridge_slave_0: entered promiscuous mode [ 23.039953][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.046994][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.054083][ T294] bridge_slave_1: entered allmulticast mode [ 23.060256][ T294] bridge_slave_1: entered promiscuous mode [ 23.184650][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.191774][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.198829][ T298] bridge_slave_0: entered allmulticast mode [ 23.205168][ T298] bridge_slave_0: entered promiscuous mode [ 23.211726][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.218761][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.225868][ T298] bridge_slave_1: entered allmulticast mode [ 23.232092][ T298] bridge_slave_1: entered promiscuous mode [ 23.240020][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.247051][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.254119][ T299] bridge_slave_0: entered allmulticast mode [ 23.260281][ T299] bridge_slave_0: entered promiscuous mode [ 23.269151][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.276221][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.283272][ T299] bridge_slave_1: entered allmulticast mode [ 23.289440][ T299] bridge_slave_1: entered promiscuous mode [ 23.330897][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.337954][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.345038][ T300] bridge_slave_0: entered allmulticast mode [ 23.351231][ T300] bridge_slave_0: entered promiscuous mode [ 23.357851][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.364909][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.371980][ T300] bridge_slave_1: entered allmulticast mode [ 23.378088][ T300] bridge_slave_1: entered promiscuous mode [ 23.416888][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.423975][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.431311][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.438336][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.515243][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.522327][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.529611][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.536632][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.544686][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.551733][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.558980][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.566016][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.577160][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.584428][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.592012][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.599126][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.606607][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.613809][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.626180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.633268][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.642146][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.649191][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.699277][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.706368][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.719962][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.727008][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.735310][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.742351][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.751542][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.758568][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.779701][ T294] veth0_vlan: entered promiscuous mode [ 23.788889][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.795955][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.803705][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.810743][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.842988][ T294] veth1_macvtap: entered promiscuous mode [ 23.851543][ T300] veth0_vlan: entered promiscuous mode [ 23.870305][ T299] veth0_vlan: entered promiscuous mode [ 23.881553][ T300] veth1_macvtap: entered promiscuous mode [ 23.912459][ T299] veth1_macvtap: entered promiscuous mode [ 23.929050][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.945016][ T298] veth0_vlan: entered promiscuous mode [ 23.966803][ T298] veth1_macvtap: entered promiscuous mode [ 24.018516][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.306228][ T335] kvm: kvm [334]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xe299 [ 24.374904][ T335] kvm: kvm [334]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xa37 [ 24.398249][ T335] kvm: kvm [334]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x18a3 [ 24.424458][ T335] kvm: MONITOR instruction emulated as NOP! [ 24.470633][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.639431][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 24.651483][ T312] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 24.660232][ T312] usb 3-1: config 0 has no interface number 0 [ 24.666621][ T312] usb 3-1: config 0 interface 184 has no altsetting 0 [ 24.684739][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 24.696789][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.708494][ T312] usb 3-1: Product: syz [ 24.713225][ T312] usb 3-1: Manufacturer: syz [ 24.718559][ T312] usb 3-1: SerialNumber: syz [ 24.726150][ T312] usb 3-1: config 0 descriptor?? [ 24.734894][ T312] smsc75xx v1.0.0 [ 24.744059][ T344] printk: legacy console [ttyS0] disabled [ 24.794899][ T344] printk: legacy console [ttyS0] enabled [ 24.945695][ T352] ======================================================= [ 24.945695][ T352] WARNING: The mand mount option has been deprecated and [ 24.945695][ T352] and is ignored by this kernel. Remove the mand [ 24.945695][ T352] option from the mount to silence this warning. [ 24.945695][ T352] ======================================================= [ 24.993785][ T354] tipc: Started in network mode [ 24.998879][ T354] tipc: Node identity 96a3b965a712, cluster identity 4711 [ 25.006699][ T354] tipc: Enabled bearer , priority 0 [ 25.026247][ T354] syzkaller0: entered promiscuous mode [ 25.032781][ T354] syzkaller0: entered allmulticast mode [ 25.041604][ T354] tipc: Resetting bearer [ 25.048548][ T353] tipc: Resetting bearer [ 25.055051][ T353] tipc: Disabling bearer [ 25.092451][ T359] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 25.106982][ T359] GUP no longer grows the stack in syz.1.17 (359): 200000004000-20000000a000 (200000002000) [ 25.117275][ T359] CPU: 0 UID: 0 PID: 359 Comm: syz.1.17 Not tainted syzkaller #0 ef3fe522eb78c0a5ba4bdac8f3746cbd31b933a5 [ 25.117303][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 25.117325][ T359] Call Trace: [ 25.117331][ T359] [ 25.117338][ T359] __dump_stack+0x21/0x30 [ 25.117355][ T359] dump_stack_lvl+0x140/0x1c0 [ 25.117367][ T359] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.117387][ T359] dump_stack+0x19/0x20 [ 25.117404][ T359] __get_user_pages+0x1e20/0x22d0 [ 25.117430][ T359] ? populate_vma_page_range+0x220/0x220 [ 25.117453][ T359] get_user_pages_remote+0x377/0xb80 [ 25.117467][ T359] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 25.117483][ T359] ? __cfi_get_user_pages_remote+0x10/0x10 [ 25.117496][ T359] __access_remote_vm+0x1de/0x630 [ 25.117508][ T359] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 25.117526][ T359] ? access_remote_vm+0x60/0x60 [ 25.117546][ T359] ? _raw_spin_lock+0x92/0x120 [ 25.117565][ T359] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.117585][ T359] access_remote_vm+0x39/0x60 [ 25.117601][ T359] proc_pid_cmdline_read+0x4c2/0xbf0 [ 25.117615][ T359] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 25.117627][ T359] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 25.117639][ T359] vfs_readv+0x5e7/0xa00 [ 25.117651][ T359] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 25.117667][ T359] ? do_readv+0x2e0/0x2e0 [ 25.117693][ T359] __x64_sys_preadv+0x19f/0x2c0 [ 25.117711][ T359] ? __cfi___x64_sys_preadv+0x10/0x10 [ 25.117738][ T359] ? switch_fpu_return+0x12/0x20 [ 25.117753][ T359] x64_sys_call+0x1ee9/0x2ee0 [ 25.117765][ T359] do_syscall_64+0x57/0xf0 [ 25.117776][ T359] ? clear_bhb_loop+0x50/0xa0 [ 25.117791][ T359] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.117807][ T359] RIP: 0033:0x7f29c1fa8f19 [ 25.117831][ T359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.117846][ T359] RSP: 002b:00007f29c2e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 25.117871][ T359] RAX: ffffffffffffffda RBX: 00007f29c2225fa0 RCX: 00007f29c1fa8f19 [ 25.117885][ T359] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 25.117892][ T359] RBP: 00007f29c2037f6d R08: 00000000fffffff9 R09: 0000000000000000 [ 25.117900][ T359] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 25.117907][ T359] R13: 00007f29c2226038 R14: 00007f29c2225fa0 R15: 00007ffff2d570a8 [ 25.117917][ T359] [ 25.537852][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 25.572736][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 26.048877][ T390] caif0: tun_chr_ioctl cmd 2148553947 [ 26.304884][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 26.316889][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 26.326819][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 26.336928][ T312] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 26.348175][ T312] usb 3-1: USB disconnect, device number 2 [ 26.779386][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.789385][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.834613][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 26.834629][ T36] audit: type=1400 audit(1794420007.270:170): avc: denied { read write } for pid=410 comm="syz.2.37" name="usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 26.864205][ T36] audit: type=1400 audit(1794420007.270:171): avc: denied { open } for pid=410 comm="syz.2.37" path="/dev/usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 26.959379][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 26.965507][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.975413][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.985140][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.997215][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.010020][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.019824][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.032902][ T66] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.042002][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.051000][ T66] usb 1-1: config 0 descriptor?? [ 27.057100][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 27.067829][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 27.075974][ T9] usb 4-1: Product: syz [ 27.080155][ T9] usb 4-1: Manufacturer: syz [ 27.084741][ T9] usb 4-1: SerialNumber: syz [ 27.299420][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 27.466201][ T66] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 27.482050][ T66] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 27.507639][ T31] usb 4-1: USB disconnect, device number 2 [ 27.509521][ T36] audit: type=1400 audit(1794420007.940:172): avc: denied { read write } for pid=405 comm="syz.3.35" name="lp0" dev="devtmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 27.538372][ T31] usblp0: removed [ 27.540106][ T36] audit: type=1400 audit(1794420007.940:173): avc: denied { open } for pid=405 comm="syz.3.35" path="/dev/usb/lp0" dev="devtmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 27.565792][ T36] audit: type=1400 audit(1794420007.940:174): avc: denied { ioctl } for pid=405 comm="syz.3.35" path="/dev/usb/lp0" dev="devtmpfs" ino=446 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 27.666704][ T66] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 27.675460][ T66] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 27.693067][ T66] microsoft 0003:045E:07DA.0001: no inputs found [ 27.700329][ T66] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 27.718076][ T66] usb 1-1: USB disconnect, device number 2 [ 27.823872][ T423] kvm: pic: non byte write [ 27.830375][ T423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 28.029165][ T36] audit: type=1400 audit(1794420008.460:175): avc: denied { mount } for pid=426 comm="syz.3.42" name="/" dev="ramfs" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 29.044541][ T36] audit: type=1400 audit(1794420009.480:176): avc: denied { mount } for pid=442 comm="syz.2.47" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 29.098010][ T36] audit: type=1400 audit(1794420009.520:177): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 29.311526][ T457] caif0: tun_chr_ioctl cmd 2148553947 [ 29.409429][ T395] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.580926][ T395] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.590662][ T395] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.600355][ T395] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.614554][ T395] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 29.623668][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 29.631788][ T395] usb 2-1: Product: syz [ 29.635958][ T395] usb 2-1: Manufacturer: syz [ 29.640587][ T395] usb 2-1: SerialNumber: syz [ 29.849003][ T395] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 30.052805][ T395] usb 2-1: USB disconnect, device number 2 [ 30.060524][ T395] usblp0: removed [ 30.109368][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.259389][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 30.270022][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.289352][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.299103][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.312102][ T66] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.321329][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.330467][ T66] usb 4-1: config 0 descriptor?? [ 30.907131][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 30.913165][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.930372][ T66] usb 4-1: USB disconnect, device number 3 [ 31.111602][ T36] audit: type=1400 audit(1794420011.550:178): avc: denied { read } for pid=478 comm="syz.1.62" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.132496][ T36] audit: type=1400 audit(1794420011.550:179): avc: denied { open } for pid=478 comm="syz.1.62" path="net:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.273191][ T491] kvm: kvm [490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 31.281940][ T491] kvm: kvm [490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 31.470676][ T498] kvm: kvm [496]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 31.479509][ T498] kvm: kvm [496]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 31.733597][ T519] kvm: kvm [518]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 31.742386][ T519] kvm: kvm [518]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 31.959379][ T395] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.990151][ T36] audit: type=1400 audit(1794420012.420:180): avc: denied { create } for pid=540 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.129367][ T395] usb 4-1: Using ep0 maxpacket: 32 [ 32.135734][ T395] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.144212][ T395] usb 4-1: config 0 has no interface number 0 [ 32.157390][ T395] usb 4-1: config 0 interface 184 has no altsetting 0 [ 32.172210][ T395] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 32.189384][ T395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.208955][ T395] usb 4-1: Product: syz [ 32.213417][ T36] audit: type=1400 audit(1794420012.640:181): avc: denied { setopt } for pid=540 comm="syz.0.88" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.239350][ T395] usb 4-1: Manufacturer: syz [ 32.249398][ T395] usb 4-1: SerialNumber: syz [ 32.259568][ T395] usb 4-1: config 0 descriptor?? [ 32.265400][ T395] smsc75xx v1.0.0 [ 32.549452][ T563] tipc: Started in network mode [ 32.554433][ T563] tipc: Node identity beaa1ab00aef, cluster identity 4711 [ 32.561793][ T563] tipc: Enabled bearer , priority 0 [ 32.569030][ T563] syzkaller0: entered promiscuous mode [ 32.574699][ T563] syzkaller0: entered allmulticast mode [ 32.581749][ T562] tipc: Resetting bearer [ 32.589382][ T562] tipc: Disabling bearer [ 32.661627][ T567] kvm: kvm [566]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 32.670654][ T567] kvm: kvm [566]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 32.822313][ T583] tipc: Enabled bearer , priority 0 [ 32.829628][ T583] syzkaller0: entered promiscuous mode [ 32.835213][ T583] syzkaller0: entered allmulticast mode [ 32.849892][ T582] tipc: Resetting bearer [ 32.861007][ T582] tipc: Disabling bearer [ 32.922273][ T587] kvm: kvm [586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 32.931258][ T587] kvm: kvm [586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 33.070897][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 33.082323][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.479376][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.496893][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 33.507872][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 33.517520][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 33.526955][ T395] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 33.536164][ T395] usb 4-1: USB disconnect, device number 4 [ 33.639360][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 33.645619][ T31] usb 2-1: config 0 has no interfaces? [ 33.651135][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.660258][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.668755][ T31] usb 2-1: config 0 descriptor?? [ 33.876782][ T413] usb 2-1: USB disconnect, device number 3 [ 33.950639][ T36] audit: type=1400 audit(1794420014.390:182): avc: denied { write } for pid=622 comm="syz.2.121" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.973732][ T36] audit: type=1400 audit(1794420014.390:183): avc: denied { map } for pid=622 comm="syz.2.121" path="/30/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.058657][ T628] printk: legacy console [ttyS0] disabled [ 34.965841][ T663] printk: legacy console [ttyS0] enabled [ 35.065773][ T36] audit: type=1400 audit(1794420015.500:184): avc: denied { search } for pid=674 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.156524][ T413] usb 2-1: USB disconnect, device number 4 [ 35.249363][ T66] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.399353][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 35.405571][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.416482][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.426239][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.439085][ T66] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.448196][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.456815][ T66] usb 3-1: config 0 descriptor?? [ 35.863599][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 35.870217][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.878834][ T66] usb 3-1: USB disconnect, device number 3 [ 36.044013][ T36] audit: type=1400 audit(1794420016.480:185): avc: denied { unlink } for pid=691 comm="syz.3.149" name="#5" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.066054][ T36] audit: type=1400 audit(1794420016.480:186): avc: denied { mount } for pid=691 comm="syz.3.149" name="/" dev="overlay" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.087853][ T36] audit: type=1400 audit(1794420016.490:187): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.389365][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.559357][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 36.565648][ T66] usb 4-1: config 0 has no interfaces? [ 36.571241][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.580347][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.799983][ T66] usb 4-1: config 0 descriptor?? [ 36.919647][ T66] usb 1-1: USB disconnect, device number 3 [ 37.022156][ T409] usb 4-1: USB disconnect, device number 5 [ 37.553631][ T751] tipc: Enabling of bearer rejected, failed to enable media [ 37.590454][ T749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 37.616185][ T749] kvm: pic: non byte write [ 37.812007][ T777] tipc: Enabling of bearer rejected, failed to enable media [ 37.940011][ T395] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.039254][ T796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 38.091887][ T395] usb 4-1: Using ep0 maxpacket: 32 [ 38.098381][ T395] usb 4-1: config 0 has no interfaces? [ 38.104097][ T395] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.123450][ T395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.133861][ T395] usb 4-1: config 0 descriptor?? [ 38.148821][ T36] audit: type=1400 audit(1794420018.580:188): avc: denied { read } for pid=800 comm="syz.0.194" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.171683][ T36] audit: type=1400 audit(1794420018.580:189): avc: denied { open } for pid=800 comm="syz.0.194" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.373736][ T395] usb 4-1: USB disconnect, device number 6 [ 38.608800][ T805] tipc: Enabling of bearer rejected, failed to enable media [ 38.754849][ T814] kvm_intel: kvm [813]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xfd0b [ 38.765192][ T814] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed [ 38.765209][ T814] kvm: kvm [813]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc106 [ 38.781767][ T814] kvm: kvm [813]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xfaec [ 38.792087][ T814] kvm: kvm [813]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf10 [ 38.883690][ T819] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 38.904585][ T826] syzkaller0: entered promiscuous mode [ 38.917018][ T826] syzkaller0: entered allmulticast mode [ 39.103350][ T851] kvm_intel: kvm [850]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xfd0b [ 39.114888][ T851] kvm: kvm [850]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc106 [ 39.125612][ T851] kvm: kvm [850]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xfaec [ 39.135505][ T851] kvm: kvm [850]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf10 [ 39.304227][ T860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 39.359436][ T863] syzkaller0: entered promiscuous mode [ 39.364979][ T863] syzkaller0: entered allmulticast mode [ 39.379365][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.549359][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 39.555675][ T45] usb 3-1: config 0 has no interfaces? [ 39.561443][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.571942][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.584046][ T45] usb 3-1: config 0 descriptor?? [ 39.641664][ T880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 39.872797][ T409] usb 3-1: USB disconnect, device number 4 [ 40.065493][ T899] overlayfs: overlapping lowerdir path [ 40.160391][ T902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 40.549478][ T409] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 40.632393][ T923] overlayfs: overlapping lowerdir path [ 40.701234][ T929] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 40.899368][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.979395][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.049346][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 41.055468][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 41.063669][ T45] usb 1-1: config 0 has no interface number 0 [ 41.069774][ T45] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 41.079682][ T45] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 41.089606][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 41.097681][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 41.106755][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.114755][ T45] usb 1-1: Product: syz [ 41.118892][ T45] usb 1-1: Manufacturer: syz [ 41.123490][ T45] usb 1-1: SerialNumber: syz [ 41.128538][ T45] usb 1-1: config 0 descriptor?? [ 41.134221][ T45] smsc75xx v1.0.0 [ 41.137861][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 41.139350][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 41.147991][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 41.154560][ T66] usb 3-1: config 0 has no interfaces? [ 41.168153][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.177317][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.187559][ T66] usb 3-1: config 0 descriptor?? [ 41.315656][ T36] audit: type=1400 audit(1794420021.750:190): avc: denied { ioctl } for pid=939 comm="syz.3.252" path="socket:[9941]" dev="sockfs" ino=9941 ioctlcmd=0x7434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.419385][ T45] usb 3-1: USB disconnect, device number 5 [ 41.799405][ T409] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.949373][ T409] usb 2-1: Using ep0 maxpacket: 16 [ 41.956280][ T409] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.966698][ T409] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 41.982004][ T409] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.988755][ T409] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 41.997913][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.008577][ T409] usb 2-1: config 0 descriptor?? [ 42.019966][ T409] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 42.417966][ T955] overlayfs: failed to resolve './file1/file0': -2 [ 42.669383][ T409] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 42.809364][ T409] usb 4-1: device descriptor read/64, error -71 [ 43.059365][ T409] usb 4-1: device descriptor read/64, error -71 [ 43.299364][ T409] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 43.429361][ T409] usb 4-1: device descriptor read/64, error -71 [ 43.663272][ T413] usb 1-1: USB disconnect, device number 5 [ 43.669423][ T409] usb 4-1: device descriptor read/64, error -71 [ 43.789471][ T409] usb usb4-port1: attempt power cycle [ 43.889398][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 44.009375][ T413] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.039391][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 44.045585][ T66] usb 3-1: config 0 has no interfaces? [ 44.051137][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.060592][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.069150][ T66] usb 3-1: config 0 descriptor?? [ 44.129373][ T409] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 44.150372][ T409] usb 4-1: device descriptor read/8, error -71 [ 44.159365][ T413] usb 1-1: Using ep0 maxpacket: 32 [ 44.165585][ T413] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.175724][ T413] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 44.186161][ T413] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 44.195248][ T413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.203282][ T413] usb 1-1: Product: syz [ 44.207426][ T413] usb 1-1: Manufacturer: syz [ 44.212050][ T413] usb 1-1: SerialNumber: syz [ 44.217209][ T413] usb 1-1: config 0 descriptor?? [ 44.228160][ T45] usb 2-1: USB disconnect, device number 6 [ 44.280407][ T409] usb 4-1: device descriptor read/8, error -71 [ 44.296908][ T395] usb 3-1: USB disconnect, device number 6 [ 44.348886][ T977] overlayfs: failed to resolve './file1/file0': -2 [ 44.529406][ T409] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 44.550441][ T409] usb 4-1: device descriptor read/8, error -71 [ 44.680377][ T409] usb 4-1: device descriptor read/8, error -71 [ 44.789507][ T409] usb usb4-port1: unable to enumerate USB device [ 45.069366][ T409] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.229372][ T409] usb 3-1: Using ep0 maxpacket: 16 [ 45.235718][ T409] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.246091][ T409] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 45.259161][ T409] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.265891][ T409] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 45.275078][ T409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.284135][ T409] usb 3-1: config 0 descriptor?? [ 45.296230][ T409] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 45.799364][ T409] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 45.949363][ T409] usb 2-1: device descriptor read/64, error -71 [ 46.189364][ T409] usb 2-1: device descriptor read/64, error -71 [ 46.429360][ T409] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 46.559355][ T409] usb 2-1: device descriptor read/64, error -71 [ 46.687925][ T395] usb 1-1: USB disconnect, device number 6 [ 46.829639][ T409] usb 2-1: device descriptor read/64, error -71 [ 47.057739][ T1088] overlayfs: failed to resolve './file1/file0': -2 [ 47.109461][ T409] usb usb2-port1: attempt power cycle [ 47.449358][ T409] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 47.470404][ T409] usb 2-1: device descriptor read/8, error -71 [ 47.600756][ T409] usb 2-1: device descriptor read/8, error -71 [ 47.623364][ T1114] overlayfs: failed to resolve './file1/file0': -2 [ 47.849392][ T409] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 47.854652][ T395] usb 3-1: USB disconnect, device number 7 [ 47.890823][ T409] usb 2-1: device descriptor read/8, error -71 [ 48.034274][ T409] usb 2-1: device descriptor read/8, error -71 [ 48.149951][ T409] usb usb2-port1: unable to enumerate USB device [ 48.686272][ T36] audit: type=1400 audit(1794420029.120:191): avc: denied { read write } for pid=1149 comm="syz.0.335" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.714420][ T36] audit: type=1400 audit(1794420029.120:192): avc: denied { open } for pid=1149 comm="syz.0.335" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.799396][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 48.828143][ T1154] fuse: Bad value for 'fd' [ 48.863846][ T1158] tipc: Enabled bearer , priority 0 [ 48.871874][ T1157] tipc: Disabling bearer [ 48.979355][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 48.985682][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.996065][ T45] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 49.009141][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 49.015945][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 49.026666][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.037916][ T45] usb 4-1: config 0 descriptor?? [ 49.068922][ T45] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 49.599437][ T395] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 49.673313][ T36] audit: type=1400 audit(1794420030.110:193): avc: denied { bind } for pid=1170 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.693157][ T36] audit: type=1400 audit(1794420030.110:194): avc: denied { name_bind } for pid=1170 comm="syz.1.344" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 49.714161][ T36] audit: type=1400 audit(1794420030.110:195): avc: denied { node_bind } for pid=1170 comm="syz.1.344" saddr=::e0:0:0:0:1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 49.749267][ T395] usb 1-1: device descriptor read/64, error -71 [ 49.853183][ T1178] fuse: Bad value for 'fd' [ 49.872180][ T1180] tipc: Started in network mode [ 49.877147][ T1180] tipc: Node identity d693a3c2493f, cluster identity 4711 [ 49.884527][ T1180] tipc: Enabled bearer , priority 0 [ 49.892047][ T1179] tipc: Disabling bearer [ 49.989406][ T395] usb 1-1: device descriptor read/64, error -71 [ 49.991996][ T36] audit: type=1400 audit(1794420030.430:196): avc: denied { listen } for pid=1190 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.015082][ T36] audit: type=1400 audit(1794420030.430:197): avc: denied { mounton } for pid=1190 comm="syz.1.353" path="/94/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.119360][ T66] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.239357][ T395] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 50.249361][ T66] usb 3-1: device descriptor read/64, error -71 [ 50.379354][ T395] usb 1-1: device descriptor read/64, error -71 [ 50.489371][ T66] usb 3-1: device descriptor read/64, error -71 [ 50.629359][ T395] usb 1-1: device descriptor read/64, error -71 [ 50.729371][ T66] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.739460][ T395] usb usb1-port1: attempt power cycle [ 50.859368][ T66] usb 3-1: device descriptor read/64, error -71 [ 51.079444][ T395] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 51.100473][ T395] usb 1-1: device descriptor read/8, error -71 [ 51.119378][ T66] usb 3-1: device descriptor read/64, error -71 [ 51.230512][ T395] usb 1-1: device descriptor read/8, error -71 [ 51.239922][ T66] usb usb3-port1: attempt power cycle [ 51.469387][ T395] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 51.490482][ T395] usb 1-1: device descriptor read/8, error -71 [ 51.585183][ T1145] usb 4-1: USB disconnect, device number 12 [ 51.599931][ T66] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 51.620550][ T395] usb 1-1: device descriptor read/8, error -71 [ 51.630613][ T66] usb 3-1: device descriptor read/8, error -71 [ 51.714180][ T1200] fuse: Bad value for 'fd' [ 51.738632][ T1204] tipc: Enabled bearer , priority 0 [ 51.745381][ T395] usb usb1-port1: unable to enumerate USB device [ 51.752534][ T1203] tipc: Disabling bearer [ 51.780548][ T66] usb 3-1: device descriptor read/8, error -71 [ 52.055570][ T36] audit: type=1400 audit(1794420032.490:198): avc: denied { ioctl } for pid=1211 comm="syz.1.361" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.149365][ T66] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.170357][ T66] usb 3-1: device descriptor read/8, error -71 [ 52.300340][ T66] usb 3-1: device descriptor read/8, error -71 [ 52.409849][ T66] usb usb3-port1: unable to enumerate USB device [ 52.450175][ T1228] tipc: Enabled bearer , priority 0 [ 52.459786][ T1227] tipc: Disabling bearer [ 52.805981][ T1236] tipc: Enabling of bearer rejected, failed to enable media [ 53.111864][ T36] audit: type=1400 audit(1794420033.530:199): avc: denied { sqpoll } for pid=1246 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.142577][ T1250] tipc: Started in network mode [ 53.147496][ T1250] tipc: Node identity 9e85a0537644, cluster identity 4711 [ 53.158506][ T1250] tipc: Enabled bearer , priority 0 [ 53.166216][ T1248] tipc: Disabling bearer [ 53.187710][ T1258] tipc: Enabling of bearer rejected, failed to enable media [ 53.205815][ T36] audit: type=1400 audit(1794420033.640:200): avc: denied { setopt } for pid=1259 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.504122][ T1271] device-mapper: table: 252:3: verity: Hash device lookup failed (-ENOENT) [ 53.512865][ T1271] device-mapper: ioctl: error adding target to table [ 53.689535][ T1145] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.819536][ T1145] usb 4-1: device descriptor read/64, error -71 [ 54.079393][ T1145] usb 4-1: device descriptor read/64, error -71 [ 54.267977][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 54.268095][ T36] audit: type=1400 audit(1794420034.700:202): avc: denied { write } for pid=1286 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.295364][ T36] audit: type=1400 audit(1794420034.710:203): avc: denied { nlmsg_write } for pid=1286 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.319386][ T1145] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.346155][ T1296] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852795252 (118578896128 ns) > initial count (106742520384 ns). Using initial count to start timer. [ 54.509356][ T1145] usb 4-1: device descriptor read/64, error -71 [ 54.749364][ T1145] usb 4-1: device descriptor read/64, error -71 [ 54.769363][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 54.859515][ T1145] usb usb4-port1: attempt power cycle [ 54.899364][ T31] usb 2-1: device descriptor read/64, error -71 [ 55.159359][ T31] usb 2-1: device descriptor read/64, error -71 [ 55.199461][ T1145] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 55.230482][ T1145] usb 4-1: device descriptor read/8, error -71 [ 55.322292][ T1319] 9pnet_fd: Insufficient options for proto=fd [ 55.372355][ T1145] usb 4-1: device descriptor read/8, error -71 [ 55.409382][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 55.549360][ T31] usb 2-1: device descriptor read/64, error -71 [ 55.559243][ T36] audit: type=1400 audit(1794420035.990:204): avc: denied { create } for pid=1340 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.579584][ T36] audit: type=1400 audit(1794420035.990:205): avc: denied { write } for pid=1340 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.639495][ T1145] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 55.660645][ T1145] usb 4-1: device descriptor read/8, error -71 [ 55.789399][ T31] usb 2-1: device descriptor read/64, error -71 [ 55.796650][ T1145] usb 4-1: device descriptor read/8, error -71 [ 55.909585][ T1145] usb usb4-port1: unable to enumerate USB device [ 55.916060][ T31] usb usb2-port1: attempt power cycle [ 56.269383][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 56.290408][ T31] usb 2-1: device descriptor read/8, error -71 [ 56.430346][ T31] usb 2-1: device descriptor read/8, error -71 [ 56.488349][ T36] audit: type=1400 audit(1794420036.920:206): avc: denied { write } for pid=1360 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.479349][ T36] audit: type=1400 audit(1794420037.900:207): avc: denied { read write } for pid=1360 comm="syz.3.420" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 57.586727][ T36] audit: type=1400 audit(1794420037.900:208): avc: denied { open } for pid=1360 comm="syz.3.420" path="/98/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 57.610698][ T36] audit: type=1400 audit(1794420037.950:209): avc: denied { cmd } for pid=1366 comm="syz.2.422" path="socket:[14604]" dev="sockfs" ino=14604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.633611][ T36] audit: type=1400 audit(1794420038.010:210): avc: denied { connect } for pid=1369 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.672094][ T36] audit: type=1400 audit(1794420038.010:211): avc: denied { write } for pid=1369 comm="syz.3.421" path="socket:[14621]" dev="sockfs" ino=14621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.871992][ T1384] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 57.899447][ T395] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 58.039407][ T395] usb 3-1: device descriptor read/64, error -71 [ 58.279604][ T395] usb 3-1: device descriptor read/64, error -71 [ 58.422476][ T1145] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 58.453580][ T1402] fuse: Bad value for 'fd' [ 58.494128][ T1406] overlayfs: failed to resolve './file1/file0': -2 [ 58.519467][ T395] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 58.579355][ T1145] usb 4-1: device descriptor read/64, error -71 [ 58.649348][ T395] usb 3-1: device descriptor read/64, error -71 [ 58.829348][ T1145] usb 4-1: device descriptor read/64, error -71 [ 58.909341][ T395] usb 3-1: device descriptor read/64, error -71 [ 59.039421][ T395] usb usb3-port1: attempt power cycle [ 59.079359][ T1145] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 59.142871][ T1422] tipc: Enabled bearer , priority 0 [ 59.150221][ T1422] syzkaller0: entered promiscuous mode [ 59.155754][ T1422] syzkaller0: entered allmulticast mode [ 59.166139][ T1421] tipc: Resetting bearer [ 59.182976][ T1421] tipc: Disabling bearer [ 59.209378][ T1145] usb 4-1: device descriptor read/64, error -71 [ 59.379362][ T395] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 59.400467][ T395] usb 3-1: device descriptor read/8, error -71 [ 59.449359][ T1145] usb 4-1: device descriptor read/64, error -71 [ 59.530291][ T395] usb 3-1: device descriptor read/8, error -71 [ 59.560473][ T1145] usb usb4-port1: attempt power cycle [ 59.578920][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 59.578937][ T36] audit: type=1400 audit(1794420040.010:215): avc: denied { ioctl } for pid=1428 comm="syz.0.446" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13904 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.612406][ T1431] overlayfs: failed to resolve './file1/file0': -2 [ 59.769355][ T395] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 59.790294][ T395] usb 3-1: device descriptor read/8, error -71 [ 59.909380][ T1145] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 59.930484][ T1145] usb 4-1: device descriptor read/8, error -71 [ 59.936722][ T395] usb 3-1: device descriptor read/8, error -71 [ 60.049455][ T395] usb usb3-port1: unable to enumerate USB device [ 60.070526][ T1145] usb 4-1: device descriptor read/8, error -71 [ 60.075760][ T36] audit: type=1400 audit(1794420040.510:216): avc: denied { create } for pid=1438 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.097476][ T36] audit: type=1400 audit(1794420040.530:217): avc: denied { append } for pid=1438 comm="syz.1.451" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.227192][ T1442] kvm: pic: non byte write [ 60.319361][ T1145] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 60.340335][ T1145] usb 4-1: device descriptor read/8, error -71 [ 60.392901][ T1445] tipc: Enabling of bearer rejected, failed to enable media [ 60.408958][ T36] audit: type=1400 audit(1794420040.840:218): avc: denied { write } for pid=1446 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.435407][ T1449] syzkaller0: entered promiscuous mode [ 60.440906][ T1449] syzkaller0: entered allmulticast mode [ 60.470307][ T1145] usb 4-1: device descriptor read/8, error -71 [ 60.579459][ T1145] usb usb4-port1: unable to enumerate USB device [ 60.632655][ T36] audit: type=1400 audit(1794420041.070:219): avc: denied { write } for pid=1457 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.749599][ T1470] syzkaller0: entered promiscuous mode [ 60.755112][ T1470] syzkaller0: entered allmulticast mode [ 60.822632][ T1472] syzkaller0: entered promiscuous mode [ 60.828315][ T1472] syzkaller0: entered allmulticast mode [ 61.126087][ T1492] syzkaller0: entered promiscuous mode [ 61.134961][ T1492] syzkaller0: entered allmulticast mode [ 61.160694][ T1494] syzkaller0: entered promiscuous mode [ 61.166213][ T1494] syzkaller0: entered allmulticast mode [ 61.302769][ T1508] ./dev/sda1: Can't lookup blockdev [ 61.326219][ T1504] kvm: pic: non byte write [ 61.398318][ T1521] syzkaller0: entered promiscuous mode [ 61.403955][ T1521] syzkaller0: entered allmulticast mode [ 61.580815][ T36] audit: type=1400 audit(1794420042.020:220): avc: denied { read } for pid=1531 comm="syz.0.489" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.584255][ T945] kernel read not supported for file /ppp (pid: 945 comm: kworker/0:5) [ 61.619438][ T1145] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 61.655512][ T1541] syzkaller0: entered promiscuous mode [ 61.661419][ T1541] syzkaller0: entered allmulticast mode [ 61.724393][ T1552] syzkaller0: entered promiscuous mode [ 61.729938][ T1552] syzkaller0: entered allmulticast mode [ 61.749374][ T1145] usb 4-1: device descriptor read/64, error -71 [ 61.990546][ T1145] usb 4-1: device descriptor read/64, error -71 [ 62.011283][ T36] audit: type=1400 audit(1794420042.450:221): avc: denied { create } for pid=1586 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 62.230140][ T1145] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 62.347754][ T1601] kvm_intel: kvm [1600]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xfd0b [ 62.379343][ T1145] usb 4-1: device descriptor read/64, error -71 [ 62.399492][ T1601] kvm: kvm [1600]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc106 [ 62.427871][ T36] audit: type=1400 audit(1794420042.860:222): avc: denied { write } for pid=1613 comm="syz.1.524" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.428447][ T1601] kvm: kvm [1600]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xfaec [ 62.465692][ T36] audit: type=1400 audit(1794420042.860:223): avc: denied { remove_name } for pid=1613 comm="syz.1.524" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.500911][ T1601] kvm: kvm [1600]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf10 [ 62.512624][ T36] audit: type=1400 audit(1794420042.860:224): avc: denied { rename } for pid=1613 comm="syz.1.524" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.588314][ T1620] overlayfs: overlapping lowerdir path [ 62.629692][ T1145] usb 4-1: device descriptor read/64, error -71 [ 62.667382][ T1622] kvm: pic: non byte write [ 62.739503][ T1145] usb usb4-port1: attempt power cycle [ 62.959031][ T1641] kvm: kvm [1640]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 62.962338][ T1644] overlayfs: overlapping lowerdir path [ 62.967960][ T1641] kvm: kvm [1640]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 63.079393][ T1145] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 63.100496][ T1145] usb 4-1: device descriptor read/8, error -71 [ 63.266873][ T1145] usb 4-1: device descriptor read/8, error -71 [ 63.294568][ T1675] caif0: tun_chr_ioctl cmd 2148553947 [ 64.518143][ T1145] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 64.760359][ T1145] usb 4-1: device descriptor read/8, error -71 [ 64.909980][ T1145] usb 4-1: device descriptor read/8, error -71 [ 64.929357][ T12] tipc: Subscription rejected, illegal request [ 64.983677][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 64.983694][ T36] audit: type=1400 audit(1794420045.420:236): avc: denied { name_bind } for pid=1710 comm="syz.1.564" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 65.003946][ T1715] syzkaller0: entered promiscuous mode [ 65.016992][ T1715] syzkaller0: entered allmulticast mode [ 65.023544][ T36] audit: type=1400 audit(1794420045.460:237): avc: denied { read } for pid=1710 comm="syz.1.564" path="socket:[16590]" dev="sockfs" ino=16590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.053537][ T1145] usb usb4-port1: unable to enumerate USB device [ 65.244042][ T1743] syzkaller0: entered promiscuous mode [ 65.254222][ T1743] syzkaller0: entered allmulticast mode [ 65.327197][ T36] audit: type=1400 audit(1794420045.760:238): avc: denied { write } for pid=1754 comm="syz.2.584" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.369348][ T1145] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 65.440337][ T1767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 65.478677][ T1774] syzkaller0: entered promiscuous mode [ 65.484346][ T1774] syzkaller0: entered allmulticast mode [ 65.539358][ T1145] usb 4-1: Using ep0 maxpacket: 16 [ 65.545581][ T1145] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.555811][ T1145] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 65.575236][ T1145] usb 4-1: config 0 interface 0 has no altsetting 0 [ 65.581951][ T1145] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 65.591050][ T1145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.602347][ T1145] usb 4-1: config 0 descriptor?? [ 65.616209][ T1145] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 65.665289][ T1797] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 65.696207][ T13] tipc: Subscription rejected, illegal request [ 65.726163][ T1804] syzkaller0: entered promiscuous mode [ 65.731951][ T1804] syzkaller0: entered allmulticast mode [ 65.808129][ T36] audit: type=1400 audit(1794420046.240:239): avc: denied { ioctl } for pid=1813 comm="syz.2.611" path="/dev/binderfs/binder0" dev="binder" ino=9 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.821307][ T1812] kvm: kvm [1811]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 65.833419][ T36] audit: type=1400 audit(1794420046.240:240): avc: denied { set_context_mgr } for pid=1813 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 65.846230][ T1812] kvm: kvm [1811]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 65.861957][ T36] audit: type=1400 audit(1794420046.250:241): avc: denied { map } for pid=1813 comm="syz.2.611" path="/dev/binderfs/binder0" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.922729][ T36] audit: type=1400 audit(1794420046.360:242): avc: denied { call } for pid=1813 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 66.364915][ T1829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 66.396317][ T437] tipc: Subscription rejected, illegal request [ 66.413910][ T1833] syzkaller0: entered promiscuous mode [ 66.419462][ T1833] syzkaller0: entered allmulticast mode [ 66.446260][ T1837] ./dev/sda1: Can't lookup blockdev [ 66.648001][ T1145] rust_binder: 1813: undelivered TRANSACTION_COMPLETE [ 66.719342][ T409] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 66.889330][ T409] usb 1-1: Using ep0 maxpacket: 8 [ 66.896739][ T409] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 66.905816][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.913817][ T409] usb 1-1: Product: syz [ 66.917974][ T409] usb 1-1: Manufacturer: syz [ 66.922599][ T409] usb 1-1: SerialNumber: syz [ 67.133615][ T409] usb 1-1: unit 0 not found! [ 67.151516][ T409] usb 1-1: USB disconnect, device number 11 [ 67.164080][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.333022][ T36] audit: type=1400 audit(1794420047.770:243): avc: denied { create } for pid=1852 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.352356][ T36] audit: type=1400 audit(1794420047.770:244): avc: denied { write } for pid=1852 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.441185][ T1855] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 67.518550][ T36] audit: type=1400 audit(1794420047.950:245): avc: denied { create } for pid=1859 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.551250][ T1862] ./dev/sda1: Can't lookup blockdev [ 67.622049][ T1875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4134810306 (132313929792 ns) > initial count (55655157408 ns). Using initial count to start timer. [ 67.799377][ T1145] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 67.820579][ T66] usb 4-1: USB disconnect, device number 25 [ 67.841921][ T1888] ./dev/sda1: Can't lookup blockdev [ 67.959350][ T1145] usb 2-1: Using ep0 maxpacket: 32 [ 67.965609][ T1145] usb 2-1: config 0 has no interfaces? [ 67.971351][ T1145] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 67.980648][ T1145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.989547][ T1145] usb 2-1: config 0 descriptor?? [ 68.221262][ T1145] usb 2-1: USB disconnect, device number 15 [ 68.525681][ T1145] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.533909][ T1145] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.568829][ T1897] fido_id[1897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.849394][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 68.869361][ T409] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 69.009401][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 69.016345][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.019378][ T1145] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 69.034308][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 69.047590][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 69.054676][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 69.064153][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.072373][ T409] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 122, changing to 10 [ 69.084901][ T409] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 17916, setting to 1024 [ 69.096900][ T9] usb 1-1: config 0 descriptor?? [ 69.105362][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 69.113897][ T409] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 69.124507][ T409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.132619][ T409] usb 3-1: Product: syz [ 69.136837][ T409] usb 3-1: Manufacturer: syz [ 69.141482][ T409] usb 3-1: SerialNumber: syz [ 69.150278][ T1894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.160928][ T409] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 69.168830][ T1145] usb 4-1: device descriptor read/64, error -71 [ 69.170672][ T409] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 69.187672][ T409] scsi host1: usb-storage 3-1:1.0 [ 69.375610][ T409] usb 3-1: USB disconnect, device number 17 [ 69.375624][ C1] input input8: can't resubmit intr, dummy_hcd.2-1/input0, retval -19 [ 69.419588][ T1145] usb 4-1: device descriptor read/64, error -71 [ 69.879407][ T1145] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 69.906605][ T1923] ./dev/sda1: Can't lookup blockdev [ 70.009369][ T1145] usb 4-1: device descriptor read/64, error -71 [ 70.219361][ T311] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 70.249365][ T1145] usb 4-1: device descriptor read/64, error -71 [ 70.359433][ T1145] usb usb4-port1: attempt power cycle [ 70.369443][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 70.375584][ T311] usb 3-1: config 0 has no interfaces? [ 70.381148][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.390447][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.398995][ T311] usb 3-1: config 0 descriptor?? [ 70.621206][ T311] usb 3-1: USB disconnect, device number 18 [ 70.699407][ T1145] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 70.720349][ T1145] usb 4-1: device descriptor read/8, error -71 [ 70.850532][ T1145] usb 4-1: device descriptor read/8, error -71 [ 70.909371][ T395] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 71.039354][ T395] usb 2-1: device descriptor read/64, error -71 [ 71.089361][ T1145] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 71.110323][ T1145] usb 4-1: device descriptor read/8, error -71 [ 71.240521][ T1145] usb 4-1: device descriptor read/8, error -71 [ 71.279345][ T395] usb 2-1: device descriptor read/64, error -71 [ 71.359467][ T1145] usb usb4-port1: unable to enumerate USB device [ 71.369396][ T311] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 71.499350][ T311] usb 3-1: device descriptor read/64, error -71 [ 71.519357][ T395] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 71.610195][ T409] usb 1-1: USB disconnect, device number 12 [ 71.649367][ T395] usb 2-1: device descriptor read/64, error -71 [ 71.687448][ T1943] ./dev/sda1: Can't lookup blockdev [ 71.739347][ T311] usb 3-1: device descriptor read/64, error -71 [ 71.889368][ T395] usb 2-1: device descriptor read/64, error -71 [ 71.989353][ T311] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 71.999409][ T395] usb usb2-port1: attempt power cycle [ 72.039348][ T409] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 72.129349][ T311] usb 3-1: device descriptor read/64, error -71 [ 72.190384][ T409] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 72.199486][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.339388][ T395] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 72.360462][ T395] usb 2-1: device descriptor read/8, error -71 [ 72.369451][ T311] usb 3-1: device descriptor read/64, error -71 [ 72.479474][ T311] usb usb3-port1: attempt power cycle [ 72.500311][ T395] usb 2-1: device descriptor read/8, error -71 [ 72.739355][ T395] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 72.760372][ T395] usb 2-1: device descriptor read/8, error -71 [ 72.819361][ T311] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 72.840336][ T311] usb 3-1: device descriptor read/8, error -71 [ 72.890334][ T395] usb 2-1: device descriptor read/8, error -71 [ 72.919356][ T409] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 72.970342][ T311] usb 3-1: device descriptor read/8, error -71 [ 72.999436][ T395] usb usb2-port1: unable to enumerate USB device [ 73.089346][ T409] usb 4-1: Using ep0 maxpacket: 32 [ 73.095514][ T409] usb 4-1: config 0 has no interfaces? [ 73.101053][ T409] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 73.110123][ T409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.118763][ T409] usb 4-1: config 0 descriptor?? [ 73.209359][ T311] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 73.230378][ T311] usb 3-1: device descriptor read/8, error -71 [ 73.340315][ T395] usb 4-1: USB disconnect, device number 30 [ 73.370376][ T311] usb 3-1: device descriptor read/8, error -71 [ 73.479429][ T311] usb usb3-port1: unable to enumerate USB device [ 73.709514][ T1959] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 73.857046][ T1964] tipc: Enabling of bearer rejected, failed to enable media [ 73.865891][ T1964] syzkaller0: entered promiscuous mode [ 73.871875][ T1964] syzkaller0: entered allmulticast mode [ 73.918803][ T1966] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 74.079344][ T395] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 74.239365][ T395] usb 2-1: Using ep0 maxpacket: 16 [ 74.245554][ T395] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.255743][ T395] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.265519][ T395] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 74.278361][ T395] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.284999][ T395] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 74.294144][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.303365][ T395] usb 2-1: config 0 descriptor?? [ 74.310012][ T395] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 74.718862][ T409] usb 1-1: USB disconnect, device number 13 [ 74.765152][ T1980] FAULT_INJECTION: forcing a failure. [ 74.765152][ T1980] name failslab, interval 1, probability 0, space 0, times 0 [ 74.779390][ T1980] CPU: 1 UID: 0 PID: 1980 Comm: syz.0.676 Not tainted syzkaller #0 ef3fe522eb78c0a5ba4bdac8f3746cbd31b933a5 [ 74.779425][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 74.779439][ T1980] Call Trace: [ 74.779445][ T1980] [ 74.779453][ T1980] __dump_stack+0x21/0x30 [ 74.779477][ T1980] dump_stack_lvl+0x140/0x1c0 [ 74.779496][ T1980] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.779514][ T1980] ? asn1_ber_decoder+0x1eeb/0x1ff0 [ 74.779539][ T1980] dump_stack+0x19/0x20 [ 74.779555][ T1980] should_fail_ex+0x3c2/0x510 [ 74.779574][ T1980] should_failslab+0xac/0x100 [ 74.779596][ T1980] __kmalloc_cache_noprof+0x41/0x470 [ 74.779623][ T1980] ? mpi_alloc+0x64/0x260 [ 74.779647][ T1980] mpi_alloc+0x64/0x260 [ 74.779668][ T1980] ? __kasan_kmalloc+0x96/0xb0 [ 74.779688][ T1980] ? __kmalloc_noprof+0x261/0x510 [ 74.779714][ T1980] mpi_read_raw_data+0x170/0x8f0 [ 74.779734][ T1980] ? reg_reload_regdb+0xf3/0x560 [ 74.779755][ T1980] ? genl_family_rcv_msg_doit+0x23f/0x360 [ 74.779775][ T1980] ? genl_rcv_msg+0x60f/0x7b0 [ 74.779800][ T1980] ? netlink_rcv_skb+0x24a/0x4e0 [ 74.779827][ T1980] rsa_set_pub_key+0x2c4/0x5b0 [ 74.779849][ T1980] ? __cfi_rsa_set_pub_key+0x10/0x10 [ 74.779870][ T1980] ? kasan_save_alloc_info+0x3a/0x50 [ 74.779895][ T1980] pkcs1pad_set_pub_key+0xd8/0x1f0 [ 74.779917][ T1980] crypto_sig_set_pubkey+0x9a/0xb0 [ 74.779936][ T1980] public_key_verify_signature+0x591/0xa40 [ 74.779964][ T1980] ? __cfi_public_key_verify_signature+0x10/0x10 [ 74.779992][ T1980] ? kfree+0x158/0x440 [ 74.780016][ T1980] ? find_asymmetric_key+0x181/0x4c0 [ 74.780039][ T1980] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 74.780066][ T1980] public_key_verify_signature_2+0x47/0x60 [ 74.780092][ T1980] verify_signature+0xf3/0x120 [ 74.780117][ T1980] pkcs7_validate_trust+0x501/0x700 [ 74.780137][ T1980] verify_pkcs7_message_sig+0x163/0x2a0 [ 74.780163][ T1980] ? __cfi_verify_pkcs7_message_sig+0x10/0x10 [ 74.780186][ T1980] ? kfree+0x158/0x440 [ 74.780213][ T1980] verify_pkcs7_signature+0x6b/0xa0 [ 74.780237][ T1980] valid_regdb+0x1f0/0x5f0 [ 74.780257][ T1980] ? __rtnl_unlock+0xb4/0xd0 [ 74.780281][ T1980] ? netdev_run_todo+0xc62/0xce0 [ 74.780300][ T1980] ? reg_reload_regdb+0x560/0x560 [ 74.780322][ T1980] reg_reload_regdb+0xf3/0x560 [ 74.780342][ T1980] ? __nla_parse+0x46/0x60 [ 74.780364][ T1980] ? __cfi_reg_reload_regdb+0x10/0x10 [ 74.780385][ T1980] ? rtnl_unlock+0x12/0x20 [ 74.780406][ T1980] ? nl80211_pre_doit+0x4bf/0x8e0 [ 74.780429][ T1980] ? genl_family_rcv_msg_attrs_parse+0x213/0x380 [ 74.780451][ T1980] nl80211_reload_regdb+0x12/0x20 [ 74.780477][ T1980] genl_family_rcv_msg_doit+0x23f/0x360 [ 74.780498][ T1980] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 74.780519][ T1980] ? ns_capable+0x90/0xf0 [ 74.780540][ T1980] genl_rcv_msg+0x60f/0x7b0 [ 74.780559][ T1980] ? __cfi_genl_rcv_msg+0x10/0x10 [ 74.780576][ T1980] ? __cfi_nl80211_pre_doit+0x10/0x10 [ 74.780599][ T1980] ? __cfi_nl80211_reload_regdb+0x10/0x10 [ 74.780625][ T1980] ? __cfi_nl80211_post_doit+0x10/0x10 [ 74.780650][ T1980] netlink_rcv_skb+0x24a/0x4e0 [ 74.780674][ T1980] ? __cfi_genl_rcv_msg+0x10/0x10 [ 74.780692][ T1980] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 74.780718][ T1980] ? down_read+0x7f/0xe0 [ 74.780742][ T1980] ? __cfi_down_read+0x10/0x10 [ 74.780767][ T1980] genl_rcv+0x2c/0x40 [ 74.780790][ T1980] netlink_unicast+0x8bf/0xa70 [ 74.780814][ T1980] netlink_sendmsg+0x7d1/0xad0 [ 74.780842][ T1980] ? __cfi_netlink_sendmsg+0x10/0x10 [ 74.780865][ T1980] ? __futex_queue+0x19f/0x350 [ 74.780887][ T1980] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 74.780905][ T1980] ? security_socket_sendmsg+0x3d/0x100 [ 74.780928][ T1980] ____sys_sendmsg+0x99e/0xa00 [ 74.780953][ T1980] ? __import_iovec+0x5b9/0x7d0 [ 74.780975][ T1980] ? __sys_sendmsg_sock+0x50/0x50 [ 74.780997][ T1980] ? import_iovec+0x80/0xb0 [ 74.781017][ T1980] ___sys_sendmsg+0x2a6/0x370 [ 74.781041][ T1980] ? __sys_sendmsg+0x260/0x260 [ 74.781066][ T1980] ? __cfi_futex_wait+0x10/0x10 [ 74.781092][ T1980] ? __fget_files+0x2bc/0x330 [ 74.781113][ T1980] __x64_sys_sendmsg+0x1be/0x2a0 [ 74.781139][ T1980] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 74.781165][ T1980] ? __kasan_check_write+0x18/0x20 [ 74.781191][ T1980] ? fpregs_restore_userregs+0x11c/0x260 [ 74.781216][ T1980] ? switch_fpu_return+0x12/0x20 [ 74.781240][ T1980] x64_sys_call+0x2a4c/0x2ee0 [ 74.781260][ T1980] do_syscall_64+0x57/0xf0 [ 74.781280][ T1980] ? clear_bhb_loop+0x50/0xa0 [ 74.781305][ T1980] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.781329][ T1980] RIP: 0033:0x7fa7a69a8f19 [ 74.781345][ T1980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.781362][ T1980] RSP: 002b:00007fa7a53e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.781383][ T1980] RAX: ffffffffffffffda RBX: 00007fa7a6c25fa0 RCX: 00007fa7a69a8f19 [ 74.781398][ T1980] RDX: 0000000020008004 RSI: 0000200000000c40 RDI: 0000000000000005 [ 74.781411][ T1980] RBP: 00007fa7a6a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 74.781425][ T1980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.781437][ T1980] R13: 00007fa7a6c26038 R14: 00007fa7a6c25fa0 R15: 00007fff3b9040c8 [ 74.781455][ T1980] [ 74.895048][ T1985] Bluetooth: TIOCSERCONFIG is not supported [ 74.898380][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 74.898395][ T36] audit: type=1400 audit(1794420055.330:254): avc: denied { ioctl } for pid=1984 comm="syz.2.678" path="socket:[19520]" dev="sockfs" ino=19520 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.346500][ T36] audit: type=1400 audit(1794420055.780:255): avc: denied { search } for pid=1981 comm="syz.3.677" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.368191][ T36] audit: type=1400 audit(1794420055.780:256): avc: denied { write } for pid=1981 comm="syz.3.677" name="instances" dev="tracefs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.382366][ T1982] FAULT_INJECTION: forcing a failure. [ 75.382366][ T1982] name fail_futex, interval 1, probability 0, space 0, times 1 [ 75.390585][ T36] audit: type=1400 audit(1794420055.780:257): avc: denied { add_name } for pid=1981 comm="syz.3.677" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.403744][ T1982] CPU: 0 UID: 0 PID: 1982 Comm: syz.3.677 Not tainted syzkaller #0 ef3fe522eb78c0a5ba4bdac8f3746cbd31b933a5 [ 75.403773][ T1982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.403786][ T1982] Call Trace: [ 75.403792][ T1982] [ 75.403799][ T1982] __dump_stack+0x21/0x30 [ 75.403822][ T1982] dump_stack_lvl+0x140/0x1c0 [ 75.403841][ T1982] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.403860][ T1982] dump_stack+0x19/0x20 [ 75.403877][ T1982] should_fail_ex+0x3c2/0x510 [ 75.403895][ T1982] should_fail+0xf/0x20 [ 75.403911][ T1982] get_futex_key+0x178/0x940 [ 75.403930][ T1982] ? __cfi_get_futex_key+0x10/0x10 [ 75.403950][ T1982] futex_wait_setup+0xae/0x260 [ 75.403973][ T1982] ? __cfi___futex_queue+0x10/0x10 [ 75.403992][ T1982] ? __cfi_futex_wait_setup+0x10/0x10 [ 75.404016][ T1982] ? __asan_memcpy+0x5a/0x80 [ 75.404041][ T1982] __futex_wait+0x12c/0x3d0 [ 75.404064][ T1982] ? __cfi___futex_wait+0x10/0x10 [ 75.404087][ T1982] ? __cfi_futex_wake_mark+0x10/0x10 [ 75.404110][ T1982] ? __kasan_check_read+0x15/0x20 [ 75.404134][ T1982] ? futex_wake+0x627/0x950 [ 75.404156][ T1982] futex_wait+0x128/0x7c0 [ 75.404178][ T1982] ? __cfi_futex_wait+0x10/0x10 [ 75.404202][ T1982] ? vfs_write+0xbd2/0xfd0 [ 75.404228][ T1982] do_futex+0x32a/0x510 [ 75.404257][ T1982] ? __cfi_do_futex+0x10/0x10 [ 75.404277][ T1982] ? mutex_unlock+0x90/0x240 [ 75.404302][ T1982] __se_sys_futex+0x13c/0x320 [ 75.404323][ T1982] ? fput+0x1a4/0x230 [ 75.404344][ T1982] ? __x64_sys_futex+0x110/0x110 [ 75.404364][ T1982] ? __cfi_ksys_write+0x10/0x10 [ 75.404382][ T1982] __x64_sys_futex+0xe9/0x110 [ 75.404402][ T1982] x64_sys_call+0x227f/0x2ee0 [ 75.404421][ T1982] do_syscall_64+0x57/0xf0 [ 75.404440][ T1982] ? clear_bhb_loop+0x50/0xa0 [ 75.404465][ T1982] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.404488][ T1982] RIP: 0033:0x7feb105a8f19 [ 75.404504][ T1982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.404519][ T1982] RSP: 002b:00007feb113de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.404539][ T1982] RAX: ffffffffffffffda RBX: 00007feb10825fa8 RCX: 00007feb105a8f19 [ 75.404554][ T1982] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb10825fa8 [ 75.404566][ T1982] RBP: 00007feb10825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 75.404578][ T1982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.404589][ T1982] R13: 00007feb10826038 R14: 00007ffe674fe5a0 R15: 00007ffe674fe688 [ 75.404605][ T1982] [ 75.589352][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 75.591064][ T36] audit: type=1400 audit(1794420055.780:258): avc: denied { create } for pid=1981 comm="syz.3.677" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 75.595502][ T409] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 75.859340][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 75.864509][ T409] usb 3-1: Using ep0 maxpacket: 32 [ 75.870844][ T409] usb 3-1: config 0 has no interfaces? [ 75.876438][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.886660][ T409] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.895785][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.904848][ T409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.912938][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.924466][ T409] usb 3-1: config 0 descriptor?? [ 75.939060][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.957372][ T9] usb 1-1: config 0 descriptor?? [ 76.283069][ T311] usb 3-1: USB disconnect, device number 23 [ 76.742173][ T409] usb 2-1: USB disconnect, device number 20 [ 76.755739][ T36] audit: type=1400 audit(1794420057.190:259): avc: denied { write } for pid=2006 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.536783][ T36] audit: type=1400 audit(1794420057.970:260): avc: denied { mount } for pid=2014 comm="syz.1.689" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.608423][ T36] audit: type=1400 audit(1794420058.040:261): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.635132][ T2020] overlayfs: missing 'lowerdir' [ 77.899344][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 77.919367][ T311] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 78.069343][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 78.075500][ T311] usb 3-1: config 0 has no interfaces? [ 78.079331][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 78.081259][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.087212][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.095343][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.105332][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.123011][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 78.123438][ T311] usb 3-1: config 0 descriptor?? [ 78.136235][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 78.147505][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 78.156570][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.165220][ T9] usb 4-1: config 0 descriptor?? [ 78.171179][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 78.350491][ T9] usb 1-1: USB disconnect, device number 14 [ 78.387379][ T66] usb 3-1: USB disconnect, device number 24 [ 78.528355][ T2040] page size migration: [2040 (syz.1.700)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 78.574664][ T2042] overlayfs: missing 'lowerdir' [ 78.999350][ T409] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 79.149341][ T311] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 79.159342][ T409] usb 2-1: Using ep0 maxpacket: 16 [ 79.165583][ T409] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.175768][ T409] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.184749][ T409] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.193836][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.203774][ T409] usb 2-1: config 0 descriptor?? [ 79.233525][ T2064] overlayfs: missing 'lowerdir' [ 79.589392][ T409] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 79.728386][ T2084] overlayfs: missing 'workdir' [ 79.749453][ T409] usb 1-1: Using ep0 maxpacket: 32 [ 79.755672][ T409] usb 1-1: config 0 has no interfaces? [ 79.761180][ T409] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.770567][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.779795][ T409] usb 1-1: config 0 descriptor?? [ 79.839130][ T2090] 9pnet_fd: Insufficient options for proto=fd [ 80.007476][ T312] usb 1-1: USB disconnect, device number 15 [ 80.329358][ T311] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 80.480377][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.490572][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.502813][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.511919][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.520206][ T311] usb 3-1: Product: syz [ 80.524494][ T311] usb 3-1: Manufacturer: syz [ 80.529096][ T311] usb 3-1: SerialNumber: syz [ 80.536290][ T311] usb 3-1: selecting invalid altsetting 1 [ 80.677358][ T2103] page size migration: [2103 (syz.0.727)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 80.677379][ T66] usb 4-1: USB disconnect, device number 31 [ 80.737163][ T311] cdc_mbim 3-1:1.0: bind() failure [ 80.746211][ T311] usb 3-1: USB disconnect, device number 26 [ 80.818306][ T2111] 9pnet_fd: Insufficient options for proto=fd [ 80.848982][ T36] audit: type=1400 audit(1794420061.280:262): avc: denied { setopt } for pid=2116 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.868720][ T36] audit: type=1400 audit(1794420061.290:263): avc: denied { ioctl } for pid=2116 comm="syz.0.733" path="socket:[19445]" dev="sockfs" ino=19445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.893701][ T36] audit: type=1400 audit(1794420061.290:264): avc: denied { bind } for pid=2116 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.969931][ T409] rust_binder: 2123: undelivered TRANSACTION_COMPLETE [ 81.157900][ T2131] 9pnet_fd: Insufficient options for proto=fd [ 81.299882][ T2133] page size migration: [2133 (syz.2.740)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 81.559387][ T311] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 81.570958][ T2151] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852795252 (3705590504 ns) > initial count (3335703762 ns). Using initial count to start timer. [ 81.669358][ T409] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 81.705578][ T1145] usb 2-1: USB disconnect, device number 22 [ 81.719337][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 81.727316][ T311] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 81.735792][ T311] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.752821][ T311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.762628][ T311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.772595][ T311] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.785632][ T311] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.794762][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.827728][ T2170] 9pnet_fd: Insufficient options for proto=fd [ 81.859974][ T2172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852795252 (3705590504 ns) > initial count (3335703762 ns). Using initial count to start timer. [ 82.149353][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 82.299353][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 82.305980][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.316182][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.325443][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.334570][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.343644][ T9] usb 2-1: config 0 descriptor?? [ 82.663719][ T36] audit: type=1400 audit(1794420063.100:265): avc: denied { connect } for pid=2184 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.817201][ T2195] 9pnet_fd: Insufficient options for proto=fd [ 82.879355][ T409] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 83.029367][ T409] usb 3-1: Using ep0 maxpacket: 16 [ 83.035823][ T409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.046853][ T409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.056716][ T409] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.069358][ T1145] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 83.069565][ T409] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.086231][ T409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.095634][ T409] usb 3-1: config 0 descriptor?? [ 83.510082][ T409] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input9 [ 83.522671][ T409] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 83.710352][ T2202] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852795252 (3705590504 ns) > initial count (3335703762 ns). Using initial count to start timer. [ 83.731099][ T409] usb 3-1: USB disconnect, device number 28 [ 83.758616][ T36] audit: type=1400 audit(1794420064.190:266): avc: denied { read } for pid=2204 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.784262][ T66] hid-generic 0006:046D:B012.0004: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz1 [ 83.799747][ T2208] fido_id[2208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.251265][ T2214] rust_binder: 2213:2214 got transaction to invalid handle 1 [ 84.258790][ T2214] rust_binder: 2213:2214 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 84.270143][ T66] rust_binder: 2213: undelivered TRANSACTION_ERROR: 29201 [ 84.299313][ T36] audit: type=1400 audit(1794420064.730:267): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.327960][ T2222] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 84.334869][ T66] usb 1-1: USB disconnect, device number 16 [ 84.370968][ T2233] tipc: Enabled bearer , priority 0 [ 84.378696][ T2231] tipc: Disabling bearer [ 84.394001][ T2237] rust_binder: 2236:2237 got transaction to invalid handle 1 [ 84.401537][ T2237] rust_binder: 2236:2237 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 84.413180][ T409] rust_binder: 2236: undelivered TRANSACTION_ERROR: 29201 [ 84.457140][ T36] audit: type=1400 audit(1794420064.890:268): avc: denied { getopt } for pid=2248 comm="syz.2.787" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.507468][ T2261] rust_binder: 2260:2261 got transaction to invalid handle 1 [ 84.515224][ T2261] rust_binder: 2260:2261 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 84.527110][ T66] rust_binder: 2260: undelivered TRANSACTION_ERROR: 29201 [ 84.542231][ T36] audit: type=1400 audit(1794420064.980:269): avc: denied { bind } for pid=2262 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.591404][ T36] audit: type=1400 audit(1794420065.030:270): avc: denied { search } for pid=2270 comm="syz.0.798" name="/" dev="configfs" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.610583][ T2271] FAULT_INJECTION: forcing a failure. [ 84.610583][ T2271] name failslab, interval 1, probability 0, space 0, times 0 [ 84.613672][ T36] audit: type=1400 audit(1794420065.030:271): avc: denied { write } for pid=2270 comm="syz.0.798" name="usb_gadget" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.627320][ T2271] CPU: 1 UID: 0 PID: 2271 Comm: syz.0.798 Not tainted syzkaller #0 ef3fe522eb78c0a5ba4bdac8f3746cbd31b933a5 [ 84.627349][ T2271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 84.627362][ T2271] Call Trace: [ 84.627368][ T2271] [ 84.627375][ T2271] __dump_stack+0x21/0x30 [ 84.627399][ T2271] dump_stack_lvl+0x140/0x1c0 [ 84.627417][ T2271] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.627437][ T2271] dump_stack+0x19/0x20 [ 84.627454][ T2271] should_fail_ex+0x3c2/0x510 [ 84.627472][ T2271] should_failslab+0xac/0x100 [ 84.627492][ T2271] __kmalloc_cache_noprof+0x41/0x470 [ 84.627519][ T2271] ? tty_register_device_attr+0x315/0x970 [ 84.627540][ T2271] tty_register_device_attr+0x315/0x970 [ 84.627559][ T2271] ? __cfi_tty_register_device_attr+0x10/0x10 [ 84.627578][ T2271] ? __kasan_check_write+0x18/0x20 [ 84.627604][ T2271] ? mutex_unlock+0x90/0x240 [ 84.627626][ T2271] ? __cfi_mutex_unlock+0x10/0x10 [ 84.627650][ T2271] tty_port_register_device+0xbb/0x100 [ 84.627678][ T2271] gserial_alloc_line_no_console+0x559/0x770 [ 84.627704][ T2271] ? gser_alloc_inst+0x5e/0x190 [ 84.627726][ T2271] gserial_alloc_line+0x19/0x30 [ 84.627746][ T2271] gser_alloc_inst+0x9b/0x190 [ 84.627768][ T2271] usb_get_function_instance+0xf7/0x320 [ 84.627793][ T2271] function_make+0x125/0x370 [ 84.627809][ T2271] ? __cfi_function_make+0x10/0x10 [ 84.627826][ T2271] ? __cfi_mutex_lock+0x10/0x10 [ 84.627848][ T2271] ? __kmalloc_noprof+0x261/0x510 [ 84.627874][ T2271] ? configfs_mkdir+0x434/0xb70 [ 84.627896][ T2271] configfs_mkdir+0x526/0xb70 [ 84.627917][ T2271] vfs_mkdir+0x58e/0x810 [ 84.627941][ T2271] do_mkdirat+0x240/0x530 [ 84.627962][ T2271] ? __cfi_do_mkdirat+0x10/0x10 [ 84.627984][ T2271] ? __kasan_check_write+0x18/0x20 [ 84.628008][ T2271] ? getname_flags+0x203/0x6b0 [ 84.628026][ T2271] ? __kasan_check_write+0x18/0x20 [ 84.628059][ T2271] __x64_sys_mkdirat+0x8b/0xa0 [ 84.628082][ T2271] x64_sys_call+0x2ba8/0x2ee0 [ 84.628102][ T2271] do_syscall_64+0x57/0xf0 [ 84.628121][ T2271] ? clear_bhb_loop+0x50/0xa0 [ 84.628148][ T2271] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.628171][ T2271] RIP: 0033:0x7fa7a69a8f19 [ 84.628188][ T2271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.628203][ T2271] RSP: 002b:00007fa7a53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 84.628223][ T2271] RAX: ffffffffffffffda RBX: 00007fa7a6c25fa0 RCX: 00007fa7a69a8f19 [ 84.628238][ T2271] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 84.628252][ T2271] RBP: 00007fa7a6a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 84.628264][ T2271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.628276][ T2271] R13: 00007fa7a6c26038 R14: 00007fa7a6c25fa0 R15: 00007fff3b9040c8 [ 84.628292][ T2271] [ 84.628358][ T2271] gserial_alloc_line_no_console: failed to register tty for port 0, err -12 [ 84.769341][ T409] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 84.924058][ T1145] usb 2-1: USB disconnect, device number 23 [ 85.009099][ T9] rust_binder: 2283: undelivered TRANSACTION_ERROR: 29189 [ 85.080474][ T409] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.092099][ T409] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 85.101851][ T409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.110692][ T409] usb 3-1: Product: syz [ 85.114892][ T409] usb 3-1: Manufacturer: syz [ 85.119520][ T409] usb 3-1: SerialNumber: syz [ 85.279382][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 85.328606][ T66] usb 3-1: USB disconnect, device number 29 [ 85.369370][ T1145] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 85.389346][ T409] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 85.429336][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 85.435476][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.445597][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 85.458559][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.467750][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.476282][ T9] usb 4-1: config 0 descriptor?? [ 85.481966][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 85.539328][ T1145] usb 2-1: Using ep0 maxpacket: 16 [ 85.540410][ T409] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.545587][ T1145] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.556152][ T409] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 85.564740][ T1145] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.574035][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 85.584667][ T1145] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.592994][ T409] usb 1-1: Product: syz [ 85.602509][ T1145] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 85.606884][ T409] usb 1-1: Manufacturer: syz [ 85.619414][ T1145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.624156][ T409] usb 1-1: SerialNumber: syz [ 85.630572][ T1145] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 85.644200][ T1145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.652861][ T1145] usb 2-1: config 0 descriptor?? [ 86.059958][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 86.068832][ T1145] usbhid 2-1:0.0: can't add hid device: -71 [ 86.074846][ T1145] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.084994][ T1145] usb 2-1: USB disconnect, device number 24 [ 86.595110][ T2308] syzkaller0: entered promiscuous mode [ 86.600658][ T2308] syzkaller0: entered allmulticast mode [ 86.740592][ T409] rust_binder: 2314: undelivered TRANSACTION_ERROR: 29189 [ 87.889348][ T1145] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 88.040370][ T1145] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.050597][ T1145] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.056015][ T409] usb 4-1: USB disconnect, device number 33 [ 88.059838][ T1145] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 88.076454][ T1145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.089519][ T1145] usb 2-1: config 0 descriptor?? [ 88.106715][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 88.106731][ T36] audit: type=1400 audit(1794420068.540:275): avc: denied { name_bind } for pid=2326 comm="syz.3.821" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.168479][ T9] usb 1-1: USB disconnect, device number 17 [ 88.203830][ T66] rust_binder: 2334: undelivered TRANSACTION_ERROR: 29189 [ 88.432130][ T2321] mmap: syz.1.818 (2321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.445402][ T1145] usb 2-1: USB disconnect, device number 25 [ 89.039361][ T1145] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 89.200385][ T1145] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.211868][ T1145] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 89.220945][ T1145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 89.229022][ T1145] usb 1-1: Product: syz [ 89.233231][ T1145] usb 1-1: Manufacturer: syz [ 89.237818][ T1145] usb 1-1: SerialNumber: syz [ 89.783670][ T2386] device-mapper: table: 252:8: multipath: unknown target type [ 89.791222][ T2386] device-mapper: ioctl: error adding target to table [ 90.009339][ T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 90.170371][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.180595][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.189700][ T9] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 90.198762][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.207383][ T9] usb 3-1: config 0 descriptor?? [ 90.464053][ T2400] 9pnet_fd: Insufficient options for proto=fd [ 90.551110][ T9] usb 3-1: USB disconnect, device number 30 [ 90.670516][ T36] audit: type=1400 audit(1794420071.110:276): avc: denied { bind } for pid=2408 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.689803][ T2409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 90.690858][ T36] audit: type=1400 audit(1794420071.120:277): avc: denied { setopt } for pid=2408 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.751322][ T36] audit: type=1400 audit(1794420071.190:278): avc: denied { execute } for pid=2414 comm="syz.1.856" name="file2" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.751346][ T2415] process 'syz.1.856' launched './file2' with NULL argv: empty string added [ 90.783317][ T36] audit: type=1400 audit(1794420071.220:279): avc: denied { execute_no_trans } for pid=2414 comm="syz.1.856" path="/214/file2" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.815333][ T2415] FAULT_INJECTION: forcing a failure. [ 90.815333][ T2415] name failslab, interval 1, probability 0, space 0, times 0 [ 90.828110][ T2415] CPU: 1 UID: 0 PID: 2415 Comm: syz.1.856 Not tainted syzkaller #0 ef3fe522eb78c0a5ba4bdac8f3746cbd31b933a5 [ 90.828141][ T2415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 90.828154][ T2415] Call Trace: [ 90.828160][ T2415] [ 90.828168][ T2415] __dump_stack+0x21/0x30 [ 90.828191][ T2415] dump_stack_lvl+0x140/0x1c0 [ 90.828208][ T2415] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.828219][ T2415] ? __kasan_kmalloc+0x96/0xb0 [ 90.828232][ T2415] dump_stack+0x19/0x20 [ 90.828241][ T2415] should_fail_ex+0x3c2/0x510 [ 90.828252][ T2415] should_failslab+0xac/0x100 [ 90.828263][ T2415] __kmalloc_node_noprof+0x69/0x500 [ 90.828279][ T2415] ? __kvmalloc_node_noprof+0x128/0x300 [ 90.828293][ T2415] __kvmalloc_node_noprof+0x128/0x300 [ 90.828307][ T2415] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 90.828321][ T2415] ? __kasan_check_write+0x18/0x20 [ 90.828335][ T2415] ? _raw_spin_lock+0x92/0x120 [ 90.828345][ T2415] ? __cfi__raw_spin_lock+0x10/0x10 [ 90.828356][ T2415] simple_xattr_alloc+0x67/0x140 [ 90.828367][ T2415] shmem_initxattrs+0x24f/0x530 [ 90.828380][ T2415] ? security_inode_init_security+0x11c/0x600 [ 90.828395][ T2415] security_inode_init_security+0x431/0x600 [ 90.828408][ T2415] ? __cfi_shmem_initxattrs+0x10/0x10 [ 90.828421][ T2415] ? __cfi_security_inode_init_security+0x10/0x10 [ 90.828434][ T2415] ? set_cached_acl+0xe1/0x1a0 [ 90.828447][ T2415] ? simple_acl_create+0x190/0x1c0 [ 90.828462][ T2415] shmem_mknod+0xd5/0x200 [ 90.828474][ T2415] shmem_mkdir+0x3b/0x80 [ 90.828486][ T2415] vfs_mkdir+0x58e/0x810 [ 90.828499][ T2415] do_mkdirat+0x240/0x530 [ 90.828511][ T2415] ? __cfi_do_mkdirat+0x10/0x10 [ 90.828523][ T2415] ? __kasan_check_write+0x18/0x20 [ 90.828537][ T2415] ? getname_flags+0x203/0x6b0 [ 90.828547][ T2415] ? __kasan_check_write+0x18/0x20 [ 90.828561][ T2415] __x64_sys_mkdirat+0x8b/0xa0 [ 90.828573][ T2415] x64_sys_call+0x2ba8/0x2ee0 [ 90.828584][ T2415] do_syscall_64+0x57/0xf0 [ 90.828595][ T2415] ? clear_bhb_loop+0x50/0xa0 [ 90.828617][ T2415] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.828631][ T2415] RIP: 0033:0x7f29c1fa8f19 [ 90.828642][ T2415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.828652][ T2415] RSP: 002b:00007f29c2e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 90.828665][ T2415] RAX: ffffffffffffffda RBX: 00007f29c2225fa0 RCX: 00007f29c1fa8f19 [ 90.828673][ T2415] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 90.828680][ T2415] RBP: 00007f29c2037f6d R08: 0000000000000000 R09: 0000000000000000 [ 90.828691][ T2415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.828697][ T2415] R13: 00007f29c2226038 R14: 00007f29c2225fa0 R15: 00007ffff2d570a8 [ 90.828707][ T2415] [ 91.115367][ T2417] syzkaller0: entered promiscuous mode [ 91.120977][ T2417] syzkaller0: entered allmulticast mode [ 91.139506][ T2421] 9pnet_fd: Insufficient options for proto=fd [ 91.168163][ T36] audit: type=1400 audit(1794420071.600:280): avc: denied { write } for pid=2422 comm="syz.2.860" name="anycast6" dev="proc" ino=4026532540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.456566][ T36] audit: type=1400 audit(1794420071.890:281): avc: denied { watch } for pid=2437 comm="syz.1.872" path="/221/file0" dev="tmpfs" ino=1219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.815277][ T409] usb 1-1: USB disconnect, device number 18 [ 91.840407][ T2444] syzkaller0: entered promiscuous mode [ 91.845982][ T2444] syzkaller0: entered allmulticast mode [ 91.899059][ T36] audit: type=1400 audit(1794420072.330:282): avc: denied { create } for pid=2445 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.952013][ T2453] 9pnet_fd: Insufficient options for proto=fd [ 92.071873][ T2467] tipc: Enabled bearer , priority 0 [ 92.079599][ T2467] tipc: Resetting bearer [ 92.085887][ T2466] tipc: Disabling bearer [ 92.156809][ T2471] 9pnet_fd: Insufficient options for proto=fd [ 92.169348][ T409] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 92.215352][ T2475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.269336][ T945] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 92.330500][ T409] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.340801][ T409] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.349895][ T409] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 92.358946][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.367692][ T409] usb 1-1: config 0 descriptor?? [ 92.430556][ T945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.442047][ T945] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 92.451116][ T945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 92.459181][ T945] usb 2-1: Product: syz [ 92.463355][ T945] usb 2-1: Manufacturer: syz [ 92.467963][ T945] usb 2-1: SerialNumber: syz [ 92.489341][ T413] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 92.640420][ T413] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.651608][ T413] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.661424][ T413] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.676779][ T413] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.683503][ T413] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 92.692767][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.695916][ T311] usb 1-1: USB disconnect, device number 19 [ 92.703031][ T413] usb 3-1: config 0 descriptor?? [ 93.118400][ T413] input: HID 13ec:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:13EC:0006.0005/input/input10 [ 93.133738][ T413] zydacron 0003:13EC:0006.0005: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 93.221526][ T2488] tipc: Enabled bearer , priority 0 [ 93.228873][ T2488] tipc: Resetting bearer [ 93.235350][ T2487] tipc: Disabling bearer [ 93.296809][ T2492] 9pnet_fd: Insufficient options for proto=fd [ 93.347884][ T2494] ================================================================== [ 93.355993][ T2494] BUG: KASAN: slab-use-after-free in string+0x20f/0x2b0 [ 93.362923][ T2494] Read of size 1 at addr ffff888106e8c180 by task syz.0.890/2494 [ 93.370631][ T2494] [ 93.372964][ T2494] CPU: 1 UID: 0 PID: 2494 Comm: syz.0.890 Not tainted syzkaller #0 ef3fe522eb78c0a5ba4bdac8f3746cbd31b933a5 [ 93.372990][ T2494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.372999][ T2494] Call Trace: [ 93.373004][ T2494] [ 93.373009][ T2494] __dump_stack+0x21/0x30 [ 93.373024][ T2494] dump_stack_lvl+0x140/0x1c0 [ 93.373035][ T2494] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.373046][ T2494] ? number+0xc9d/0xf00 [ 93.373058][ T2494] print_address_description+0x71/0x210 [ 93.373069][ T2494] print_report+0x4a/0x70 [ 93.373078][ T2494] kasan_report+0x162/0x1a0 [ 93.373091][ T2494] ? string+0x20f/0x2b0 [ 93.373102][ T2494] ? string+0x20f/0x2b0 [ 93.373111][ T2494] __asan_report_load1_noabort+0x18/0x20 [ 93.373127][ T2494] string+0x20f/0x2b0 [ 93.373137][ T2494] vsnprintf+0xe65/0x1ad0 [ 93.373147][ T2494] seq_printf+0x189/0x290 [ 93.373160][ T2494] ? __cfi_seq_printf+0x10/0x10 [ 93.373172][ T2494] ? __cfi__copy_to_iter+0x10/0x10 [ 93.373185][ T2494] ? __check_object_size+0x54c/0x870 [ 93.373200][ T2494] show_interrupts+0x6d2/0x7f0 [ 93.373211][ T2494] seq_read_iter+0xa7d/0xf30 [ 93.373223][ T2494] proc_reg_read_iter+0x1ea/0x2c0 [ 93.373239][ T2494] do_iter_readv_writev+0x62f/0x820 [ 93.373251][ T2494] ? vfs_iter_read+0x5e0/0x5e0 [ 93.373261][ T2494] ? bpf_lsm_file_permission+0xd/0x20 [ 93.373274][ T2494] vfs_readv+0x301/0xa00 [ 93.373286][ T2494] ? do_readv+0x2e0/0x2e0 [ 93.373300][ T2494] __x64_sys_preadv+0x19f/0x2c0 [ 93.373310][ T2494] ? __cfi___x64_sys_preadv+0x10/0x10 [ 93.373321][ T2494] ? switch_fpu_return+0x12/0x20 [ 93.373336][ T2494] x64_sys_call+0x1ee9/0x2ee0 [ 93.373347][ T2494] do_syscall_64+0x57/0xf0 [ 93.373358][ T2494] ? clear_bhb_loop+0x50/0xa0 [ 93.373372][ T2494] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.373385][ T2494] RIP: 0033:0x7fa7a69a8f19 [ 93.373396][ T2494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.373405][ T2494] RSP: 002b:00007fa7a53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 93.373417][ T2494] RAX: ffffffffffffffda RBX: 00007fa7a6c25fa0 RCX: 00007fa7a69a8f19 [ 93.373426][ T2494] RDX: 0000000000000001 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 93.373433][ T2494] RBP: 00007fa7a6a37f6d R08: 0000000080000002 R09: 0000000000000000 [ 93.373441][ T2494] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 93.373447][ T2494] R13: 00007fa7a6c26038 R14: 00007fa7a6c25fa0 R15: 00007fff3b9040c8 [ 93.373457][ T2494] [ 93.373460][ T2494] [ 93.625517][ T2494] Allocated by task 299: [ 93.629743][ T2494] kasan_save_track+0x3e/0x80 [ 93.634417][ T2494] kasan_save_alloc_info+0x3a/0x50 [ 93.639520][ T2494] __kasan_kmalloc+0x96/0xb0 [ 93.644186][ T2494] __kmalloc_node_noprof+0x252/0x500 [ 93.649469][ T2494] __vmalloc_node_range_noprof+0x529/0x1300 [ 93.655365][ T2494] vzalloc_noprof+0x103/0x1d0 [ 93.660030][ T2494] alloc_counters+0x75/0x530 [ 93.664607][ T2494] do_arpt_get_ctl+0xa79/0x10e0 [ 93.669452][ T2494] nf_getsockopt+0x288/0x2b0 [ 93.674058][ T2494] ip_getsockopt+0x15b/0x200 [ 93.678662][ T2494] tcp_getsockopt+0x106/0x130 [ 93.683354][ T2494] sock_common_getsockopt+0xb2/0xd0 [ 93.688563][ T2494] do_sock_getsockopt+0x3a1/0x6c0 [ 93.693606][ T2494] __x64_sys_getsockopt+0x1aa/0x250 [ 93.698822][ T2494] x64_sys_call+0x10db/0x2ee0 [ 93.703510][ T2494] do_syscall_64+0x57/0xf0 [ 93.707933][ T2494] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.713845][ T2494] [ 93.716170][ T2494] Freed by task 299: [ 93.720064][ T2494] kasan_save_track+0x3e/0x80 [ 93.724752][ T2494] kasan_save_free_info+0x44/0x50 [ 93.729793][ T2494] __kasan_slab_free+0x5f/0x80 [ 93.734547][ T2494] kfree+0x158/0x440 [ 93.738426][ T2494] kvfree+0x39/0x50 [ 93.742223][ T2494] vfree+0x4de/0x5b0 [ 93.746129][ T2494] do_arpt_get_ctl+0xdd3/0x10e0 [ 93.750970][ T2494] nf_getsockopt+0x288/0x2b0 [ 93.755541][ T2494] ip_getsockopt+0x15b/0x200 [ 93.760113][ T2494] tcp_getsockopt+0x106/0x130 [ 93.764774][ T2494] sock_common_getsockopt+0xb2/0xd0 [ 93.769958][ T2494] do_sock_getsockopt+0x3a1/0x6c0 [ 93.774968][ T2494] __x64_sys_getsockopt+0x1aa/0x250 [ 93.780174][ T2494] x64_sys_call+0x10db/0x2ee0 [ 93.784835][ T2494] do_syscall_64+0x57/0xf0 [ 93.789234][ T2494] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.795119][ T2494] [ 93.797438][ T2494] The buggy address belongs to the object at ffff888106e8c180 [ 93.797438][ T2494] which belongs to the cache kmalloc-8 of size 8 [ 93.811140][ T2494] The buggy address is located 0 bytes inside of [ 93.811140][ T2494] freed 8-byte region [ffff888106e8c180, ffff888106e8c188) [ 93.824576][ T2494] [ 93.826884][ T2494] The buggy address belongs to the physical page: [ 93.833288][ T2494] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106e8c [ 93.842123][ T2494] flags: 0x4000000000000000(zone=1) [ 93.847306][ T2494] page_type: f5(slab) [ 93.851268][ T2494] raw: 4000000000000000 ffff888100041500 ffffea00047ba500 dead000000000002 [ 93.859835][ T2494] raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 [ 93.868397][ T2494] page dumped because: kasan: bad access detected [ 93.874821][ T2494] page_owner tracks the page as allocated [ 93.880516][ T2494] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2266472799, free_ts 0 [ 93.898033][ T2494] post_alloc_hook+0x37d/0x3b0 [ 93.902787][ T2494] prep_new_page+0x2d/0x180 [ 93.907274][ T2494] get_page_from_freelist+0x4aea/0x4ba0 [ 93.912805][ T2494] __alloc_pages_noprof+0x35a/0x7e0 [ 93.917998][ T2494] alloc_slab_page+0x6b/0x1e0 [ 93.922658][ T2494] allocate_slab+0x69/0x430 [ 93.927163][ T2494] ___slab_alloc+0x591/0x8c0 [ 93.931733][ T2494] __kmalloc_node_track_caller_noprof+0x2e3/0x4f0 [ 93.938134][ T2494] kstrdup+0x4d/0x130 [ 93.942100][ T2494] kstrdup_const+0x45/0x60 [ 93.946498][ T2494] __kernfs_new_node+0xaa/0x740 [ 93.951328][ T2494] kernfs_new_node+0x154/0x280 [ 93.956071][ T2494] kernfs_create_link+0xa8/0x200 [ 93.960992][ T2494] sysfs_do_create_link_sd+0x8a/0x120 [ 93.966349][ T2494] sysfs_create_link+0x6c/0x90 [ 93.971108][ T2494] device_add_class_symlinks+0x1dd/0x260 [ 93.976723][ T2494] page_owner free stack trace missing [ 93.982069][ T2494] [ 93.984373][ T2494] Memory state around the buggy address: [ 93.989980][ T2494] ffff888106e8c080: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 93.998026][ T2494] ffff888106e8c100: fa fc fc fc 00 fc fc fc 00 fc fc fc 06 fc fc fc [ 94.006071][ T2494] >ffff888106e8c180: fa fc fc fc 06 fc fc fc 06 fc fc fc 00 fc fc fc [ 94.014118][ T2494] ^ [ 94.018171][ T2494] ffff888106e8c200: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 94.026213][ T2494] ffff888106e8c280: fa fc fc fc 05 fc fc fc fa fc fc fc 00 fc fc fc [ 94.034254][ T2494] ================================================================== [ 94.042324][ T2494] Disabling lock debugging due to kernel taint [ 94.054970][ T36] audit: type=1400 audit(1794420074.490:283): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.076747][ T36] audit: type=1400 audit(1794420074.490:284): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.098111][ T36] audit: type=1400 audit(1794420074.490:285): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.119337][ T36] audit: type=1400 audit(1794420074.490:286): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.139947][ T36] audit: type=1400 audit(1794420074.490:287): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.160440][ T36] audit: type=1400 audit(1794420074.490:288): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.183302][ T36] audit: type=1400 audit(1794420074.490:289): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.339526][ T945] usb 3-1: reset full-speed USB device number 31 using dummy_hcd [ 95.026861][ T1145] usb 2-1: USB disconnect, device number 26 [ 95.109628][ T413] usb 3-1: USB disconnect, device number 31