last executing test programs: 31.563043609s ago: executing program 1 (id=244): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0xc7) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000023, 0x0) 31.56279529s ago: executing program 1 (id=245): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) 31.411320504s ago: executing program 1 (id=246): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, &(0x7f0000000080)=0x1) 31.370466905s ago: executing program 1 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 31.311110706s ago: executing program 1 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000640)="2e1221b23bb601c477d3df163e75963d86dd606712e9000c118db0049d28b31c32a790343c48040000db6c51f77e9e146261f3a8b1ec04498100", 0x3a}], 0x1) 31.301880636s ago: executing program 1 (id=250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "fdfdeb69a700000000810810010200000000000000000008000000000000efff", '\x00\t\x00', "066580001e00"}, 0x38) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="817d4410fd2068200d2d4706a2702b0c", 0x10}], 0x1) 31.271617277s ago: executing program 32 (id=250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "fdfdeb69a700000000810810010200000000000000000008000000000000efff", '\x00\t\x00', "066580001e00"}, 0x38) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="817d4410fd2068200d2d4706a2702b0c", 0x10}], 0x1) 10.711161792s ago: executing program 2 (id=570): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 7.97681564s ago: executing program 2 (id=640): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x88041, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 7.911142232s ago: executing program 2 (id=641): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cf}, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) 7.824008604s ago: executing program 2 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 7.823767874s ago: executing program 2 (id=643): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x81) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000140), 0x0, 0x0, 0x2) 7.823652454s ago: executing program 2 (id=644): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='attr/fscreate\x00') write$binfmt_format(r2, 0x0, 0x0) 7.778225875s ago: executing program 33 (id=644): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='attr/fscreate\x00') write$binfmt_format(r2, 0x0, 0x0) 1.294848978s ago: executing program 4 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x8000000, 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) 1.075202143s ago: executing program 4 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1.071776593s ago: executing program 4 (id=813): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xfffffff9}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) 879.164418ms ago: executing program 0 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 878.923518ms ago: executing program 4 (id=817): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) 878.802158ms ago: executing program 0 (id=818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x141440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @pic={0x6, 0x36, 0x4, 0x10, 0x6f, 0x1, 0x2, 0x83, 0x10, 0x80, 0x3b, 0x7, 0x7, 0x8, 0x1}}) 839.564979ms ago: executing program 4 (id=820): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="de49f2"], 0xd) 774.80408ms ago: executing program 4 (id=821): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_cmd={0x17, 0x6, 0x6, 0x19c, 0x7, 0x7, 0x7, 0x5, 0x0, 0x8, 0x6, 0xe, 0x7810, 0x5, 0x5, 0xa, [0x7, 0xd]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 774.49192ms ago: executing program 0 (id=822): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) 758.188221ms ago: executing program 0 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) 710.625812ms ago: executing program 0 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 627.096394ms ago: executing program 0 (id=827): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 621.130124ms ago: executing program 5 (id=829): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r2}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x123, {0x0, 0x0, 0x0, 0x4, 0x8}}) 499.318297ms ago: executing program 3 (id=830): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d01, &(0x7f0000000040)) 315.185402ms ago: executing program 3 (id=831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 314.900052ms ago: executing program 5 (id=832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x200008c0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x21) 258.661533ms ago: executing program 5 (id=833): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 252.646503ms ago: executing program 3 (id=834): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)=""/51, 0x33}, 0x9}], 0x1, 0x2023, 0x0) 180.995846ms ago: executing program 3 (id=835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000080)) 180.706806ms ago: executing program 5 (id=836): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) 99.058728ms ago: executing program 3 (id=837): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x100000b, 0x12, r0, 0xffffc000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000249000/0x2000)=nil, &(0x7f0000059000/0x4000)=nil, 0x2000}) 98.803788ms ago: executing program 3 (id=838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f798bde0066b8ab241baa0f23c00f21f86635020006000f23f86465d9ea3e360f320fc779de66b97100004066b80000000066ba000001000f30646fbaa000edba6100b8baa4ef2e0f01cf", 0x4b}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.084198ms ago: executing program 5 (id=839): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 5 (id=840): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dummy_udc.0\n', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 30.305426][ T36] audit: type=1400 audit(1786507376.430:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.308587][ T286] cgroup: Unknown subsys name 'net' [ 30.328231][ T36] audit: type=1400 audit(1786507376.430:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.355455][ T36] audit: type=1400 audit(1786507376.460:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.357447][ T286] cgroup: Unknown subsys name 'devices' [ 30.459309][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.464938][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.579989][ T36] audit: type=1400 audit(1786507376.710:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.603182][ T36] audit: type=1400 audit(1786507376.710:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.628025][ T36] audit: type=1400 audit(1786507376.710:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.658471][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.667341][ T36] audit: type=1400 audit(1786507376.800:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.692765][ T36] audit: type=1400 audit(1786507376.800:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.720201][ T36] audit: type=1400 audit(1786507376.850:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.745881][ T36] audit: type=1400 audit(1786507376.850:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.746618][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.615121][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.622282][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.629404][ T293] bridge_slave_0: entered allmulticast mode [ 31.635782][ T293] bridge_slave_0: entered promiscuous mode [ 31.647448][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.654520][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.661670][ T293] bridge_slave_1: entered allmulticast mode [ 31.668075][ T293] bridge_slave_1: entered promiscuous mode [ 31.685839][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.692900][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.700039][ T296] bridge_slave_0: entered allmulticast mode [ 31.706281][ T296] bridge_slave_0: entered promiscuous mode [ 31.715901][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.723032][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.730184][ T296] bridge_slave_1: entered allmulticast mode [ 31.736439][ T296] bridge_slave_1: entered promiscuous mode [ 31.798511][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.805596][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.812720][ T294] bridge_slave_0: entered allmulticast mode [ 31.819260][ T294] bridge_slave_0: entered promiscuous mode [ 31.837367][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.844429][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.851569][ T294] bridge_slave_1: entered allmulticast mode [ 31.857846][ T294] bridge_slave_1: entered promiscuous mode [ 31.863835][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.870943][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.878081][ T295] bridge_slave_0: entered allmulticast mode [ 31.884276][ T295] bridge_slave_0: entered promiscuous mode [ 31.904766][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.911854][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.918960][ T295] bridge_slave_1: entered allmulticast mode [ 31.925175][ T295] bridge_slave_1: entered promiscuous mode [ 32.012759][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.019848][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.027164][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.034223][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.064257][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.071338][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.078674][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.085797][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.111850][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.118944][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.126218][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.133266][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.171159][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.178892][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.186590][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.193819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.201533][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.215667][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.222866][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.255698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.262782][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.278184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.285222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.310297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.317372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.325317][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.332403][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.352658][ T296] veth0_vlan: entered promiscuous mode [ 32.361939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.369120][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.384511][ T294] veth0_vlan: entered promiscuous mode [ 32.394824][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.401928][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.434214][ T296] veth1_macvtap: entered promiscuous mode [ 32.444055][ T294] veth1_macvtap: entered promiscuous mode [ 32.465837][ T295] veth0_vlan: entered promiscuous mode [ 32.479979][ T293] veth0_vlan: entered promiscuous mode [ 32.519487][ T295] veth1_macvtap: entered promiscuous mode [ 32.523514][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.528391][ T293] veth1_macvtap: entered promiscuous mode [ 32.567078][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.649847][ T321] syzkaller1: entered promiscuous mode [ 32.655413][ T321] syzkaller1: entered allmulticast mode [ 33.037079][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.208260][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.219290][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.229130][ T310] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 33.238624][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.247920][ T310] usb 3-1: config 0 descriptor?? [ 33.658797][ T310] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 33.666156][ T310] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 33.673481][ T310] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 33.680884][ T310] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 33.688461][ T310] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 33.703690][ T310] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 34.056527][ T386] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 34.124720][ T390] syzkaller1: entered promiscuous mode [ 34.130285][ T390] syzkaller1: entered allmulticast mode [ 34.147633][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.297025][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 34.303368][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.314826][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 34.325852][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 34.339271][ T10] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 34.348375][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.357632][ T10] usb 4-1: config 0 descriptor?? [ 34.498320][ T310] usb 3-1: USB disconnect, device number 2 [ 34.776597][ T10] nintendo 0003:057E:2019.0002: item fetching failed at offset 4/5 [ 34.791512][ T10] nintendo 0003:057E:2019.0002: HID parse failed [ 34.800540][ T10] nintendo 0003:057E:2019.0002: probe - fail = -22 [ 34.820079][ T10] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -22 [ 34.968991][ T310] usb 4-1: USB disconnect, device number 2 [ 35.268823][ T504] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.63'. [ 35.397141][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.497060][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.517062][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 35.517079][ T36] audit: type=1400 audit(1786507381.640:163): avc: denied { create } for pid=529 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.548224][ T36] audit: type=1400 audit(1786507381.650:164): avc: denied { bind } for pid=529 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.567503][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 35.573754][ T36] audit: type=1400 audit(1786507381.650:165): avc: denied { listen } for pid=529 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.595308][ T36] audit: type=1400 audit(1786507381.650:166): avc: denied { connect } for pid=529 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.605668][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.626398][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.649065][ T36] audit: type=1400 audit(1786507381.700:167): avc: denied { write } for pid=531 comm="syz.0.72" name="usb_gadget" dev="configfs" ino=1327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.673056][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.682382][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.688329][ T36] audit: type=1400 audit(1786507381.700:168): avc: denied { add_name } for pid=531 comm="syz.0.72" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.691197][ T10] usb 3-1: Product: syz [ 35.711847][ T36] audit: type=1400 audit(1786507381.700:169): avc: denied { create } for pid=531 comm="syz.0.72" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 35.725870][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.739304][ T36] audit: type=1400 audit(1786507381.710:170): avc: denied { write } for pid=531 comm="syz.0.72" name="bmControls" dev="configfs" ino=4641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 35.753235][ T10] usb 3-1: Manufacturer: syz [ 35.772767][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.774458][ T36] audit: type=1400 audit(1786507381.710:171): avc: denied { open } for pid=531 comm="syz.0.72" path="/34/config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls" dev="configfs" ino=4641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 35.812953][ T10] usb 3-1: SerialNumber: syz [ 35.818058][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 35.827545][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.837908][ T9] usb 2-1: config 0 descriptor?? [ 35.999272][ T36] audit: type=1400 audit(1786507382.130:172): avc: denied { create } for pid=546 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.040299][ T10] usb 3-1: 0:2 : does not exist [ 36.049225][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 36.071341][ T10] usb 3-1: USB disconnect, device number 3 [ 36.091454][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.177836][ T552] ======================================================= [ 36.177836][ T552] WARNING: The mand mount option has been deprecated and [ 36.177836][ T552] and is ignored by this kernel. Remove the mand [ 36.177836][ T552] option from the mount to silence this warning. [ 36.177836][ T552] ======================================================= [ 36.239093][ T554] syzkaller1: entered promiscuous mode [ 36.244677][ T554] syzkaller1: entered allmulticast mode [ 36.251342][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 36.260654][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 36.268307][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 36.275806][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 36.283726][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 36.292249][ T9] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 36.622999][ T584] loop5: detected capacity change from 0 to 17863 [ 36.644546][ T316] Buffer I/O error on dev loop5, logical block 2232, async page read [ 36.651739][ T584] loop5: detected capacity change from 17863 to 22871 [ 36.680007][ T316] Buffer I/O error on dev loop5, logical block 2858, async page read [ 36.728724][ T592] capability: warning: `syz.2.99' uses deprecated v2 capabilities in a way that may be insecure [ 36.850676][ T9] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (3), disabling calibration. [ 36.873938][ T9] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (4), disabling calibration. [ 36.885759][ T9] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (5), disabling calibration. [ 36.907991][ T9] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 36.923681][ T612] syz_tun: entered allmulticast mode [ 36.929639][ T612] syz_tun: left allmulticast mode [ 36.937158][ T9] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 36.958601][ T9] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 36.993118][ T9] input: HID 054c:0df2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0003/input/input4 [ 37.029517][ T9] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0003/input/input5 [ 37.086330][ T9] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0003/input/input6 [ 37.149349][ T9] playstation 0003:054C:0DF2.0003: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 37.175602][ T9] usb 2-1: USB disconnect, device number 2 [ 37.347014][ T534] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.437573][ T642] syzkaller1: entered promiscuous mode [ 37.443183][ T642] syzkaller1: entered allmulticast mode [ 37.500635][ T534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.518761][ T534] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.528962][ T534] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.547005][ T534] usb 1-1: config 1 interface 0 has no altsetting 0 [ 37.555104][ T534] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 37.565013][ T534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.573082][ T534] usb 1-1: Product: syz [ 37.577334][ T534] usb 1-1: Manufacturer: syz [ 37.581959][ T534] usb 1-1: SerialNumber: syz [ 37.801922][ T534] usb 1-1: 0:1 : does not exist [ 37.811302][ T534] usb 1-1: USB disconnect, device number 2 [ 37.825769][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.967030][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.127409][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 38.137100][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.144158][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 38.153345][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.165171][ T10] usb 2-1: config 0 descriptor?? [ 38.282364][ T670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.132'. [ 38.292342][ T670] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.301450][ T670] bridge_slave_0 (unregistering): left allmulticast mode [ 38.308566][ T670] bridge_slave_0 (unregistering): left promiscuous mode [ 38.315567][ T670] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.474951][ T688] Bluetooth: ISO socket layer initialized [ 38.578318][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x1 [ 38.587768][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x4 [ 38.594790][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.602310][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.609500][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.616670][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.624794][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.632096][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.639297][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.646389][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.653583][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.660751][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.667933][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.675043][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.682234][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.690360][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.697500][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.704587][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.711773][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.718984][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.725966][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.733537][ T10] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 38.748412][ T10] elecom 0003:056E:00FB.0004: hidraw0: USB HID v0.dc Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0 [ 38.798057][ T10] usb 2-1: USB disconnect, device number 3 [ 38.899665][ T713] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.899682][ T713] rust_binder: Read failure Err(EFAULT) in pid:144 [ 38.908273][ T713] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.914908][ T713] rust_binder: Read failure Err(EFAULT) in pid:144 [ 39.084895][ T725] syzkaller1: entered promiscuous mode [ 39.097330][ T725] syzkaller1: entered allmulticast mode [ 39.160220][ T731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.296458][ T745] SELinux: ebitmap: empty map [ 39.302731][ T745] SELinux: failed to load policy [ 39.388133][ T758] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.741316][ T798] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 39.830671][ T806] kvm: kvm [805]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 39.839530][ T806] kvm: kvm [805]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 40.048116][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 40.107984][ T829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 40.198731][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.214591][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 40.237393][ T10] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 40.252957][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.261346][ T10] usb 2-1: Product: syz [ 40.266285][ T10] usb 2-1: Manufacturer: syz [ 40.271109][ T10] usb 2-1: SerialNumber: syz [ 40.457400][ T865] kvm: user requested TSC rate below hardware speed [ 40.467775][ T865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 40.509892][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.525864][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 40.541332][ T10] usb 2-1: USB disconnect, device number 4 [ 40.556438][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.572322][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 40.572339][ T36] audit: type=1400 audit(1786507386.680:238): avc: denied { read append } for pid=873 comm="syz.3.217" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.610408][ T36] audit: type=1400 audit(1786507386.680:239): avc: denied { open } for pid=873 comm="syz.3.217" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.633431][ T36] audit: type=1400 audit(1786507386.680:240): avc: denied { map } for pid=873 comm="syz.3.217" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.676602][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 40.821793][ T36] audit: type=1400 audit(1786507386.950:241): avc: denied { mount } for pid=887 comm="syz.0.223" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.905507][ T36] audit: type=1400 audit(1786507387.030:242): avc: denied { read write } for pid=892 comm="syz.3.225" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.914503][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 40.957040][ T36] audit: type=1400 audit(1786507387.030:243): avc: denied { open } for pid=892 comm="syz.3.225" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.958853][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.053282][ T899] syzkaller1: entered promiscuous mode [ 41.072707][ T899] syzkaller1: entered allmulticast mode [ 41.078386][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.092620][ T36] audit: type=1400 audit(1786507387.220:244): avc: denied { write } for pid=892 comm="syz.3.225" name="hidraw0" dev="devtmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.126472][ T36] audit: type=1400 audit(1786507387.250:245): avc: denied { append } for pid=902 comm="syz.2.228" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.169671][ T903] kvm: kvm [902]: vcpu0, guest rIP: 0x540a3 Unhandled RDMSR(0x40000005) [ 41.228169][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 41.237412][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.267068][ T911] netlink: 'syz.1.232': attribute type 8 has an invalid length. [ 41.274873][ T911] netlink: 'syz.1.232': attribute type 32 has an invalid length. [ 41.288103][ T913] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 41.302460][ T913] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 41.317155][ T913] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 41.346411][ T36] audit: type=1400 audit(1786507387.470:246): avc: denied { create } for pid=916 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.368518][ T36] audit: type=1400 audit(1786507387.500:247): avc: denied { setopt } for pid=916 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.448631][ T310] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 41.667050][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.701585][ T310] usb 1-1: USB disconnect, device number 3 [ 41.828026][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 41.849735][ T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 41.862941][ T311] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 41.877629][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.886783][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.894978][ T311] usb 3-1: Product: syz [ 41.899762][ T311] usb 3-1: Manufacturer: syz [ 41.904405][ T311] usb 3-1: SerialNumber: syz [ 41.950869][ T937] syzkaller1: entered promiscuous mode [ 41.956387][ T937] syzkaller1: entered allmulticast mode [ 42.604780][ T957] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.611878][ T957] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.618970][ T957] bridge_slave_0: entered allmulticast mode [ 42.625340][ T957] bridge_slave_0: entered promiscuous mode [ 42.632104][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.639190][ T957] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.646270][ T957] bridge_slave_1: entered allmulticast mode [ 42.652693][ T957] bridge_slave_1: entered promiscuous mode [ 42.713966][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.721075][ T957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.728413][ T957] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.735476][ T957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.763449][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.771179][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.781064][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.788166][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.797872][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.804957][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.836648][ T957] veth0_vlan: entered promiscuous mode [ 42.850631][ T957] veth1_macvtap: entered promiscuous mode [ 42.922568][ T311] cdc_ncm 3-1:1.0: bind() failure [ 42.934047][ T311] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 42.946668][ T311] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 42.960273][ T311] usb 3-1: USB disconnect, device number 4 [ 43.048889][ T976] kvm: kvm [975]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 43.058354][ T976] kvm: kvm [975]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 43.070694][ T976] kvm: kvm [975]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 43.083556][ T976] kvm: kvm [975]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 43.095398][ T976] kvm: kvm [975]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 43.377039][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.528287][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.538631][ T311] usb 4-1: config 0 has no interfaces? [ 43.544500][ T311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.554131][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.566263][ T311] usb 4-1: config 0 descriptor?? [ 43.976379][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.985169][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.993951][ T311] usb 4-1: USB disconnect, device number 3 [ 44.238295][ T995] loop7: detected capacity change from 0 to 16384 [ 44.257750][ T995] loop7: detected capacity change from 16384 to 16383 [ 44.517056][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.517773][ T954] Bluetooth: hci0: command 0x1003 tx timeout [ 44.624647][ T13] bridge_slave_1: left allmulticast mode [ 44.630823][ T13] bridge_slave_1: left promiscuous mode [ 44.636518][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.645452][ T13] bridge_slave_0: left allmulticast mode [ 44.651509][ T13] bridge_slave_0: left promiscuous mode [ 44.658225][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.667122][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.819725][ T13] veth1_macvtap: left promiscuous mode [ 44.825401][ T13] veth0_vlan: left promiscuous mode [ 44.836265][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.848438][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.859557][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.873527][ T311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.882846][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.894777][ T311] usb 3-1: config 0 descriptor?? [ 45.207030][ T62] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.246146][ T1034] syzkaller1: entered promiscuous mode [ 45.251753][ T1034] syzkaller1: entered allmulticast mode [ 45.306167][ T311] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 45.321300][ T311] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 45.377114][ T62] usb 1-1: Using ep0 maxpacket: 8 [ 45.578354][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 45.578373][ T36] audit: type=1400 audit(1786507391.710:258): avc: denied { read append } for pid=1050 comm="syz.3.290" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.608579][ T36] audit: type=1400 audit(1786507391.710:259): avc: denied { open } for pid=1050 comm="syz.3.290" path="/91/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.617195][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.644475][ T36] audit: type=1400 audit(1786507391.710:260): avc: denied { ioctl } for pid=1050 comm="syz.3.290" path="/91/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.670813][ T36] audit: type=1400 audit(1786507391.710:261): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 45.838132][ T10] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 45.846334][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.857339][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.867130][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.880310][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.889422][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.898395][ T10] usb 5-1: config 0 descriptor?? [ 46.057021][ T1055] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.207006][ T1055] usb 4-1: Using ep0 maxpacket: 32 [ 46.213403][ T1055] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.221750][ T1055] usb 4-1: config 0 has no interface number 0 [ 46.227985][ T1055] usb 4-1: config 0 interface 184 has no altsetting 0 [ 46.236322][ T1055] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 46.245426][ T1055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.253585][ T1055] usb 4-1: Product: syz [ 46.257846][ T1055] usb 4-1: Manufacturer: syz [ 46.262547][ T1055] usb 4-1: SerialNumber: syz [ 46.268153][ T1055] usb 4-1: config 0 descriptor?? [ 46.275929][ T1055] smsc75xx v1.0.0 [ 46.307619][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 46.316777][ T10] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 46.326118][ T10] plantronics 0003:047F:FFFF.0007: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 46.627092][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 46.649133][ T10] usb 5-1: USB disconnect, device number 2 [ 46.877258][ T1055] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 46.888139][ T1055] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 47.157033][ T36] audit: type=1400 audit(1786507393.280:262): avc: denied { execute } for pid=1062 comm="syz.2.293" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 47.185388][ T36] audit: type=1400 audit(1786507393.290:263): avc: denied { ioctl } for pid=1062 comm="syz.2.293" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 47.305449][ T1055] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 47.317159][ T1055] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 47.338733][ T1055] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 47.348411][ T1055] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 47.368298][ T1055] usb 4-1: USB disconnect, device number 4 [ 47.434892][ T534] usb 3-1: USB disconnect, device number 5 [ 47.533754][ T36] audit: type=1400 audit(1786507393.660:264): avc: denied { ioctl } for pid=1082 comm="syz.4.302" path="socket:[8743]" dev="sockfs" ino=8743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.847051][ T534] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 47.957040][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 47.970669][ T62] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.979977][ T62] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 47.990525][ T62] usb 1-1: can't read configurations, error -71 [ 47.998151][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.009267][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.024410][ T534] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.037563][ T534] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.046771][ T534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.055988][ T534] usb 3-1: config 0 descriptor?? [ 48.103939][ T36] audit: type=1400 audit(1786507394.230:265): avc: denied { setopt } for pid=1104 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.124448][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 48.130903][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.151262][ T311] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 48.160637][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.168713][ T311] usb 5-1: Product: syz [ 48.174389][ T311] usb 5-1: Manufacturer: syz [ 48.179076][ T311] usb 5-1: SerialNumber: syz [ 48.188549][ T311] usb 5-1: config 0 descriptor?? [ 48.266581][ T36] audit: type=1400 audit(1786507394.390:266): avc: denied { read } for pid=1111 comm="syz.0.315" name="/" dev="configfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.288730][ T36] audit: type=1400 audit(1786507394.390:267): avc: denied { open } for pid=1111 comm="syz.0.315" path="/" dev="configfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.398590][ T1090] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 48.407334][ T45] usb 5-1: USB disconnect, device number 3 [ 48.468974][ T534] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 48.481325][ T534] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 49.155462][ T1149] syzkaller1: entered promiscuous mode [ 49.161409][ T1149] syzkaller1: entered allmulticast mode [ 49.227020][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 49.387113][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.395837][ T45] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 49.406774][ T45] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 49.419787][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 49.428647][ T45] usb 4-1: string descriptor 0 read error: -22 [ 49.434875][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 49.443985][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.487040][ T62] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.538472][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.547058][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.557226][ T311] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.566235][ T311] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 49.577197][ T311] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 49.590489][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 49.601428][ T311] usb 1-1: config 1 interface 1 has no altsetting 0 [ 49.610223][ T311] usb 1-1: string descriptor 0 read error: -22 [ 49.616492][ T311] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 49.625596][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.637049][ T62] usb 5-1: Using ep0 maxpacket: 32 [ 49.643420][ T62] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 49.651670][ T62] usb 5-1: config 0 has no interface number 0 [ 49.659127][ T62] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 49.669327][ T62] usb 5-1: config 0 interface 184 has no altsetting 0 [ 49.677592][ T62] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.686672][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.694732][ T62] usb 5-1: Product: syz [ 49.698963][ T62] usb 5-1: Manufacturer: syz [ 49.703606][ T62] usb 5-1: SerialNumber: syz [ 49.709105][ T62] usb 5-1: config 0 descriptor?? [ 49.715141][ T1156] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 49.723080][ T62] smsc75xx v1.0.0 [ 49.777124][ C0] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 49.861817][ T45] logitech 0003:046D:C626.0009: unknown main item tag 0x2 [ 49.869091][ T45] logitech 0003:046D:C626.0009: unexpected long global item [ 49.876672][ T45] logitech 0003:046D:C626.0009: parse failed [ 49.882768][ T45] logitech 0003:046D:C626.0009: probe with driver logitech failed with error -22 [ 49.924260][ T1156] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 50.069377][ T10] usb 4-1: USB disconnect, device number 5 [ 50.362127][ T1158] 9pnet: p9_errstr2errno: server reported unknown error  [ 50.441301][ T311] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 50.452459][ T311] usb 1-1: Warning! Unlikely big volume range (=16384), cval->res is probably wrong. [ 50.462190][ T311] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/16384/1 [ 50.479678][ T311] usb 1-1: USB disconnect, device number 6 [ 50.567145][ T310] usb 3-1: USB disconnect, device number 6 [ 50.606990][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 50.607026][ T36] audit: type=1400 audit(1786507396.730:269): avc: denied { create } for pid=1165 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 50.637243][ T36] audit: type=1400 audit(1786507396.760:270): avc: denied { sys_admin } for pid=1165 comm="syz.3.339" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 50.802277][ T1171] netlink: 679 bytes leftover after parsing attributes in process `syz.3.341'. [ 50.838160][ T36] audit: type=1400 audit(1786507396.970:271): avc: denied { write } for pid=1177 comm="syz.3.343" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.934695][ T62] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 50.945639][ T62] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.955251][ T62] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 50.966319][ T62] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 50.976153][ T62] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 50.986654][ T62] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 50.996253][ T62] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 51.004312][ T36] audit: type=1400 audit(1786507397.130:272): avc: denied { accept } for pid=1183 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.013617][ T62] usb 5-1: USB disconnect, device number 4 [ 51.037214][ T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 51.177092][ T311] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 51.200896][ T310] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 51.211070][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.225227][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.235082][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.245237][ T310] usb 3-1: SerialNumber: syz [ 51.251543][ T1169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.327842][ T311] usb 4-1: not running at top speed; connect to a high speed hub [ 51.329249][ T1209] serio: Serial port ptm0 [ 51.337806][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.350216][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 51.359467][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.371873][ T311] usb 4-1: Found UVC 1.00 device (046d:0825) [ 51.457019][ T36] audit: type=1400 audit(1786507397.580:273): avc: denied { cmd } for pid=1210 comm="iou-wrk-1211" path="socket:[9507]" dev="sockfs" ino=9507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.491658][ T310] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 51.505521][ T310] usb 3-1: USB disconnect, device number 7 [ 51.511651][ T1215] netlink: 64 bytes leftover after parsing attributes in process `syz.4.354'. [ 51.539279][ T36] audit: type=1400 audit(1786507397.670:274): avc: denied { setopt } for pid=1217 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.579402][ T36] audit: type=1400 audit(1786507397.690:275): avc: denied { bind } for pid=1217 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.622036][ T1222] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 51.671685][ T1226] syzkaller1: entered promiscuous mode [ 51.677286][ T1226] syzkaller1: entered allmulticast mode [ 51.771800][ T311] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 51.781769][ T311] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 51.790894][ T311] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 51.799517][ T311] usb 4-1: USB disconnect, device number 6 [ 51.837036][ T1208] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.987017][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 51.993482][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.004454][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.014265][ T1208] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.023591][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.035297][ T1208] usb 5-1: config 0 descriptor?? [ 52.043547][ T1208] hub 5-1:0.0: USB hub found [ 52.100281][ T1237] rust_binder: Write failure EFAULT in pid:186 [ 52.175153][ T1242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.194342][ T36] audit: type=1400 audit(1786507398.320:276): avc: denied { bind } for pid=1241 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.213899][ T36] audit: type=1400 audit(1786507398.320:277): avc: denied { name_bind } for pid=1241 comm="syz.2.366" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 52.234810][ T36] audit: type=1400 audit(1786507398.320:278): avc: denied { node_bind } for pid=1241 comm="syz.2.366" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 52.256257][ T1243] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.259750][ T1208] hub 5-1:0.0: 1 port detected [ 52.331702][ T1249] input: syz1 as /devices/virtual/input/input9 [ 52.486411][ T1261] syzkaller1: entered promiscuous mode [ 52.492131][ T1261] syzkaller1: entered allmulticast mode [ 52.857051][ T310] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 52.872146][ T1208] hub 5-1:0.0: activate --> -90 [ 52.877115][ T1055] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.008074][ T310] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 53.016319][ T310] usb 4-1: config 0 has no interface number 0 [ 53.022485][ T310] usb 4-1: config 0 interface 41 has no altsetting 0 [ 53.030868][ T310] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 53.039781][ T1055] usb 1-1: Using ep0 maxpacket: 32 [ 53.042010][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.056713][ T1055] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 53.058924][ T310] usb 4-1: Product: syz [ 53.065976][ T1055] usb 1-1: config 0 has no interface number 0 [ 53.070327][ T310] usb 4-1: Manufacturer: syz [ 53.080255][ T310] usb 4-1: SerialNumber: syz [ 53.081994][ T1055] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 53.085324][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 53.096266][ T534] usb 5-1: USB disconnect, device number 5 [ 53.105207][ T310] usb 4-1: config 0 descriptor?? [ 53.112417][ T1055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.122293][ T1055] usb 1-1: Product: syz [ 53.126985][ T1055] usb 1-1: Manufacturer: syz [ 53.131777][ T1055] usb 1-1: SerialNumber: syz [ 53.137163][ T1055] usb 1-1: config 0 descriptor?? [ 53.143229][ T1055] smsc95xx v2.0.0 [ 53.831882][ T311] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 53.922071][ T310] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 53.947663][ T1055] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 53.988114][ T311] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 53.996846][ T311] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 54.007071][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.016082][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 54.027086][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 54.039511][ T311] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.048849][ T311] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.057301][ T311] usb 3-1: Product: syz [ 54.061566][ T311] usb 3-1: Manufacturer: syz [ 54.069725][ T311] cdc_wdm 3-1:1.0: skipping garbage [ 54.075107][ T311] cdc_wdm 3-1:1.0: skipping garbage [ 54.087331][ T311] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 54.093309][ T311] cdc_wdm 3-1:1.0: Unknown control protocol [ 54.117803][ T1331] input: syz1 as /devices/virtual/input/input10 [ 54.136181][ T310] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 54.147196][ T310] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 54.157444][ T310] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 54.170276][ T1055] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 54.181372][ T310] usb 4-1: USB disconnect, device number 7 [ 54.187323][ T1055] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 54.198102][ T1055] usb 1-1: USB disconnect, device number 7 [ 54.457053][ T311] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 54.471648][ T310] usb 3-1: USB disconnect, device number 8 [ 54.614643][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.623442][ T311] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 54.631076][ T311] usb 5-1: can't read configurations, error -71 [ 54.799055][ T1355] SELinux: failed to load policy [ 54.924532][ T1363] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 54.984775][ T1376] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 54.992741][ T1376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.420'. [ 55.457023][ T1055] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 55.607006][ T1055] usb 3-1: Using ep0 maxpacket: 16 [ 55.613419][ T1055] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.624719][ T1055] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.637685][ T1055] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 55.646736][ T1055] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.655564][ T1055] usb 3-1: config 0 descriptor?? [ 56.027029][ T311] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 56.073514][ T1055] HID 045e:07da: Invalid code 65791 type 1 [ 56.080513][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 56.080530][ T36] audit: type=1400 audit(1786507402.210:289): avc: denied { read } for pid=1421 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.108644][ T1055] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input11 [ 56.181313][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.196905][ T311] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 56.216024][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 56.228226][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 56.262268][ T1430] process 'syz.0.444' launched './file0' with NULL argv: empty string added [ 56.271233][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 56.294239][ T311] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 56.313516][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 56.322148][ T311] usb 5-1: Product: syz [ 56.326456][ T311] usb 5-1: Manufacturer: syz [ 56.334288][ T311] usb 5-1: SerialNumber: syz [ 56.344386][ T311] usb 5-1: config 0 descriptor?? [ 56.440877][ T1055] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 56.567025][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 56.679363][ T1055] usb 3-1: USB disconnect, device number 9 [ 56.718105][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.728335][ T310] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.743000][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.752268][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.762141][ T311] usb 5-1: USB disconnect, device number 8 [ 56.769857][ T310] usb 1-1: Product: syz [ 56.774065][ T310] usb 1-1: Manufacturer: syz [ 56.782148][ T310] usb 1-1: SerialNumber: syz [ 56.928345][ T1434] tipc: Started in network mode [ 56.933458][ T1434] tipc: Node identity 7f000001, cluster identity 4711 [ 56.940723][ T1434] tipc: Enabled bearer , priority 10 [ 56.947708][ T1434] tipc: Disabling bearer [ 56.991386][ T310] cdc_ncm 1-1:1.0: bind() failure [ 57.004299][ T310] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 57.011150][ T310] cdc_ncm 1-1:1.1: bind() failure [ 57.017316][ T310] usb 1-1: USB disconnect, device number 8 [ 57.421254][ T36] audit: type=1400 audit(1786507403.550:290): avc: denied { create } for pid=1456 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.443899][ T36] audit: type=1400 audit(1786507403.550:291): avc: denied { write } for pid=1456 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.485399][ T36] audit: type=1400 audit(1786507403.610:292): avc: denied { sqpoll } for pid=1462 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.559744][ T36] audit: type=1400 audit(1786507403.690:293): avc: denied { search } for pid=1471 comm="syz.4.461" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.630301][ T1480] SELinux: Context system_u: is not valid (left unmapped). [ 57.638335][ T36] audit: type=1400 audit(1786507403.770:294): avc: denied { relabelto } for pid=1479 comm="syz.0.465" name="126" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 57.667091][ T36] audit: type=1400 audit(1786507403.770:295): avc: denied { associate } for pid=1479 comm="syz.0.465" name="126" dev="tmpfs" ino=689 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 57.700265][ T36] audit: type=1400 audit(1786507403.790:296): avc: denied { write } for pid=1479 comm="syz.0.465" name="126" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 57.724269][ T36] audit: type=1400 audit(1786507403.790:297): avc: denied { add_name } for pid=1479 comm="syz.0.465" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 57.747079][ T36] audit: type=1400 audit(1786507403.790:298): avc: denied { create } for pid=1479 comm="syz.0.465" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 57.856211][ T1500] capability: warning: `syz.4.475' uses 32-bit capabilities (legacy support in use) [ 57.913783][ T1509] rust_binder: Read failure Err(EAGAIN) in pid:327 [ 57.928660][ T1505] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 57.992398][ T1514] syzkaller1: entered promiscuous mode [ 57.998422][ T1514] syzkaller1: entered allmulticast mode [ 58.167041][ T311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 58.318197][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.329222][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.339011][ T311] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 58.348105][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.357191][ T311] usb 1-1: config 0 descriptor?? [ 58.987036][ T534] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 59.147020][ T534] usb 5-1: Using ep0 maxpacket: 32 [ 59.153375][ T534] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.164260][ T534] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 59.173466][ T1055] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 59.182630][ T534] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 59.192151][ T311] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 59.192183][ T534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.207050][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 59.214143][ T534] usb 5-1: Product: syz [ 59.223230][ T534] usb 5-1: Manufacturer: syz [ 59.228088][ T534] usb 5-1: SerialNumber: syz [ 59.233687][ T534] usb 5-1: config 0 descriptor?? [ 59.250129][ T311] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized [ 59.327020][ T1055] usb 3-1: Using ep0 maxpacket: 16 [ 59.333980][ T1055] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.344376][ T1055] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.355023][ T1055] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.364247][ T1055] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.372471][ T1055] usb 3-1: Product: syz [ 59.376653][ T1055] usb 3-1: Manufacturer: syz [ 59.383840][ T534] usb 1-1: USB disconnect, device number 9 [ 59.391916][ T1055] usb 3-1: SerialNumber: syz [ 59.416994][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 59.423280][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.434381][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.449208][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 59.458660][ T1525] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 59.466341][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 59.475439][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.484586][ T310] usb 4-1: config 0 descriptor?? [ 59.490603][ T311] usb 5-1: USB disconnect, device number 9 [ 59.499012][ T310] hub 4-1:0.0: USB hub found [ 59.610175][ T1055] usb 3-1: 0:2 : does not exist [ 59.622917][ T1055] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 59.633995][ T1055] usb 3-1: USB disconnect, device number 10 [ 59.646188][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.698924][ T310] hub 4-1:0.0: 1 port detected [ 60.305142][ T1208] hub 4-1:0.0: activate --> -90 [ 60.397039][ T310] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 60.548105][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.559125][ T310] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.568431][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.577355][ T310] usb 3-1: config 0 descriptor?? [ 60.706106][ T1552] usb 4-1: USB disconnect, device number 8 [ 60.929003][ T1208] usb 4-1-port1: config error [ 60.988311][ T310] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 61.002251][ T310] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input12 [ 61.080713][ T310] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 61.203873][ T1591] netlink: 'syz.4.514': attribute type 2 has an invalid length. [ 61.211634][ T1591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 61.393584][ T310] usb 3-1: USB disconnect, device number 11 [ 61.507152][ T1552] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 61.656984][ T1552] usb 4-1: Using ep0 maxpacket: 16 [ 61.663916][ T1552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.675168][ T1552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.685207][ T1552] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.698359][ T1552] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 61.707594][ T1552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.716553][ T1552] usb 4-1: config 0 descriptor?? [ 61.955973][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 61.956024][ T36] audit: type=1400 audit(1786507408.080:319): avc: denied { ioctl } for pid=1625 comm="syz.0.530" path="socket:[10981]" dev="sockfs" ino=10981 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.084675][ T1634] input: syz1 as /devices/virtual/input/input13 [ 62.123396][ T1637] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 62.133089][ T1552] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 62.156810][ T1552] microsoft 0003:045E:07DA.000D: unsupported Resolution Multiplier 0 [ 62.173243][ T1552] microsoft 0003:045E:07DA.000D: implement() called with n (152) > 32! (kworker/1:6) [ 62.329975][ T36] audit: type=1400 audit(1786507408.460:320): avc: denied { getopt } for pid=1656 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.336731][ T1552] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 62.370438][ T1552] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 62.382681][ T1552] microsoft 0003:045E:07DA.000D: no inputs found [ 62.414481][ T1552] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 62.429738][ T1552] usb 4-1: USB disconnect, device number 9 [ 62.621817][ T36] audit: type=1400 audit(1786507408.750:321): avc: denied { load_policy } for pid=1681 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.624508][ T1682] SELinux: failed to load policy [ 62.692835][ T36] audit: type=1400 audit(1786507408.820:322): avc: denied { setopt } for pid=1688 comm="syz.4.557" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.737648][ T36] audit: type=1400 audit(1786507408.870:323): avc: denied { mounton } for pid=1691 comm="syz.2.558" path="/config" dev="ramfs" ino=12240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 62.793523][ T36] audit: type=1400 audit(1786507408.920:324): avc: denied { mounton } for pid=1695 comm="syz.2.560" path="/proc/299/net/netfilter" dev="proc" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 62.833082][ T36] audit: type=1400 audit(1786507408.920:325): avc: denied { mount } for pid=1695 comm="syz.2.560" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.952360][ T36] audit: type=1400 audit(1786507409.080:326): avc: denied { read } for pid=1711 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.987240][ T1715] 9pnet_fd: p9_fd_create_unix (1715): problem connecting socket: ./file0: -5 [ 63.191241][ T36] audit: type=1400 audit(1786507409.320:327): avc: denied { read } for pid=1742 comm="syz.0.577" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 63.216604][ T36] audit: type=1400 audit(1786507409.320:328): avc: denied { open } for pid=1742 comm="syz.0.577" path="/159/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 63.247014][ T1055] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 63.416992][ T1055] usb 3-1: Using ep0 maxpacket: 8 [ 63.426003][ T1055] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 63.435450][ T1055] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 63.446981][ T1055] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 63.450289][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 63.456045][ T1055] usb 3-1: config 250 has no interface number 0 [ 63.456077][ T1055] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 63.488864][ T1055] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 63.499656][ T1055] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.512567][ T1055] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 63.523025][ T1055] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 63.537147][ T1055] usb 3-1: config 250 interface 228 has no altsetting 0 [ 63.553438][ T1055] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 63.569375][ T1055] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 63.577935][ T1055] usb 3-1: Product: syz [ 63.582133][ T1055] usb 3-1: SerialNumber: syz [ 63.588679][ T1055] hub 3-1:250.228: bad descriptor, ignoring hub [ 63.594963][ T1055] hub 3-1:250.228: probe with driver hub failed with error -5 [ 63.618124][ T310] usb 1-1: config 0 has no interfaces? [ 63.625167][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.635836][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.644487][ T310] usb 1-1: Product: syz [ 63.648893][ T310] usb 1-1: Manufacturer: syz [ 63.657081][ T310] usb 1-1: SerialNumber: syz [ 63.667812][ T310] usb 1-1: config 0 descriptor?? [ 63.736374][ T1776] netlink: 64 bytes leftover after parsing attributes in process `syz.3.592'. [ 63.746913][ T1776] tipc: Enabled bearer , priority 10 [ 63.776230][ T1779] syzkaller1: entered promiscuous mode [ 63.781898][ T1779] syzkaller1: entered allmulticast mode [ 63.790596][ T1055] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 63.980872][ T1055] usb 1-1: USB disconnect, device number 10 [ 64.472638][ T1809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.605'. [ 64.603295][ T1826] syzkaller1: entered promiscuous mode [ 64.609073][ T1826] syzkaller1: entered allmulticast mode [ 64.672768][ T1828] SELinux: context truncated [ 64.687285][ T1719] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 64.722524][ T1828] SELinux: failed to load policy [ 64.857713][ T534] tipc: Node number set to 2130706433 [ 64.953315][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.377151][ T1552] usb 3-1: USB disconnect, device number 12 [ 65.384222][ T1552] usblp0: removed [ 65.519926][ T1881] kvm: MONITOR instruction emulated as NOP! [ 65.867015][ T1055] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 65.902008][ T318] bridge_slave_1: left allmulticast mode [ 65.907737][ T318] bridge_slave_1: left promiscuous mode [ 65.913383][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.921362][ T318] bridge_slave_0: left allmulticast mode [ 65.927129][ T318] bridge_slave_0: left promiscuous mode [ 65.932984][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.028135][ T1055] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 68, using maximum allowed: 30 [ 66.039408][ T1055] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 66.052558][ T1055] usb 5-1: config 1 interface 0 has no altsetting 0 [ 66.062327][ T318] veth1_macvtap: left promiscuous mode [ 66.068032][ T318] veth0_vlan: left promiscuous mode [ 66.076125][ T1055] usb 5-1: string descriptor 0 read error: -22 [ 66.082623][ T1055] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.40 [ 66.093383][ T1055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.189832][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.196923][ T1900] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.204741][ T1900] bridge_slave_0: entered allmulticast mode [ 66.211421][ T1900] bridge_slave_0: entered promiscuous mode [ 66.218405][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.225452][ T1900] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.232605][ T1900] bridge_slave_1: entered allmulticast mode [ 66.238942][ T1900] bridge_slave_1: entered promiscuous mode [ 66.291349][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.298437][ T1900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.305706][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.312775][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.338303][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.346655][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.359007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.366092][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.378794][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.385882][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.415226][ T1900] veth0_vlan: entered promiscuous mode [ 66.428260][ T1900] veth1_macvtap: entered promiscuous mode [ 66.522424][ T1055] holtek_kbd 0003:04D9:A055.000E: global environment stack underflow [ 66.534488][ T1055] holtek_kbd 0003:04D9:A055.000E: item 0 1 1 11 parsing failed [ 66.542407][ T1055] holtek_kbd 0003:04D9:A055.000E: probe with driver holtek_kbd failed with error -22 [ 66.723603][ T310] usb 5-1: USB disconnect, device number 11 [ 66.837095][ T1055] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.997022][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.007024][ T1055] usb 6-1: Using ep0 maxpacket: 32 [ 67.029287][ T1055] usb 6-1: unable to get BOS descriptor or descriptor too short [ 67.037762][ T1055] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 67.063059][ T1055] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 67.085654][ T1055] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 67.097032][ T1055] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.117010][ T1055] usb 6-1: Product: syz [ 67.121276][ T1055] usb 6-1: Manufacturer: syz [ 67.125901][ T1055] usb 6-1: SerialNumber: syz [ 67.141164][ T1938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 67.179222][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 67.179242][ T36] audit: type=1400 audit(1786507413.310:344): avc: denied { setopt } for pid=1939 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.305575][ T1944] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 67.344733][ T1055] usb 6-1: USB disconnect, device number 2 [ 67.385125][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.573348][ T36] audit: type=1400 audit(1786507413.700:345): avc: denied { write } for pid=1958 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.612848][ T36] audit: type=1400 audit(1786507413.740:346): avc: denied { write } for pid=1962 comm="syz.4.669" name="icmp6" dev="proc" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.665965][ T36] audit: type=1400 audit(1786507413.790:347): avc: denied { map } for pid=1964 comm="syz.4.670" path="/dev/sda1" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.890067][ T1993] Mass Storage Function, version: 2009/09/11 [ 67.896217][ T1993] LUN: removable file: (no medium) [ 67.903490][ T1993] mass_storage.usb0/lun.0: unable to open backing file: fi [ 67.953160][ T36] audit: type=1400 audit(1786507414.080:348): avc: denied { bind } for pid=1998 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.107042][ T1055] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 68.176981][ T36] audit: type=1400 audit(1786507414.300:349): avc: denied { write } for pid=2020 comm="syz.3.693" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.218722][ T36] audit: type=1400 audit(1786507414.320:350): avc: denied { create } for pid=2023 comm="syz.4.695" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 68.262688][ T1055] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 68.263878][ T36] audit: type=1400 audit(1786507414.320:351): avc: denied { link } for pid=2023 comm="syz.4.695" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=14442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 68.317172][ T1055] usb 1-1: config 1 interface 0 has no altsetting 0 [ 68.335042][ T1055] usb 1-1: string descriptor 0 read error: -22 [ 68.341345][ T1055] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 68.350834][ T1055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.363748][ T1988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 68.397859][ T2035] tipc: Started in network mode [ 68.402806][ T2035] tipc: Node identity 4, cluster identity 4711 [ 68.409060][ T2035] tipc: Node number set to 4 [ 68.572686][ T1988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.678'. [ 68.938915][ T36] audit: type=1400 audit(1786507415.070:352): avc: denied { getopt } for pid=2075 comm="syz.5.713" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.093854][ T1055] usbhid 1-1:1.0: can't add hid device: -71 [ 69.108301][ T1055] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 69.119539][ T1055] usb 1-1: USB disconnect, device number 11 [ 69.427042][ T1055] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 69.596990][ T1055] usb 1-1: Using ep0 maxpacket: 16 [ 69.613014][ T1055] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.626303][ T1055] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.636766][ T1055] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 69.647747][ T1055] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.660212][ T1055] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 69.672482][ T1055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.680778][ T1055] usb 1-1: Product: syz [ 69.685063][ T1055] usb 1-1: Manufacturer: syz [ 69.689713][ T1055] usb 1-1: SerialNumber: syz [ 69.699959][ T2122] loop5: detected capacity change from 0 to 8388607 [ 69.710941][ T316] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 69.798282][ T36] audit: type=1400 audit(1786507415.930:353): avc: denied { read } for pid=2127 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.910949][ T1055] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 69.925793][ T1055] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.189420][ T2167] tipc: Started in network mode [ 70.194349][ T2167] tipc: Node identity 7afcfecf6b1a, cluster identity 4711 [ 70.201868][ T2167] tipc: Enabled bearer , priority 0 [ 70.209783][ T2167] tipc: Disabling bearer [ 70.272859][ T2174] netlink: 'syz.3.756': attribute type 4 has an invalid length. [ 70.288885][ T2174] netlink: 'syz.3.756': attribute type 4 has an invalid length. [ 70.311158][ T1055] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 70.332830][ T2179] netlink: 'syz.4.759': attribute type 11 has an invalid length. [ 70.519397][ T1055] usb 1-1: USB disconnect, device number 12 [ 70.567010][ T45] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 70.730921][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 70.740941][ T45] usb 6-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 70.750489][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.774581][ T45] usb 6-1: config 0 descriptor?? [ 70.930019][ T2259] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 70.930046][ T2259] rust_binder: Read failure Err(EFAULT) in pid:529 [ 70.999756][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 71.012993][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 71.032060][ T45] usb 6-1: USB disconnect, device number 3 [ 71.297036][ T1055] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 71.457033][ T1055] usb 5-1: Using ep0 maxpacket: 16 [ 71.463420][ T1055] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.473699][ T1055] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.484661][ T1055] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.493876][ T1055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.502242][ T1055] usb 5-1: Product: syz [ 71.506641][ T1055] usb 5-1: Manufacturer: syz [ 71.511342][ T1055] usb 5-1: SerialNumber: syz [ 71.719368][ T1055] usb 5-1: 0:2 : does not exist [ 71.728956][ T1055] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 71.740067][ T2297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 71.758389][ T1055] usb 5-1: USB disconnect, device number 12 [ 71.776492][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.137367][ T2324] raw_sendmsg: syz.0.795 forgot to set AF_INET. Fix it! [ 72.227246][ T2333] veth1_to_bond: entered promiscuous mode [ 72.236189][ T2335] dummy_hcd dummy_hcd.0: remove, state 4 [ 72.245589][ T2335] usb usb1: USB disconnect, device number 1 [ 72.264532][ T2333] netlink: 148 bytes leftover after parsing attributes in process `syz.5.799'. [ 72.274417][ T2335] dummy_hcd dummy_hcd.0: stopped [ 72.279447][ T2335] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 72.312586][ T2333] veth1_to_bond (unregistering): left promiscuous mode [ 72.347134][ T2337] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 72.353124][ T2337] syzkaller1: Linktype set failed because interface is up [ 72.555823][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 72.555842][ T36] audit: type=1400 audit(1786507418.680:356): avc: denied { bind } for pid=2355 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.587697][ T36] audit: type=1400 audit(1786507418.710:357): avc: denied { write } for pid=2355 comm="syz.0.809" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.610842][ T36] audit: type=1400 audit(1786507418.710:358): avc: denied { open } for pid=2355 comm="syz.0.809" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.641513][ T36] audit: type=1400 audit(1786507418.710:359): avc: denied { ioctl } for pid=2355 comm="syz.0.809" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.810897][ T2366] mmap: syz.4.813 (2366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.969929][ T36] audit: type=1400 audit(1786507419.090:360): avc: denied { append } for pid=2385 comm="syz.0.822" name="uprobe_events" dev="tracefs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 73.278605][ T36] audit: type=1400 audit(1786507419.410:361): avc: denied { read write } for pid=2409 comm="syz.3.830" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.278767][ T2410] type: 8192 invalid [ 73.322246][ T36] audit: type=1400 audit(1786507419.410:362): avc: denied { open } for pid=2409 comm="syz.3.830" path="/240/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.361478][ T36] audit: type=1400 audit(1786507419.410:363): avc: denied { ioctl } for pid=2409 comm="syz.3.830" path="/240/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.791376][ T2434] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 73.804045][ T2434] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 73.812513][ T2434] CPU: 0 UID: 0 PID: 2434 Comm: syz.5.840 Not tainted syzkaller #0 65821d980346c223f1c3ee3fc0737619b357581d [ 73.824013][ T2434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.834106][ T2434] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 73.840157][ T2434] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7a c9 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 61 c9 26 fe 41 be 58 11 00 00 4d [ 73.859896][ T2434] RSP: 0018:ffffc9000d637738 EFLAGS: 00010246 [ 73.866008][ T2434] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 73.873997][ T2434] RDX: ffff88813ff89300 RSI: 0000000000000003 RDI: 0000000000000005 [ 73.882015][ T2434] RBP: ffffc9000d637758 R08: ffff888101653467 R09: 1ffff110202ca68c [ 73.890008][ T2434] R10: 0000000000000000 R11: ffffffff83b96c00 R12: dffffc0000000000 [ 73.898007][ T2434] R13: ffff888118aab4f0 R14: ffff888104bcd160 R15: 0000000000000000 [ 73.906000][ T2434] FS: 00007fd5a9e436c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 73.914955][ T2434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.921663][ T2434] CR2: 000000110c2de5f3 CR3: 00000001411b6000 CR4: 00000000003526b0 [ 73.929659][ T2434] Call Trace: [ 73.932959][ T2434] [ 73.935926][ T2434] ? __cfi_dummy_set_selfpowered+0x10/0x10 [ 73.941769][ T2434] usb_gadget_set_selfpowered+0x84/0x1a0 [ 73.947434][ T2434] composite_dev_prepare+0x2f8/0x3e0 [ 73.952752][ T2434] ? up_write+0x66/0x280 [ 73.957024][ T2434] configfs_composite_bind+0xa8/0x15f0 [ 73.962600][ T2434] ? __kasan_check_write+0x18/0x20 [ 73.967736][ T2434] ? mutex_unlock+0x90/0x240 [ 73.972379][ T2434] ? kernfs_put+0x314/0x360 [ 73.976931][ T2434] ? __cfi_configfs_composite_bind+0x10/0x10 [ 73.982964][ T2434] gadget_bind_driver+0x301/0x9c0 [ 73.988014][ T2434] ? sysfs_create_link+0x6c/0x90 [ 73.992975][ T2434] ? __cfi_gadget_bind_driver+0x10/0x10 [ 73.998544][ T2434] really_probe+0x2e1/0x8b0 [ 74.003085][ T2434] __driver_probe_device+0x193/0x280 [ 74.008400][ T2434] driver_probe_device+0x54/0x3f0 [ 74.013461][ T2434] __driver_attach+0x422/0x5e0 [ 74.018255][ T2434] bus_for_each_dev+0x249/0x2d0 [ 74.023131][ T2434] ? __cfi___driver_attach+0x10/0x10 [ 74.028444][ T2434] ? __cfi_bus_for_each_dev+0x10/0x10 [ 74.033842][ T2434] ? _raw_spin_unlock+0x45/0x60 [ 74.038802][ T2434] ? klist_add_tail+0x1dd/0x220 [ 74.043680][ T2434] driver_attach+0x46/0x50 [ 74.048123][ T2434] bus_add_driver+0x393/0x730 [ 74.052820][ T2434] driver_register+0x2b7/0x3c0 [ 74.057599][ T2434] usb_gadget_register_driver_owner+0xfc/0x270 [ 74.063778][ T2434] gadget_dev_desc_UDC_store+0x224/0x350 [ 74.069435][ T2434] configfs_write_iter+0x32f/0x490 [ 74.074572][ T2434] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 74.080770][ T2434] vfs_write+0x75f/0xfd0 [ 74.085035][ T2434] ? __cfi_vfs_write+0x10/0x10 [ 74.089819][ T2434] ? __cfi_mutex_lock+0x10/0x10 [ 74.094747][ T2434] ksys_write+0x145/0x260 [ 74.099094][ T2434] ? xfd_validate_state+0x68/0x140 [ 74.104270][ T2434] ? __cfi_ksys_write+0x10/0x10 [ 74.109180][ T2434] ? __kasan_check_write+0x18/0x20 [ 74.114316][ T2434] ? fpregs_restore_userregs+0x11c/0x260 [ 74.119977][ T2434] __x64_sys_write+0x7f/0x90 [ 74.124588][ T2434] x64_sys_call+0x271c/0x2ee0 [ 74.129281][ T2434] do_syscall_64+0x57/0xf0 [ 74.133742][ T2434] ? clear_bhb_loop+0x50/0xa0 [ 74.138475][ T2434] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.144397][ T2434] RIP: 0033:0x7fd5a8f9e0d9 [ 74.148841][ T2434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.168468][ T2434] RSP: 002b:00007fd5a9e43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.176902][ T2434] RAX: ffffffffffffffda RBX: 00007fd5a9225fa0 RCX: 00007fd5a8f9e0d9 [ 74.184906][ T2434] RDX: 000000000000000c RSI: 0000200000000600 RDI: 0000000000000004 [ 74.192898][ T2434] RBP: 00007fd5a9035024 R08: 0000000000000000 R09: 0000000000000000 [ 74.200893][ T2434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.208879][ T2434] R13: 00007fd5a9226038 R14: 00007fd5a9225fa0 R15: 00007ffc66c44a78 [ 74.216872][ T2434] [ 74.219909][ T2434] Modules linked in: [ 74.224290][ T2434] ---[ end trace 0000000000000000 ]--- [ 74.242859][ T36] audit: type=1400 audit(1786507420.370:364): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 74.323527][ T36] audit: type=1400 audit(1786507420.370:365): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.376528][ T2434] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 74.386142][ T2434] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7a c9 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 61 c9 26 fe 41 be 58 11 00 00 4d [ 74.421068][ T2434] RSP: 0018:ffffc9000d637738 EFLAGS: 00010246 [ 74.427661][ T2434] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 74.435670][ T2434] RDX: ffff88813ff89300 RSI: 0000000000000003 RDI: 0000000000000005 [ 74.444097][ T2434] RBP: ffffc9000d637758 R08: ffff888101653467 R09: 1ffff110202ca68c [ 74.452258][ T2434] R10: 0000000000000000 R11: ffffffff83b96c00 R12: dffffc0000000000 [ 74.460461][ T2434] R13: ffff888118aab4f0 R14: ffff888104bcd160 R15: 0000000000000000 [ 74.468668][ T2434] FS: 00007fd5a9e436c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 74.477829][ T2434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.484468][ T2434] CR2: 00007f7037df14b8 CR3: 00000001411b6000 CR4: 00000000003526b0 [ 74.492737][ T2434] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 74.500912][ T2434] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 74.509096][ T2434] Kernel panic - not syncing: Fatal exception [ 74.515798][ T2434] Kernel Offset: disabled [ 74.520292][ T2434] Rebooting in 86400 seconds..