last executing test programs: 1.603602941s ago: executing program 1 (id=511): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000040)={0x4, 0x3}) 1.556560763s ago: executing program 1 (id=513): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.533449463s ago: executing program 1 (id=515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 1.506327644s ago: executing program 1 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/msr/type\x00', 0x0, 0x0) read(r0, &(0x7f0000000800), 0x10) 1.448682615s ago: executing program 1 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 1.429166336s ago: executing program 1 (id=520): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) 1.145592133s ago: executing program 3 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000000, 0xfffffffd, 0x7, 0x5, 0x5c6}]}) 1.098711804s ago: executing program 3 (id=536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2000000}) 1.087813214s ago: executing program 3 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000070, 0x0, 0x100000001}]}) 1.017539566s ago: executing program 3 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x269, 0x0, 0x800000000006}]}) 962.418577ms ago: executing program 0 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000400)="5038f4", 0x3}, {&(0x7f0000000500)="0875dc05c9aabe7fb8da07c9df7ada1ca312fb13f2b20f42fd73d9407dc65b78368324ab16749bc1a4671193580aea6e9b8c09b649e6b2abdd7d268686f33d967c410a", 0x43}], 0x2) 947.387417ms ago: executing program 0 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000020, 0x0, 0xb}]}) 932.536218ms ago: executing program 3 (id=546): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000140)=0xfffffffffffffffa, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 898.094599ms ago: executing program 3 (id=547): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501"], 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @multicast2}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) 849.74054ms ago: executing program 0 (id=548): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) setxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28, 0x0) 759.478102ms ago: executing program 0 (id=549): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x1007}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}]}], {0x14}}, 0xb4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a00"], 0x20}}, 0x0) 709.933703ms ago: executing program 0 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/bus/pnp/drivers/system/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000001800)='00:00', 0x5) 682.311974ms ago: executing program 0 (id=552): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 618.660556ms ago: executing program 2 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 599.582006ms ago: executing program 2 (id=556): r0 = inotify_init1(0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) getdents64(r1, &(0x7f0000000100)=""/134, 0x86) 584.730876ms ago: executing program 2 (id=557): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0xf000, 0x0, 0xffffffffffffffff, 0xb}) 542.522207ms ago: executing program 2 (id=558): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 518.537148ms ago: executing program 2 (id=559): syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) 0s ago: executing program 2 (id=560): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000001200)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 31.598592][ T36] audit: type=1400 audit(1787163678.700:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.601804][ T287] cgroup: Unknown subsys name 'net' [ 31.621276][ T36] audit: type=1400 audit(1787163678.700:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.648701][ T36] audit: type=1400 audit(1787163678.740:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.649208][ T287] cgroup: Unknown subsys name 'devices' [ 31.775768][ T287] cgroup: Unknown subsys name 'hugetlb' [ 31.781422][ T287] cgroup: Unknown subsys name 'rlimit' [ 31.876696][ T36] audit: type=1400 audit(1787163678.980:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.899913][ T36] audit: type=1400 audit(1787163678.980:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.924842][ T36] audit: type=1400 audit(1787163678.980:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.948538][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.957452][ T36] audit: type=1400 audit(1787163679.060:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.982971][ T36] audit: type=1400 audit(1787163679.060:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.025469][ T36] audit: type=1400 audit(1787163679.130:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.026875][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.051011][ T36] audit: type=1400 audit(1787163679.130:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.883123][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.896470][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.903840][ T294] bridge_slave_0: entered allmulticast mode [ 32.910602][ T294] bridge_slave_0: entered promiscuous mode [ 32.917599][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.924801][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.931934][ T294] bridge_slave_1: entered allmulticast mode [ 32.951992][ T294] bridge_slave_1: entered promiscuous mode [ 33.098599][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.105753][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.112828][ T298] bridge_slave_0: entered allmulticast mode [ 33.119243][ T298] bridge_slave_0: entered promiscuous mode [ 33.133668][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.140742][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.147889][ T298] bridge_slave_1: entered allmulticast mode [ 33.154224][ T298] bridge_slave_1: entered promiscuous mode [ 33.160537][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.167654][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.174791][ T300] bridge_slave_0: entered allmulticast mode [ 33.181069][ T300] bridge_slave_0: entered promiscuous mode [ 33.190404][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.197593][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.204729][ T300] bridge_slave_1: entered allmulticast mode [ 33.211069][ T300] bridge_slave_1: entered promiscuous mode [ 33.224405][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.231567][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.238798][ T299] bridge_slave_0: entered allmulticast mode [ 33.245107][ T299] bridge_slave_0: entered promiscuous mode [ 33.257613][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.264899][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.271998][ T299] bridge_slave_1: entered allmulticast mode [ 33.278501][ T299] bridge_slave_1: entered promiscuous mode [ 33.331788][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.338973][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.346363][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.353441][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.444064][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.451163][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.458510][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.465569][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.479491][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.486838][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.494811][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.501968][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.516574][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.523679][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.536405][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.543494][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.602693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.609804][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.628290][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.635370][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.642875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.649957][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.658556][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.665666][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.673938][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.680973][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.693687][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.700746][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.747744][ T294] veth0_vlan: entered promiscuous mode [ 33.757196][ T298] veth0_vlan: entered promiscuous mode [ 33.785406][ T298] veth1_macvtap: entered promiscuous mode [ 33.796781][ T294] veth1_macvtap: entered promiscuous mode [ 33.806190][ T299] veth0_vlan: entered promiscuous mode [ 33.814410][ T300] veth0_vlan: entered promiscuous mode [ 33.846922][ T299] veth1_macvtap: entered promiscuous mode [ 33.866919][ T300] veth1_macvtap: entered promiscuous mode [ 33.874160][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.992430][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.050714][ T330] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 34.223808][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.359318][ T364] MTRR 1 not used [ 34.383369][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 34.403539][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.425535][ T310] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.441475][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.473053][ T310] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 34.482477][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.491386][ T310] usb 4-1: Product: syz [ 34.495856][ T310] usb 4-1: Manufacturer: syz [ 34.500663][ T310] usb 4-1: SerialNumber: syz [ 34.669097][ T382] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.777780][ T376] mmap: syz.1.30 (376) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.123396][ T310] usb 4-1: clock source 0 is not valid, cannot use [ 35.320999][ T310] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 35.329955][ T310] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 35.355060][ T310] usb 4-1: USB disconnect, device number 2 [ 35.402300][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.033280][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.213931][ T494] syz.3.85 (494): attempted to duplicate a private mapping with mremap. This is not supported. [ 36.242483][ T9] usb 1-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 36.267881][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.294374][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.318724][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.333268][ T9] usb 1-1: SerialNumber: syz [ 36.343352][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.421337][ T511] Zero length message leads to an empty skb [ 36.513294][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 36.524495][ T65] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 36.543397][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 36.558922][ T9] usb 1-1: bad CDC descriptors [ 36.573188][ T9] usb 1-1: USB disconnect, device number 2 [ 36.600012][ T65] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 36.613117][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.625589][ T36] kauditd_printk_skb: 114 callbacks suppressed [ 36.625607][ T36] audit: type=1400 audit(1787163683.730:188): avc: denied { create } for pid=531 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.651358][ T65] usb 3-1: config 0 descriptor?? [ 36.668160][ T36] audit: type=1400 audit(1787163683.740:189): avc: denied { connect } for pid=531 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.687688][ T36] audit: type=1400 audit(1787163683.740:190): avc: denied { write } for pid=531 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.835423][ T36] audit: type=1400 audit(1787163683.940:191): avc: denied { name_bind } for pid=537 comm="syz.1.105" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.879176][ T36] audit: type=1400 audit(1787163683.940:192): avc: denied { node_bind } for pid=537 comm="syz.1.105" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.930594][ T36] audit: type=1400 audit(1787163684.030:193): avc: denied { mmap_zero } for pid=547 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 37.033663][ T36] audit: type=1400 audit(1787163684.130:194): avc: denied { read } for pid=592 comm="syz.3.112" dev="nsfs" ino=4026532411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.062590][ T36] audit: type=1400 audit(1787163684.130:195): avc: denied { open } for pid=592 comm="syz.3.112" path="net:[4026532411]" dev="nsfs" ino=4026532411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.087627][ T65] apple 0003:05AC:027C.0001: unknown main item tag 0x7 [ 37.095215][ T65] apple 0003:05AC:027C.0001: ignoring exceeding usage max [ 37.121476][ T65] apple 0003:05AC:027C.0001: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 37.138302][ T36] audit: type=1400 audit(1787163684.130:196): avc: denied { listen } for pid=592 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.164370][ T36] audit: type=1400 audit(1787163684.170:197): avc: denied { connect } for pid=594 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.252915][ T612] synth uevent: /bus/acpi: unknown uevent action string [ 37.282844][ T614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 37.298498][ T614] netlink: 'syz.3.120': attribute type 2 has an invalid length. [ 37.304919][ T616] netlink: 104 bytes leftover after parsing attributes in process `syz.1.121'. [ 37.319050][ T65] usb 3-1: USB disconnect, device number 2 [ 37.378598][ T624] bridge0: port 3(erspan0) entered blocking state [ 37.387147][ T624] bridge0: port 3(erspan0) entered disabled state [ 37.393757][ T624] erspan0: entered allmulticast mode [ 37.400547][ T624] erspan0: entered promiscuous mode [ 37.407567][ T624] bridge0: port 3(erspan0) entered blocking state [ 37.414072][ T624] bridge0: port 3(erspan0) entered forwarding state [ 37.598545][ T645] input: syz0 as /devices/virtual/input/input4 [ 37.628538][ T9] input: syz0 as /devices/virtual/misc/uhid/0003:0001:0002.0002/input/input5 [ 37.639830][ T9] hid-generic 0003:0001:0002.0002: input,hidraw0: USB HID v0.01 Mouse [syz0] on syz0 [ 38.123294][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.154759][ T680] capability: warning: `syz.3.151' uses deprecated v2 capabilities in a way that may be insecure [ 38.253362][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.283274][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 38.301623][ T9] usb 1-1: config index 0 descriptor too short (expected 149, got 145) [ 38.310062][ T9] usb 1-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 38.329711][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.347123][ T9] usb 1-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 38.359065][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.367241][ T9] usb 1-1: Product: syz [ 38.371486][ T9] usb 1-1: Manufacturer: syz [ 38.376285][ T9] usb 1-1: SerialNumber: syz [ 38.404324][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.422658][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.438380][ T310] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 38.447975][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.473560][ T310] usb 3-1: config 0 descriptor?? [ 38.503386][ T702] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 38.509370][ T702] syzkaller0: group set to 0 [ 38.594000][ T9] usb 1-1: unknown interface protocol 0xac, assuming v1 [ 38.601023][ T9] usb 1-1: cannot find UAC_HEADER [ 38.612634][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.623398][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.639939][ T9] usb 1-1: USB disconnect, device number 3 [ 38.889740][ T310] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.898851][ T310] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.907272][ T310] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.915821][ T310] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.923471][ T310] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 38.931992][ T310] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 39.048218][ T729] input: syz1 as /devices/virtual/input/input6 [ 39.089592][ T310] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 0 [ 39.103274][ T310] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 39.128643][ T310] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 39.144674][ T310] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 39.159914][ T310] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22 [ 39.306671][ T310] usb 3-1: USB disconnect, device number 3 [ 39.393348][ T440] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 39.554776][ T440] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.563375][ T440] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.582983][ T440] usb 2-1: string descriptor 0 read error: -22 [ 39.589504][ T440] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 39.598823][ T440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.847604][ T811] process 'syz.0.212' launched '/dev/fd/3' with NULL argv: empty string added [ 39.941792][ T825] program syz.3.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.216096][ T440] usb 2-1: failed to read current rate; disabling the check [ 40.232652][ T861] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 40.387745][ T872] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.432433][ T689] usb 2-1: USB disconnect, device number 2 [ 40.708596][ T903] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 40.710004][ T903] @0: renamed from bond_slave_1 [ 40.918910][ T919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 41.178297][ T952] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.278'. [ 41.259263][ T960] tmpfs: Invalid uid '0x00000000ffffffff' [ 41.606326][ T1007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 41.730664][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 41.730683][ T36] audit: type=1400 audit(1787163688.830:258): avc: denied { mount } for pid=1024 comm="syz.1.315" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 41.770114][ T36] audit: type=1400 audit(1787163688.870:259): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 41.841003][ T36] audit: type=1400 audit(1787163688.940:260): avc: denied { write } for pid=1038 comm="syz.2.321" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 42.017377][ T1061] capability: warning: `syz.2.331' uses 32-bit capabilities (legacy support in use) [ 42.079491][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1069 comm=syz.1.335 [ 42.202153][ T1084] ======================================================= [ 42.202153][ T1084] WARNING: The mand mount option has been deprecated and [ 42.202153][ T1084] and is ignored by this kernel. Remove the mand [ 42.202153][ T1084] option from the mount to silence this warning. [ 42.202153][ T1084] ======================================================= [ 42.465786][ T36] audit: type=1400 audit(1787163689.570:261): avc: denied { read } for pid=1104 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.493311][ T440] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 42.513299][ T689] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 42.644501][ T440] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.655539][ T440] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.662172][ T440] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 42.671380][ T440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.674993][ T689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.690631][ T689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.693667][ T440] usb 4-1: config 0 descriptor?? [ 42.700838][ T689] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 42.714657][ T689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.723710][ T689] usb 3-1: config 0 descriptor?? [ 42.922651][ T1118] devpts: called with bogus options [ 43.116984][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.124195][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.131299][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.138645][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.146187][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.150256][ T689] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 43.154152][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.167602][ T689] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 43.170025][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.176290][ T689] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 43.183613][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.190057][ T689] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 43.197487][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.207197][ T689] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 43.211960][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.226122][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.233415][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.240101][ T689] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 43.240657][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.259488][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.273303][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.290554][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.297902][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.305132][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.312197][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.319356][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.326461][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.333599][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.340771][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.348120][ T440] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 43.356615][ T440] hid-led 0003:1D34:0004.0004: hidraw1: USB HID v80.01 Device [HID 1d34:0004] on usb-dummy_hcd.3-1/input0 [ 43.375308][ T440] hid-led 0003:1D34:0004.0004: Dream Cheeky Webmail Notifier initialized [ 43.420423][ T36] audit: type=1400 audit(1787163690.520:262): avc: denied { load_policy } for pid=1125 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.420708][ T1126] SELinux: failed to load policy [ 43.553167][ T689] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 32: -71 [ 43.565836][ T689] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense firmware info: -71 [ 43.575485][ T689] playstation 0003:054C:0DF2.0005: Failed to get firmware info from DualSense [ 43.584620][ T689] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 43.592997][ T689] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 43.610934][ T689] usb 3-1: USB disconnect, device number 4 [ 43.625109][ T440] usb 4-1: USB disconnect, device number 3 [ 43.741435][ T36] audit: type=1400 audit(1787163690.840:263): avc: denied { remount } for pid=1149 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 43.990674][ T1176] : renamed from vlan0 (while UP) [ 44.024058][ T1180] netlink: 104 bytes leftover after parsing attributes in process `syz.0.388'. [ 44.072257][ T36] audit: type=1400 audit(1787163691.170:264): avc: denied { read } for pid=1183 comm="syz.0.390" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.103645][ T1186] netlink: 'syz.0.392': attribute type 9 has an invalid length. [ 44.106807][ T1188] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 44.119161][ T1188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.391'. [ 44.153285][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 44.229072][ T1192] SELinux: failed to load policy [ 44.303271][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 44.313417][ T9] usb 2-1: config 0 has no interfaces? [ 44.329213][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=38b3, bcdDevice=2e.7b [ 44.339389][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.348527][ T9] usb 2-1: Product: syz [ 44.358191][ T9] usb 2-1: Manufacturer: syz [ 44.362679][ T36] audit: type=1400 audit(1787163691.460:265): avc: denied { unlink } for pid=1210 comm="syz.3.403" name="#1" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.363018][ T9] usb 2-1: SerialNumber: syz [ 44.398542][ T36] audit: type=1400 audit(1787163691.500:266): avc: denied { write } for pid=1212 comm="syz.0.404" name="file2" dev="tmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.406633][ T9] usb 2-1: config 0 descriptor?? [ 44.426089][ T36] audit: type=1400 audit(1787163691.500:267): avc: denied { mount } for pid=1210 comm="syz.3.403" name="/" dev="overlay" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.453571][ T440] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.471077][ T1217] tipc: Started in network mode [ 44.476098][ T1217] tipc: Node identity ac14140f, cluster identity 4711 [ 44.485946][ T1217] tipc: New replicast peer: 255.255.255.255 [ 44.492192][ T1217] tipc: Enabled bearer , priority 10 [ 44.613268][ T440] usb 3-1: Using ep0 maxpacket: 16 [ 44.620891][ T440] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.632002][ T440] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.638955][ T440] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 44.654509][ T440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.665796][ T440] usb 3-1: config 0 descriptor?? [ 44.682314][ T9] usb 2-1: USB disconnect, device number 3 [ 44.862325][ T1244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 45.077012][ T1261] rust_binder: Write failure EFAULT in pid:396 [ 45.080640][ T440] usbhid 3-1:0.0: can't add hid device: -71 [ 45.093108][ T440] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.105967][ T440] usb 3-1: USB disconnect, device number 5 [ 45.293634][ T1290] program syz.0.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.303567][ T1290] ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 45.564893][ T1324] tmpfs: Invalid gid '0x00000000ffffffff' [ 45.587537][ T1326] ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 45.604061][ T9] tipc: Node number set to 2886997007 [ 45.702489][ T45] lg-g15 0003:046D:0A07.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 45.717874][ T45] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0006/input/input8 [ 45.783341][ T1322] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 45.873275][ T440] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.023256][ T440] usb 4-1: Using ep0 maxpacket: 16 [ 46.033315][ T440] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 46.041536][ T440] usb 4-1: config 1 has no interface number 0 [ 46.049871][ T440] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 46.060015][ T440] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 46.070763][ T440] usb 4-1: config 1 interface 105 has no altsetting 0 [ 46.079489][ T440] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 46.088798][ T440] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 46.097080][ T440] usb 4-1: Product: syz [ 46.103253][ T440] usb 4-1: Manufacturer: syz [ 46.107897][ T440] usb 4-1: SerialNumber: syz [ 46.125198][ T1333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.132429][ T1333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.213403][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.230899][ T1386] kvm: user requested TSC rate below hardware speed [ 46.383293][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 46.398846][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.410354][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 46.421745][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.434870][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 46.441564][ T45] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 46.468733][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.479234][ T45] usb 1-1: config 0 descriptor?? [ 46.485334][ T1365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 46.546081][ T1333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.553628][ T1333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.563317][ T1408] netlink: 'syz.1.498': attribute type 12 has an invalid length. [ 46.723335][ T689] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 46.763905][ T440] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 46.776779][ T440] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 46.793793][ T440] usb 4-1: USB disconnect, device number 4 [ 46.874430][ T689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 46.883565][ T689] usb 3-1: config 1 has no interface number 0 [ 46.889701][ T689] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.901280][ T689] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.912414][ T689] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 46.921830][ T689] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 46.923553][ T45] input: HID 1b96:000a as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1B96:000A.0007/input/input9 [ 46.933919][ T689] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.955389][ T689] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.969143][ T689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.977668][ T689] usb 3-1: Product: syz [ 46.982201][ T689] usb 3-1: Manufacturer: syz [ 46.983028][ T45] ntrig 0003:1B96:000A.0007: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 46.987194][ T689] usb 3-1: SerialNumber: syz [ 47.013824][ T1404] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 47.103715][ T45] ntrig 0003:1B96:000A.0007: Firmware version: 2.11.10.15.1 (ed15 f141) [ 47.122071][ T1451] netlink: 72 bytes leftover after parsing attributes in process `syz.1.505'. [ 47.237160][ T1404] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 47.255290][ T1461] loop5: detected capacity change from 0 to 7 [ 47.261786][ T1461] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.269873][ T1461] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.277796][ T1461] loop5: unable to read partition table [ 47.283632][ T1461] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 47.283632][ T1461] ) failed (rc=-5) [ 47.287371][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.305764][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.314004][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.322202][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.330533][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.338850][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.347546][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.355886][ T862] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.373095][ T45] usb 1-1: USB disconnect, device number 4 [ 47.426672][ T1471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 47.447451][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 47.447470][ T36] audit: type=1400 audit(1787163954.611:282): avc: denied { bpf } for pid=1472 comm="syz.3.516" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.460753][ T1404] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 47.693250][ T689] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 47.699341][ T689] cdc_ncm 3-1:1.1: bind() failure [ 47.706136][ T689] usb 3-1: USB disconnect, device number 6 [ 47.963299][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.025679][ T36] audit: type=1400 audit(1787163955.191:283): avc: denied { connect } for pid=1534 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.107866][ T1539] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 48.118287][ T36] audit: type=1400 audit(1787163955.281:284): avc: denied { relabelto } for pid=1538 comm="syz.0.548" name="file0" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 48.139929][ T45] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 48.145990][ T36] audit: type=1400 audit(1787163955.281:285): avc: denied { associate } for pid=1538 comm="syz.0.548" name="file0" dev="tmpfs" ino=1166 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 48.171052][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.195590][ T36] audit: type=1400 audit(1787163955.341:286): avc: denied { unlink } for pid=300 comm="syz-executor" name="file0" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 48.197152][ T45] usb 2-1: Product: syz [ 48.234128][ T45] usb 2-1: Manufacturer: syz [ 48.245431][ T45] usb 2-1: SerialNumber: syz [ 48.313267][ T689] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.339423][ T1553] overlayfs: missing 'workdir' [ 48.472799][ T45] rtl8150 2-1:1.0: couldn't reset the device [ 48.473767][ T689] usb 4-1: Using ep0 maxpacket: 32 [ 48.479329][ T45] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 48.486571][ T689] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 48.500551][ T689] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 48.503531][ T45] usb 2-1: USB disconnect, device number 4 [ 48.509937][ T689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.525375][ T689] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 48.534531][ T689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.544323][ T689] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 48.553415][ T440] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.572470][ T689] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.581685][ T689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.590509][ T689] usb 4-1: config 0 descriptor?? [ 48.714422][ T440] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 48.723575][ T440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.804443][ T440] usb 4-1: USB disconnect, device number 5 [ 48.959416][ T1548] gadget gadget.0: fail, usb_ep_queue returned -108 [ 48.964467][ T689] usb 1-1: USB disconnect, device number 5 [ 48.968336][ T1548] ================================================================== [ 48.980101][ T1548] BUG: KASAN: slab-use-after-free in string+0x20f/0x2b0 [ 48.987106][ T1548] Read of size 1 at addr ffff888106376dc0 by task syz.0.552/1548 [ 48.994886][ T1548] [ 48.997257][ T1548] CPU: 1 UID: 0 PID: 1548 Comm: syz.0.552 Not tainted syzkaller #0 03d350d479d1c05c2ac57b56e0973d7fc75f4bbd [ 48.997292][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.997317][ T1548] Call Trace: [ 48.997325][ T1548] [ 48.997336][ T1548] __dump_stack+0x21/0x30 [ 48.997377][ T1548] dump_stack_lvl+0x140/0x1c0 [ 48.997408][ T1548] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.997439][ T1548] print_address_description+0x71/0x210 [ 48.997472][ T1548] print_report+0x4a/0x70 [ 48.997504][ T1548] kasan_report+0x162/0x1a0 [ 48.997534][ T1548] ? string+0x20f/0x2b0 [ 48.997563][ T1548] ? string+0x20f/0x2b0 [ 48.997588][ T1548] __asan_report_load1_noabort+0x18/0x20 [ 48.997609][ T1548] string+0x20f/0x2b0 [ 48.997634][ T1548] vsnprintf+0xe65/0x1ad0 [ 48.997663][ T1548] snprintf+0xe9/0x140 [ 48.997689][ T1548] ? __cfi_snprintf+0x10/0x10 [ 48.997718][ T1548] ? dev_vprintk_emit+0x179/0x400 [ 48.997744][ T1548] dev_vprintk_emit+0x313/0x400 [ 48.997768][ T1548] ? __cfi_dev_vprintk_emit+0x10/0x10 [ 48.997806][ T1548] dev_printk_emit+0xef/0x150 [ 48.997834][ T1548] ? __sched_text_start+0x10/0x10 [ 48.997870][ T1548] ? enqueue_task+0x1049/0x1100 [ 48.997896][ T1548] ? __cfi_dev_printk_emit+0x10/0x10 [ 48.997925][ T1548] ? __asan_memcpy+0x5a/0x80 [ 48.997949][ T1548] __dev_printk+0x17f/0x1b0 [ 48.997971][ T1548] _dev_err+0x11f/0x180 [ 48.998000][ T1548] ? __cfi__dev_err+0x10/0x10 [ 48.998027][ T1548] ? dummy_queue+0x246/0x8e0 [ 48.998049][ T1548] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 48.998090][ T1548] ? usb_ep_queue+0xf0/0x230 [ 48.998126][ T1548] raw_process_ep_io+0x720/0x920 [ 48.998167][ T1548] ? raw_process_ep0_io+0x7a0/0x7a0 [ 48.998204][ T1548] ? __kasan_check_write+0x18/0x20 [ 48.998229][ T1548] ? _copy_from_user+0x87/0xa0 [ 48.998264][ T1548] ? memdup_user+0xb1/0x170 [ 48.998284][ T1548] ? raw_ioctl+0x17d6/0x37a0 [ 48.998318][ T1548] raw_ioctl+0x223d/0x37a0 [ 48.998356][ T1548] ? __cfi_raw_ioctl+0x10/0x10 [ 48.998397][ T1548] ? selinux_file_ioctl+0x732/0x1480 [ 48.998429][ T1548] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.998457][ T1548] ? hrtimer_nanosleep+0x265/0x340 [ 48.998501][ T1548] ? do_futex+0x37d/0x510 [ 48.998539][ T1548] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 48.998561][ T1548] ? __cfi_do_futex+0x10/0x10 [ 48.998590][ T1548] ? get_timespec64+0x11a/0x1b0 [ 48.998626][ T1548] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.998656][ T1548] ? security_file_ioctl+0x3e/0x110 [ 48.998679][ T1548] ? __cfi_raw_ioctl+0x10/0x10 [ 48.998712][ T1548] __se_sys_ioctl+0x135/0x1b0 [ 48.998742][ T1548] __x64_sys_ioctl+0x7f/0xa0 [ 48.998769][ T1548] x64_sys_call+0x1878/0x2ee0 [ 48.998801][ T1548] do_syscall_64+0x57/0xf0 [ 48.998832][ T1548] ? clear_bhb_loop+0x50/0xa0 [ 48.998857][ T1548] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.998894][ T1548] RIP: 0033:0x7fb0f419dd6b [ 48.998915][ T1548] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 48.998935][ T1548] RSP: 002b:00007fb0f4f89f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.998960][ T1548] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb0f419dd6b [ 48.998979][ T1548] RDX: 00007fb0f4f89fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 48.998995][ T1548] RBP: 0000000000000003 R08: 00007fb0f4550320 R09: 0000000000000000 [ 48.999012][ T1548] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 48.999027][ T1548] R13: 0000000000000000 R14: 00007fb0f4425fa0 R15: 00007ffc085a11b8 [ 48.999046][ T1548] [ 48.999054][ T1548] [ 49.350003][ T1548] Allocated by task 1: [ 49.354090][ T1548] kasan_save_track+0x3e/0x80 [ 49.358788][ T1548] kasan_save_alloc_info+0x3a/0x50 [ 49.363959][ T1548] __kasan_kmalloc+0x96/0xb0 [ 49.368591][ T1548] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 49.375026][ T1548] kvasprintf+0xf1/0x260 [ 49.379287][ T1548] kvasprintf_const+0xf6/0x250 [ 49.384100][ T1548] kobject_set_name_vargs+0x65/0x120 [ 49.389413][ T1548] dev_set_name+0xe3/0x140 [ 49.393856][ T1548] usb_add_gadget+0x436/0x780 [ 49.398546][ T1548] usb_add_gadget_udc+0x11e/0x160 [ 49.403583][ T1548] dummy_udc_probe+0x6ea/0x7f0 [ 49.408372][ T1548] platform_probe+0x17a/0x200 [ 49.413065][ T1548] really_probe+0x2e1/0x8b0 [ 49.417592][ T1548] __driver_probe_device+0x193/0x280 [ 49.422912][ T1548] driver_probe_device+0x54/0x3f0 [ 49.427950][ T1548] __device_attach_driver+0x2f1/0x4b0 [ 49.433421][ T1548] bus_for_each_drv+0x264/0x300 [ 49.438286][ T1548] __device_attach+0x2c4/0x3c0 [ 49.443069][ T1548] device_initial_probe+0x1e/0x30 [ 49.448116][ T1548] bus_probe_device+0x18b/0x270 [ 49.452983][ T1548] device_add+0x7fd/0xbf0 [ 49.457331][ T1548] platform_device_add+0x464/0x6c0 [ 49.462471][ T1548] dummy_hcd_init+0xce2/0x1230 [ 49.467286][ T1548] do_one_initcall+0x1e8/0x6a0 [ 49.472102][ T1548] do_initcall_level+0x174/0x2e5 [ 49.477078][ T1548] do_initcalls+0x7e/0x160 [ 49.481526][ T1548] do_basic_setup+0x95/0xb0 [ 49.486114][ T1548] kernel_init_freeable+0x2b1/0x400 [ 49.491360][ T1548] kernel_init+0x21/0x1e0 [ 49.495709][ T1548] ret_from_fork+0x67/0xa0 [ 49.500173][ T1548] ret_from_fork_asm+0x1a/0x30 [ 49.504946][ T1548] [ 49.507281][ T1548] Freed by task 1563: [ 49.511272][ T1548] kasan_save_track+0x3e/0x80 [ 49.515981][ T1548] kasan_save_free_info+0x44/0x50 [ 49.521016][ T1548] __kasan_slab_free+0x5f/0x80 [ 49.525826][ T1548] kfree+0x158/0x440 [ 49.529734][ T1548] kfree_const+0x3d/0x50 [ 49.533990][ T1548] kobject_put+0x21f/0x2a0 [ 49.538457][ T1548] put_device+0x23/0x40 [ 49.542653][ T1548] usb_del_gadget_udc+0x25/0x30 [ 49.547512][ T1548] dummy_udc_remove+0x5c/0x70 [ 49.552222][ T1548] platform_remove+0x7e/0xb0 [ 49.556848][ T1548] device_release_driver_internal+0x4ad/0x830 [ 49.562937][ T1548] device_driver_detach+0x3f/0x50 [ 49.568035][ T1548] unbind_store+0x1ab/0x1f0 [ 49.572607][ T1548] drv_attr_store+0x91/0xb0 [ 49.577144][ T1548] sysfs_kf_write+0x13e/0x160 [ 49.581847][ T1548] kernfs_fop_write_iter+0x316/0x510 [ 49.587149][ T1548] vfs_write+0x75f/0xfd0 [ 49.591406][ T1548] ksys_write+0x145/0x260 [ 49.595769][ T1548] __x64_sys_write+0x7f/0x90 [ 49.600379][ T1548] x64_sys_call+0x271c/0x2ee0 [ 49.605078][ T1548] do_syscall_64+0x57/0xf0 [ 49.609514][ T1548] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.615449][ T1548] [ 49.617789][ T1548] The buggy address belongs to the object at ffff888106376dc0 [ 49.617789][ T1548] which belongs to the cache kmalloc-16 of size 16 [ 49.631685][ T1548] The buggy address is located 0 bytes inside of [ 49.631685][ T1548] freed 16-byte region [ffff888106376dc0, ffff888106376dd0) [ 49.645267][ T1548] [ 49.647603][ T1548] The buggy address belongs to the physical page: [ 49.654055][ T1548] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888106376900 pfn:0x106376 [ 49.664235][ T1548] flags: 0x4000000000000200(workingset|zone=1) [ 49.670407][ T1548] page_type: f5(slab) [ 49.674506][ T1548] raw: 4000000000000200 ffff888100041640 ffffea000469e6d0 ffffea00042bee50 [ 49.683098][ T1548] raw: ffff888106376900 000000000080007d 00000001f5000000 0000000000000000 [ 49.691707][ T1548] page dumped because: kasan: bad access detected [ 49.698138][ T1548] page_owner tracks the page as allocated [ 49.703864][ T1548] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4037873128, free_ts 0 [ 49.722892][ T1548] register_dummy_stack+0x99/0x110 [ 49.728046][ T1548] init_page_owner+0x36/0x840 [ 49.732766][ T1548] page_ext_init+0x3f8/0x44b [ 49.737431][ T1548] mm_core_init+0x4b/0x7b [ 49.741790][ T1548] page_owner free stack trace missing [ 49.747195][ T1548] [ 49.749555][ T1548] Memory state around the buggy address: [ 49.755191][ T1548] ffff888106376c80: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 01 fc fc [ 49.763267][ T1548] ffff888106376d00: 00 00 fc fc 00 00 fc fc fa fb fc fc 00 01 fc fc [ 49.771355][ T1548] >ffff888106376d80: 00 01 fc fc 00 04 fc fc fa fb fc fc fa fb fc fc [ 49.779434][ T1548] ^ [ 49.785610][ T1548] ffff888106376e00: 00 04 fc fc 00 04 fc fc 00 00 fc fc 00 04 fc fc [ 49.793766][ T1548] ffff888106376e80: 00 01 fc fc 00 01 fc fc 00 04 fc fc 00 01 fc fc [ 49.801835][ T1548] ================================================================== [ 49.813306][ T1548] Disabling lock debugging due to kernel taint [ 49.825110][ T1548] gadget @1 : fail, usb_ep_queue returned -108 [ 49.832285][ T36] audit: type=1400 audit(1787163956.991:287): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.854286][ T36] audit: type=1400 audit(1787163956.991:288): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.875759][ T36] audit: type=1400 audit(1787163956.991:289): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.897025][ T36] audit: type=1400 audit(1787163956.991:290): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.917593][ T36] audit: type=1400 audit(1787163956.991:291): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1