last executing test programs: 5.593625485s ago: executing program 0 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffffe, @loopback, 0x7}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040004, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c) sendto(r1, &(0x7f0000000500)="1e", 0x1, 0x4048097, 0x0, 0x0) 5.593547455s ago: executing program 0 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000001880)={0x14, 0x2e, 0x107, 0xfffffffe, 0xffffffff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0x400c004) 5.593499145s ago: executing program 0 (id=93): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x4e20, 0x2, 0x4e22, 0x0, 0xa, 0xa0, 0x20, 0x2c}, {0xc832, 0x40, 0x7ff, 0x5, 0x2, 0x8, 0x5, 0xfffffffffffffff8}, {0x8, 0x9, 0x2, 0x7fffffffffffffff}, 0x673, 0x6e6bb7, 0x1}, {{@in6=@local, 0x5d3, 0x2b}, 0x2, @in=@loopback, 0x0, 0x2, 0x3, 0xff, 0x6, 0x5, 0x9}}, 0xe8) 5.593440135s ago: executing program 0 (id=94): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2.285156229s ago: executing program 0 (id=135): r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x60, 0x30, 0xd, {0xd, 0x10, "9b77241d4213d0d147befe"}}, 0x0}, 0x0) fchdir(0xffffffffffffffff) 2.131750472s ago: executing program 2 (id=136): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001440)={0x1, &(0x7f0000001480)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) 2.131638062s ago: executing program 2 (id=137): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume_offset', 0x40901, 0x108) write$FUSE_DIRENT(r0, &(0x7f00000003c0)=ANY=[], 0x200001d0) 2.131571662s ago: executing program 2 (id=138): syz_usb_connect(0x5, 0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='mnt\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000240)={0xffffffff, 0x0, 0xfff, 0x1, 0xb, "e8a872c03d775900", 0x7, 0x7}) 1.413925078s ago: executing program 3 (id=155): getrandom(&(0x7f0000000ec0)=""/54, 0x36, 0x3) 1.398682488s ago: executing program 3 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.34177268s ago: executing program 3 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x15, 0x1, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) 1.34167435s ago: executing program 3 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) 1.34160306s ago: executing program 3 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$binfmt_elf32(r0, &(0x7f00000006c0)=ANY=[], 0x38d) 1.33399429s ago: executing program 3 (id=160): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x1, "7f"}, 0x0, 0x0}) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000200)={0x100000, 0x0, 0xfffffffc}) 929.511379ms ago: executing program 2 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, 0x0, 0x0) 929.349919ms ago: executing program 2 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)=""/143, 0x8f}, {&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000001bc0)=""/4082, 0xff2}, {&(0x7f0000002c00)=""/151, 0x97}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x0, 0x0) 660.081415ms ago: executing program 0 (id=163): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f00000004c0)) 127.226857ms ago: executing program 1 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000001480)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) 115.019927ms ago: executing program 1 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "8d6de0834860dda0ce151b3814689f2e"}, 0x11, 0x3) 103.535877ms ago: executing program 1 (id=168): r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) 57.465679ms ago: executing program 2 (id=169): socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xb87d, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b33, 0x200, 0x1000002, 0x100091, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x43a6, 0x20, 0x0, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 57.350088ms ago: executing program 1 (id=170): r0 = gettid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) preadv(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) timer_create(0x2, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 14.373489ms ago: executing program 1 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) 0s ago: executing program 1 (id=172): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4001) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x0, 0x5, 0x7, 0xf}, {0x9, 0x5, 0x5, 0x2, 0x200, 0x5, 0x2, 0x1c}, {0x9, 0x5, 0x1, 0x3, 0x400, 0x2, 0x5, 0x2}}}}}}]}}, 0x0) 0s ago: executing program 2 (id=174): r0 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f00000002c0)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000008c0)={r1}, &(0x7f0000000900)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 30.176150][ T36] audit: type=1400 audit(1791904659.730:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.179438][ T287] cgroup: Unknown subsys name 'net' [ 30.198829][ T36] audit: type=1400 audit(1791904659.730:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.226191][ T36] audit: type=1400 audit(1791904659.770:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.226588][ T287] cgroup: Unknown subsys name 'devices' [ 30.341823][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.347484][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.442640][ T36] audit: type=1400 audit(1791904660.000:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.465849][ T36] audit: type=1400 audit(1791904660.000:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.490605][ T36] audit: type=1400 audit(1791904660.000:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.520770][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.530342][ T36] audit: type=1400 audit(1791904660.090:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.555796][ T36] audit: type=1400 audit(1791904660.090:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.595806][ T36] audit: type=1400 audit(1791904660.150:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.596982][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.621347][ T36] audit: type=1400 audit(1791904660.150:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.478259][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.485936][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.493236][ T294] bridge_slave_0: entered allmulticast mode [ 31.499777][ T294] bridge_slave_0: entered promiscuous mode [ 31.507665][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.514778][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.521915][ T294] bridge_slave_1: entered allmulticast mode [ 31.528226][ T294] bridge_slave_1: entered promiscuous mode [ 31.595450][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.602596][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.609857][ T296] bridge_slave_0: entered allmulticast mode [ 31.616097][ T296] bridge_slave_0: entered promiscuous mode [ 31.625252][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.632375][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.639477][ T296] bridge_slave_1: entered allmulticast mode [ 31.645778][ T296] bridge_slave_1: entered promiscuous mode [ 31.655296][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.662478][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.669621][ T295] bridge_slave_0: entered allmulticast mode [ 31.675842][ T295] bridge_slave_0: entered promiscuous mode [ 31.689642][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.696699][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.703845][ T295] bridge_slave_1: entered allmulticast mode [ 31.710144][ T295] bridge_slave_1: entered promiscuous mode [ 31.756158][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.763277][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.770400][ T297] bridge_slave_0: entered allmulticast mode [ 31.776636][ T297] bridge_slave_0: entered promiscuous mode [ 31.785895][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.792981][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.800083][ T297] bridge_slave_1: entered allmulticast mode [ 31.806397][ T297] bridge_slave_1: entered promiscuous mode [ 31.905380][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.912473][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.919796][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.926838][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.947466][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.954577][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.962095][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.969143][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.994299][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.001388][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.008668][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.015804][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.049263][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.056369][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.063679][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.070746][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.087378][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.094718][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.102422][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.109801][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.117176][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.125122][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.132472][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.149029][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.156122][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.166909][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.173994][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.184509][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.191591][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.213515][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.220680][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.228323][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.235422][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.269015][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.276113][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.284769][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.291872][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.311261][ T294] veth0_vlan: entered promiscuous mode [ 32.335496][ T297] veth0_vlan: entered promiscuous mode [ 32.349853][ T296] veth0_vlan: entered promiscuous mode [ 32.361837][ T297] veth1_macvtap: entered promiscuous mode [ 32.370107][ T294] veth1_macvtap: entered promiscuous mode [ 32.393349][ T295] veth0_vlan: entered promiscuous mode [ 32.405978][ T296] veth1_macvtap: entered promiscuous mode [ 32.441490][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.448519][ T295] veth1_macvtap: entered promiscuous mode [ 32.567789][ T326] tipc: Started in network mode [ 32.576205][ T326] tipc: Node identity 4, cluster identity 4711 [ 32.583103][ T326] tipc: Node number set to 4 [ 32.597013][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.102534][ T366] input: syz1 as /devices/virtual/input/input4 [ 33.439343][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.600503][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 33.656315][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.668597][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 33.683565][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 33.691840][ T9] usb 2-1: Manufacturer: syz [ 33.699576][ T9] usb 2-1: config 0 descriptor?? [ 33.705116][ T310] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.900145][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.912651][ T310] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 33.921991][ T310] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 33.930414][ T310] usb 3-1: Product: syz [ 33.934609][ T310] usb 3-1: Manufacturer: syz [ 34.089212][ T310] usb 3-1: SerialNumber: syz [ 34.098378][ T310] usb 3-1: config 0 descriptor?? [ 34.314327][ T394] Zero length message leads to an empty skb [ 34.325962][ T310] usb 3-1: USB disconnect, device number 2 [ 34.346835][ T464] FAULT_INJECTION: forcing a failure. [ 34.346835][ T464] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.360384][ T464] CPU: 1 UID: 0 PID: 464 Comm: syz.3.66 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 34.360423][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.360449][ T464] Call Trace: [ 34.360457][ T464] [ 34.360466][ T464] __dump_stack+0x21/0x30 [ 34.360509][ T464] dump_stack_lvl+0x140/0x1c0 [ 34.360545][ T464] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.360581][ T464] ? unwind_get_return_address+0x51/0x90 [ 34.360625][ T464] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 34.360656][ T464] dump_stack+0x19/0x20 [ 34.360692][ T464] should_fail_ex+0x3c2/0x510 [ 34.360716][ T464] should_fail_alloc_page+0xec/0x110 [ 34.360740][ T464] __alloc_pages_noprof+0x1c0/0x7e0 [ 34.360769][ T464] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.360798][ T464] ? kasan_save_track+0x4f/0x80 [ 34.360834][ T464] ? kasan_save_alloc_info+0x3a/0x50 [ 34.360864][ T464] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 34.360898][ T464] ? alloc_vmap_area+0x230/0x26f0 [ 34.360925][ T464] ? __get_vm_area_node+0x1f8/0x390 [ 34.360953][ T464] ? _raw_spin_lock+0x92/0x120 [ 34.360989][ T464] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.361025][ T464] get_free_pages_noprof+0x14/0x40 [ 34.361053][ T464] kasan_populate_vmalloc_pte+0x4c/0x170 [ 34.361088][ T464] __apply_to_page_range+0x7bf/0xd00 [ 34.361125][ T464] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 34.361164][ T464] ? apply_to_page_range+0x60/0x60 [ 34.361200][ T464] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 34.361234][ T464] apply_to_page_range+0x3f/0x60 [ 34.361269][ T464] kasan_populate_vmalloc+0x64/0x80 [ 34.361302][ T464] alloc_vmap_area+0x1e8e/0x26f0 [ 34.361333][ T464] ? kasan_save_alloc_info+0x3a/0x50 [ 34.361363][ T464] ? vm_map_ram+0xdd0/0xdd0 [ 34.361395][ T464] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 34.361429][ T464] ? __get_vm_area_node+0x150/0x390 [ 34.361456][ T464] __get_vm_area_node+0x1f8/0x390 [ 34.361483][ T464] __vmalloc_node_range_noprof+0x340/0x1300 [ 34.361514][ T464] ? copy_process+0x57c/0x3350 [ 34.361552][ T464] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 34.361584][ T464] ? kasan_save_alloc_info+0x3a/0x50 [ 34.361624][ T464] ? __kasan_slab_alloc+0x73/0x90 [ 34.361647][ T464] ? arch_dup_task_struct+0x5b/0xe0 [ 34.361671][ T464] ? __asan_memcpy+0x5a/0x80 [ 34.361703][ T464] dup_task_struct+0x5d6/0xd80 [ 34.361734][ T464] ? copy_process+0x57c/0x3350 [ 34.361766][ T464] ? _raw_spin_lock_irq+0x93/0x120 [ 34.361803][ T464] ? copy_process+0x3350/0x3350 [ 34.361836][ T464] ? __kasan_check_write+0x18/0x20 [ 34.361870][ T464] copy_process+0x57c/0x3350 [ 34.361902][ T464] ? __cfi_futex_wake_mark+0x10/0x10 [ 34.361932][ T464] ? futex_wake+0x627/0x950 [ 34.361961][ T464] ? __cfi_copy_process+0x10/0x10 [ 34.361994][ T464] kernel_clone+0x233/0x810 [ 34.362028][ T464] ? __cfi_kernel_clone+0x10/0x10 [ 34.362061][ T464] ? do_futex+0x32a/0x510 [ 34.362088][ T464] __x64_sys_clone+0x1b7/0x230 [ 34.362123][ T464] ? __cfi___x64_sys_clone+0x10/0x10 [ 34.362162][ T464] ? __kasan_check_write+0x18/0x20 [ 34.362194][ T464] ? fpregs_restore_userregs+0x11c/0x260 [ 34.362226][ T464] ? switch_fpu_return+0x12/0x20 [ 34.362257][ T464] x64_sys_call+0x2b3c/0x2ee0 [ 34.362281][ T464] do_syscall_64+0x57/0xf0 [ 34.362302][ T464] ? clear_bhb_loop+0x50/0xa0 [ 34.362332][ T464] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.362361][ T464] RIP: 0033:0x7f147279e2d9 [ 34.362392][ T464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.362413][ T464] RSP: 002b:00007f147368cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 34.362448][ T464] RAX: ffffffffffffffda RBX: 00007f1472a25fa0 RCX: 00007f147279e2d9 [ 34.362467][ T464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.362481][ T464] RBP: 00007f1472835888 R08: 0000000000000000 R09: 0000000000000000 [ 34.362497][ T464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.362511][ T464] R13: 00007f1472a26038 R14: 00007f1472a25fa0 R15: 00007ffcf9e2e548 [ 34.362532][ T464] [ 34.362616][ T464] syz.3.66: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 34.786792][ T464] CPU: 1 UID: 0 PID: 464 Comm: syz.3.66 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 34.786831][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.786847][ T464] Call Trace: [ 34.786855][ T464] [ 34.786864][ T464] __dump_stack+0x21/0x30 [ 34.786908][ T464] dump_stack_lvl+0x140/0x1c0 [ 34.786945][ T464] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.786983][ T464] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 34.787009][ T464] dump_stack+0x19/0x20 [ 34.787044][ T464] warn_alloc+0x1e7/0x2c0 [ 34.787072][ T464] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.787102][ T464] ? __cfi_warn_alloc+0x10/0x10 [ 34.787129][ T464] ? __get_vm_area_node+0x211/0x390 [ 34.787165][ T464] ? __get_vm_area_node+0x211/0x390 [ 34.787195][ T464] __vmalloc_node_range_noprof+0x365/0x1300 [ 34.787232][ T464] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 34.787264][ T464] ? kasan_save_alloc_info+0x3a/0x50 [ 34.787295][ T464] ? __kasan_slab_alloc+0x73/0x90 [ 34.787318][ T464] ? arch_dup_task_struct+0x5b/0xe0 [ 34.787342][ T464] ? __asan_memcpy+0x5a/0x80 [ 34.787375][ T464] dup_task_struct+0x5d6/0xd80 [ 34.787407][ T464] ? copy_process+0x57c/0x3350 [ 34.787439][ T464] ? _raw_spin_lock_irq+0x93/0x120 [ 34.787476][ T464] ? copy_process+0x3350/0x3350 [ 34.787509][ T464] ? __kasan_check_write+0x18/0x20 [ 34.787543][ T464] copy_process+0x57c/0x3350 [ 34.787575][ T464] ? __cfi_futex_wake_mark+0x10/0x10 [ 34.787607][ T464] ? futex_wake+0x627/0x950 [ 34.787637][ T464] ? __cfi_copy_process+0x10/0x10 [ 34.787671][ T464] kernel_clone+0x233/0x810 [ 34.787706][ T464] ? __cfi_kernel_clone+0x10/0x10 [ 34.787739][ T464] ? do_futex+0x32a/0x510 [ 34.787765][ T464] __x64_sys_clone+0x1b7/0x230 [ 34.787800][ T464] ? __cfi___x64_sys_clone+0x10/0x10 [ 34.787838][ T464] ? __kasan_check_write+0x18/0x20 [ 34.787870][ T464] ? fpregs_restore_userregs+0x11c/0x260 [ 34.787903][ T464] ? switch_fpu_return+0x12/0x20 [ 34.787935][ T464] x64_sys_call+0x2b3c/0x2ee0 [ 34.787960][ T464] do_syscall_64+0x57/0xf0 [ 34.787981][ T464] ? clear_bhb_loop+0x50/0xa0 [ 34.788010][ T464] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.788039][ T464] RIP: 0033:0x7f147279e2d9 [ 34.788059][ T464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.788079][ T464] RSP: 002b:00007f147368cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 34.788105][ T464] RAX: ffffffffffffffda RBX: 00007f1472a25fa0 RCX: 00007f147279e2d9 [ 34.788124][ T464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.788145][ T464] RBP: 00007f1472835888 R08: 0000000000000000 R09: 0000000000000000 [ 34.788161][ T464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.788176][ T464] R13: 00007f1472a26038 R14: 00007f1472a25fa0 R15: 00007ffcf9e2e548 [ 34.788197][ T464] [ 34.788219][ T464] Mem-Info: [ 35.082116][ T464] active_anon:5486 inactive_anon:0 isolated_anon:0 [ 35.082116][ T464] active_file:17830 inactive_file:3331 isolated_file:0 [ 35.082116][ T464] unevictable:0 dirty:2389 writeback:0 [ 35.082116][ T464] slab_reclaimable:3996 slab_unreclaimable:71278 [ 35.082116][ T464] mapped:24170 shmem:157 pagetables:962 [ 35.082116][ T464] sec_pagetables:0 bounce:0 [ 35.082116][ T464] kernel_misc_reclaimable:0 [ 35.082116][ T464] free:1524690 free_pcp:6909 free_cma:0 [ 35.127182][ T464] Node 0 active_anon:22144kB inactive_anon:0kB active_file:71320kB inactive_file:13324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96680kB dirty:9556kB writeback:0kB shmem:628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4356kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no [ 35.159056][ T464] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955048kB mlocked:0kB bounce:0kB free_pcp:5076kB local_pcp:0kB free_cma:0kB [ 35.189202][ T464] lowmem_reserve[]: 0 3920 3920 [ 35.199444][ T464] Normal free:3168776kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21976kB inactive_anon:0kB active_file:71372kB inactive_file:13324kB unevictable:0kB writepending:9556kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4496kB local_pcp:2868kB free_cma:0kB [ 35.230993][ T464] lowmem_reserve[]: 0 0 0 [ 35.235461][ T464] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB [ 35.235726][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 35.235740][ T36] audit: type=1400 audit(1791904664.790:194): avc: denied { read } for pid=475 comm="syz.0.72" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.251266][ T36] audit: type=1400 audit(1791904664.790:195): avc: denied { open } for pid=475 comm="syz.0.72" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.256995][ T464] (M) = 2949972kB [ 35.305553][ T464] Normal: 363*4kB (UME) 455*8kB (UM) 439*16kB (UME) 380*32kB (UM) 337*64kB (UME) 52*128kB (UME) 20*256kB (UME) 16*512kB (UME) 12*1024kB (UM) 9*2048kB (UME) 750*4096kB (M) = 3168532kB [ 35.326657][ T464] 21336 total pagecache pages [ 35.331523][ T464] 0 pages in swap cache [ 35.335805][ T464] Free swap = 124984kB [ 35.340531][ T464] Total swap = 124996kB [ 35.344832][ T464] 2097051 pages RAM [ 35.348736][ T464] 0 pages HighMem/MovableOnly [ 35.353658][ T464] 354579 pages reserved [ 35.357955][ T464] 0 pages cma reserved [ 35.368151][ T464] Memory allocations: [ 35.372500][ T464] 0 B 0 init/main.c:1477 func:do_initcalls [ 35.379898][ T464] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 35.388208][ T464] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 35.395968][ T464] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 35.404021][ T464] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 35.412043][ T464] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 35.420756][ T464] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 35.428918][ T464] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 35.437141][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.437908][ T464] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 35.452664][ T464] 0 B 0 init/initramfs.c:101 func:find_link [ 35.514326][ T36] audit: type=1400 audit(1791904665.070:196): avc: denied { mount } for pid=479 comm="syz.3.73" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 35.538929][ T36] audit: type=1400 audit(1791904665.090:197): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 35.599392][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 35.606202][ T9] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 35.616645][ T9] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 35.627609][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 35.637157][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.645311][ T9] usb 3-1: Product: syz [ 35.649767][ T9] usb 3-1: Manufacturer: syz [ 35.654507][ T9] usb 3-1: SerialNumber: syz [ 35.795551][ T36] audit: type=1400 audit(1791904665.350:198): avc: denied { name_bind } for pid=483 comm="syz.0.75" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.817131][ T36] audit: type=1400 audit(1791904665.350:199): avc: denied { node_bind } for pid=483 comm="syz.0.75" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.979896][ T488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.988523][ T488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.024501][ T9] usb 3-1: USB disconnect, device number 3 [ 36.168361][ T310] usb 2-1: USB disconnect, device number 2 [ 36.188857][ T36] audit: type=1400 audit(1791904665.740:200): avc: denied { create } for pid=499 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.208796][ T36] audit: type=1400 audit(1791904665.740:201): avc: denied { write } for pid=499 comm="syz.3.82" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.254972][ T36] audit: type=1400 audit(1791904665.810:202): avc: denied { create } for pid=502 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.531162][ T36] audit: type=1400 audit(1791904666.090:203): avc: denied { create } for pid=516 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.550617][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.559388][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 36.587436][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.593935][ T521] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.699360][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 36.706015][ T310] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 36.717449][ T310] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.726168][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.729404][ T310] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 36.751487][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 36.752713][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.761283][ T9] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 36.768362][ T310] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 36.778259][ T9] usb 4-1: Product: syz [ 36.785698][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.789231][ T9] usb 4-1: Manufacturer: syz [ 36.801738][ T9] usb 4-1: SerialNumber: syz [ 36.806615][ T310] usb 2-1: config 0 descriptor?? [ 36.818327][ T9] usb 4-1: config 0 descriptor?? [ 36.969339][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.028123][ T536] usb 4-1: USB disconnect, device number 2 [ 37.119332][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 37.125744][ T65] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 37.134941][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.143811][ T65] usb 1-1: config 0 descriptor?? [ 37.219869][ T310] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0934.0001/input/input6 [ 37.234438][ T310] uclogic 0003:28BD:0934.0001: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0934] on usb-dummy_hcd.1-1/input0 [ 37.418994][ T310] usb 2-1: USB disconnect, device number 3 [ 37.599007][ T549] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 38.152704][ T594] loop0: detected capacity change from 0 to 3904 [ 38.180519][ T594] loop0: [ 38.228826][ T600] rust_binder: 599: undelivered TRANSACTION_COMPLETE [ 38.241255][ T65] rust_binder: 599: undelivered TRANSACTION_COMPLETE [ 38.609472][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.609487][ T523] Bluetooth: hci0: command 0x1003 tx timeout [ 38.909398][ T310] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 39.060507][ T310] usb 4-1: not running at top speed; connect to a high speed hub [ 39.072139][ T310] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 39.081377][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.089544][ T310] usb 4-1: Product: syz [ 39.093836][ T310] usb 4-1: Manufacturer: syz [ 39.098650][ T310] usb 4-1: SerialNumber: syz [ 39.357354][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.364837][ T310] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 39.388535][ T310] usb 4-1: USB disconnect, device number 3 [ 39.974515][ T395] udevd[395]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.987876][ T397] usb 1-1: USB disconnect, device number 2 [ 40.303805][ T647] sd 0:0:1:0: PR command failed: 1026 [ 40.309239][ T647] sd 0:0:1:0: Sense Key : 0x5 [current] [ 40.315144][ T647] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 40.379338][ T536] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.439352][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.459352][ T397] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.505047][ T653] can: request_module (can-proto-6) failed. [ 40.530488][ T536] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.540771][ T536] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 40.551007][ T536] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.560836][ T536] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.570742][ T536] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 40.583891][ T536] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 40.593737][ T536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.600882][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 40.610775][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.610794][ T636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.611501][ T397] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.634766][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 40.654568][ T397] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.659386][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 40.665095][ T397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.688784][ T397] usb 1-1: string descriptor 0 read error: -22 [ 40.695070][ T397] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 40.695241][ T65] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 40.704470][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.716355][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.727692][ T397] usb 1-1: selecting invalid altsetting 1 [ 40.735678][ T397] usb 1-1: unit 3 not found! [ 40.740843][ T664] blk-mq: reduced tag depth (128 -> 64) [ 40.742125][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 40.742169][ T36] audit: type=1400 audit(1791904670.300:239): avc: denied { ioctl } for pid=663 comm="syz.3.150" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.755868][ T65] usb 2-1: config 0 descriptor?? [ 40.815201][ T9] usb 3-1: USB disconnect, device number 4 [ 40.926796][ T397] usb 1-1: unit 0 not found! [ 41.135220][ T9] usb 1-1: USB disconnect, device number 3 [ 41.209358][ T397] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.214363][ T65] nintendo 0003:057E:2019.0002: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 41.369336][ T397] usb 4-1: Using ep0 maxpacket: 8 [ 41.375603][ T397] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 41.383877][ T397] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 41.393664][ T397] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 41.403546][ T397] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 41.413594][ T397] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.426647][ T397] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 41.435738][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.879382][ T397] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.029347][ T397] usb 1-1: Using ep0 maxpacket: 8 [ 42.035767][ T397] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 42.045586][ T397] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 42.056413][ T397] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 42.066402][ T397] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 42.079448][ T397] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 42.088509][ T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.135869][ T36] audit: type=1400 audit(1791904671.690:240): avc: denied { create } for pid=696 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.155302][ T36] audit: type=1400 audit(1791904671.690:241): avc: denied { write } for pid=696 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.330090][ T36] audit: type=1400 audit(1791904671.890:242): avc: denied { write } for pid=715 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 42.335732][ T716] ------------[ cut here ]------------ [ 42.354493][ T716] WARNING: CPU: 0 PID: 716 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 42.363974][ T716] Modules linked in: [ 42.367988][ T716] CPU: 0 UID: 0 PID: 716 Comm: syz.2.174 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 42.379478][ T716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.389634][ T716] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 42.395258][ T716] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a 8a 05 ff 0f 0b b8 ea ff ff ff eb de e8 2c 8a 05 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 42.414936][ T716] RSP: 0018:ffffc9000e0d7728 EFLAGS: 00010287 [ 42.421098][ T716] RAX: ffffffff8283c294 RBX: ffff88811662e400 RCX: 0000000000080000 [ 42.429105][ T716] RDX: ffffc900026a5000 RSI: 0000000000000afe RDI: 0000000000000aff [ 42.437159][ T716] RBP: ffffc9000e0d7770 R08: ffffc9000e0d782f R09: 0000000000000000 [ 42.445189][ T716] R10: 0000000000000000 R11: ffffffff8283bdb0 R12: ffff8881193c8888 [ 42.453238][ T716] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88811662e438 [ 42.461276][ T716] FS: 00007f0fbb62f6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 42.470258][ T716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.476868][ T716] CR2: 000000110c24a7b9 CR3: 000000011a3f2000 CR4: 00000000003526b0 [ 42.484963][ T716] Call Trace: [ 42.488309][ T716] [ 42.491297][ T716] ? __asan_memcpy+0x5a/0x80 [ 42.495942][ T716] crypto_sig_verify+0x1d0/0x260 [ 42.500956][ T716] ? __cfi_crypto_sig_verify+0x10/0x10 [ 42.506462][ T716] ? crypto_sig_set_pubkey+0x9d/0xb0 [ 42.511819][ T716] public_key_verify_signature+0x654/0xa40 [ 42.517678][ T716] ? __cfi_public_key_verify_signature+0x10/0x10 [ 42.524076][ T716] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 42.529843][ T716] ? try_to_wake_up+0x119e/0x1fd0 [ 42.534936][ T716] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 42.541552][ T716] public_key_verify_signature_2+0x47/0x60 [ 42.547406][ T716] verify_signature+0xf3/0x120 [ 42.552234][ T716] asymmetric_key_verify_signature+0x160/0x200 [ 42.558442][ T716] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 42.565187][ T716] ? should_fail+0xf/0x20 [ 42.569601][ T716] ? __kasan_check_write+0x18/0x20 [ 42.574750][ T716] ? _copy_from_user+0x87/0xa0 [ 42.579580][ T716] ? memdup_user+0xb1/0x170 [ 42.584139][ T716] keyctl_pkey_verify+0x203/0x290 [ 42.589188][ T716] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 42.594793][ T716] __se_sys_keyctl+0x743/0xe40 [ 42.599664][ T716] ? __x64_sys_keyctl+0xf0/0xf0 [ 42.604551][ T716] ? __cfi_do_futex+0x10/0x10 [ 42.609316][ T716] ? kvfree_sensitive+0x51/0x70 [ 42.614225][ T716] ? __se_sys_futex+0x13c/0x320 [ 42.619127][ T716] ? xfd_validate_state+0x68/0x140 [ 42.624299][ T716] ? __kasan_check_write+0x18/0x20 [ 42.629487][ T716] ? fpregs_restore_userregs+0x11c/0x260 [ 42.635174][ T716] __x64_sys_keyctl+0xc3/0xf0 [ 42.639926][ T716] x64_sys_call+0x996/0x2ee0 [ 42.644562][ T716] do_syscall_64+0x57/0xf0 [ 42.648987][ T716] ? clear_bhb_loop+0x50/0xa0 [ 42.653740][ T716] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.659723][ T716] RIP: 0033:0x7f0fba79e2d9 [ 42.664181][ T716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.683851][ T716] RSP: 002b:00007f0fbb62f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 42.692341][ T716] RAX: ffffffffffffffda RBX: 00007f0fbaa25fa0 RCX: 00007f0fba79e2d9 [ 42.700411][ T716] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 000000000000001c [ 42.708415][ T716] RBP: 00007f0fba835888 R08: 0000200000000940 R09: 0000000000000000 [ 42.716700][ T716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.724773][ T716] R13: 00007f0fbaa26038 R14: 00007f0fbaa25fa0 R15: 00007fff759f4c88 [ 42.732827][ T716] [ 42.736054][ T716] ---[ end trace 0000000000000000 ]--- [ 42.742578][ T65] nintendo 0003:057E:2019.0002: Failed to get joycon info; ret=-71 [ 42.750668][ T65] nintendo 0003:057E:2019.0002: Failed to retrieve controller info; ret=-71 [ 42.760780][ T65] nintendo 0003:057E:2019.0002: Failed to initialize controller; ret=-71 [ 42.770181][ T65] nintendo 0003:057E:2019.0002: probe - fail = -71 [ 42.776863][ T65] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -71 [ 42.788565][ T65] usb 2-1: USB disconnect, device number 4 [ 43.079350][ T65] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 43.235381][ T65] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 43.243053][ T65] usb 2-1: can't read configurations, error -71 [ 43.985712][ T397] usb 4-1: USB disconnect, device number 4 [ 44.659018][ T536] usb 1-1: USB disconnect, device number 4