last executing test programs: 2.420354541s ago: executing program 2 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000300)={0x30, 0xffffffffffffffda}, 0x10) 2.394418601s ago: executing program 2 (id=474): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x12, r1, 0xe6a36000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x67, 0x9, 0x6, 0xa, 0x8, 0x1, 0x100}, 0xc) 2.337357963s ago: executing program 2 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x8, 0x3) 2.337100893s ago: executing program 2 (id=476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31) 927.246327ms ago: executing program 1 (id=501): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x1907d93b}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x2, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 926.928167ms ago: executing program 1 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r0, &(0x7f0000000140)='0', 0x1) 869.036709ms ago: executing program 1 (id=505): unshare(0x60000600) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) 868.882009ms ago: executing program 1 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000600)='?', 0x1}], 0x1, 0x4, 0x2, 0x0) 859.482599ms ago: executing program 1 (id=507): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x804) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000001c0)=0x8, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c0004005c07000000000000e0000002000000000000000000000000e80011"], 0x154}}, 0x0) 844.630389ms ago: executing program 1 (id=508): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010002000000104c054b0200000000000109022400010000a08f090400b7020300000009210a000601222b000905810340"], 0x0) syz_usb_connect$uac3(0x4, 0x13c, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)={0x20, 0x3e, 0x2b, {0x2b, 0xa, "01001b612b8526792c3cbd450f918d0fb74237cc6e446c4e88e78881ce2a52e871525fa7449eaa19a5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 565.395416ms ago: executing program 0 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0x2) 565.189276ms ago: executing program 0 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/virtio/drivers/virtio_net/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='virtio0\n', 0x8) 565.074336ms ago: executing program 0 (id=524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40018140) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 564.978896ms ago: executing program 0 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x18) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d08, &(0x7f0000000900)) 558.547276ms ago: executing program 0 (id=526): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 539.076957ms ago: executing program 0 (id=527): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x30) 229.344754ms ago: executing program 2 (id=528): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ffffffff0000000006002b00020300000000000000000000fe880000000000000000000000000001"], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 229.122874ms ago: executing program 2 (id=529): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027468c0e2193019f27000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 65.168808ms ago: executing program 3 (id=533): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x800) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1, 0x0, 0x7b, 0x10) 65.062498ms ago: executing program 3 (id=534): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_load(r0, &(0x7f00000003c0)={0xf97cff8c, 0x8}, 0x10) vmsplice(r0, &(0x7f0000000900)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 64.865038ms ago: executing program 3 (id=535): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 64.745948ms ago: executing program 3 (id=536): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000001880)="6f6f6d5f73636f72655f61646a203c202d2eb746a2e5957b6379779709b60e9881e46454522331d6f9878b1a9f98c00c6ecec5585e0ffcc4a08ab4fff33f1b97ecd1732d8e80064a27cacfeaf76e9a8c583edca43172ba1a854c056608531cc13fe2756139496a38bb6605f4e147973e17ee6a6063349b20cc81234bd884d3bd9e1d84372cd4636cf17770573967a6197adedfdd37a68f85e3f592951b52421b2a2e31b85091a40a7791965c595d13aaec234d0eeb011a1aca7a84f081b1a18eed44f9cc5283eeb9a61d112504461f4c3d621a7e7026a32754fbf6888c48bbebc5a1b2c6b9c89e3b11c3af01caf55ef99a88c8a6", 0xf4) 59.271419ms ago: executing program 3 (id=537): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 0s ago: executing program 3 (id=538): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x2, &(0x7f0000000000)=0x7}) kernel console output (not intermixed with test programs): [ 6.666238][ T36] audit: type=1400 audit(1787211468.889:58): avc: denied { read } for pid=203 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 14.520294][ T36] audit: type=1400 audit(1787211476.749:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.523592][ T36] audit: type=1400 audit(1787211476.749:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.526464][ T36] audit: type=1400 audit(1787211476.759:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2696]" dev="pipefs" ino=2696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.529952][ T36] audit: type=1400 audit(1787211476.759:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.532855][ T36] audit: type=1400 audit(1787211476.759:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 22.066576][ T36] audit: type=1400 audit(1787211484.299:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.067745][ T286] cgroup: Unknown subsys name 'net' [ 22.089229][ T36] audit: type=1400 audit(1787211484.299:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.116725][ T36] audit: type=1400 audit(1787211484.339:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.116942][ T286] cgroup: Unknown subsys name 'devices' [ 22.273376][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.278996][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.391242][ T36] audit: type=1400 audit(1787211484.619:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.414432][ T36] audit: type=1400 audit(1787211484.619:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.439203][ T36] audit: type=1400 audit(1787211484.629:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.447597][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.471108][ T36] audit: type=1400 audit(1787211484.709:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.496697][ T36] audit: type=1400 audit(1787211484.709:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.515820][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.522630][ T36] audit: type=1400 audit(1787211484.749:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.556534][ T36] audit: type=1400 audit(1787211484.749:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.245495][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.260392][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.267659][ T293] bridge_slave_0: entered allmulticast mode [ 23.273920][ T293] bridge_slave_0: entered promiscuous mode [ 23.280274][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.287407][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.294566][ T293] bridge_slave_1: entered allmulticast mode [ 23.300770][ T293] bridge_slave_1: entered promiscuous mode [ 23.402120][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.409174][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.416312][ T299] bridge_slave_0: entered allmulticast mode [ 23.422627][ T299] bridge_slave_0: entered promiscuous mode [ 23.429331][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.436530][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.443755][ T299] bridge_slave_1: entered allmulticast mode [ 23.449900][ T299] bridge_slave_1: entered promiscuous mode [ 23.513336][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.520395][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.527716][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.534768][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.551618][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.558672][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.565799][ T295] bridge_slave_0: entered allmulticast mode [ 23.572379][ T295] bridge_slave_0: entered promiscuous mode [ 23.578768][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.585908][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.593242][ T295] bridge_slave_1: entered allmulticast mode [ 23.599425][ T295] bridge_slave_1: entered promiscuous mode [ 23.617585][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.624707][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.632286][ T298] bridge_slave_0: entered allmulticast mode [ 23.638465][ T298] bridge_slave_0: entered promiscuous mode [ 23.647646][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.654980][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.662119][ T298] bridge_slave_1: entered allmulticast mode [ 23.668274][ T298] bridge_slave_1: entered promiscuous mode [ 23.746078][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.753191][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.760620][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.767747][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.784802][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.791896][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.799190][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.806236][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.822028][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.829320][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.837060][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.844764][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.852743][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.859910][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.871412][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.878594][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.896375][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.903569][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.944409][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.951500][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.959202][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.966278][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.993290][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.000438][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.013831][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.020976][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.028949][ T293] veth0_vlan: entered promiscuous mode [ 24.049352][ T293] veth1_macvtap: entered promiscuous mode [ 24.088491][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.104164][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.111204][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.119574][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.126618][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.135685][ T299] veth0_vlan: entered promiscuous mode [ 24.157657][ T298] veth0_vlan: entered promiscuous mode [ 24.166915][ T299] veth1_macvtap: entered promiscuous mode [ 24.183120][ T295] veth0_vlan: entered promiscuous mode [ 24.204252][ T298] veth1_macvtap: entered promiscuous mode [ 24.227370][ T295] veth1_macvtap: entered promiscuous mode [ 24.402466][ T342] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15'. [ 24.411651][ T342] netlink: 43 bytes leftover after parsing attributes in process `syz.2.15'. [ 24.427260][ T342] netlink: 'syz.2.15': attribute type 6 has an invalid length. [ 24.435321][ T342] netlink: 'syz.2.15': attribute type 5 has an invalid length. [ 24.445828][ T342] netlink: 43 bytes leftover after parsing attributes in process `syz.2.15'. [ 24.683362][ T377] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.731536][ T310] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.732705][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.771527][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.797071][ T379] netlink: 104 bytes leftover after parsing attributes in process `syz.3.32'. [ 24.833862][ T384] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 24.890287][ T390] PR command failed: 1026 [ 24.895600][ T390] sd 0:0:1:0: Sense Key : 0x5 [current] [ 24.901526][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 24.902084][ T390] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 24.907740][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.920231][ T310] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.933899][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.948390][ T310] usb 2-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 24.964420][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 24.971531][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1040, setting to 1024 [ 24.994709][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 24.999818][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.011589][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 25.029782][ T310] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 25.032565][ T65] usb 3-1: config 0 descriptor?? [ 25.039083][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 25.055319][ T65] hub 3-1:0.0: USB hub found [ 25.057293][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.070448][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.080284][ T310] usb 2-1: config 0 descriptor?? [ 25.085508][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.097472][ T10] usb 1-1: SerialNumber: syz [ 25.107582][ T360] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 25.256314][ T65] hub 3-1:0.0: 1 port detected [ 25.319812][ T360] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 25.498928][ T310] input: HID 1038:12b6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1038:12B6.0001/input/input5 [ 25.514988][ T310] steelseries 0003:1038:12B6.0001: input,hidraw0: USB HID v7f.fe Joystick [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 25.661115][ T65] usb 3-1: USB disconnect, device number 2 [ 25.729995][ T10] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 25.743212][ T412] usb 1-1: USB disconnect, device number 2 [ 25.749850][ T412] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 25.824231][ T412] hub 1-0:1.0: USB hub found [ 25.831268][ T412] hub 1-0:1.0: 1 port detected [ 25.911232][ T402] usb 2-1: USB disconnect, device number 2 [ 25.961551][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.111556][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.262618][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.271279][ T425] overlayfs: invalid origin (0000) [ 26.278186][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.288835][ T65] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 26.298341][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.307450][ T65] usb 4-1: config 0 descriptor?? [ 26.591556][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.635546][ T463] program syz.0.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 26.719738][ T65] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 26.729591][ T65] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 26.737834][ T65] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 26.745351][ T65] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 26.752402][ T65] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 26.759282][ T65] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 26.766298][ T65] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 26.774225][ T31] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.788624][ T65] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 26.799764][ T31] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.812702][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 26.819403][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 26.828637][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.838813][ T31] usb 3-1: config 0 descriptor?? [ 27.110173][ T511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 27.124369][ T10] usb 4-1: USB disconnect, device number 2 [ 27.286302][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 27.286318][ T36] audit: type=1400 audit(1787211489.519:180): avc: denied { read write } for pid=514 comm="syz.1.94" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.315828][ T36] audit: type=1400 audit(1787211489.519:181): avc: denied { open } for pid=514 comm="syz.1.94" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.340400][ T36] audit: type=1400 audit(1787211489.519:182): avc: denied { mounton } for pid=514 comm="syz.1.94" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.363695][ T36] audit: type=1400 audit(1787211489.519:183): avc: denied { mounton } for pid=514 comm="syz.1.94" path="/8/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 27.385991][ T36] audit: type=1400 audit(1787211489.549:184): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.409835][ T36] audit: type=1400 audit(1787211489.579:185): avc: denied { create } for pid=516 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.429583][ T36] audit: type=1400 audit(1787211489.579:186): avc: denied { connect } for pid=516 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.449551][ T36] audit: type=1400 audit(1787211489.579:187): avc: denied { ioctl } for pid=516 comm="syz.1.95" path="socket:[5157]" dev="sockfs" ino=5157 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.495146][ T36] audit: type=1400 audit(1787211489.729:188): avc: denied { execute } for pid=522 comm="syz.1.98" path="/12/cgroup.controllers" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.625581][ T36] audit: type=1400 audit(1787211489.859:189): avc: denied { create } for pid=530 comm="syz.1.102" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.650577][ T31] sony 0003:054C:0268.0003: can't set operational mode: step 1 [ 27.658415][ T536] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.670443][ T31] sony 0003:054C:0268.0003: Failed to set controller into operational mode [ 27.680665][ T538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 27.691853][ T31] sony 0003:054C:0268.0003: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 27.712480][ T541] process 'syz.1.106' launched './file0' with NULL argv: empty string added [ 27.721662][ T31] sony 0003:054C:0268.0003: failed to claim input [ 27.730996][ T31] usb 3-1: USB disconnect, device number 3 [ 27.751608][ T545] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 27.801089][ T549] can0: slcan on ttyS3. [ 27.858019][ T549] can0 (unregistered): slcan off ttyS3. [ 28.251570][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.361540][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.401535][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 28.409417][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.417688][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 28.425276][ T31] usb 4-1: can't read configurations, error -71 [ 28.471588][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.514001][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.521729][ T65] usb 1-1: no configurations [ 28.526321][ T65] usb 1-1: can't read configurations, error -22 [ 28.621549][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 28.627988][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.636487][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 28.647389][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 28.657086][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 28.668303][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 28.678317][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 28.688048][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 1024 [ 28.699097][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 28.710369][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 28.719439][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.727552][ T45] usb 2-1: Product: syz [ 28.731885][ T45] usb 2-1: Manufacturer: syz [ 28.736463][ T45] usb 2-1: SerialNumber: syz [ 28.741643][ T45] usb 2-1: config 0 descriptor?? [ 28.746897][ T624] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 28.754106][ T624] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 28.888796][ T628] devpts: called with bogus options [ 29.156827][ T665] netlink: 'syz.0.153': attribute type 3 has an invalid length. [ 29.193074][ T671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 29.261530][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.414218][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 29.423467][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.433162][ T31] usb 4-1: Product: syz [ 29.437519][ T31] usb 4-1: Manufacturer: syz [ 29.442399][ T31] usb 4-1: SerialNumber: syz [ 29.476872][ T10] usb 2-1: USB disconnect, device number 3 [ 30.058230][ T31] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 30.255816][ T10] usb 4-1: USB disconnect, device number 4 [ 30.348839][ T789] netlink: 165 bytes leftover after parsing attributes in process `syz.0.197'. [ 30.655559][ T824] syz.0.214 (824): drop_caches: 0 [ 30.676002][ T828] MTRR 1 not used [ 30.687521][ T830] rust_binder: 829:830 BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 30.696517][ T830] rust_binder: Write failure EINVAL in pid:193 [ 30.711076][ T834] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 30.725006][ T834] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 30.732775][ T834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.219'. [ 30.832667][ T850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 30.902645][ T862] UHID_CREATE from different security context by process 114 (syz.3.233), this is not allowed. [ 30.981500][ T65] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 31.003618][ T878] bridge_slave_0: default FDB implementation only supports local addresses [ 31.157300][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.170812][ T65] usb 1-1: not running at top speed; connect to a high speed hub [ 31.181577][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.191911][ T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.203707][ T65] usb 1-1: string descriptor 0 read error: -22 [ 31.204770][ T408] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 31.209942][ T65] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.226741][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.248617][ T65] usb 1-1: 0:2 : does not exist [ 31.365061][ T408] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 31.382387][ T408] usb 4-1: config 1 has no interface number 0 [ 31.388942][ T408] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.406507][ T408] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 31.417504][ T408] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 31.427577][ T408] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 31.438658][ T408] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 31.449831][ T408] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.459390][ T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.467718][ T408] usb 4-1: Product: syz [ 31.472078][ T408] usb 4-1: Manufacturer: syz [ 31.476718][ T408] usb 4-1: SerialNumber: syz [ 31.484593][ T868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.591522][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.700861][ T868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.741497][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 31.747653][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.760627][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 31.769701][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.778596][ T9] usb 3-1: config 0 descriptor?? [ 31.909541][ T868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.951519][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.061278][ T65] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 32.072426][ T65] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 32.082111][ T65] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 32.093416][ T65] usb 1-1: USB disconnect, device number 6 [ 32.103032][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.114068][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.127208][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.133956][ T408] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 32.140014][ T408] cdc_ncm 4-1:1.1: bind() failure [ 32.145082][ T10] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 32.155562][ T408] usb 4-1: USB disconnect, device number 5 [ 32.161491][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.170625][ T10] usb 2-1: config 0 descriptor?? [ 32.188402][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.195868][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.203337][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.210843][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.218403][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.226284][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.233702][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.241110][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.248556][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.256042][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.263458][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.270856][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.278280][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.285713][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.293256][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.301209][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.308713][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.316141][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.323595][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.330990][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.338646][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.346075][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.353506][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.361009][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.368558][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.376343][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.383805][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.391211][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.398773][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.407688][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.415148][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.422672][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.430073][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.437618][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.445032][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.452468][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.459867][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.467366][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.474814][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.482252][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.489672][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 32.551570][ T9] hid-picolcd 0003:04D8:C002.0004: No report with id 0x11 found [ 32.561358][ T9] usb 3-1: USB disconnect, device number 4 [ 32.586335][ T10] input: HID 044f:b65a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:044F:B65A.0005/input/input7 [ 32.605231][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 32.605247][ T36] audit: type=1400 audit(1787211494.839:271): avc: denied { name_bind } for pid=963 comm="syz.0.283" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.643315][ T966] kvm: user requested TSC rate below hardware speed [ 32.665938][ T36] audit: type=1400 audit(1787211494.899:272): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=488 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.671837][ T10] thrustmaster 0003:044F:B65A.0005: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b65a] on usb-dummy_hcd.1-1/input0 [ 32.696389][ T36] audit: type=1400 audit(1787211494.899:273): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=488 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.715619][ T10] thrustmaster 0003:044F:B65A.0005: ignoring unknown output usage 00080000 [ 32.741660][ T36] audit: type=1400 audit(1787211494.899:274): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=488 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.751948][ T10] thrustmaster 0003:044F:B65A.0005: can't find FF field in output reports [ 32.774212][ T36] audit: type=1400 audit(1787211495.009:275): avc: denied { read } for pid=973 comm="syz.0.287" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.809302][ T31] usb 2-1: USB disconnect, device number 4 [ 32.828221][ T36] audit: type=1400 audit(1787211495.059:276): avc: denied { listen } for pid=979 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.847723][ T36] audit: type=1400 audit(1787211495.069:277): avc: denied { setopt } for pid=979 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.882238][ T984] PR command failed: 1026 [ 32.887134][ T984] sd 0:0:1:0: Sense Key : 0x5 [current] [ 32.892974][ T984] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 32.961933][ T995] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 32.971846][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.979603][ T36] audit: type=1400 audit(1787211495.209:278): avc: denied { relabelto } for pid=994 comm="syz.2.297" name="file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 33.010254][ T36] audit: type=1400 audit(1787211495.209:279): avc: denied { associate } for pid=994 comm="syz.2.297" name="file0" dev="tmpfs" ino=273 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:vhost_device_t:s0" [ 33.037987][ T36] audit: type=1400 audit(1787211495.219:280): avc: denied { unlink } for pid=298 comm="syz-executor" name="file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 33.090337][ T1004] netlink: 'syz.2.301': attribute type 8 has an invalid length. [ 33.154212][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.168297][ T1014] tipc: Started in network mode [ 33.173274][ T1014] tipc: Node identity ac14140f, cluster identity 4711 [ 33.180284][ T1014] tipc: New replicast peer: 255.255.255.255 [ 33.186401][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.186633][ T1014] tipc: Enabled bearer , priority 10 [ 33.202131][ T310] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 33.215545][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.226423][ T310] usb 4-1: config 0 descriptor?? [ 33.305703][ T1030] Invalid ELF header len 7 [ 33.621951][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.635217][ T310] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 33.642720][ T310] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 33.650131][ T310] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 33.657971][ T310] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 33.665487][ T310] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 33.673749][ T310] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 33.791488][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 33.797672][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 33.805925][ T10] usb 1-1: config 0 has no interface number 0 [ 33.812136][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 33.820160][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.829240][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.837295][ T10] usb 1-1: Product: syz [ 33.841544][ T310] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 0 [ 33.850755][ T310] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 33.859996][ T10] usb 1-1: Manufacturer: syz [ 33.864644][ T10] usb 1-1: SerialNumber: syz [ 33.869522][ T310] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 33.878447][ T10] usb 1-1: config 0 descriptor?? [ 33.883492][ T310] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 33.891768][ T10] smsc75xx v1.0.0 [ 33.895943][ T310] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 34.040295][ T310] usb 4-1: USB disconnect, device number 6 [ 34.311523][ T31] tipc: Node number set to 2886997007 [ 34.461516][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.614151][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.628239][ T310] usb 2-1: config 0 has no interfaces? [ 34.636073][ T310] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 34.653402][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.664758][ T310] usb 2-1: config 0 descriptor?? [ 34.676682][ T1085] raw_sendmsg: syz.2.339 forgot to set AF_INET. Fix it! [ 34.698532][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 34.717169][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 34.727237][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.738235][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 34.750064][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.769748][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 34.779578][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 34.791563][ T10] usb 1-1: USB disconnect, device number 7 [ 34.819526][ T1102] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 34.871840][ T310] usb 2-1: USB disconnect, device number 5 [ 35.270002][ T1146] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 35.378906][ T1159] usbcore.quirks: string doesn't fit in 127 chars. [ 35.512178][ T1165] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.378'. [ 35.661494][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.785609][ T1205] WARNING! power/level is deprecated; use power/control instead [ 35.832780][ T31] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 35.843610][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.950307][ T1225] input: syz0 as /devices/virtual/input/input9 [ 36.042256][ T1246] netlink: 72 bytes leftover after parsing attributes in process `syz.2.417'. [ 36.161076][ T1258] SELinux: syz.2.423 (1258) set checkreqprot to 1. This is no longer supported. [ 36.211408][ T1272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 36.258942][ T1281] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 36.386946][ T1301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.444'. [ 36.396015][ T1301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 36.431512][ T65] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.464471][ T1316] netlink: 'syz.1.451': attribute type 9 has an invalid length. [ 36.581234][ T1330] netlink: 165 bytes leftover after parsing attributes in process `syz.2.458'. [ 36.591766][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 36.601741][ T65] usb 4-1: config index 0 descriptor too short (expected 149, got 145) [ 36.610029][ T65] usb 4-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 36.623811][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.637491][ T65] usb 4-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 36.646955][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.655976][ T65] usb 4-1: Product: syz [ 36.660220][ T65] usb 4-1: Manufacturer: syz [ 36.665217][ T65] usb 4-1: SerialNumber: syz [ 36.721556][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.873038][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 36.889203][ T65] usb 4-1: unknown interface protocol 0xac, assuming v1 [ 36.896396][ T65] usb 4-1: cannot find UAC_HEADER [ 36.901686][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 36.913978][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.916226][ T1359] netlink: 'syz.2.472': attribute type 4 has an invalid length. [ 36.927202][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 36.935076][ T1359] netlink: 'syz.2.472': attribute type 32 has an invalid length. [ 36.944199][ T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.961872][ T65] usb 4-1: USB disconnect, device number 7 [ 36.968004][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.974304][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.990693][ T31] usb 2-1: config 0 descriptor?? [ 37.022365][ T1365] < [ 37.034971][ T1367] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 37.044936][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.403313][ T31] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0007/input/input10 [ 37.422134][ T31] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 37.605059][ T310] usb 2-1: USB disconnect, device number 6 [ 37.913154][ T10] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 38.062555][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 38.073625][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 38.080228][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 38.089365][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.098026][ T10] usb 4-1: config 0 descriptor?? [ 38.103446][ T1390] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 38.207745][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 38.207761][ T36] audit: type=1400 audit(1787211500.439:307): avc: denied { unlink } for pid=1401 comm="syz.1.491" name="#3" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.207837][ T1402] overlayfs: upper fs does not support file handles, falling back to index=off. [ 38.245641][ T36] audit: type=1400 audit(1787211500.489:308): avc: denied { mount } for pid=1401 comm="syz.1.491" name="/" dev="overlay" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.267727][ T36] audit: type=1400 audit(1787211500.489:309): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.300434][ T36] audit: type=1400 audit(1787211500.529:310): avc: denied { read append } for pid=1407 comm="syz.1.494" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.323624][ T36] audit: type=1400 audit(1787211500.529:311): avc: denied { open } for pid=1407 comm="syz.1.494" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.347067][ T36] audit: type=1400 audit(1787211500.529:312): avc: denied { map } for pid=1407 comm="syz.1.494" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.370649][ T36] audit: type=1400 audit(1787211500.529:313): avc: denied { execute } for pid=1407 comm="syz.1.494" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.428179][ T9] usb 1-1: USB disconnect, device number 8 [ 38.526494][ T10] uclogic 0003:28BD:0074.0008: interface is invalid, ignoring [ 38.552731][ T1429] mmap: syz.0.504 (1429) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.727100][ T9] usb 4-1: USB disconnect, device number 8 [ 38.762265][ T36] audit: type=1400 audit(1787211500.999:314): avc: denied { ioctl } for pid=1464 comm="syz.0.521" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.791528][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.863876][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.870472][ T13] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 38.941572][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 38.947769][ T10] usb 2-1: config 0 interface 0 altsetting 183 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.958982][ T10] usb 2-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.971967][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.978569][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 38.987613][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.996415][ T10] usb 2-1: config 0 descriptor?? [ 39.111543][ T1368] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.245837][ T1484] capability: warning: `syz.3.530' uses deprecated v2 capabilities in a way that may be insecure [ 39.267407][ T36] audit: type=1400 audit(1787211501.499:315): avc: denied { getopt } for pid=1485 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.343627][ T36] audit: type=1400 audit(1787211501.579:316): avc: denied { set_context_mgr } for pid=1497 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.343830][ T1498] rust_binder: 1497:1498 got transaction to invalid handle 3 [ 39.370871][ T1498] rust_binder: 1497:1498 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 39.384140][ T1498] rust_binder: 1497: undelivered TRANSACTION_ERROR: 29201 [ 39.404605][ T10] sony 0003:054C:024B.0009: ignoring exceeding usage max [ 39.413156][ T10] sony 0003:054C:024B.0009: unknown main item tag 0x6 [ 39.419990][ T10] sony 0003:054C:024B.0009: unknown main item tag 0x4 [ 39.427010][ T10] sony 0003:054C:024B.0009: ignoring exceeding usage max [ 39.434729][ T10] sony 0003:054C:024B.0009: unknown main item tag 0x7 [ 39.442750][ T10] sony 0003:054C:024B.0009: hiddev96,hidraw0: USB HID v0.0a Device [HID 054c:024b] on usb-dummy_hcd.1-1/input0 [ 39.454584][ T10] sony 0003:054C:024B.0009: failed to claim input [ 39.463074][ T1501] ================================================================== [ 39.471171][ T1501] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xb4/0x100 [ 39.479407][ T1501] Read of size 43 at addr ffff88810b2ac300 by task fido_id/1501 [ 39.487020][ T1501] [ 39.489343][ T1501] CPU: 1 UID: 0 PID: 1501 Comm: fido_id Not tainted syzkaller #0 c744675a2bc56aa4cb6ac321888dd20361806feb [ 39.489358][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.489370][ T1501] Call Trace: [ 39.489375][ T1501] [ 39.489381][ T1501] __dump_stack+0x21/0x30 [ 39.489401][ T1501] dump_stack_lvl+0x140/0x1c0 [ 39.489415][ T1501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.489429][ T1501] print_address_description+0x71/0x210 [ 39.489446][ T1501] print_report+0x4a/0x70 [ 39.489459][ T1501] kasan_report+0x162/0x1a0 [ 39.489476][ T1501] ? read_report_descriptor+0xb4/0x100 [ 39.489489][ T1501] ? read_report_descriptor+0xb4/0x100 [ 39.489500][ T1501] kasan_check_range+0x25a/0x2b0 [ 39.489512][ T1501] ? read_report_descriptor+0xb4/0x100 [ 39.489523][ T1501] __asan_memcpy+0x31/0x80 [ 39.489534][ T1501] read_report_descriptor+0xb4/0x100 [ 39.489545][ T1501] ? __cfi_read_report_descriptor+0x10/0x10 [ 39.489556][ T1501] sysfs_kf_bin_read+0x1c9/0x200 [ 39.489569][ T1501] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 39.489579][ T1501] kernfs_fop_read_iter+0x2fd/0x570 [ 39.489593][ T1501] vfs_read+0x60b/0xc70 [ 39.489605][ T1501] ? __cfi_vfs_read+0x10/0x10 [ 39.489615][ T1501] ? __kasan_slab_free+0x6a/0x80 [ 39.489627][ T1501] ? putname+0x113/0x150 [ 39.489640][ T1501] ? putname+0x113/0x150 [ 39.489650][ T1501] ? __kasan_check_read+0x15/0x20 [ 39.489660][ T1501] ksys_read+0x145/0x260 [ 39.489670][ T1501] ? __cfi_ksys_read+0x10/0x10 [ 39.489680][ T1501] ? __kasan_check_write+0x18/0x20 [ 39.489690][ T1501] ? fpregs_restore_userregs+0x11c/0x260 [ 39.489704][ T1501] __x64_sys_read+0x7f/0x90 [ 39.489714][ T1501] x64_sys_call+0x2638/0x2ee0 [ 39.489724][ T1501] do_syscall_64+0x57/0xf0 [ 39.489738][ T1501] ? clear_bhb_loop+0x50/0xa0 [ 39.489748][ T1501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.489764][ T1501] RIP: 0033:0x7fc6352a7407 [ 39.489774][ T1501] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 39.489783][ T1501] RSP: 002b:00007fff9771eef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 39.489800][ T1501] RAX: ffffffffffffffda RBX: 00007fc63595b880 RCX: 00007fc6352a7407 [ 39.489807][ T1501] RDX: 0000000000001000 RSI: 00007fff9771ef40 RDI: 0000000000000004 [ 39.489814][ T1501] RBP: 00005619ed1db2c0 R08: 0000000000000000 R09: 0000000000000000 [ 39.489820][ T1501] R10: 0000000000000000 R11: 0000000000000202 R12: 00005619ed1da4c0 [ 39.489827][ T1501] R13: 00007fff9771ef40 R14: 0000000000000004 R15: 00005619c49ac4d8 [ 39.489835][ T1501] [ 39.489839][ T1501] [ 39.608099][ T10] usb 2-1: USB disconnect, device number 7 [ 39.611848][ T1501] Allocated by task 10: [ 39.611864][ T1501] kasan_save_track+0x3e/0x80 [ 39.611889][ T1501] kasan_save_alloc_info+0x3a/0x50 [ 39.611903][ T1501] __kasan_kmalloc+0x96/0xb0 [ 39.611922][ T1501] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 39.777351][ T1501] kmemdup_noprof+0x31/0x80 [ 39.781875][ T1501] hid_open_report+0x200/0x1120 [ 39.786712][ T1501] sony_probe+0x18a/0x5f0 [ 39.791045][ T1501] hid_device_probe+0x2d1/0x5f0 [ 39.795892][ T1501] really_probe+0x2e1/0x8b0 [ 39.800377][ T1501] __driver_probe_device+0x193/0x280 [ 39.805735][ T1501] driver_probe_device+0x54/0x3f0 [ 39.810737][ T1501] __device_attach_driver+0x2f1/0x4b0 [ 39.816085][ T1501] bus_for_each_drv+0x264/0x300 [ 39.820922][ T1501] __device_attach+0x2c4/0x3c0 [ 39.825669][ T1501] device_initial_probe+0x1e/0x30 [ 39.830677][ T1501] bus_probe_device+0x18b/0x270 [ 39.835642][ T1501] device_add+0x7fd/0xbf0 [ 39.839957][ T1501] hid_add_device+0x3c4/0x5a0 [ 39.844617][ T1501] usbhid_probe+0xdca/0x1310 [ 39.849224][ T1501] usb_probe_interface+0x6ab/0xbf0 [ 39.854410][ T1501] really_probe+0x2e1/0x8b0 [ 39.858895][ T1501] __driver_probe_device+0x193/0x280 [ 39.864172][ T1501] driver_probe_device+0x54/0x3f0 [ 39.869171][ T1501] __device_attach_driver+0x2f1/0x4b0 [ 39.874672][ T1501] bus_for_each_drv+0x264/0x300 [ 39.879508][ T1501] __device_attach+0x2c4/0x3c0 [ 39.884428][ T1501] device_initial_probe+0x1e/0x30 [ 39.889555][ T1501] bus_probe_device+0x18b/0x270 [ 39.894390][ T1501] device_add+0x7fd/0xbf0 [ 39.898704][ T1501] usb_set_configuration+0x1aad/0x2080 [ 39.904181][ T1501] usb_generic_driver_probe+0x95/0x160 [ 39.909637][ T1501] usb_probe_device+0x1ef/0x3b0 [ 39.914645][ T1501] really_probe+0x2e1/0x8b0 [ 39.919392][ T1501] __driver_probe_device+0x193/0x280 [ 39.924749][ T1501] driver_probe_device+0x54/0x3f0 [ 39.929850][ T1501] __device_attach_driver+0x2f1/0x4b0 [ 39.935217][ T1501] bus_for_each_drv+0x264/0x300 [ 39.940062][ T1501] __device_attach+0x2c4/0x3c0 [ 39.944871][ T1501] device_initial_probe+0x1e/0x30 [ 39.949892][ T1501] bus_probe_device+0x18b/0x270 [ 39.954755][ T1501] device_add+0x7fd/0xbf0 [ 39.959089][ T1501] usb_new_device+0x98d/0x1500 [ 39.963848][ T1501] hub_event+0x2dbd/0x4360 [ 39.968265][ T1501] process_scheduled_works+0x7f7/0x1060 [ 39.973811][ T1501] worker_thread+0xc99/0x13f0 [ 39.978467][ T1501] kthread+0x2c7/0x360 [ 39.982519][ T1501] ret_from_fork+0x67/0xa0 [ 39.986937][ T1501] ret_from_fork_asm+0x1a/0x30 [ 39.991783][ T1501] [ 39.994372][ T1501] Freed by task 10: [ 39.998158][ T1501] kasan_save_track+0x3e/0x80 [ 40.002825][ T1501] kasan_save_free_info+0x44/0x50 [ 40.007922][ T1501] __kasan_slab_free+0x5f/0x80 [ 40.012757][ T1501] kfree+0x158/0x440 [ 40.016636][ T1501] hid_close_report+0x628/0x6f0 [ 40.021572][ T1501] hid_device_probe+0x538/0x5f0 [ 40.026413][ T1501] really_probe+0x2e1/0x8b0 [ 40.030919][ T1501] __driver_probe_device+0x193/0x280 [ 40.036200][ T1501] driver_probe_device+0x54/0x3f0 [ 40.041225][ T1501] __device_attach_driver+0x2f1/0x4b0 [ 40.046593][ T1501] bus_for_each_drv+0x264/0x300 [ 40.051422][ T1501] __device_attach+0x2c4/0x3c0 [ 40.056167][ T1501] device_initial_probe+0x1e/0x30 [ 40.061177][ T1501] bus_probe_device+0x18b/0x270 [ 40.066004][ T1501] device_add+0x7fd/0xbf0 [ 40.070310][ T1501] hid_add_device+0x3c4/0x5a0 [ 40.074962][ T1501] usbhid_probe+0xdca/0x1310 [ 40.079541][ T1501] usb_probe_interface+0x6ab/0xbf0 [ 40.084634][ T1501] really_probe+0x2e1/0x8b0 [ 40.089126][ T1501] __driver_probe_device+0x193/0x280 [ 40.094388][ T1501] driver_probe_device+0x54/0x3f0 [ 40.099400][ T1501] __device_attach_driver+0x2f1/0x4b0 [ 40.104750][ T1501] bus_for_each_drv+0x264/0x300 [ 40.109578][ T1501] __device_attach+0x2c4/0x3c0 [ 40.114321][ T1501] device_initial_probe+0x1e/0x30 [ 40.119343][ T1501] bus_probe_device+0x18b/0x270 [ 40.124296][ T1501] device_add+0x7fd/0xbf0 [ 40.128644][ T1501] usb_set_configuration+0x1aad/0x2080 [ 40.134120][ T1501] usb_generic_driver_probe+0x95/0x160 [ 40.139593][ T1501] usb_probe_device+0x1ef/0x3b0 [ 40.144560][ T1501] really_probe+0x2e1/0x8b0 [ 40.149071][ T1501] __driver_probe_device+0x193/0x280 [ 40.155010][ T1501] driver_probe_device+0x54/0x3f0 [ 40.160238][ T1501] __device_attach_driver+0x2f1/0x4b0 [ 40.165635][ T1501] bus_for_each_drv+0x264/0x300 [ 40.170530][ T1501] __device_attach+0x2c4/0x3c0 [ 40.175326][ T1501] device_initial_probe+0x1e/0x30 [ 40.180383][ T1501] bus_probe_device+0x18b/0x270 [ 40.185591][ T1501] device_add+0x7fd/0xbf0 [ 40.189950][ T1501] usb_new_device+0x98d/0x1500 [ 40.194735][ T1501] hub_event+0x2dbd/0x4360 [ 40.199168][ T1501] process_scheduled_works+0x7f7/0x1060 [ 40.204726][ T1501] worker_thread+0xc99/0x13f0 [ 40.209429][ T1501] kthread+0x2c7/0x360 [ 40.213508][ T1501] ret_from_fork+0x67/0xa0 [ 40.218033][ T1501] ret_from_fork_asm+0x1a/0x30 [ 40.222811][ T1501] [ 40.225139][ T1501] The buggy address belongs to the object at ffff88810b2ac300 [ 40.225139][ T1501] which belongs to the cache kmalloc-64 of size 64 [ 40.239027][ T1501] The buggy address is located 0 bytes inside of [ 40.239027][ T1501] freed 64-byte region [ffff88810b2ac300, ffff88810b2ac340) [ 40.252571][ T1501] [ 40.254883][ T1501] The buggy address belongs to the physical page: [ 40.261292][ T1501] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b2ac [ 40.270130][ T1501] anon flags: 0x4000000000000000(zone=1) [ 40.275756][ T1501] page_type: f5(slab) [ 40.279731][ T1501] raw: 4000000000000000 ffff8881000418c0 ffffea00042bbc40 dead000000000003 [ 40.288291][ T1501] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 40.296877][ T1501] page dumped because: kasan: bad access detected [ 40.303273][ T1501] page_owner tracks the page as allocated [ 40.308962][ T1501] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 13, tgid 13 (kworker/u8:1), ts 2645192283, free_ts 0 [ 40.327174][ T1501] post_alloc_hook+0x37d/0x3b0 [ 40.331932][ T1501] prep_new_page+0x2d/0x180 [ 40.336416][ T1501] get_page_from_freelist+0x4aea/0x4ba0 [ 40.341945][ T1501] __alloc_pages_noprof+0x35a/0x7e0 [ 40.347144][ T1501] alloc_slab_page+0x6b/0x1e0 [ 40.351807][ T1501] allocate_slab+0x69/0x430 [ 40.356301][ T1501] ___slab_alloc+0x591/0x8c0 [ 40.360868][ T1501] __kmalloc_cache_node_noprof+0x2ae/0x430 [ 40.366651][ T1501] blk_alloc_flush_queue+0x9e/0x3e0 [ 40.371834][ T1501] blk_mq_alloc_and_init_hctx+0x694/0x1060 [ 40.377804][ T1501] blk_mq_realloc_hw_ctxs+0x19f/0x940 [ 40.383161][ T1501] blk_mq_init_allocated_queue+0x3e1/0x1700 [ 40.389063][ T1501] blk_mq_alloc_queue+0x1c7/0x2f0 [ 40.394092][ T1501] scsi_alloc_sdev+0x75d/0xcc0 [ 40.399129][ T1501] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 40.404586][ T1501] __scsi_scan_target+0x1f1/0xc20 [ 40.409595][ T1501] page_owner free stack trace missing [ 40.414954][ T1501] [ 40.417256][ T1501] Memory state around the buggy address: [ 40.422886][ T1501] ffff88810b2ac200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 40.430937][ T1501] ffff88810b2ac280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 40.438979][ T1501] >ffff88810b2ac300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 40.447364][ T1501] ^ [ 40.451412][ T1501] ffff88810b2ac380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 40.459453][ T1501] ffff88810b2ac400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 40.467693][ T1501] ================================================================== [ 40.477376][ T1501] Disabling lock debugging due to kernel taint [ 40.871535][ T1368] Bluetooth: hci1: command 0x1003 tx timeout [ 40.871544][ T1369] Bluetooth: hci1: Opcode 0x1003 failed: -110