last executing test programs: 1.761039078s ago: executing program 3 (id=20): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) 1.716305261s ago: executing program 3 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000001100), &(0x7f0000001140)=0x4) mprotect(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3000002) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 1.707175942s ago: executing program 3 (id=25): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) 977.721361ms ago: executing program 0 (id=38): ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000002c0)={0x3c79, 0x1, [{0x8, 0x1}]}) 955.345363ms ago: executing program 0 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000030101010000000000000000000000070800084000000008080015"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x810) 837.780732ms ago: executing program 0 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 837.446013ms ago: executing program 0 (id=41): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 816.704544ms ago: executing program 0 (id=42): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c562d117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) 799.800166ms ago: executing program 0 (id=43): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x40, 0x24, 0x24, {0x24, 0x0, "cf624dbe2163e009249a9b3e719924fdf1241937ceacef3e414f023ad197933b5ed6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 581.851473ms ago: executing program 2 (id=46): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x183001, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 160.039987ms ago: executing program 1 (id=48): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 147.914718ms ago: executing program 1 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 137.887909ms ago: executing program 1 (id=50): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 125.6253ms ago: executing program 1 (id=51): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3f) 74.000095ms ago: executing program 1 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 73.838294ms ago: executing program 3 (id=53): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xc) 73.750714ms ago: executing program 2 (id=54): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/193, 0xc1}], 0x1}, 0x1) 73.708855ms ago: executing program 3 (id=55): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 51.160016ms ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x30) mount$incfs(&(0x7f0000008000)='./file1\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000008080), 0x2, &(0x7f0000000080)={[{@rlog_pages={'rlog_pages', 0x3d, 0x7fff}}]}) 49.106297ms ago: executing program 2 (id=57): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580)={0x2000041, 0x4, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) 452.91µs ago: executing program 2 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x8000) 269.86µs ago: executing program 2 (id=59): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 193.41µs ago: executing program 2 (id=60): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) close(r2) 0s ago: executing program 3 (id=61): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 20.265873][ T36] audit: type=1400 audit(1753981904.230:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.267373][ T281] cgroup: Unknown subsys name 'net' [ 20.288562][ T36] audit: type=1400 audit(1753981904.230:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.315952][ T36] audit: type=1400 audit(1753981904.260:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.316357][ T281] cgroup: Unknown subsys name 'devices' [ 20.424704][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.430443][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.584716][ T36] audit: type=1400 audit(1753981904.550:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.608270][ T36] audit: type=1400 audit(1753981904.550:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.625174][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.633186][ T36] audit: type=1400 audit(1753981904.550:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.664965][ T36] audit: type=1400 audit(1753981904.600:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.681648][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.690479][ T36] audit: type=1400 audit(1753981904.600:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.725409][ T36] audit: type=1400 audit(1753981904.650:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.751202][ T36] audit: type=1400 audit(1753981904.650:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.490991][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.498221][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.505512][ T288] bridge_slave_0: entered allmulticast mode [ 21.511901][ T288] bridge_slave_0: entered promiscuous mode [ 21.519525][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.526590][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.533785][ T288] bridge_slave_1: entered allmulticast mode [ 21.540268][ T288] bridge_slave_1: entered promiscuous mode [ 21.557954][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.565254][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.572604][ T289] bridge_slave_0: entered allmulticast mode [ 21.578761][ T289] bridge_slave_0: entered promiscuous mode [ 21.593749][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.600779][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.608154][ T289] bridge_slave_1: entered allmulticast mode [ 21.614479][ T289] bridge_slave_1: entered promiscuous mode [ 21.663215][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.670442][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.677652][ T291] bridge_slave_0: entered allmulticast mode [ 21.684112][ T291] bridge_slave_0: entered promiscuous mode [ 21.690453][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.697521][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.704619][ T291] bridge_slave_1: entered allmulticast mode [ 21.711068][ T291] bridge_slave_1: entered promiscuous mode [ 21.720793][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.727946][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.735100][ T290] bridge_slave_0: entered allmulticast mode [ 21.741254][ T290] bridge_slave_0: entered promiscuous mode [ 21.753621][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.760705][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.768216][ T290] bridge_slave_1: entered allmulticast mode [ 21.774565][ T290] bridge_slave_1: entered promiscuous mode [ 21.898634][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.905705][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.912983][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.920003][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.930425][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.937498][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.944779][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.951919][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.974808][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.982145][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.989491][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.996540][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.009551][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.016628][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.023893][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.030997][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.064665][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.072193][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.079455][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.086984][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.094468][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.101705][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.109354][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.116681][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.134649][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.141792][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.149515][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.156741][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.184382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.191414][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.199215][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.206270][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.214436][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.221635][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.229342][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.236390][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.253790][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.260831][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.268494][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.275541][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.300892][ T289] veth0_vlan: entered promiscuous mode [ 22.324256][ T289] veth1_macvtap: entered promiscuous mode [ 22.331182][ T291] veth0_vlan: entered promiscuous mode [ 22.345706][ T290] veth0_vlan: entered promiscuous mode [ 22.364836][ T288] veth0_vlan: entered promiscuous mode [ 22.370589][ T291] veth1_macvtap: entered promiscuous mode [ 22.384665][ T290] veth1_macvtap: entered promiscuous mode [ 22.401560][ T288] veth1_macvtap: entered promiscuous mode [ 22.428525][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.497751][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.852179][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.883678][ T385] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23'. [ 22.893605][ T385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 22.903007][ T385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 23.012163][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 23.023651][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 23.057105][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.071327][ T64] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 23.080661][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.092473][ T64] usb 2-1: config 0 descriptor?? [ 23.182209][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.333325][ T45] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 23.342452][ T45] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 23.353128][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 23.362464][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 23.377126][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 23.389797][ T45] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 23.399532][ T45] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 23.407867][ T45] usb 4-1: Product: syz [ 23.412682][ T45] usb 4-1: Manufacturer: syz [ 23.422633][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 23.428296][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 23.434967][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 23.441043][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 23.505047][ T64] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 23.674737][ T423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 23.725749][ T64] playstation 0003:054C:0DF2.0001: Invalid byte count transferred, expected 20 got 0 [ 23.745572][ T64] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 23.763049][ T64] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 23.773579][ T64] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 23.783840][ T64] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 23.823113][ T64] usb 4-1: USB disconnect, device number 2 [ 23.935426][ T45] usb 2-1: USB disconnect, device number 2 [ 24.082195][ T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.233334][ T330] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 24.244313][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.255245][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.265142][ T330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 24.279445][ T330] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 24.288661][ T330] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 24.296905][ T330] usb 1-1: Manufacturer: syz [ 24.302388][ T330] usb 1-1: config 0 descriptor?? [ 24.557716][ T458] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 24.571058][ T458] SELinux: failed to load policy [ 24.581288][ T460] ------------[ cut here ]------------ [ 24.586873][ T460] WARNING: CPU: 0 PID: 460 at mm/page_alloc.c:5174 __alloc_pages_noprof+0xe4/0x6c0 [ 24.596278][ T460] Modules linked in: [ 24.600420][ T460] CPU: 0 UID: 0 PID: 460 Comm: syz.1.56 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c [ 24.613716][ T460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 24.623855][ T460] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 24.629817][ T460] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 35 0e ee 05 00 0f 85 c4 00 00 00 c6 05 28 0e ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 24.649845][ T460] RSP: 0018:ffffc9000c287880 EFLAGS: 00010246 [ 24.656056][ T460] RAX: 0000000000000000 RBX: 1ffff92001850f14 RCX: 0000000000000000 [ 24.664108][ T460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c287928 [ 24.672171][ T460] RBP: ffffc9000c2879b0 R08: ffffc9000c287927 R09: 0000000000000000 [ 24.680295][ T460] R10: ffffc9000c287910 R11: fffff52001850f25 R12: ffffc9000c2878c0 [ 24.688421][ T460] R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000 [ 24.696461][ T460] FS: 00007f1b59c0c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.705456][ T460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.712141][ T460] CR2: 0000200000001000 CR3: 0000000115080000 CR4: 00000000003526b0 [ 24.720132][ T460] Call Trace: [ 24.723477][ T460] [ 24.726423][ T460] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.732585][ T460] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 24.738354][ T460] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 24.744118][ T460] ___kmalloc_large_node+0x9c/0x1d0 [ 24.749344][ T460] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 24.755128][ T460] __kmalloc_large_node_noprof+0x1e/0xe0 [ 24.760881][ T460] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 24.766596][ T460] __kmalloc_noprof+0x26d/0x450 [ 24.771472][ T460] incfs_realloc_mount_info+0xa7/0x4d0 [ 24.776987][ T460] ? incfs_add_sysfs_node+0x118/0x240 [ 24.782418][ T460] incfs_alloc_mount_info+0x479/0x600 [ 24.787811][ T460] incfs_mount_fs+0x3ca/0x960 [ 24.792541][ T460] ? __cfi_incfs_mount_fs+0x10/0x10 [ 24.797844][ T460] ? vfs_parse_fs_string+0x102/0x170 [ 24.803168][ T460] ? selinux_capable+0x38/0x50 [ 24.807954][ T460] legacy_get_tree+0x103/0x1b0 [ 24.812806][ T460] ? __cfi_incfs_mount_fs+0x10/0x10 [ 24.818041][ T460] vfs_get_tree+0xa1/0x290 [ 24.822666][ T460] do_new_mount+0x251/0xb40 [ 24.827186][ T460] ? security_capable+0xcf/0xf0 [ 24.832031][ T460] path_mount+0x688/0x1050 [ 24.836495][ T460] ? putname+0x113/0x150 [ 24.840753][ T460] __se_sys_mount+0x2bd/0x480 [ 24.845470][ T460] ? __x64_sys_mount+0xf0/0xf0 [ 24.850249][ T460] ? __kasan_check_write+0x18/0x20 [ 24.855490][ T460] ? fpregs_restore_userregs+0x11d/0x260 [ 24.861133][ T460] __x64_sys_mount+0xc3/0xf0 [ 24.865949][ T460] x64_sys_call+0x2021/0x2ee0 [ 24.870651][ T460] do_syscall_64+0x58/0xf0 [ 24.875096][ T460] ? clear_bhb_loop+0x50/0xa0 [ 24.879785][ T460] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.885755][ T460] RIP: 0033:0x7f1b58d8eb69 [ 24.890222][ T460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 24.909906][ T460] RSP: 002b:00007f1b59c0c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.918383][ T460] RAX: ffffffffffffffda RBX: 00007f1b58fb5fa0 RCX: 00007f1b58d8eb69 [ 24.926912][ T460] RDX: 0000200000008080 RSI: 0000200000000300 RDI: 0000200000008000 [ 24.934924][ T460] RBP: 00007f1b58e11df1 R08: 0000200000000080 R09: 0000000000000000 [ 24.943028][ T460] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 24.951095][ T460] R13: 0000000000000000 R14: 00007f1b58fb5fa0 R15: 00007ffe975a5018 [ 24.959113][ T460] [ 24.962192][ T460] ---[ end trace 0000000000000000 ]--- [ 24.967933][ T460] incfs: Error allocating mount info. -12 [ 24.972040][ T330] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 24.981698][ T460] incfs: mount failed -12 [ 24.988263][ T330] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 25.001912][ T330] usb 1-1: USB disconnect, device number 2 [ 25.024667][ T472] fido_id[472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory