last executing test programs: 9.536773778s ago: executing program 2 (id=95): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0x4, "6c57ef8b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x20, 0x8, 0x4, "494e6ad8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x20, 0x14, 0x4, "79ee2ecd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000000c0)={0x0, 0x18, 0x4, "b7524aeb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x20, 0x7, 0x4, "bf0f9977"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.739272935s ago: executing program 2 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='comm', 0x4) 4.691783096s ago: executing program 2 (id=128): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000006680)=[{&(0x7f0000005080)=""/90, 0x5a}], 0x1, 0x81, 0x400) 4.629253528s ago: executing program 2 (id=129): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x80000002, 0x31237648, 0x6, 0x2, 0x31b6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.567679289s ago: executing program 2 (id=130): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000002c0)={0xd, 0x36d, &(0x7f0000000040)="6626f2f7ae104b", 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000005, 0xb, 0x4, 0x41, 0x2000000, 0x0, 0x2004cb, 0x8, 0xa1d, 0x68ff, 0x5, 0xc00000, 0x3, 0xa], 0x10000, 0x212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.486802701s ago: executing program 3 (id=134): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, 0x0) 4.486598421s ago: executing program 3 (id=135): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4.452737372s ago: executing program 2 (id=136): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0x4, "6c57ef8b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x20, 0x8, 0x4, "494e6ad8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x20, 0x14, 0x4, "79ee2ecd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000000c0)={0x0, 0x18, 0x4, "b7524aeb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.247411381s ago: executing program 3 (id=143): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x8749, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x7f, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x232c, 0x3, 0x8, 0xffffff7f, 0x3, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00063, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x9, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x40000000, 0xfffffff9, 0x18e, 0x1000, 0x8, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x0, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1002, 0x10000001, 0x7, 0x2, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000800, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x7, @l2={'ib', 0x3a, 'geneve1\x00'}}}}}, 0x34}}, 0xc000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000002c0)={0x14, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 689.889743ms ago: executing program 1 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) 625.141304ms ago: executing program 1 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0x75aa0358, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0xfffffffc}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 570.905086ms ago: executing program 0 (id=156): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000300)=0x2a0) 551.389147ms ago: executing program 1 (id=157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pselect6(0x40, &(0x7f0000000100)={0xc, 0x8, 0x0, 0x1, 0x2, 0x8, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) 297.075882ms ago: executing program 1 (id=158): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 242.630814ms ago: executing program 1 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb-storage/remove_id\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') preadv(r0, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8) 240.286464ms ago: executing program 0 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0x75aa0358, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0xfffffffc}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 203.690135ms ago: executing program 1 (id=160): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x4, "6f011ef5"}, 0x0, 0x0, 0x0, 0x0}) 122.241197ms ago: executing program 0 (id=161): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.282588ms ago: executing program 3 (id=162): openat$kvm(0x0, &(0x7f0000000040), 0x2a0142, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x8ee, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xd21c, 0x2}}], 0xd2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002340)=@x86={0x2, 0x7, 0x2, 0x0, 0x0, 0xc0, 0x80, 0x3, 0x2, 0x2, 0xfd, 0xa, 0x0, 0x7, 0x7, 0x0, 0x40, 0x2, 0x8, '\x00', 0x8, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.283939ms ago: executing program 0 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='\n', 0x1) 26.080609ms ago: executing program 0 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 15.905669ms ago: executing program 3 (id=165): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0xb7, 0x3, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7ffd, 0x0, 0x0, 0x7f, 0x11, 0x4, 0x44, 0x28}) mkdir(&(0x7f0000000080)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000140)) 414.4µs ago: executing program 3 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pselect6(0x40, &(0x7f0000000100)={0xc, 0x8, 0x0, 0x1, 0x2, 0x8, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=175): openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 0s ago: executing program 0 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0xaf) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='/#', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 22.336998][ T36] audit: type=1400 audit(1787102178.320:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.338144][ T286] cgroup: Unknown subsys name 'net' [ 22.360432][ T36] audit: type=1400 audit(1787102178.320:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.387787][ T36] audit: type=1400 audit(1787102178.360:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.387988][ T286] cgroup: Unknown subsys name 'devices' [ 22.511036][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.516654][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.609955][ T36] audit: type=1400 audit(1787102178.600:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.633308][ T36] audit: type=1400 audit(1787102178.600:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.658348][ T36] audit: type=1400 audit(1787102178.600:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.667659][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.690658][ T36] audit: type=1400 audit(1787102178.680:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.716268][ T36] audit: type=1400 audit(1787102178.680:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.750414][ T36] audit: type=1400 audit(1787102178.740:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.776034][ T36] audit: type=1400 audit(1787102178.740:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.776339][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.662059][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.669260][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.676379][ T293] bridge_slave_0: entered allmulticast mode [ 23.682779][ T293] bridge_slave_0: entered promiscuous mode [ 23.691098][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.698152][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.705354][ T293] bridge_slave_1: entered allmulticast mode [ 23.711706][ T293] bridge_slave_1: entered promiscuous mode [ 23.840717][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.847794][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.855045][ T294] bridge_slave_0: entered allmulticast mode [ 23.861297][ T294] bridge_slave_0: entered promiscuous mode [ 23.871006][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.878061][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.885274][ T294] bridge_slave_1: entered allmulticast mode [ 23.891669][ T294] bridge_slave_1: entered promiscuous mode [ 23.912427][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.919526][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.926596][ T296] bridge_slave_0: entered allmulticast mode [ 23.932994][ T296] bridge_slave_0: entered promiscuous mode [ 23.945873][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.953234][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.960333][ T296] bridge_slave_1: entered allmulticast mode [ 23.966543][ T296] bridge_slave_1: entered promiscuous mode [ 23.998173][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.005280][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.012486][ T295] bridge_slave_0: entered allmulticast mode [ 24.018748][ T295] bridge_slave_0: entered promiscuous mode [ 24.028270][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.035447][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.042722][ T295] bridge_slave_1: entered allmulticast mode [ 24.048944][ T295] bridge_slave_1: entered promiscuous mode [ 24.087426][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.094521][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.101876][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.108925][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.212943][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.220055][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.227351][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.234430][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.248296][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.255969][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.263318][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.270396][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.280633][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.287697][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.295003][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.302055][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.325352][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.332868][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.340750][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.347912][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.355771][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.363018][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.370342][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.377587][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.399827][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.406885][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.414667][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.421723][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.462516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.469581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.477797][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.484865][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.508963][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.516028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.523797][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.530858][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.544728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.551807][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.560171][ T295] veth0_vlan: entered promiscuous mode [ 24.572090][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.579167][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.604681][ T293] veth0_vlan: entered promiscuous mode [ 24.628079][ T295] veth1_macvtap: entered promiscuous mode [ 24.643901][ T293] veth1_macvtap: entered promiscuous mode [ 24.652840][ T294] veth0_vlan: entered promiscuous mode [ 24.665830][ T296] veth0_vlan: entered promiscuous mode [ 24.688524][ T296] veth1_macvtap: entered promiscuous mode [ 24.701855][ T294] veth1_macvtap: entered promiscuous mode [ 24.737272][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.815974][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.298987][ T62] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.309006][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.438970][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.451540][ T62] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 25.460695][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 25.465768][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.474019][ T62] usb 2-1: Product: syz [ 25.478315][ T62] usb 2-1: Manufacturer: syz [ 25.482993][ T62] usb 2-1: SerialNumber: syz [ 25.487975][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 25.503566][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.514517][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 25.527455][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.534165][ T10] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 25.543248][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.552412][ T10] usb 3-1: config 0 descriptor?? [ 25.558929][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.589685][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 25.595891][ T311] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 25.608335][ T311] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 25.619532][ T311] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 25.629597][ T311] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 25.641377][ T311] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 25.652126][ T311] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 25.665260][ T311] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 25.674631][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.711278][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 25.720479][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.728530][ T9] usb 1-1: Product: syz [ 25.733102][ T9] usb 1-1: Manufacturer: syz [ 25.737765][ T9] usb 1-1: SerialNumber: syz [ 25.962551][ T10] input: HID 044e:120c as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:044E:120C.0001/input/input4 [ 25.976535][ T10] hid-generic 0003:044E:120C.0001: input,hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 25.989763][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 25.995845][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 26.006757][ T9] usb 1-1: USB disconnect, device number 2 [ 27.018963][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.179210][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 27.187030][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 27.196558][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.204858][ T9] usb 1-1: Product: syz [ 27.209208][ T9] usb 1-1: Manufacturer: syz [ 27.213815][ T9] usb 1-1: SerialNumber: syz [ 27.219080][ T9] usb 1-1: config 0 descriptor?? [ 28.042399][ T9] usb 2-1: USB disconnect, device number 2 [ 28.063579][ T311] usb 3-1: USB disconnect, device number 2 [ 28.086550][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 28.086568][ T36] audit: type=1400 audit(1787102184.070:130): avc: denied { name_bind } for pid=376 comm="syz.1.21" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 28.116701][ T36] audit: type=1400 audit(1787102184.070:131): avc: denied { mount } for pid=378 comm="syz.2.22" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.140843][ T36] audit: type=1400 audit(1787102184.070:132): avc: denied { read write } for pid=378 comm="syz.2.22" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.164417][ T36] audit: type=1400 audit(1787102184.070:133): avc: denied { open } for pid=378 comm="syz.2.22" path="/3/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.188780][ T36] audit: type=1400 audit(1787102184.080:134): avc: denied { ioctl } for pid=378 comm="syz.2.22" path="/3/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.195453][ T10] usb 4-1: USB disconnect, device number 2 [ 28.251910][ T36] audit: type=1400 audit(1787102184.090:135): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.275179][ T36] audit: type=1400 audit(1787102184.130:136): avc: denied { read write } for pid=381 comm="syz.2.23" name="max_speed" dev="configfs" ino=3560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 28.307318][ T36] audit: type=1400 audit(1787102184.130:137): avc: denied { open } for pid=381 comm="syz.2.23" path="/4/config/usb_gadget/g1/max_speed" dev="configfs" ino=3560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 28.344480][ T36] audit: type=1400 audit(1787102184.330:138): avc: denied { create } for pid=392 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.364727][ T36] audit: type=1400 audit(1787102184.330:139): avc: denied { connect } for pid=392 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.435316][ T401] netlink: 600 bytes leftover after parsing attributes in process `syz.1.30'. [ 28.719005][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.728982][ T62] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.758987][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.870116][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.880329][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 28.889369][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.890278][ T62] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.900390][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.915389][ T62] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 28.923134][ T311] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 28.932306][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 28.941717][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.947413][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 28.963267][ T62] usb 2-1: Product: syz [ 28.967564][ T62] usb 2-1: Manufacturer: syz [ 28.972280][ T62] usb 2-1: SerialNumber: syz [ 28.977120][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 28.985255][ T10] usb 4-1: config 0 has no interface number 0 [ 28.994475][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.003628][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.011694][ T10] usb 4-1: Product: syz [ 29.015888][ T10] usb 4-1: Manufacturer: syz [ 29.020537][ T10] usb 4-1: SerialNumber: syz [ 29.025868][ T10] usb 4-1: config 0 descriptor?? [ 29.031681][ T10] smsc95xx v2.0.0 [ 29.178033][ T311] usb 3-1: USB disconnect, device number 3 [ 29.195459][ T62] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 29.432856][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 29.443714][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.576944][ T311] usb 1-1: USB disconnect, device number 3 [ 29.908920][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.059191][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 30.065425][ T311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 30.077075][ T311] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 30.086229][ T311] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 30.094454][ T311] usb 1-1: Product: syz [ 30.098639][ T311] usb 1-1: Manufacturer: syz [ 30.103265][ T311] usb 1-1: SerialNumber: syz [ 30.108694][ T311] usb 1-1: config 0 descriptor?? [ 30.114051][ T415] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.128931][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.278902][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 30.286615][ T31] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 30.295741][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.304388][ T31] usb 3-1: Product: syz [ 30.308599][ T31] usb 3-1: Manufacturer: syz [ 30.313321][ T31] usb 3-1: SerialNumber: syz [ 30.318813][ T31] usb 3-1: config 0 descriptor?? [ 30.329027][ T31] usb 1-1: USB disconnect, device number 4 [ 31.508913][ T62] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.660028][ T62] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.671015][ T62] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.680820][ T62] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.693750][ T62] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.702853][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.711932][ T62] usb 1-1: config 0 descriptor?? [ 32.120295][ T62] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 32.129754][ T62] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.859461][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000024: -71 [ 32.870407][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 32.880932][ T10] usb 4-1: USB disconnect, device number 3 [ 32.902548][ T31] usb 3-1: USB disconnect, device number 4 [ 33.318905][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.381707][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 33.381726][ T36] audit: type=1400 audit(1787102189.370:149): avc: denied { append } for pid=448 comm="syz.3.46" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.488942][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 33.495561][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.506051][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 33.515220][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.525172][ T31] usb 3-1: config 0 descriptor?? [ 33.958961][ T36] audit: type=1400 audit(1787102189.940:150): avc: denied { mount } for pid=451 comm="syz.0.47" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.981222][ T36] audit: type=1400 audit(1787102189.950:151): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.278952][ T45] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 34.288951][ T45] usb 1-1: device reset changed ep0 maxpacket size! [ 34.295813][ T311] usb 1-1: USB disconnect, device number 5 [ 34.428931][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.538921][ T62] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.588947][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 34.595296][ T311] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 34.603775][ T311] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 34.612460][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 34.621544][ T311] usb 1-1: config 1 has no interface number 0 [ 34.627685][ T311] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.638727][ T311] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 34.651686][ T311] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 34.660754][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.688905][ T62] usb 4-1: Using ep0 maxpacket: 32 [ 34.695130][ T62] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 34.703462][ T62] usb 4-1: config 0 has no interface number 0 [ 34.709699][ T62] usb 4-1: config 0 interface 12 has no altsetting 0 [ 34.717980][ T62] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 34.727079][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.735109][ T62] usb 4-1: Product: syz [ 34.739285][ T62] usb 4-1: Manufacturer: syz [ 34.743891][ T62] usb 4-1: SerialNumber: syz [ 34.749237][ T62] usb 4-1: config 0 descriptor?? [ 35.984193][ T62] usb 2-1: USB disconnect, device number 3 [ 35.998815][ T62] usblp0: removed [ 35.999743][ T467] UDC core: g1: couldn't find an available UDC or it's busy [ 36.002577][ T36] audit: type=1400 audit(1787102191.980:152): avc: denied { create } for pid=466 comm="syz.1.50" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 36.032644][ T36] audit: type=1400 audit(1787102191.990:153): avc: denied { write } for pid=466 comm="syz.1.50" name="UDC" dev="configfs" ino=4669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 36.059948][ T36] audit: type=1400 audit(1787102191.990:154): avc: denied { open } for pid=466 comm="syz.1.50" path="/7/config/usb_gadget/g1/UDC" dev="configfs" ino=4669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 36.070220][ T311] usb 3-1: USB disconnect, device number 5 [ 36.101560][ T9] usb 1-1: USB disconnect, device number 6 [ 36.115727][ T36] audit: type=1400 audit(1787102192.030:155): avc: denied { create } for pid=469 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.135075][ T36] audit: type=1400 audit(1787102192.030:156): avc: denied { connect } for pid=469 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.155136][ T36] audit: type=1400 audit(1787102192.030:157): avc: denied { write } for pid=469 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.459024][ T62] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.608948][ T62] usb 2-1: Using ep0 maxpacket: 16 [ 36.615381][ T62] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 36.623470][ T62] usb 2-1: config 0 has no interface number 0 [ 36.631811][ T62] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 36.640969][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.648958][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.656464][ T62] usb 2-1: Product: syz [ 36.660672][ T62] usb 2-1: Manufacturer: syz [ 36.665284][ T62] usb 2-1: SerialNumber: syz [ 36.670837][ T62] usb 2-1: config 0 descriptor?? [ 36.746271][ T36] audit: type=1400 audit(1787102192.730:158): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.812490][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.831706][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.843026][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.856346][ T311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.873499][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.883869][ T311] usb 3-1: config 0 descriptor?? [ 37.078025][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.088030][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.297704][ T62] usb 4-1: USB disconnect, device number 4 [ 37.298718][ T311] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 37.319450][ T311] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 37.432176][ T555] loop9: detected capacity change from 0 to 7 [ 37.448895][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 37.458806][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 37.638808][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.647506][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.718926][ T345] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.869947][ T345] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 37.883197][ T345] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 37.895822][ T345] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 37.904956][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.913085][ T345] usb 4-1: Product: syz [ 37.917299][ T345] usb 4-1: Manufacturer: syz [ 37.921930][ T345] usb 4-1: SerialNumber: syz [ 38.631865][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 38.631883][ T36] audit: type=1400 audit(1787102194.620:188): avc: denied { mount } for pid=569 comm="syz.0.77" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 38.662901][ T36] audit: type=1400 audit(1787102194.660:189): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 38.771260][ T36] audit: type=1400 audit(1787102194.760:190): avc: denied { create } for pid=575 comm="syz.0.80" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 38.779910][ T576] UDC core: g1: couldn't find an available UDC or it's busy [ 38.814282][ T36] audit: type=1400 audit(1787102194.800:191): avc: denied { write } for pid=577 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.835418][ T36] audit: type=1400 audit(1787102194.800:192): avc: denied { connect } for pid=577 comm="syz.0.81" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.855762][ T36] audit: type=1400 audit(1787102194.800:193): avc: denied { write } for pid=577 comm="syz.0.81" path="socket:[3940]" dev="sockfs" ino=3940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.857446][ T583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.879444][ T36] audit: type=1400 audit(1787102194.810:194): avc: denied { read } for pid=579 comm="syz.0.82" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.888115][ T583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.910181][ T36] audit: type=1400 audit(1787102194.810:195): avc: denied { open } for pid=579 comm="syz.0.82" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.941215][ T36] audit: type=1400 audit(1787102194.810:196): avc: denied { ioctl } for pid=579 comm="syz.0.82" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.114170][ T62] usb 2-1: USB disconnect, device number 4 [ 39.140354][ T587] ======================================================= [ 39.140354][ T587] WARNING: The mand mount option has been deprecated and [ 39.140354][ T587] and is ignored by this kernel. Remove the mand [ 39.140354][ T587] option from the mount to silence this warning. [ 39.140354][ T587] ======================================================= [ 39.176240][ T36] audit: type=1400 audit(1787102195.160:197): avc: denied { mounton } for pid=586 comm="syz.1.85" path="/12/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 39.177348][ T587] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.240688][ T592] random: crng reseeded on system resumption [ 39.409247][ T45] usb 3-1: USB disconnect, device number 6 [ 39.479798][ T601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.488316][ T601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.538928][ T62] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.698925][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 39.709679][ T62] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 39.718782][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.749795][ T62] usb 2-1: config 0 descriptor?? [ 40.348485][ T620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.357413][ T620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.378965][ T62] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.491412][ T10] usb 4-1: USB disconnect, device number 5 [ 40.528943][ T62] usb 3-1: Using ep0 maxpacket: 32 [ 40.535560][ T62] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.543808][ T62] usb 3-1: config 0 has no interface number 0 [ 40.551198][ T62] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.560273][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.568280][ T62] usb 3-1: Product: syz [ 40.572518][ T62] usb 3-1: Manufacturer: syz [ 40.577149][ T62] usb 3-1: SerialNumber: syz [ 40.583103][ T62] usb 3-1: config 0 descriptor?? [ 40.589531][ T62] smsc95xx v2.0.0 [ 40.906093][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.914771][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.915167][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.990870][ T62] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.001733][ T62] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.088971][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 41.095324][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.103766][ T10] usb 4-1: config 0 has no interface number 0 [ 41.111335][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.120447][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.124892][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.128468][ T10] usb 4-1: Product: syz [ 41.128488][ T10] usb 4-1: Manufacturer: syz [ 41.128604][ T10] usb 4-1: SerialNumber: syz [ 41.139355][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.142841][ T10] usb 4-1: config 0 descriptor?? [ 41.164473][ T10] smsc95xx v2.0.0 [ 41.565578][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.577007][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.663939][ T634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.672562][ T634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.320788][ T345] usb 2-1: USB disconnect, device number 5 [ 42.421358][ T641] mmap: syz.1.105 (641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.390647][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 43.401866][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 43.412466][ T10] usb 4-1: USB disconnect, device number 6 [ 43.594815][ T665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.604712][ T665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.688909][ T345] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 43.839868][ T345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.850059][ T345] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.859075][ T345] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 43.871420][ T345] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 43.880645][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.888674][ T345] usb 2-1: Product: syz [ 43.892888][ T345] usb 2-1: Manufacturer: syz [ 43.897509][ T345] usb 2-1: SerialNumber: syz [ 43.916519][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 43.916538][ T36] audit: type=1400 audit(1787102199.900:207): avc: denied { mounton } for pid=666 comm="syz.3.115" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 43.947116][ T36] audit: type=1400 audit(1787102199.920:208): avc: denied { create } for pid=668 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.966576][ T36] audit: type=1400 audit(1787102199.920:209): avc: denied { bind } for pid=668 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.985861][ T36] audit: type=1400 audit(1787102199.930:210): avc: denied { write } for pid=668 comm="syz.3.116" name="ptype" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.014018][ T665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.022979][ T665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.112210][ T345] usb 2-1: Can't get UAC3 power state for id 10 [ 44.119661][ T345] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 44.128985][ T345] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 44.146905][ T345] usb 2-1: USB disconnect, device number 6 [ 44.218938][ T311] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 44.370027][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.381622][ T311] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 44.390755][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.398753][ T311] usb 4-1: Product: syz [ 44.402984][ T311] usb 4-1: Manufacturer: syz [ 44.407596][ T311] usb 4-1: SerialNumber: syz [ 44.412994][ T311] usb 4-1: config 0 descriptor?? [ 44.422252][ T62] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000024: -71 [ 44.439135][ T62] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 44.449901][ T62] usb 3-1: USB disconnect, device number 7 [ 44.620303][ T62] usb 4-1: USB disconnect, device number 7 [ 44.694439][ T673] kvm: user requested TSC rate below hardware speed [ 44.760039][ T36] audit: type=1400 audit(1787102200.750:211): avc: denied { bind } for pid=674 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.779332][ T36] audit: type=1400 audit(1787102200.750:212): avc: denied { write } for pid=674 comm="syz.1.119" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.802157][ T36] audit: type=1400 audit(1787102200.750:213): avc: denied { open } for pid=674 comm="syz.1.119" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.810511][ T677] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 44.825916][ T36] audit: type=1400 audit(1787102200.750:214): avc: denied { ioctl } for pid=674 comm="syz.1.119" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.980836][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.992737][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.458969][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.478954][ T311] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.528977][ T410] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.610370][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.618827][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.629986][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 45.635157][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 45.646177][ T45] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.659951][ T311] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 45.668145][ T311] usb 3-1: config 0 has no interface number 0 [ 45.674977][ T45] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 45.684166][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 45.692224][ T45] usb 4-1: Product: syz [ 45.696586][ T45] usb 4-1: Manufacturer: syz [ 45.701243][ T45] usb 4-1: SerialNumber: syz [ 45.705955][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 45.715208][ T410] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 45.724407][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.732816][ T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.743061][ T311] usb 3-1: Product: syz [ 45.747352][ T410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 45.756362][ T311] usb 3-1: Manufacturer: syz [ 45.761003][ T311] usb 3-1: SerialNumber: syz [ 45.766026][ T410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.777272][ T311] usb 3-1: config 0 descriptor?? [ 45.783412][ T311] smsc95xx v2.0.0 [ 45.787146][ T410] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 45.796401][ T410] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 45.804472][ T410] usb 2-1: Product: syz [ 45.808666][ T410] usb 2-1: Manufacturer: syz [ 45.815906][ T410] cdc_wdm 2-1:1.0: skipping garbage [ 45.821182][ T410] cdc_wdm 2-1:1.0: skipping garbage [ 45.826887][ T410] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 45.832924][ T410] cdc_wdm 2-1:1.0: Unknown control protocol [ 45.950365][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.960592][ T45] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 45.973745][ T45] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 45.984021][ T45] usb 4-1: USB disconnect, device number 8 [ 45.995923][ T375] udevd[375]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.019360][ T345] usb 2-1: USB disconnect, device number 7 [ 46.190191][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 46.201000][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 46.384205][ T723] UDC core: g1: couldn't find an available UDC or it's busy [ 46.403813][ T725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.412366][ T725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.458944][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.609919][ T45] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 46.619006][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.629317][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 46.638324][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.651136][ T45] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 46.660466][ T45] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 46.668482][ T45] usb 2-1: Product: syz [ 46.672697][ T45] usb 2-1: Manufacturer: syz [ 46.679690][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 46.685057][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 46.691037][ T45] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 46.696980][ T45] cdc_wdm 2-1:1.0: Unknown control protocol [ 46.718912][ T410] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 46.871504][ T410] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 46.880666][ T410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.888748][ T410] usb 4-1: Product: syz [ 46.892949][ T410] usb 4-1: Manufacturer: syz [ 46.897565][ T410] usb 4-1: SerialNumber: syz [ 46.902892][ T410] usb 4-1: config 0 descriptor?? [ 46.951114][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.959686][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.368795][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.377412][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.989280][ T10] usb 2-1: USB disconnect, device number 8 [ 49.430921][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 49.452215][ T311] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 49.478691][ T311] usb 3-1: USB disconnect, device number 8 [ 49.560355][ T410] usb 4-1: USB disconnect, device number 9 [ 49.591931][ T779] tipc: Started in network mode [ 49.596944][ T779] tipc: Node identity 56bb416026ac, cluster identity 4711 [ 49.605008][ T779] tipc: Enabled bearer , priority 10 [ 49.613084][ T779] tipc: Disabling bearer [ 49.740527][ T794] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 49.740597][ T36] audit: type=1400 audit(1787102205.730:215): avc: denied { mount } for pid=793 comm="syz.0.168" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 49.753152][ T794] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 49.753172][ T794] CPU: 0 UID: 0 PID: 794 Comm: syz.0.168 Not tainted syzkaller #0 851f5cb62ab9f9c24538876695daf6a72142c571 [ 49.753199][ T794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.753212][ T794] RIP: 0010:vsscanf+0x18c/0x24b0 [ 49.799026][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 49.805034][ T794] Code: 48 c7 c6 b0 b5 e3 87 e8 22 43 e6 fb 41 83 fe 25 74 4d 45 85 f6 0f 84 a4 21 00 00 48 ff c3 48 89 5c 24 58 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 8e 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 49.805058][ T794] RSP: 0018:ffffc9000eba75a0 EFLAGS: 00010246 [ 49.826145][ T36] audit: type=1400 audit(1787102205.790:216): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.837073][ T794] RAX: 0000000000000000 RBX: ffffffff863647e1 RCX: 0000000000000001 [ 49.837092][ T794] RDX: ffffffff85a1341e RSI: ffffffff87e3b5b0 RDI: 0000000000000030 [ 49.837108][ T794] RBP: ffffc9000eba76b0 R08: ffff88810c313900 R09: 0000000000000002 [ 49.837122][ T794] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff863647e0 [ 49.837136][ T794] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 49.844523][ T36] audit: type=1400 audit(1787102205.790:217): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.864884][ T794] FS: 00007f09f0aad6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.864908][ T794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.864923][ T794] CR2: 000000110c31430a CR3: 000000010dbd8000 CR4: 00000000003526b0 [ 49.864944][ T794] Call Trace: [ 49.864951][ T794] [ 49.864959][ T794] ? __switch_to+0xc6b/0x1320 [ 49.873437][ T36] audit: type=1400 audit(1787102205.790:218): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.880931][ T794] ? __cfi_vsscanf+0x10/0x10 [ 49.880960][ T794] ? __cfi___switch_to+0x10/0x10 [ 49.909155][ T36] audit: type=1400 audit(1787102205.790:219): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.926149][ T794] sscanf+0xe3/0x150 [ 49.926184][ T794] ? __cfi_sscanf+0x10/0x10 [ 49.926206][ T794] ? mutex_lock_interruptible+0x97/0x1d0 [ 49.945370][ T36] audit: type=1400 audit(1787102205.790:220): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.949700][ T794] ? __asan_memcpy+0x5a/0x80 [ 49.949731][ T794] split_huge_pages_write+0x3c7/0x1220 [ 49.953728][ T36] audit: type=1400 audit(1787102205.790:221): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.955959][ T794] ? __sched_text_start+0x10/0x10 [ 49.955992][ T794] ? enqueue_task+0x1049/0x1100 [ 49.963160][ T36] audit: type=1400 audit(1787102205.790:222): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.981844][ T794] ? __cfi_split_huge_pages_write+0x10/0x10 [ 49.981884][ T794] ? preempt_schedule_thunk+0x1a/0x40 [ 49.981907][ T794] ? try_to_wake_up+0x119e/0x1fd0 [ 50.069061][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 50.079279][ T794] ? plist_check_list+0x2a8/0x2c0 [ 50.079323][ T794] ? __kasan_check_write+0x18/0x20 [ 50.079345][ T794] ? debugfs_file_get+0x3be/0x590 [ 50.086942][ T45] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 50.089225][ T794] ? __cfi_futex_wake+0x10/0x10 [ 50.089255][ T794] full_proxy_write+0x125/0x1e0 [ 50.113690][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 50.117615][ T794] ? __cfi_full_proxy_write+0x10/0x10 [ 50.123317][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.128009][ T794] vfs_write+0x3c1/0xfd0 [ 50.133504][ T45] usb 2-1: Product: syz [ 50.138134][ T794] ? __cfi_vfs_write+0x10/0x10 [ 50.143597][ T45] usb 2-1: Manufacturer: syz [ 50.148251][ T794] ? __kasan_check_write+0x18/0x20 [ 50.156884][ T45] usb 2-1: SerialNumber: syz [ 50.161404][ T794] ? mutex_lock+0x97/0x1d0 [ 50.161436][ T794] ? __cfi_mutex_lock+0x10/0x10 [ 50.179738][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 50.180639][ T794] ksys_write+0x145/0x260 [ 50.188705][ T45] r8152-cfgselector 2-1: config 0 descriptor?? [ 50.192837][ T794] ? xfd_validate_state+0x68/0x140 [ 50.192869][ T794] ? __cfi_ksys_write+0x10/0x10 [ 50.251834][ T794] ? __kasan_check_write+0x18/0x20 [ 50.256980][ T794] ? fpregs_restore_userregs+0x11c/0x260 [ 50.262669][ T794] __x64_sys_write+0x7f/0x90 [ 50.267314][ T794] x64_sys_call+0x271c/0x2ee0 [ 50.272033][ T794] do_syscall_64+0x57/0xf0 [ 50.276492][ T794] ? clear_bhb_loop+0x50/0xa0 [ 50.281196][ T794] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.287104][ T794] RIP: 0033:0x7f09efb9e0d9 [ 50.291534][ T794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.311160][ T794] RSP: 002b:00007f09f0aad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.319598][ T794] RAX: ffffffffffffffda RBX: 00007f09efe25fa0 RCX: 00007f09efb9e0d9 [ 50.327578][ T794] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 50.335576][ T794] RBP: 00007f09efc35024 R08: 0000000000000000 R09: 0000000000000000 [ 50.343551][ T794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.351531][ T794] R13: 00007f09efe26038 R14: 00007f09efe25fa0 R15: 00007ffcb14b4ad8 [ 50.359533][ T794] [ 50.362551][ T794] Modules linked in: [ 50.366794][ T794] ---[ end trace 0000000000000000 ]--- [ 50.373913][ T794] RIP: 0010:vsscanf+0x18c/0x24b0 [ 50.379011][ T794] Code: 48 c7 c6 b0 b5 e3 87 e8 22 43 e6 fb 41 83 fe 25 74 4d 45 85 f6 0f 84 a4 21 00 00 48 ff c3 48 89 5c 24 58 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 8e 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 50.399793][ T794] RSP: 0018:ffffc9000eba75a0 EFLAGS: 00010246 [ 50.406152][ T794] RAX: 0000000000000000 RBX: ffffffff863647e1 RCX: 0000000000000001 [ 50.414317][ T794] RDX: ffffffff85a1341e RSI: ffffffff87e3b5b0 RDI: 0000000000000030 [ 50.422543][ T794] RBP: ffffc9000eba76b0 R08: ffff88810c313900 R09: 0000000000000002 [ 50.430679][ T794] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff863647e0 [ 50.438726][ T794] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 50.446863][ T794] FS: 00007f09f0aad6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 50.455890][ T794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.462691][ T794] CR2: 00007f09efbeb7c0 CR3: 000000010dbd8000 CR4: 00000000003526b0 [ 50.470755][ T794] Kernel panic - not syncing: Fatal exception [ 50.477088][ T794] Kernel Offset: disabled [ 50.481409][ T794] Rebooting in 86400 seconds..