last executing test programs: 11.726064421s ago: executing program 0 (id=340): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000002c0)=[{0x28, 0x4, 0x5, 0x7fff}, {0x6, 0x27, 0x4, 0x207}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 10.881286068s ago: executing program 0 (id=343): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) getpeername(r0, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80) 10.036618256s ago: executing program 0 (id=344): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="000904"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f00000000c0)={0x0, 0xe, 0x4, "1b58228f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.291046025s ago: executing program 3 (id=347): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="10be436f"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 9.220656371s ago: executing program 3 (id=348): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.510385479s ago: executing program 0 (id=355): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000002340)="a6", 0x1}], 0x1, 0x8, 0x8000, 0x4) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000600)={0x10}, 0x10) 7.48941597s ago: executing program 0 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000500)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x2, {0x7, 0x2b, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.972031342s ago: executing program 3 (id=357): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000002c0)={0x9997, 0x4, 0xa27, 0x4}) 6.606997911s ago: executing program 0 (id=359): io_setup(0x3, &(0x7f0000000200)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x5a, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r1, 0x0, 0x52}]) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect(0x0, 0xf5, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402030101040307b79c5f081d38c3b54f63f7bf00ff070c2402060002050502"], 0x0) 5.058384105s ago: executing program 1 (id=364): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 4.908432307s ago: executing program 3 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000006080)=""/4097, 0x1001}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}], 0x6, 0x20, 0x0) 4.065334225s ago: executing program 3 (id=366): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000980)={0x40, 0x7, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x20, 0xf, 0x1, "a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.076091234s ago: executing program 2 (id=367): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) 2.882360849s ago: executing program 1 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000090603000000000000000000000000000900020073797a31000000000500010007000000280007800c00018008000140e00000021800028014000240ff0200000000"], 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2.882067709s ago: executing program 1 (id=369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmmsg$inet(r2, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000000c0)="9698", 0x2}], 0x2}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000100)="440f20c03504000000440f22c0ed430f2085f3410fc733a11fc42321e166a580000000000b00000f32660ffc290f01df670f001a66b88c288ec866b86a008ec0", 0x40}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.802378866s ago: executing program 1 (id=370): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xecc, 0x1, 0x7, 0x2865, 0x2008, 0x9, 0x1, 0x2, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) 2.645767498s ago: executing program 2 (id=371): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.620698371s ago: executing program 2 (id=372): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.620244511s ago: executing program 2 (id=373): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = memfd_create(0x0, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) socket(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) 2.516271839s ago: executing program 4 (id=376): r0 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "7803a5"}]}]}}}], 0x20}}], 0x1, 0x24000004) 2.50788685s ago: executing program 2 (id=377): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.448999894s ago: executing program 4 (id=378): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000a, 0x3032, 0xffffffffffffffff, 0xb9ba000) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.423223077s ago: executing program 2 (id=379): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000100)={0x40, 0x14, 0x4, "6187c622"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x657d}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)={0x40, 0x2b, 0x4, "8bc9ec88"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) 2.420725747s ago: executing program 4 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) 2.362509061s ago: executing program 4 (id=381): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/cgroup\x00') 1.848398412s ago: executing program 3 (id=382): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x9, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="81") 1.694063974s ago: executing program 4 (id=383): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x1178}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.586009993s ago: executing program 4 (id=384): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002100), 0x40001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000002140)) 21.021389ms ago: executing program 1 (id=385): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x9, 0x200, &(0x7f00000004c0)="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"}) 0s ago: executing program 1 (id=386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): 32.625924][ T420] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 32.638031][ T412] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.691923][ T405] Buffer I/O error on dev loop2, logical block 153, async page read [ 32.701764][ T412] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 32.701804][ T405] Buffer I/O error on dev loop2, logical block 154, async page read [ 32.720210][ T405] Buffer I/O error on dev loop2, logical block 155, async page read [ 32.729755][ T405] Buffer I/O error on dev loop2, logical block 156, async page read [ 32.738358][ T405] Buffer I/O error on dev loop2, logical block 157, async page read [ 32.751877][ T405] Buffer I/O error on dev loop2, logical block 158, async page read [ 32.762110][ T405] Buffer I/O error on dev loop2, logical block 159, async page read [ 32.772273][ T405] Buffer I/O error on dev loop2, logical block 160, async page read [ 32.781548][ T405] Buffer I/O error on dev loop2, logical block 153, async page read [ 32.790219][ T405] Buffer I/O error on dev loop2, logical block 154, async page read [ 32.854315][ T426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 33.011894][ T430] futex_wake_op: syz.1.23 tries to shift op by -1; fix this program [ 33.294102][ T433] loop2: detected capacity change from 0 to 256 [ 33.324753][ T433] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 33.472369][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 33.478605][ T357] Bluetooth: hci0: sending frame failed (-49) [ 33.589889][ T439] loop2: detected capacity change from 0 to 128 [ 33.625677][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.644586][ T439] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.658992][ T439] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.730603][ T439] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 34.125639][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 34.308299][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.364127][ T449] device ip6tnl1 entered promiscuous mode [ 35.132378][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 35.132393][ T30] audit: type=1400 audit(1754227468.831:224): avc: denied { create } for pid=452 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.133226][ T449] loop2: detected capacity change from 0 to 2048 [ 35.140778][ T30] audit: type=1400 audit(1754227468.851:225): avc: denied { setopt } for pid=452 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.163890][ T20] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 35.236803][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.248230][ T20] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.260460][ T20] usb 1-1: config 1 has no interface number 1 [ 35.267599][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 35.326565][ T20] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.342042][ T20] usb 1-1: config 1 interface 2 has no altsetting 0 [ 35.343057][ T449] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #2: comm syz.2.29: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 35.530531][ T30] audit: type=1400 audit(1754227469.131:226): avc: denied { relabelfrom } for pid=454 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 35.554039][ T30] audit: type=1400 audit(1754227469.131:227): avc: denied { relabelto } for pid=454 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 35.566822][ T361] Bluetooth: hci0: command 0x1009 tx timeout [ 35.576571][ T449] EXT4-fs (loop2): Remounting filesystem read-only [ 35.590225][ T449] EXT4-fs (loop2): get root inode failed [ 35.597211][ T449] EXT4-fs (loop2): mount failed [ 35.735723][ T20] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.745996][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.755071][ T20] usb 1-1: Product: syz [ 35.761183][ T20] usb 1-1: Manufacturer: syz [ 35.766560][ T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.776626][ T20] usb 1-1: SerialNumber: syz [ 36.345440][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 36.773161][ T476] loop2: detected capacity change from 0 to 256 [ 36.786841][ T476] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 37.223160][ T20] usb 1-1: USB disconnect, device number 2 [ 37.248470][ T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.819385][ T30] audit: type=1400 audit(1754227471.521:228): avc: denied { create } for pid=480 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.841377][ T30] audit: type=1400 audit(1754227471.521:229): avc: denied { create } for pid=480 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.863447][ T30] audit: type=1400 audit(1754227471.521:230): avc: denied { bind } for pid=480 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.876012][ T60] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.884853][ T30] audit: type=1400 audit(1754227471.521:231): avc: denied { name_bind } for pid=480 comm="syz.3.38" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 37.896169][ T60] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.000638][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.012879][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 38.025744][ T30] audit: type=1400 audit(1754227471.521:232): avc: denied { node_bind } for pid=480 comm="syz.3.38" saddr=172.20.20.31 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 38.054371][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.065130][ T60] usb 2-1: config 0 descriptor?? [ 38.085975][ T30] audit: type=1400 audit(1754227471.791:233): avc: denied { setopt } for pid=488 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.112486][ T489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 38.124126][ T489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 38.185087][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.358774][ T292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.508211][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 38.565791][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 38.572609][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 38.582792][ T60] usb 2-1: USB disconnect, device number 2 [ 38.625735][ T292] usb 3-1: Using ep0 maxpacket: 8 [ 38.631897][ T26] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 38.647040][ T26] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.659028][ T26] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.815835][ T292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.845928][ T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.856109][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.865412][ T26] usb 4-1: Product: syz [ 38.870219][ T26] usb 4-1: Manufacturer: syz [ 38.876308][ T26] usb 4-1: SerialNumber: syz [ 38.893688][ T505] loop4: detected capacity change from 0 to 256 [ 38.926398][ T292] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 38.939309][ T292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.952240][ T292] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.955652][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.963264][ T292] usb 3-1: config 1 has no interface number 1 [ 38.978594][ T292] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 38.981271][ T505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 39.034469][ T292] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.049548][ T292] usb 3-1: config 1 interface 2 has no altsetting 0 [ 39.069164][ T509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 39.126916][ T485] UDC core: couldn't find an available UDC or it's busy: -16 [ 39.136606][ T485] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.225758][ T26] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 39.245722][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 39.245754][ T26] usb 4-1: unit 8 not found! [ 39.256886][ T292] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.267518][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.278626][ T26] usb 4-1: USB disconnect, device number 2 [ 39.285855][ T292] usb 3-1: Product: syz [ 39.290951][ T292] usb 3-1: Manufacturer: syz [ 39.298241][ T292] usb 3-1: SerialNumber: syz [ 39.299141][ T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.395714][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.455853][ T60] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 39.465793][ T60] usb 2-1: can't read configurations, error -71 [ 39.652263][ T292] usb 3-1: USB disconnect, device number 2 [ 39.704098][ T518] FAULT_INJECTION: forcing a failure. [ 39.704098][ T518] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.723108][ T518] CPU: 1 PID: 518 Comm: syz.3.51 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 39.735037][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.748069][ T518] Call Trace: [ 39.753011][ T518] [ 39.757582][ T518] __dump_stack+0x21/0x30 [ 39.763159][ T518] dump_stack_lvl+0xee/0x150 [ 39.770252][ T518] ? show_regs_print_info+0x20/0x20 [ 39.778188][ T518] ? __alloc_pages+0x18f/0x440 [ 39.784385][ T518] dump_stack+0x15/0x20 [ 39.790107][ T518] should_fail+0x3c1/0x510 [ 39.795266][ T518] should_fail_usercopy+0x1a/0x20 [ 39.800851][ T518] copy_page_from_iter+0x2f6/0x680 [ 39.807289][ T518] tun_get_user+0x813/0x33c0 [ 39.812883][ T518] ? get_perf_callchain+0x2e0/0x480 [ 39.820388][ T518] ? tun_do_read+0x1c40/0x1c40 [ 39.826049][ T518] ? kstrtouint_from_user+0x1a0/0x200 [ 39.833587][ T518] ? kstrtol_from_user+0x260/0x260 [ 39.840307][ T518] ? bpf_prog_8f4d9728dfbc680e+0x21/0x560 [ 39.847630][ T518] ? actions_match+0x820/0x870 [ 39.853319][ T518] ? putname+0x111/0x160 [ 39.858860][ T518] ? avc_policy_seqno+0x1b/0x70 [ 39.864340][ T518] ? selinux_file_permission+0x2aa/0x510 [ 39.871721][ T518] tun_chr_write_iter+0x1eb/0x2e0 [ 39.877279][ T518] vfs_write+0x802/0xf70 [ 39.882444][ T518] ? file_end_write+0x1b0/0x1b0 [ 39.888311][ T518] ? __fget_files+0x2c4/0x320 [ 39.893779][ T518] ? __fdget_pos+0x1f7/0x380 [ 39.899413][ T518] ? ksys_write+0x71/0x240 [ 39.905330][ T518] ksys_write+0x140/0x240 [ 39.910193][ T518] ? __ia32_sys_read+0x90/0x90 [ 39.915694][ T518] ? debug_smp_processor_id+0x17/0x20 [ 39.923504][ T518] __x64_sys_write+0x7b/0x90 [ 39.931167][ T518] x64_sys_call+0x8ef/0x9a0 [ 39.937096][ T518] do_syscall_64+0x4c/0xa0 [ 39.942201][ T518] ? clear_bhb_loop+0x50/0xa0 [ 39.948208][ T518] ? clear_bhb_loop+0x50/0xa0 [ 39.954321][ T518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.961702][ T518] RIP: 0033:0x7f30184f661f [ 39.966973][ T518] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 39.994117][ T518] RSP: 002b:00007f3016b60000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 40.008769][ T518] RAX: ffffffffffffffda RBX: 00007f301871efa0 RCX: 00007f30184f661f [ 40.020518][ T518] RDX: 000000000000004a RSI: 0000200000000180 RDI: 00000000000000c8 [ 40.031678][ T518] RBP: 00007f3016b60090 R08: 0000000000000000 R09: 0000000000000000 [ 40.041973][ T518] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 40.051698][ T518] R13: 0000000000000000 R14: 00007f301871efa0 R15: 00007ffeb3c70a68 [ 40.062638][ T518] [ 40.106839][ T520] device veth0_vlan left promiscuous mode [ 40.114428][ T520] device veth0_vlan entered promiscuous mode [ 40.136591][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.148200][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.157074][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.075328][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 41.075346][ T30] audit: type=1400 audit(1754227474.771:241): avc: denied { read } for pid=534 comm="syz.1.57" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.220785][ T540] loop3: detected capacity change from 0 to 1024 [ 41.288545][ T540] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 41.301038][ T540] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 41.319423][ T540] EXT4-fs error (device loop3): ext4_get_journal_inode:5149: inode #5: comm syz.3.53: unexpected bad inode w/o EXT4_IGET_BAD [ 41.336745][ T540] EXT4-fs (loop3): no journal found [ 41.343240][ T540] EXT4-fs (loop3): can't get journal size [ 41.413858][ T544] loop1: detected capacity change from 0 to 256 [ 41.427460][ T540] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 41.617168][ T542] syz.4.58 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.026678][ T30] audit: type=1400 audit(1754227474.771:242): avc: denied { open } for pid=534 comm="syz.1.57" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.055413][ T30] audit: type=1400 audit(1754227474.771:243): avc: denied { map } for pid=534 comm="syz.1.57" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.101369][ T544] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 42.123459][ T30] audit: type=1326 audit(1754227475.821:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30184f7b69 code=0x7ffc0000 [ 42.171442][ T533] loop0: detected capacity change from 0 to 1024 [ 42.193011][ T533] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.243560][ T547] loop2: detected capacity change from 0 to 40427 [ 42.251120][ T30] audit: type=1326 audit(1754227475.881:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30184f7b69 code=0x7ffc0000 [ 42.275111][ T533] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 42.284571][ T30] audit: type=1326 audit(1754227475.881:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30184f7b69 code=0x7ffc0000 [ 42.320026][ T529] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 42.337107][ T30] audit: type=1326 audit(1754227475.881:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30184f7b69 code=0x7ffc0000 [ 42.352973][ T497] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.381128][ T529] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.391418][ T30] audit: type=1326 audit(1754227475.881:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30184f7b69 code=0x7ffc0000 [ 42.406022][ T529] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 42.432202][ T30] audit: type=1326 audit(1754227475.881:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f30184f7b69 code=0x7ffc0000 [ 42.471563][ T30] audit: type=1326 audit(1754227475.881:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30184f7b69 code=0x7ffc0000 [ 42.503198][ T533] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.530215][ T547] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.693181][ T547] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.728134][ T533] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.728134][ T533] [ 43.320168][ T533] EXT4-fs (loop0): Total free blocks count 0 [ 43.329577][ T533] EXT4-fs (loop0): Free/Dirty block details [ 43.336854][ T533] EXT4-fs (loop0): free_blocks=20480 [ 43.343391][ T533] EXT4-fs (loop0): dirty_blocks=32 [ 43.350406][ T533] EXT4-fs (loop0): Block reservation details [ 43.360711][ T497] usb 5-1: Using ep0 maxpacket: 8 [ 43.593235][ T533] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 43.601283][ T547] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.622958][ T529] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.622958][ T529] [ 43.649964][ T547] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 43.664266][ T547] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.665762][ T497] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.673080][ T547] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.742653][ T547] F2FS-fs (loop2): Unrecognized mount option "ÿÿÿ01777777777777777777777ÿÿÿÿµ6œfÓ[‹Øb¶Þ§“‹0…%ávŽÌ€Jc)F˜…¿kù ÐŒå2²4uüBΑýçç»í=b@e (05ac:8501) [ 43.906587][ T497] usb 5-1: No valid video chain found. [ 43.916453][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.017048][ T572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=572 comm=syz.0.64 [ 44.235898][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 44.375716][ T39] usb 2-1: config 1 has an invalid interface number: 137 but max is 0 [ 44.385910][ T39] usb 2-1: config 1 has no interface number 0 [ 44.394121][ T39] usb 2-1: config 1 interface 137 has no altsetting 0 [ 44.456784][ T576] syz.2.65[576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.457199][ T576] syz.2.65[576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.727003][ T332] usb 5-1: USB disconnect, device number 2 [ 44.773024][ T39] usb 2-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 44.898367][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.035973][ T39] usb 2-1: Product: syz [ 45.041234][ T39] usb 2-1: Manufacturer: syz [ 45.107237][ T39] usb 2-1: SerialNumber: syz [ 45.204728][ T585] loop3: detected capacity change from 0 to 128 [ 45.302635][ T585] xt_hashlimit: max too large, truncated to 1048576 [ 45.432028][ T597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 45.498601][ T598] futex_wake_op: syz.4.71 tries to shift op by -1; fix this program [ 45.866259][ T39] pl2303 2-1:1.137: required interrupt-in endpoint missing [ 45.878797][ T39] usb 2-1: USB disconnect, device number 5 [ 45.907697][ T604] loop0: detected capacity change from 0 to 512 [ 45.948933][ T604] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 45.960959][ T604] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.970236][ T604] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.73: bg 0: block 248: padding at end of block bitmap is not set [ 45.988718][ T604] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.73: Failed to acquire dquot type 1 [ 46.004571][ T604] EXT4-fs (loop0): 1 truncate cleaned up [ 46.012925][ T604] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 46.124163][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.136916][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 46.136929][ T30] audit: type=1400 audit(1754227479.841:349): avc: denied { getopt } for pid=606 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.275826][ T614] loop2: detected capacity change from 0 to 256 [ 46.379815][ T614] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.395728][ T614] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 46.405769][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.428886][ T614] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 46.707553][ T624] loop4: detected capacity change from 0 to 128 [ 46.734161][ T30] audit: type=1400 audit(1754227480.431:350): avc: denied { write } for pid=613 comm="syz.2.77" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.788303][ T30] audit: type=1400 audit(1754227480.431:351): avc: denied { add_name } for pid=613 comm="syz.2.77" name="cgroup.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.812954][ T30] audit: type=1400 audit(1754227480.431:352): avc: denied { associate } for pid=613 comm="syz.2.77" name="cgroup.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.835785][ T621] loop1: detected capacity change from 0 to 40427 [ 46.856031][ T30] audit: type=1400 audit(1754227480.431:353): avc: denied { read append open } for pid=613 comm="syz.2.77" path="/16/file1/cgroup.stat" dev="loop2" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.890632][ T621] F2FS-fs (loop1): invalid crc value [ 46.903482][ T30] audit: type=1400 audit(1754227480.561:354): avc: denied { write } for pid=626 comm="syz.4.82" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.916469][ T621] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.967092][ T621] F2FS-fs (loop1): Start checkpoint disabled! [ 46.974306][ T621] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 47.015960][ T30] audit: type=1400 audit(1754227480.711:355): avc: denied { map } for pid=620 comm="syz.1.80" path="socket:[17152]" dev="sockfs" ino=17152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 47.061301][ T8] attempt to access beyond end of device [ 47.061301][ T8] loop1: rw=2049, want=40968, limit=40427 [ 47.079913][ T8] attempt to access beyond end of device [ 47.079913][ T8] loop1: rw=2049, want=40992, limit=40427 [ 47.125723][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.136406][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.465471][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 47.473880][ T20] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 47.483619][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.492596][ T20] usb 1-1: config 0 descriptor?? [ 47.536334][ T20] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 47.735896][ T562] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 47.855655][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 47.867124][ T30] audit: type=1400 audit(1754227481.571:356): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 47.901060][ T649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 47.963371][ T650] futex_wake_op: syz.4.88 tries to shift op by -1; fix this program [ 47.995736][ T60] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 48.005983][ T60] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.018261][ T60] usb 3-1: config 0 has no interface number 0 [ 48.025680][ T562] usb 4-1: device descriptor read/64, error -71 [ 48.175752][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 48.187319][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.196642][ T60] usb 3-1: Product: syz [ 48.201274][ T60] usb 3-1: Manufacturer: syz [ 48.207272][ T60] usb 3-1: SerialNumber: syz [ 48.214935][ T60] usb 3-1: config 0 descriptor?? [ 48.435677][ T562] usb 4-1: device descriptor read/64, error -71 [ 48.521820][ T30] audit: type=1400 audit(1754227482.221:357): avc: denied { getopt } for pid=613 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.545542][ T30] audit: type=1400 audit(1754227482.221:358): avc: denied { remount } for pid=613 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.566016][ T39] usb 3-1: USB disconnect, device number 3 [ 48.635828][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 48.725781][ T562] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.885767][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 49.005738][ T562] usb 4-1: device descriptor read/64, error -71 [ 49.015777][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.015881][ T332] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.027636][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.046757][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 49.141480][ T663] FAULT_INJECTION: forcing a failure. [ 49.141480][ T663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.145004][ T474] usb 1-1: USB disconnect, device number 3 [ 49.164892][ T663] CPU: 1 PID: 663 Comm: syz.0.93 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 49.175447][ T663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.186794][ T663] Call Trace: [ 49.191194][ T663] [ 49.196161][ T663] __dump_stack+0x21/0x30 [ 49.201346][ T663] dump_stack_lvl+0xee/0x150 [ 49.207439][ T663] ? show_regs_print_info+0x20/0x20 [ 49.214143][ T663] dump_stack+0x15/0x20 [ 49.222799][ T663] should_fail+0x3c1/0x510 [ 49.228767][ T663] should_fail_usercopy+0x1a/0x20 [ 49.234457][ T663] _copy_to_user+0x20/0x90 [ 49.235744][ T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.239680][ T663] simple_read_from_buffer+0xe9/0x160 [ 49.239709][ T663] proc_fail_nth_read+0x19a/0x210 [ 49.255685][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.261474][ T663] ? proc_fault_inject_write+0x2f0/0x2f0 [ 49.261505][ T663] ? security_file_permission+0x83/0xa0 [ 49.261523][ T663] ? proc_fault_inject_write+0x2f0/0x2f0 [ 49.291129][ T20] usb 2-1: Product: ä‰æ—焅뗰快棵疗픉⚳๣蚽術꾴쵲洤䊾댴ኜ兤弄㬕脴螻럩봕꩑炬෾㘅븖㬪㖂넥맊ç®ê›–蘦㙓㥒摄î¸ç°Žæ¯‰î²½ê£˜èŠ™âƒ³éµ°î•¿â©è î«ƒé°–霒 [ 49.291192][ T663] vfs_read+0x282/0xbe0 [ 49.319821][ T663] ? kernel_read+0x1f0/0x1f0 [ 49.325055][ T663] ? __kasan_check_write+0x14/0x20 [ 49.325450][ T20] usb 2-1: Manufacturer: И [ 49.331090][ T663] ? mutex_lock+0x95/0x1a0 [ 49.331119][ T663] ? wait_for_completion_killable_timeout+0x10/0x10 [ 49.331135][ T663] ? __fget_files+0x2c4/0x320 [ 49.331152][ T663] ? __fdget_pos+0x2d2/0x380 [ 49.331166][ T663] ? ksys_read+0x71/0x240 [ 49.345707][ T20] usb 2-1: SerialNumber: ⹙㧷벘呲븽⟂清ä»êˆ£ï™ˆäž»â㵈촻킃ʒ䖞ᄭ酇쳧﹦턲쭕鬯勋嗞솈ທ廕ኹé«ë–²áŸŠæº‰ï›„䀳꨽熳柾弱å“ì’­è„·á¹è¶€ï‚—æ”›ã¸„è› [ 49.350018][ T663] ksys_read+0x140/0x240 [ 49.350046][ T663] ? vfs_write+0xf70/0xf70 [ 49.350060][ T663] ? debug_smp_processor_id+0x17/0x20 [ 49.350078][ T663] __x64_sys_read+0x7b/0x90 [ 49.414106][ T663] x64_sys_call+0x96d/0x9a0 [ 49.419242][ T663] do_syscall_64+0x4c/0xa0 [ 49.424752][ T663] ? clear_bhb_loop+0x50/0xa0 [ 49.430066][ T663] ? clear_bhb_loop+0x50/0xa0 [ 49.435630][ T663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.442403][ T663] RIP: 0033:0x7f152a52657c [ 49.448592][ T663] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.472029][ T663] RSP: 002b:00007f1528b90030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.482115][ T663] RAX: ffffffffffffffda RBX: 00007f152a74efa0 RCX: 00007f152a52657c [ 49.491710][ T663] RDX: 000000000000000f RSI: 00007f1528b900a0 RDI: 0000000000000005 [ 49.500482][ T663] RBP: 00007f1528b90090 R08: 0000000000000000 R09: 0000000000000000 [ 49.510574][ T663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.519660][ T663] R13: 0000000000000000 R14: 00007f152a74efa0 R15: 00007fff7cdea338 [ 49.529318][ T663] [ 49.601202][ T653] loop1: detected capacity change from 0 to 1024 [ 49.646049][ T332] usb 5-1: Using ep0 maxpacket: 32 [ 49.706110][ T653] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.726202][ T653] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.766146][ T332] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 49.790123][ T332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.802837][ T562] usb 4-1: device descriptor read/64, error -71 [ 49.857729][ T332] usb 5-1: config 0 has no interface number 0 [ 49.887075][ T332] usb 5-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.906887][ T332] usb 5-1: config 0 interface 120 has no altsetting 0 [ 49.935909][ T562] usb usb4-port1: attempt power cycle [ 50.085694][ T332] usb 5-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 50.095541][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.105074][ T332] usb 5-1: Product: syz [ 50.111271][ T332] usb 5-1: Manufacturer: syz [ 50.116567][ T332] usb 5-1: SerialNumber: syz [ 50.125822][ T20] usb 2-1: 0:2 : does not exist [ 50.136915][ T332] usb 5-1: config 0 descriptor?? [ 50.141549][ T20] usb 2-1: USB disconnect, device number 6 [ 50.177510][ T332] rndis_host 5-1:0.120: skipping garbage [ 50.188961][ T332] usb 5-1: bad CDC descriptors [ 50.200168][ T332] cdc_acm 5-1:0.120: Zero length descriptor references [ 50.212532][ T332] cdc_acm: probe of 5-1:0.120 failed with error -22 [ 50.391438][ T20] usb 5-1: USB disconnect, device number 3 [ 50.575744][ T562] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 50.794686][ T702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'. [ 50.865715][ T562] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 50.879641][ T562] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 50.891408][ T562] usb 4-1: config 0 has no interface number 0 [ 50.933053][ T562] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.953094][ T562] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 50.964372][ T562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.977802][ T562] usb 4-1: config 0 descriptor?? [ 51.018364][ T562] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 51.284161][ T710] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer. [ 51.324703][ T710] APIC base relocation is unsupported by KVM [ 51.337969][ T713] loop2: detected capacity change from 0 to 7 [ 51.358869][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 51.358884][ T30] audit: type=1400 audit(1754227485.041:363): avc: denied { write } for pid=712 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.479521][ T717] loop2: detected capacity change from 0 to 7 [ 51.560489][ T30] audit: type=1400 audit(1754227485.261:364): avc: denied { write } for pid=706 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.561111][ T724] xt_hashlimit: max too large, truncated to 1048576 [ 51.651017][ T30] audit: type=1400 audit(1754227485.261:365): avc: denied { accept } for pid=706 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.702278][ T30] audit: type=1400 audit(1754227485.401:366): avc: denied { connect } for pid=722 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.728876][ T30] audit: type=1400 audit(1754227485.401:367): avc: denied { write } for pid=722 comm="syz.0.113" path="socket:[17653]" dev="sockfs" ino=17653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.831428][ T30] audit: type=1400 audit(1754227485.531:368): avc: denied { create } for pid=739 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 51.854840][ T741] binfmt_misc: register: failed to install interpreter file ./file2 [ 51.878251][ T30] audit: type=1400 audit(1754227485.531:369): avc: denied { read write } for pid=739 comm="syz.0.118" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.908998][ T30] audit: type=1400 audit(1754227485.531:370): avc: denied { open } for pid=739 comm="syz.0.118" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.946267][ T30] audit: type=1400 audit(1754227485.531:371): avc: denied { ioctl } for pid=739 comm="syz.0.118" path="socket:[17679]" dev="sockfs" ino=17679 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.034011][ T30] audit: type=1400 audit(1754227485.731:372): avc: denied { append } for pid=746 comm="syz.0.120" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.061923][ T743] Zero length message leads to an empty skb [ 52.072714][ T747] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.085160][ T747] FAT-fs (loop1): unable to read boot sector [ 52.237759][ T750] loop0: detected capacity change from 0 to 40427 [ 52.258327][ T750] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 52.266986][ T750] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 52.279255][ T750] F2FS-fs (loop0): invalid crc value [ 52.287232][ T750] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.322243][ T750] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 52.330631][ T750] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.340057][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.361422][ T474] usb 4-1: USB disconnect, device number 5 [ 52.409867][ T281] attempt to access beyond end of device [ 52.409867][ T281] loop0: rw=2049, want=45104, limit=40427 [ 52.496142][ T765] incfs: mount failed -22 [ 52.505916][ T765] incfs: mount failed -22 [ 52.512029][ T767] FAULT_INJECTION: forcing a failure. [ 52.512029][ T767] name failslab, interval 1, probability 0, space 0, times 1 [ 52.516028][ T765] incfs: mount failed -22 [ 52.531305][ T765] incfs: mount failed -22 [ 52.536662][ T765] incfs: mount failed -22 [ 52.538756][ T767] CPU: 1 PID: 767 Comm: syz.3.126 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 52.543790][ T765] incfs: mount failed -22 [ 52.552955][ T767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.552971][ T767] Call Trace: [ 52.552977][ T767] [ 52.552983][ T767] __dump_stack+0x21/0x30 [ 52.553003][ T767] dump_stack_lvl+0xee/0x150 [ 52.553016][ T767] ? show_regs_print_info+0x20/0x20 [ 52.559517][ T765] incfs: mount failed -22 [ 52.570542][ T767] ? avc_has_perm+0x158/0x240 [ 52.570571][ T767] dump_stack+0x15/0x20 [ 52.570586][ T767] should_fail+0x3c1/0x510 [ 52.570600][ T767] __should_failslab+0xa4/0xe0 [ 52.574922][ T765] incfs: mount failed -22 [ 52.577922][ T767] should_failslab+0x9/0x20 [ 52.577947][ T767] slab_pre_alloc_hook+0x3b/0xe0 [ 52.577966][ T767] __kmalloc+0x6d/0x2c0 [ 52.584101][ T765] incfs: mount failed -22 [ 52.589678][ T767] ? kvmalloc_node+0x206/0x300 [ 52.589703][ T767] ? 0xffffffffa0032000 [ 52.589713][ T767] kvmalloc_node+0x206/0x300 [ 52.589725][ T767] ? __kernel_text_address+0xa0/0x100 [ 52.589741][ T767] ? vm_mmap+0xb0/0xb0 [ 52.589753][ T767] ? unwind_get_return_address+0x4d/0x90 [ 52.589771][ T767] ? stack_trace_save+0xe0/0xe0 [ 52.589786][ T767] traverse+0xd6/0x510 [ 52.589800][ T767] ? mutex_lock+0x95/0x1a0 [ 52.589817][ T767] seq_read_iter+0xc57/0xd30 [ 52.596450][ T765] incfs: mount failed -22 [ 52.600250][ T767] ? kasan_set_track+0x5b/0x70 [ 52.606833][ T765] incfs: mount failed -22 [ 52.611769][ T767] ? kasan_set_track+0x4a/0x70 [ 52.617251][ T765] incfs: mount failed -22 [ 52.622213][ T767] ? kasan_set_free_info+0x23/0x40 [ 52.627633][ T765] incfs: mount failed -22 [ 52.632467][ T767] ? memset+0x35/0x40 [ 52.640056][ T765] incfs: mount failed -22 [ 52.643324][ T767] seq_read+0x3cc/0x4d0 [ 52.651824][ T765] incfs: mount failed -22 [ 52.653325][ T767] ? seq_open+0x130/0x130 [ 52.653351][ T767] ? avc_policy_seqno+0x1b/0x70 [ 52.658770][ T765] incfs: mount failed -22 [ 52.663548][ T767] ? __kasan_check_read+0x11/0x20 [ 52.663577][ T767] ? seq_open+0x130/0x130 [ 52.663592][ T767] proc_reg_read+0x1c4/0x2b0 [ 52.670584][ T765] incfs: mount failed -22 [ 52.675304][ T767] do_iter_read+0x510/0x790 [ 52.675343][ T767] do_preadv+0x1f6/0x330 [ 52.682251][ T765] incfs: mount failed -22 [ 52.687186][ T767] ? vfs_writev+0x540/0x540 [ 52.687216][ T767] ? __kasan_check_write+0x14/0x20 [ 52.687232][ T767] ? fput_many+0x15a/0x1a0 [ 52.687247][ T767] __x64_sys_preadv+0x9e/0xb0 [ 52.687261][ T767] x64_sys_call+0x4f8/0x9a0 [ 52.687276][ T767] do_syscall_64+0x4c/0xa0 [ 52.687289][ T767] ? clear_bhb_loop+0x50/0xa0 [ 52.687303][ T767] ? clear_bhb_loop+0x50/0xa0 [ 52.687316][ T767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.687330][ T767] RIP: 0033:0x7f30184f7b69 [ 52.695201][ T20] usb 2-1: device descriptor read/64, error -71 [ 52.697628][ T767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.697645][ T767] RSP: 002b:00007f3016b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 52.697664][ T767] RAX: ffffffffffffffda RBX: 00007f301871efa0 RCX: 00007f30184f7b69 [ 52.715851][ T765] incfs: mount failed -22 [ 52.718225][ T767] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 52.723764][ T765] incfs: mount failed -22 [ 52.728128][ T767] RBP: 00007f3016b60090 R08: 0000000000000003 R09: 0000000000000000 [ 52.728271][ T767] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 52.728284][ T767] R13: 0000000000000000 R14: 00007f301871efa0 R15: 00007ffeb3c70a68 [ 52.728297][ T767] [ 52.738907][ T764] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 52.782116][ T765] incfs: mount failed -22 [ 52.815788][ T764] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 52.828488][ T765] incfs: mount failed -22 [ 53.007593][ T778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 53.092243][ T785] loop4: detected capacity change from 0 to 4096 [ 53.177162][ T785] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.198263][ T785] input: syz0 as /devices/virtual/input/input4 [ 53.225696][ T20] usb 2-1: device descriptor read/64, error -71 [ 53.265685][ T474] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.495714][ T20] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 53.505845][ T474] usb 4-1: Using ep0 maxpacket: 8 [ 53.625875][ T474] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.639810][ T474] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 53.650213][ T474] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 53.659655][ T474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.668916][ T474] usb 4-1: config 0 descriptor?? [ 53.785716][ T20] usb 2-1: device descriptor read/64, error -71 [ 53.911180][ T562] usb 4-1: USB disconnect, device number 6 [ 54.069653][ T810] FAULT_INJECTION: forcing a failure. [ 54.069653][ T810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.074689][ T812] loop4: detected capacity change from 0 to 512 [ 54.084022][ T810] CPU: 1 PID: 810 Comm: syz.0.139 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 54.103210][ T810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.114662][ T810] Call Trace: [ 54.118485][ T810] [ 54.121991][ T810] __dump_stack+0x21/0x30 [ 54.127206][ T810] dump_stack_lvl+0xee/0x150 [ 54.132636][ T810] ? show_regs_print_info+0x20/0x20 [ 54.138271][ T810] dump_stack+0x15/0x20 [ 54.143152][ T810] should_fail+0x3c1/0x510 [ 54.147697][ T810] should_fail_usercopy+0x1a/0x20 [ 54.153470][ T810] _copy_to_user+0x20/0x90 [ 54.158574][ T810] simple_read_from_buffer+0xe9/0x160 [ 54.164418][ T810] proc_fail_nth_read+0x19a/0x210 [ 54.170094][ T810] ? proc_fault_inject_write+0x2f0/0x2f0 [ 54.176094][ T810] ? security_file_permission+0x83/0xa0 [ 54.182420][ T810] ? proc_fault_inject_write+0x2f0/0x2f0 [ 54.188540][ T810] vfs_read+0x282/0xbe0 [ 54.193038][ T810] ? kernel_read+0x1f0/0x1f0 [ 54.198108][ T810] ? selinux_socket_getsockopt+0x208/0x2e0 [ 54.204549][ T810] ? __kasan_check_write+0x14/0x20 [ 54.210106][ T810] ? mutex_lock+0x95/0x1a0 [ 54.214971][ T810] ? wait_for_completion_killable_timeout+0x10/0x10 [ 54.222389][ T810] ? __fget_files+0x2c4/0x320 [ 54.227082][ T810] ? __fdget_pos+0x2d2/0x380 [ 54.232379][ T810] ? ksys_read+0x71/0x240 [ 54.236885][ T810] ksys_read+0x140/0x240 [ 54.241446][ T810] ? vfs_write+0xf70/0xf70 [ 54.246872][ T810] ? __sys_getsockopt+0x295/0x410 [ 54.252512][ T810] ? debug_smp_processor_id+0x17/0x20 [ 54.258666][ T810] __x64_sys_read+0x7b/0x90 [ 54.263456][ T810] x64_sys_call+0x96d/0x9a0 [ 54.268253][ T810] do_syscall_64+0x4c/0xa0 [ 54.273236][ T810] ? clear_bhb_loop+0x50/0xa0 [ 54.278588][ T810] ? clear_bhb_loop+0x50/0xa0 [ 54.284259][ T810] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.291635][ T810] RIP: 0033:0x7f152a52657c [ 54.296621][ T810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.317987][ T810] RSP: 002b:00007f1528b6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.327621][ T810] RAX: ffffffffffffffda RBX: 00007f152a74f080 RCX: 00007f152a52657c [ 54.336521][ T810] RDX: 000000000000000f RSI: 00007f1528b6f0a0 RDI: 0000000000000009 [ 54.344854][ T810] RBP: 00007f1528b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.354120][ T810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.362449][ T810] R13: 0000000000000000 R14: 00007f152a74f080 R15: 00007fff7cdea338 [ 54.371348][ T810] [ 54.374768][ T20] usb 2-1: device descriptor read/64, error -71 [ 54.412833][ T812] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 54.419074][ T817] loop0: detected capacity change from 0 to 512 [ 54.431729][ T812] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.441369][ T817] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 54.445732][ T812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0102] [ 54.449630][ T817] EXT4-fs (loop0): Test dummy encryption mode enabled [ 54.465364][ T812] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.141: inode #13: comm syz.4.141: iget: illegal inode # [ 54.465736][ T812] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.141: couldn't read orphan inode 13 (err -117) [ 54.480322][ T817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0102] [ 54.492809][ T812] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000080222a,sysvgroups,test_dummy_encryption,,errors=continue. Quota mode: none. [ 54.502425][ T817] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.143: inode #13: comm syz.0.143: iget: illegal inode # [ 54.541533][ T20] usb usb2-port1: attempt power cycle [ 54.548168][ T817] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.143: couldn't read orphan inode 13 (err -117) [ 54.561857][ T817] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000080222a,sysvgroups,test_dummy_encryption,,errors=continue. Quota mode: none. [ 54.734422][ T828] loop0: detected capacity change from 0 to 256 [ 54.856905][ T828] FAT-fs (loop0): Unrecognized mount option "err?ors=remount-ro" or missing value [ 55.017805][ T834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 55.044002][ T836] netlink: 'syz.1.150': attribute type 4 has an invalid length. [ 55.050093][ T838] loop2: detected capacity change from 0 to 512 [ 55.055065][ T836] netlink: 17 bytes leftover after parsing attributes in process `syz.1.150'. [ 55.071893][ T20] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 55.595646][ T20] usb 2-1: device not accepting address 9, error -71 [ 55.620286][ T852] syz.4.154[852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.621107][ T852] syz.4.154[852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.708622][ T856] loop3: detected capacity change from 0 to 256 [ 55.752201][ T856] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.764927][ T856] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 55.785152][ T856] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 55.850483][ T865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 55.905717][ T474] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 55.913530][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 55.914609][ T868] futex_wake_op: syz.4.159 tries to shift op by -1; fix this program [ 55.976616][ T869] futex_wake_op: syz.2.160 tries to shift op by -1; fix this program [ 56.085670][ T361] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 56.155727][ T474] usb 1-1: Using ep0 maxpacket: 16 [ 56.275702][ T474] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 56.290456][ T474] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.302031][ T474] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.355764][ T361] usb 4-1: device descriptor read/64, error -71 [ 56.495720][ T474] usb 1-1: New USB device found, idVendor=1d6b, idProduct=2301, bcdDevice= 0.40 [ 56.508353][ T474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.518416][ T474] usb 1-1: Product: syz [ 56.523377][ T474] usb 1-1: Manufacturer: syz [ 56.528978][ T474] usb 1-1: SerialNumber: syz [ 56.745667][ T361] usb 4-1: device descriptor read/64, error -71 [ 56.866719][ T881] incfs: iterate_incfs_dir / -22 [ 57.079350][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 57.079376][ T30] audit: type=1400 audit(1754227490.781:395): avc: denied { read } for pid=853 comm="syz.0.155" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.165702][ T30] audit: type=1400 audit(1754227490.811:396): avc: denied { open } for pid=853 comm="syz.0.155" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.192694][ T361] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 57.214558][ T30] audit: type=1400 audit(1754227490.911:397): avc: denied { ioctl } for pid=887 comm="syz.4.167" path="socket:[18038]" dev="sockfs" ino=18038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.242969][ T474] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 57.251005][ T30] audit: type=1400 audit(1754227490.911:398): avc: denied { create } for pid=887 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 57.276792][ T474] usb 1-1: USB disconnect, device number 4 [ 57.568208][ T361] usb 4-1: device descriptor read/64, error -71 [ 57.747197][ T899] loop0: detected capacity change from 0 to 128 [ 57.965966][ T361] usb 4-1: device descriptor read/64, error -71 [ 58.024395][ T30] audit: type=1400 audit(1754227491.721:399): avc: denied { create } for pid=903 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 58.047980][ T30] audit: type=1400 audit(1754227491.731:400): avc: denied { write } for pid=903 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 58.070150][ T30] audit: type=1400 audit(1754227491.731:401): avc: denied { read } for pid=903 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 58.096151][ T361] usb usb4-port1: attempt power cycle [ 58.168317][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 58.234481][ T908] futex_wake_op: syz.1.173 tries to shift op by -1; fix this program [ 58.505685][ T361] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 58.550358][ T910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 58.561984][ T910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.174'. [ 58.572962][ T910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.174'. [ 58.587025][ T910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 58.598165][ T910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 58.661290][ T30] audit: type=1400 audit(1754227492.361:402): avc: denied { read } for pid=909 comm="syz.2.174" dev="sockfs" ino=18896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.675738][ T361] usb 4-1: device descriptor read/8, error -71 [ 58.702748][ T913] loop2: detected capacity change from 0 to 1024 [ 58.760192][ T913] EXT4-fs (loop2): Ignoring removed bh option [ 58.767144][ T913] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 58.817422][ T913] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 58.915641][ T361] usb 4-1: device descriptor read/8, error -71 [ 59.614505][ T30] audit: type=1400 audit(1754227493.191:403): avc: denied { ioctl } for pid=921 comm="syz.4.178" path="socket:[18184]" dev="sockfs" ino=18184 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.767735][ T942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 60.806807][ T332] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.093503][ T947] loop3: detected capacity change from 0 to 512 [ 61.130669][ T947] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 61.268386][ T947] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 61.289120][ T947] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.324975][ T947] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.185: corrupted xattr block 19 [ 61.338373][ T947] EXT4-fs (loop3): Remounting filesystem read-only [ 61.345695][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.346297][ T947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 61.358340][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.368231][ T947] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.185: corrupted xattr block 19 [ 61.378343][ T332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.392528][ T952] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.185: corrupted xattr block 19 [ 61.405712][ T332] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.419252][ T947] EXT4-fs (loop3): Remounting filesystem read-only [ 61.428184][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.448007][ T332] usb 1-1: config 0 descriptor?? [ 61.458883][ T947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 61.468886][ T952] EXT4-fs (loop3): Remounting filesystem read-only [ 61.476352][ T947] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.185: corrupted xattr block 19 [ 61.489294][ T952] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 61.492391][ T947] EXT4-fs (loop3): Remounting filesystem read-only [ 61.507495][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.512039][ T947] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.185: corrupted xattr block 19 [ 61.518631][ T952] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz.3.185: corrupted xattr block 19 [ 61.546812][ T30] audit: type=1326 audit(1754227495.251:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=956 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 61.553706][ T952] EXT4-fs (loop3): Remounting filesystem read-only [ 61.582300][ T957] loop4: detected capacity change from 0 to 512 [ 61.583849][ T947] EXT4-fs (loop3): Remounting filesystem read-only [ 61.598557][ T959] veth1_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 61.607631][ T947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 61.613850][ T957] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 61.635039][ T957] EXT4-fs (loop4): group descriptors corrupted! [ 61.737104][ T332] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 61.752260][ T963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.190'. [ 61.758959][ T332] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 61.871587][ T976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 61.981328][ T332] usb 1-1: USB disconnect, device number 5 [ 62.035343][ T978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 62.040509][ T985] fido_id[985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 62.114728][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 62.306971][ T1007] loop1: detected capacity change from 0 to 512 [ 62.317054][ T1007] EXT4-fs (loop1): Test dummy encryption mode enabled [ 62.372069][ T1008] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 62.415709][ T1007] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 62.462288][ T1007] EXT4-fs (loop1): 1 truncate cleaned up [ 62.476464][ T1007] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 62.697404][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 62.697422][ T30] audit: type=1400 audit(1754227496.401:439): avc: denied { write } for pid=1006 comm="syz.1.202" lport=251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.745850][ T1031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 63.809997][ T1040] loop0: detected capacity change from 0 to 512 [ 63.822270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.824366][ T1040] EXT4-fs (loop0): unable to read superblock [ 63.832784][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.846789][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.860313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 63.870426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.881142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 63.891211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.900928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.910312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.919664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.934449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.944898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 63.957715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 63.976079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 64.043555][ T30] audit: type=1400 audit(1754227497.741:440): avc: denied { create } for pid=1045 comm="syz.3.216" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.044134][ T1046] ------------[ cut here ]------------ [ 64.075663][ T332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 64.077843][ T1046] WARNING: CPU: 0 PID: 1046 at fs/inode.c:392 inc_nlink+0x123/0x130 [ 64.092879][ T1046] Modules linked in: [ 64.105939][ T1046] CPU: 0 PID: 1046 Comm: syz.3.216 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 64.124798][ T1046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.136277][ T30] audit: type=1400 audit(1754227497.841:441): avc: denied { listen } for pid=1050 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.150398][ T1046] RIP: 0010:inc_nlink+0x123/0x130 [ 64.171201][ T1056] xt_hashlimit: max too large, truncated to 1048576 [ 64.176727][ T1046] Code: 35 f2 ff e9 37 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 37 35 f2 ff e9 3f ff ff ff e8 6d ba b3 ff <0f> 0b eb 82 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 [ 64.179001][ T1056] xt_limit: Overflow, try lower: 0/0 [ 64.201414][ T1046] RSP: 0018:ffffc90000bc7ca8 EFLAGS: 00010283 [ 64.225676][ T1046] RAX: ffffffff81b4f563 RBX: ffff88812a1578d8 RCX: 0000000000080000 [ 64.236221][ T1046] RDX: ffffc90003713000 RSI: 00000000000012c3 RDI: 00000000000012c4 [ 64.244951][ T1046] RBP: ffffc90000bc7cd0 R08: dffffc0000000000 R09: ffffed10222a36fa [ 64.254825][ T1046] R10: ffffed10222a36fa R11: 1ffff110222a36f9 R12: dffffc0000000000 [ 64.263962][ T1046] R13: 1ffff1102542af1b R14: ffff88812a157890 R15: 0000000000000000 [ 64.273055][ T1046] FS: 00007f3016b606c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 64.283887][ T1046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.291716][ T1046] CR2: 00007fff7cdea5b8 CR3: 0000000133a2e000 CR4: 00000000003506a0 [ 64.301407][ T1046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.310616][ T1046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.320123][ T1046] Call Trace: [ 64.323634][ T1046] [ 64.327030][ T1046] v9fs_vfs_mkdir_dotl+0x3e7/0x530 [ 64.332638][ T1046] ? v9fs_vfs_symlink_dotl+0x4e0/0x4e0 [ 64.350526][ T1046] ? selinux_inode_mkdir+0x22/0x30 [ 64.356485][ T1046] ? security_inode_mkdir+0xbd/0x110 [ 64.362598][ T1046] vfs_mkdir+0x387/0x580 [ 64.368749][ T30] audit: type=1326 audit(1754227498.071:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 64.394597][ T1046] do_mkdirat+0x171/0x4c0 [ 64.396058][ T30] audit: type=1326 audit(1754227498.071:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 64.399700][ T1046] __x64_sys_mkdirat+0x89/0xa0 [ 64.433198][ T1064] loop4: detected capacity change from 0 to 128 [ 64.445332][ T30] audit: type=1326 audit(1754227498.071:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 64.471349][ T30] audit: type=1326 audit(1754227498.071:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 64.476982][ T1046] x64_sys_call+0x37e/0x9a0 [ 64.497983][ T30] audit: type=1326 audit(1754227498.071:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 64.506971][ T1046] do_syscall_64+0x4c/0xa0 [ 64.533230][ T332] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.534539][ T1046] ? clear_bhb_loop+0x50/0xa0 [ 64.555942][ T1046] ? clear_bhb_loop+0x50/0xa0 [ 64.579854][ T1046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.595088][ T30] audit: type=1326 audit(1754227498.071:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 64.598288][ T1046] RIP: 0033:0x7f30184f7b69 [ 64.620450][ T30] audit: type=1326 audit(1754227498.071:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330d12db69 code=0x7ffc0000 [ 64.625378][ T1046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.650314][ T1071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.221'. [ 64.672649][ T1046] RSP: 002b:00007f3016b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 64.683320][ T1068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 64.692504][ T1046] RAX: ffffffffffffffda RBX: 00007f301871efa0 RCX: 00007f30184f7b69 [ 64.701789][ T332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.710626][ T1046] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 64.729799][ T1046] RBP: 00007f301857adf1 R08: 0000000000000000 R09: 0000000000000000 [ 64.739542][ T1046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.745688][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.749186][ T1046] R13: 0000000000000000 R14: 00007f301871efa0 R15: 00007ffeb3c70a68 [ 64.765755][ T332] usb 3-1: SerialNumber: syz [ 64.777302][ T1046] [ 64.785995][ T1046] ---[ end trace 7d68885e2af887ab ]--- [ 64.810504][ T1076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1076 comm=syz.0.225 [ 65.239112][ T1089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1089 comm=syz.3.230 [ 65.497173][ T1099] loop4: detected capacity change from 0 to 512 [ 65.527354][ T1099] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 65.536078][ T1099] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.536687][ T1097] loop3: detected capacity change from 0 to 40427 [ 65.552143][ T1099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.575241][ T1099] EXT4-fs (loop4): 1 truncate cleaned up [ 65.582547][ T1099] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,nomblk_io_submit,nombcache,resgid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 65.586210][ T1038] UDC core: couldn't find an available UDC or it's busy: -16 [ 65.615264][ T1038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.626436][ T1099] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 65.638841][ T1097] F2FS-fs (loop3): invalid crc value [ 65.642192][ T1099] overlayfs: missing 'lowerdir' [ 65.659996][ T1097] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.682681][ T332] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 65.712078][ T1104] loop1: detected capacity change from 0 to 1024 [ 65.720990][ T1097] F2FS-fs (loop3): Start checkpoint disabled! [ 65.729564][ T1097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 65.794052][ T1097] incfs: Error accessing: ./file0. [ 65.800074][ T1097] incfs: mount failed -20 [ 65.831081][ T1104] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 65.836104][ T8] attempt to access beyond end of device [ 65.836104][ T8] loop3: rw=2049, want=40976, limit=40427 [ 65.846219][ T1104] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 65.974975][ T1118] FAULT_INJECTION: forcing a failure. [ 65.974975][ T1118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.993528][ T1118] CPU: 1 PID: 1118 Comm: syz.0.240 Tainted: G W 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 66.006291][ T1118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.017511][ T1118] Call Trace: [ 66.021071][ T1118] [ 66.024149][ T1118] __dump_stack+0x21/0x30 [ 66.029195][ T1118] dump_stack_lvl+0xee/0x150 [ 66.034320][ T1118] ? show_regs_print_info+0x20/0x20 [ 66.039985][ T1118] ? __kasan_check_write+0x14/0x20 [ 66.045442][ T1118] ? _raw_spin_lock_irq+0x8f/0xe0 [ 66.050933][ T1118] dump_stack+0x15/0x20 [ 66.055192][ T1118] should_fail+0x3c1/0x510 [ 66.059973][ T1118] should_fail_usercopy+0x1a/0x20 [ 66.065283][ T1118] copy_page_from_iter_atomic+0x3fb/0x1350 [ 66.071443][ T1118] ? pipe_zero+0x370/0x370 [ 66.076520][ T1118] generic_perform_write+0x307/0x670 [ 66.081997][ T1118] ? grab_cache_page_write_begin+0xb0/0xb0 [ 66.088075][ T1118] ? file_remove_privs+0x590/0x590 [ 66.094018][ T1118] ? rwsem_write_trylock+0x130/0x300 [ 66.099951][ T1118] ? clear_nonspinnable+0x60/0x60 [ 66.106131][ T1118] ? avc_policy_seqno+0x1b/0x70 [ 66.111429][ T1118] __generic_file_write_iter+0x268/0x480 [ 66.117517][ T1118] generic_file_write_iter+0xa9/0x1d0 [ 66.123243][ T1118] vfs_write+0x802/0xf70 [ 66.127678][ T1118] ? file_end_write+0x1b0/0x1b0 [ 66.132994][ T1118] ? wait_for_completion_killable_timeout+0x10/0x10 [ 66.139935][ T1118] ? __fget_files+0x2c4/0x320 [ 66.145513][ T1118] ? __fdget_pos+0x2d2/0x380 [ 66.150280][ T1118] ? ksys_write+0x71/0x240 [ 66.154697][ T1118] ksys_write+0x140/0x240 [ 66.159746][ T1118] ? __ia32_sys_read+0x90/0x90 [ 66.165119][ T1118] ? debug_smp_processor_id+0x17/0x20 [ 66.170510][ T1118] __x64_sys_write+0x7b/0x90 [ 66.175873][ T1118] x64_sys_call+0x8ef/0x9a0 [ 66.180754][ T1118] do_syscall_64+0x4c/0xa0 [ 66.185633][ T1118] ? clear_bhb_loop+0x50/0xa0 [ 66.190666][ T1118] ? clear_bhb_loop+0x50/0xa0 [ 66.195789][ T1118] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.202802][ T1118] RIP: 0033:0x7f152a527b69 [ 66.208631][ T1118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.230980][ T1118] RSP: 002b:00007f1528b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.240132][ T1118] RAX: ffffffffffffffda RBX: 00007f152a74f080 RCX: 00007f152a527b69 [ 66.248481][ T1118] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000009 [ 66.257341][ T1118] RBP: 00007f1528b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.266260][ T1118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.275402][ T1118] R13: 0000000000000000 R14: 00007f152a74f080 R15: 00007fff7cdea338 [ 66.284696][ T1118] [ 66.313711][ T1038] UDC core: couldn't find an available UDC or it's busy: -16 [ 66.323858][ T1038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 66.435646][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.536221][ T1129] loop1: detected capacity change from 0 to 128 [ 66.845788][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.926236][ T60] usb 5-1: config 100 has an invalid interface number: 59 but max is 1 [ 66.936136][ T60] usb 5-1: config 100 has an invalid interface number: 197 but max is 1 [ 66.947773][ T60] usb 5-1: config 100 has no interface number 0 [ 66.955044][ T60] usb 5-1: config 100 has no interface number 1 [ 66.962257][ T60] usb 5-1: config 100 interface 59 has no altsetting 0 [ 66.970597][ T60] usb 5-1: config 100 interface 197 has no altsetting 0 [ 67.135726][ T60] usb 5-1: New USB device found, idVendor=12d1, idProduct=4501, bcdDevice=1d.b6 [ 67.149291][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.157740][ T60] usb 5-1: Product: syz [ 67.162253][ T60] usb 5-1: Manufacturer: syz [ 67.167393][ T60] usb 5-1: SerialNumber: syz [ 67.522268][ T474] usb 3-1: USB disconnect, device number 4 [ 67.583068][ T1141] loop1: detected capacity change from 0 to 2048 [ 67.610208][ T1143] loop2: detected capacity change from 0 to 1024 [ 67.643318][ T1143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.658670][ T1143] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.772607][ T1160] UDC core: couldn't find an available UDC or it's busy: -16 [ 67.781294][ T1160] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.809906][ T1165] loop1: detected capacity change from 0 to 128 [ 67.841194][ T1165] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.861286][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 67.861300][ T30] audit: type=1400 audit(1754227501.561:509): avc: denied { mounton } for pid=1164 comm="syz.1.257" path="/50/bus/file0" dev="loop1" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 67.861394][ T1165] incfs: Options parsing error. -22 [ 67.909379][ T1165] incfs: mount failed -22 [ 68.148060][ T474] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 68.375670][ T332] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 68.482266][ T1171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1171 comm=syz.0.259 [ 68.515725][ T474] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 68.528593][ T474] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 68.540922][ T474] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 68.551119][ T474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.575700][ T1159] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.625737][ T332] usb 4-1: Invalid ep0 maxpacket: 64 [ 68.723015][ T30] audit: type=1326 audit(1754227502.421:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.727366][ T1184] binder: Bad value for 'context' [ 68.748863][ T30] audit: type=1326 audit(1754227502.421:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.775640][ T332] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 68.784523][ T30] audit: type=1326 audit(1754227502.451:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.827147][ T30] audit: type=1326 audit(1754227502.451:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.862766][ T30] audit: type=1326 audit(1754227502.451:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.894271][ T474] usb 3-1: string descriptor 0 read error: -71 [ 68.901317][ T30] audit: type=1326 audit(1754227502.501:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.933382][ T474] hub 3-1:32.0: USB hub found [ 68.937986][ T1187] loop4: detected capacity change from 0 to 4096 [ 68.939608][ T30] audit: type=1326 audit(1754227502.501:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.977045][ T60] usb 5-1: USB disconnect, device number 4 [ 68.984932][ T30] audit: type=1326 audit(1754227502.501:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 68.990329][ T1187] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.019543][ T30] audit: type=1326 audit(1754227502.501:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f152a527b69 code=0x7ffc0000 [ 69.025737][ T474] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 69.057929][ T1187] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 69.098495][ T1187] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 69.108162][ T474] usb 3-1: USB disconnect, device number 5 [ 69.115670][ T332] usb 4-1: Invalid ep0 maxpacket: 64 [ 69.122927][ T332] usb usb4-port1: attempt power cycle [ 69.275195][ T562] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 69.339158][ T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.576109][ T332] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 69.618666][ T1202] loop0: detected capacity change from 0 to 512 [ 69.667719][ T1202] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.675805][ T332] usb 4-1: Invalid ep0 maxpacket: 64 [ 69.682651][ T1202] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.711874][ T1202] overlayfs: failed to resolve './bus': -2 [ 69.835806][ T332] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 69.855718][ T474] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 69.925746][ T332] usb 4-1: Invalid ep0 maxpacket: 64 [ 69.932892][ T332] usb usb4-port1: unable to enumerate USB device [ 69.985669][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.115779][ T474] usb 3-1: Using ep0 maxpacket: 16 [ 70.235675][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 70.255720][ T474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 70.268873][ T474] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 70.279077][ T474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.293458][ T474] usb 3-1: config 0 descriptor?? [ 70.415723][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.495718][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.507900][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.518866][ T39] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 70.695807][ T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.705962][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.715511][ T39] usb 1-1: Product: syz [ 70.720544][ T39] usb 1-1: Manufacturer: syz [ 70.725149][ T39] usb 1-1: SerialNumber: syz [ 70.745770][ T1202] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 70.776379][ T1200] UDC core: couldn't find an available UDC or it's busy: -16 [ 70.786795][ T1200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.826329][ T474] holtek_kbd 0003:04D9:A055.0002: item fetching failed at offset 5/7 [ 70.836085][ T474] holtek_kbd: probe of 0003:04D9:A055.0002 failed with error -22 [ 71.031479][ T332] usb 3-1: USB disconnect, device number 6 [ 71.085900][ T39] usb 1-1: 0:2 : does not exist [ 71.105683][ T39] usb 1-1: USB disconnect, device number 6 [ 71.555498][ T1237] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 71.566615][ T1237] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 71.615628][ T1189] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 71.775747][ T562] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.835667][ T474] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 71.835684][ T562] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 71.835708][ T562] usb 2-1: can't read configurations, error -71 [ 72.005678][ T1189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.016244][ T1189] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.031671][ T1189] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 72.045822][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.057893][ T1189] usb 4-1: config 0 descriptor?? [ 72.075779][ T474] usb 3-1: Using ep0 maxpacket: 8 [ 72.096173][ T1189] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 72.235689][ T562] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 72.365749][ T474] usb 3-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 72.384749][ T474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.404373][ T474] usb 3-1: Product: syz [ 72.413779][ T474] usb 3-1: Manufacturer: syz [ 72.418968][ T474] usb 3-1: SerialNumber: syz [ 72.440891][ T474] usb 3-1: config 0 descriptor?? [ 72.615711][ T562] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 72.627185][ T562] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.641054][ T562] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.651079][ T562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.660008][ T562] usb 2-1: config 0 descriptor?? [ 72.696222][ T562] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 72.785621][ T474] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.145663][ T474] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 73.157599][ T474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.169744][ T474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.180386][ T474] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 73.265749][ T474] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 73.276158][ T474] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 73.285194][ T474] usb 5-1: Manufacturer: syz [ 73.290995][ T474] usb 5-1: config 0 descriptor?? [ 73.322380][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 73.322392][ T30] audit: type=1400 audit(1754227507.021:561): avc: denied { read } for pid=1276 comm="syz.0.297" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.355217][ T30] audit: type=1400 audit(1754227507.021:562): avc: denied { open } for pid=1276 comm="syz.0.297" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.382923][ T30] audit: type=1400 audit(1754227507.021:563): avc: denied { ioctl } for pid=1276 comm="syz.0.297" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.416838][ T30] audit: type=1400 audit(1754227507.021:564): avc: denied { set_context_mgr } for pid=1276 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.440521][ T30] audit: type=1400 audit(1754227507.121:565): avc: denied { read } for pid=1281 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.474509][ T30] audit: type=1400 audit(1754227507.171:566): avc: denied { mount } for pid=1285 comm="syz.0.300" name="/" dev="ramfs" ino=20696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 73.735643][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 73.774853][ T1189] usb 3-1: USB disconnect, device number 7 [ 73.782808][ T30] audit: type=1400 audit(1754227507.491:567): avc: denied { ioctl } for pid=1289 comm="syz.2.301" path="socket:[20084]" dev="sockfs" ino=20084 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.788521][ T474] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 73.825053][ T474] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 73.836511][ T474] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 74.056111][ T39] usb 5-1: USB disconnect, device number 5 [ 74.135811][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.147947][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.158707][ T562] usb 4-1: USB disconnect, device number 15 [ 74.178948][ T30] audit: type=1400 audit(1754227507.881:568): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.215711][ T1189] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 74.235723][ T60] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.247391][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.257115][ T60] usb 1-1: SerialNumber: syz [ 74.536367][ T60] usb 1-1: 0:2 : does not exist [ 74.544061][ T60] usb 1-1: USB disconnect, device number 7 [ 74.565841][ T562] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 74.595771][ T1189] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 74.606721][ T1189] usb 3-1: config 0 has no interface number 0 [ 74.614368][ T1189] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 74.626431][ T1189] usb 3-1: config 0 interface 214 has no altsetting 0 [ 74.756167][ T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.772582][ T332] usb 2-1: USB disconnect, device number 12 [ 74.787717][ T1189] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 74.798019][ T1189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.807224][ T1189] usb 3-1: Product: syz [ 74.813584][ T1189] usb 3-1: Manufacturer: syz [ 74.819259][ T1189] usb 3-1: SerialNumber: syz [ 74.825496][ T1189] usb 3-1: config 0 descriptor?? [ 74.835804][ T562] usb 4-1: Using ep0 maxpacket: 32 [ 74.845849][ T1292] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 74.955701][ T562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.966869][ T562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.977975][ T562] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 74.987835][ T562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.999010][ T562] usb 4-1: config 0 descriptor?? [ 75.035664][ T30] audit: type=1400 audit(1754227508.731:569): avc: denied { rename } for pid=1310 comm="syz.0.310" name="file0" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.095699][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.205660][ T332] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 75.335701][ T1189] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 75.455772][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.468969][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.482225][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.485837][ T332] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 75.497957][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.497986][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.510104][ T562] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 75.520462][ T60] usb 5-1: config 0 descriptor?? [ 75.585843][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.597161][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.609568][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.695776][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.705810][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.715835][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.718567][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.731158][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.751589][ T1189] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 75.762219][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.784662][ T1189] usb 1-1: config 0 descriptor?? [ 75.791661][ T361] usb 4-1: USB disconnect, device number 16 [ 75.825815][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.836911][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.851281][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.935737][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.945786][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.959252][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.016760][ T60] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 76.026661][ T60] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 76.036492][ T60] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 76.057187][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.068197][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.080479][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.133527][ T60] usb 3-1: USB disconnect, device number 8 [ 76.165949][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.175521][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.188227][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.195770][ T30] audit: type=1400 audit(1754227509.891:570): avc: denied { write } for pid=1323 comm="syz.2.313" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.256385][ T1189] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 76.265217][ T1189] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 76.274221][ T1189] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 76.282505][ T1189] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 76.291571][ T1189] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 76.300494][ T1189] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 76.305803][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.309517][ T1189] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 76.319542][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.328780][ T1189] aureal 0003:0755:2626.0006: hidraw1: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 76.346243][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.368388][ T1189] usb 5-1: USB disconnect, device number 6 [ 76.436302][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.447825][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.465823][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.490031][ T361] usb 1-1: USB disconnect, device number 8 [ 76.615719][ T60] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 76.625876][ T332] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 76.636177][ T332] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 76.646956][ T332] usb 2-1: Product: syz [ 76.653774][ T332] usb 2-1: Manufacturer: syz [ 76.660175][ T332] usb 2-1: SerialNumber: syz [ 76.666491][ T332] usb 2-1: config 0 descriptor?? [ 76.725754][ T462] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 76.913572][ T361] usb 2-1: USB disconnect, device number 13 [ 76.975741][ T60] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 76.988561][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.002112][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.013732][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 77.085829][ T462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.097232][ T462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.108156][ T60] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 77.118141][ T462] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.132448][ T60] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 77.141066][ T60] usb 3-1: Manufacturer: syz [ 77.145709][ T332] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.146120][ T462] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.163368][ T462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.171792][ T60] usb 3-1: config 0 descriptor?? [ 77.177385][ T462] usb 4-1: config 0 descriptor?? [ 77.275742][ T562] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 77.506257][ T332] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 77.519940][ T562] usb 1-1: Using ep0 maxpacket: 8 [ 77.526443][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.540094][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.552236][ T332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 77.645785][ T562] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 77.646862][ T462] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 77.654144][ T332] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 77.663257][ T60] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 77.672765][ T562] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.682111][ T60] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 77.691045][ T332] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 77.700647][ T462] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 77.707855][ T562] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.723967][ T60] appleir 0003:05AC:8243.0008: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 77.735026][ T332] usb 5-1: Manufacturer: syz [ 77.756965][ T39] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 77.778623][ T562] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.792612][ T562] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.807917][ T332] usb 5-1: config 0 descriptor?? [ 77.813726][ T562] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.826976][ T562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.976224][ T462] usb 3-1: USB disconnect, device number 9 [ 78.025744][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 78.145730][ T39] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.156896][ T39] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.168752][ T39] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.185050][ T39] usb 2-1: config 1 interface 0 has no altsetting 0 [ 78.287376][ T332] appleir 0003:05AC:8243.0009: item fetching failed at offset 0/1 [ 78.296236][ T332] appleir 0003:05AC:8243.0009: parse failed [ 78.303219][ T332] appleir: probe of 0003:05AC:8243.0009 failed with error -22 [ 78.345736][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.355358][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.364597][ T39] usb 2-1: Product: syz [ 78.370043][ T39] usb 2-1: Manufacturer: syz [ 78.375677][ T39] usb 2-1: SerialNumber: syz [ 78.499357][ T562] usb 5-1: USB disconnect, device number 7 [ 78.636237][ T39] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 78.783402][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 78.783418][ T30] audit: type=1400 audit(1754227512.481:573): avc: denied { read write } for pid=1340 comm="syz.0.320" name="lp0" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 78.822258][ T30] audit: type=1400 audit(1754227512.481:574): avc: denied { open } for pid=1340 comm="syz.0.320" path="/dev/usb/lp0" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 78.852812][ T30] audit: type=1400 audit(1754227512.491:575): avc: denied { ioctl } for pid=1340 comm="syz.0.320" path="/dev/usb/lp0" dev="devtmpfs" ino=831 ioctlcmd=0x5b04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 79.069479][ T30] audit: type=1400 audit(1754227512.771:576): avc: denied { create } for pid=1362 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 79.375646][ T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.460047][ T462] usb 4-1: USB disconnect, device number 17 [ 79.745698][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.759505][ T60] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.771561][ T60] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 79.784609][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.796245][ T60] usb 5-1: config 0 descriptor?? [ 79.925669][ T462] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 80.011567][ T39] usb 1-1: USB disconnect, device number 9 [ 80.025598][ T30] audit: type=1400 audit(1754227513.721:577): avc: denied { nlmsg_read } for pid=1382 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.025837][ T1383] netlink: 104 bytes leftover after parsing attributes in process `syz.0.337'. [ 80.055111][ T361] usb 5-1: USB disconnect, device number 8 [ 80.126216][ T1387] overlayfs: failed to set xattr on upper [ 80.275766][ T60] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 80.472431][ T39] usb 2-1: USB disconnect, device number 14 [ 80.482158][ T39] usblp0: removed [ 80.495816][ T462] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 80.509149][ T462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.520793][ T462] usb 4-1: Product: syz [ 80.526605][ T462] usb 4-1: Manufacturer: syz [ 80.532717][ T462] usb 4-1: SerialNumber: syz [ 80.538599][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 80.546868][ T462] usb 4-1: config 0 descriptor?? [ 80.665733][ T60] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.687083][ T60] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.703913][ T60] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.713095][ T60] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 80.730290][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.743784][ T60] usb 3-1: config 0 descriptor?? [ 80.845714][ T39] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 80.885701][ T1189] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.999673][ T1395] overlayfs: empty lowerdir [ 81.006741][ T30] audit: type=1400 audit(1754227514.711:578): avc: denied { connect } for pid=1394 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.145638][ T1189] usb 5-1: Using ep0 maxpacket: 32 [ 81.215718][ T39] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 81.216541][ T60] kye 0003:0458:0138.000A: unknown main item tag 0x0 [ 81.224941][ T39] usb 2-1: config 0 has no interface number 0 [ 81.232611][ T60] kye 0003:0458:0138.000A: unknown main item tag 0x0 [ 81.239716][ T39] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 81.247569][ T60] kye 0003:0458:0138.000A: unknown main item tag 0x0 [ 81.261651][ T39] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 81.270865][ T60] kye 0003:0458:0138.000A: bogus close delimiter [ 81.299934][ T1189] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.313952][ T60] kye 0003:0458:0138.000A: item 0 2 2 10 parsing failed [ 81.328119][ T60] kye 0003:0458:0138.000A: parse failed [ 81.337502][ T60] kye: probe of 0003:0458:0138.000A failed with error -22 [ 81.452593][ T332] usb 3-1: USB disconnect, device number 10 [ 81.462279][ T39] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.478125][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.485800][ T1189] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.489173][ T39] usb 2-1: Product: syz [ 81.499894][ T1189] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.505200][ T39] usb 2-1: Manufacturer: syz [ 81.514556][ T1189] usb 5-1: Product: syz [ 81.520795][ T39] usb 2-1: SerialNumber: syz [ 81.528533][ T1189] usb 5-1: Manufacturer: syz [ 81.535508][ T39] usb 2-1: config 0 descriptor?? [ 81.545740][ T1189] usb 5-1: SerialNumber: syz [ 81.554787][ T1189] usb 5-1: config 0 descriptor?? [ 81.565906][ T1391] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.574314][ T1391] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.585953][ T1393] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 81.586639][ T39] smsc95xx v2.0.0 [ 81.616156][ T1189] hub 5-1:0.0: bad descriptor, ignoring hub [ 81.623743][ T1189] hub: probe of 5-1:0.0 failed with error -5 [ 81.795069][ T1391] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.804876][ T1391] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.035766][ T39] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 82.048915][ T39] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.095743][ T332] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 82.224673][ T1393] UDC core: couldn't find an available UDC or it's busy: -16 [ 82.233448][ T1393] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.242904][ T1393] UDC core: couldn't find an available UDC or it's busy: -16 [ 82.251764][ T1393] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.260798][ T1189] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 82.335696][ T332] usb 1-1: Using ep0 maxpacket: 32 [ 82.455722][ T332] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 82.466426][ T332] usb 1-1: config 0 has no interface number 0 [ 82.540112][ T562] usb 4-1: USB disconnect, device number 18 [ 82.551675][ T1189] usb 3-1: Using ep0 maxpacket: 16 [ 82.585893][ T26] usb 5-1: USB disconnect, device number 9 [ 82.625749][ T332] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 82.637147][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.649717][ T332] usb 1-1: Product: syz [ 82.655733][ T332] usb 1-1: Manufacturer: syz [ 82.661774][ T332] usb 1-1: SerialNumber: syz [ 82.671487][ T332] usb 1-1: config 0 descriptor?? [ 82.705768][ T1189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.726436][ T332] smsc95xx v2.0.0 [ 82.745766][ T39] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 82.758946][ T39] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 82.875745][ T1189] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 82.886863][ T1189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.896437][ T1189] usb 3-1: Product: syz [ 82.902121][ T1189] usb 3-1: Manufacturer: syz [ 82.907740][ T1189] usb 3-1: SerialNumber: syz [ 82.914375][ T1189] usb 3-1: config 0 descriptor?? [ 83.005714][ T562] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 83.455755][ T1189] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.535752][ T562] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.548079][ T562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.558073][ T562] usb 4-1: Product: syz [ 83.563603][ T562] usb 4-1: Manufacturer: syz [ 83.569277][ T562] usb 4-1: SerialNumber: syz [ 83.575899][ T562] usb 4-1: config 0 descriptor?? [ 83.715685][ T1189] usb 5-1: Using ep0 maxpacket: 8 [ 83.738412][ T562] usb 2-1: USB disconnect, device number 15 [ 83.825740][ T332] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 83.839142][ T332] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 83.865756][ T332] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 83.879687][ T332] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 83.889546][ T332] usb 1-1: USB disconnect, device number 10 [ 84.025807][ T1189] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 84.037048][ T1189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.046920][ T1189] usb 5-1: Product: syz [ 84.051813][ T1189] usb 5-1: Manufacturer: syz [ 84.057013][ T1189] usb 5-1: SerialNumber: syz [ 84.062795][ T1189] usb 5-1: config 0 descriptor?? [ 84.145740][ T562] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 84.217948][ T1189] usb 3-1: USB disconnect, device number 11 [ 84.686920][ T562] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.697879][ T562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.709042][ T562] usb 2-1: Product: syz [ 84.714564][ T562] usb 2-1: Manufacturer: syz [ 84.720352][ T562] usb 2-1: SerialNumber: syz [ 84.727498][ T562] usb 2-1: config 0 descriptor?? [ 84.885411][ T562] usb 4-1: USB disconnect, device number 19 [ 85.235466][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.305771][ T562] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 85.369598][ T1189] usb 5-1: USB disconnect, device number 10 [ 85.545682][ T562] usb 4-1: Using ep0 maxpacket: 32 [ 85.565755][ T332] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 85.665759][ T562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.680635][ T562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.694562][ T562] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.706472][ T562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.718382][ T562] usb 4-1: config 0 descriptor?? [ 85.915685][ T26] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 85.945772][ T332] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 85.959274][ T332] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 85.972363][ T332] usb 1-1: config 220 has no interface number 2 [ 85.980254][ T332] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 85.998199][ T332] usb 1-1: config 220 interface 0 has no altsetting 0 [ 86.007229][ T332] usb 1-1: config 220 interface 76 has no altsetting 0 [ 86.017318][ T332] usb 1-1: config 220 interface 1 has no altsetting 0 [ 86.177835][ T562] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 86.191182][ T332] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 86.202647][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.214338][ T332] usb 1-1: Product: syz [ 86.232789][ T332] usb 1-1: Manufacturer: syz [ 86.235243][ T1457] binder: BINDER_SET_CONTEXT_MGR already set [ 86.238000][ T332] usb 1-1: SerialNumber: syz [ 86.246490][ T1457] binder: 1456:1457 ioctl 4018620d 200000000040 returned -16 [ 86.285908][ T26] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.296336][ T26] usb 3-1: config 0 has no interface number 0 [ 86.304289][ T26] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 86.317482][ T26] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 86.446301][ T60] usb 4-1: USB disconnect, device number 20 [ 86.485734][ T26] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.495842][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.505167][ T26] usb 3-1: Product: syz [ 86.510377][ T26] usb 3-1: Manufacturer: syz [ 86.515495][ T26] usb 3-1: SerialNumber: syz [ 86.521839][ T26] usb 3-1: config 0 descriptor?? [ 86.545686][ T1189] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 86.545741][ T1452] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 86.562535][ T1452] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 86.586070][ T26] smsc95xx v2.0.0 [ 86.759784][ T60] usb 2-1: USB disconnect, device number 16 [ 86.789088][ T1452] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 86.798652][ T1452] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 86.965725][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.979395][ T1189] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.990265][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.000391][ T1189] usb 5-1: config 0 descriptor?? [ 87.045672][ T26] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 87.060085][ T26] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.175649][ T60] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 87.245664][ T361] Bluetooth: hci0: command 0x1003 tx timeout [ 87.253407][ T357] Bluetooth: hci0: sending frame failed (-49) [ 87.466337][ T1189] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 87.479526][ T1189] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000C/input/input6 [ 87.555706][ T60] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.569295][ T60] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.580753][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.591971][ T1189] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 87.608591][ T60] usb 2-1: config 0 descriptor?? [ 87.745794][ T26] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 87.760937][ T26] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 88.075869][ T60] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 88.325621][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 88.455791][ T60] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 88.466978][ T60] usb 4-1: config 0 has no interface number 0 [ 88.473965][ T60] usb 4-1: config 0 interface 12 has no altsetting 0 [ 88.655814][ T60] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 88.667681][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.677910][ T60] usb 4-1: Product: syz [ 88.686249][ T60] usb 4-1: Manufacturer: syz [ 88.692969][ T60] usb 4-1: SerialNumber: syz [ 88.702799][ T60] usb 4-1: config 0 descriptor?? [ 88.750702][ T26] usb 3-1: USB disconnect, device number 12 [ 88.764661][ T30] audit: type=1400 audit(1754227522.461:579): avc: denied { block_suspend } for pid=1475 comm="syz.2.367" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.931458][ T1189] usb 2-1: USB disconnect, device number 17 [ 89.279891][ T60] usb 5-1: USB disconnect, device number 11 [ 89.325910][ T462] Bluetooth: hci0: command 0x1001 tx timeout [ 89.332590][ T357] Bluetooth: hci0: sending frame failed (-49) [ 89.400891][ T1499] kvm: pic: non byte write [ 89.407716][ T1499] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 89.465626][ T1189] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 89.715686][ T462] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 89.825824][ T1189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.839246][ T1189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 89.853177][ T1189] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 89.868557][ T1189] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 89.955740][ T462] usb 3-1: Using ep0 maxpacket: 32 [ 90.009698][ T292] usb 4-1: USB disconnect, device number 21 [ 90.046127][ T1189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.059924][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.071246][ T1189] usb 2-1: Product: syz [ 90.077433][ T1189] usb 2-1: Manufacturer: syz [ 90.084717][ T1189] usb 2-1: SerialNumber: syz [ 90.105734][ T462] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 90.105791][ T1484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.115306][ T462] usb 3-1: config 0 has no interface number 0 [ 90.131543][ T1189] cdc_mbim 2-1:1.0: skipping garbage [ 90.138599][ T462] usb 3-1: config 0 interface 184 has no altsetting 0 [ 90.215865][ T30] audit: type=1400 audit(1754227523.911:580): avc: denied { write } for pid=1517 comm="syz.4.384" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.245653][ T30] audit: type=1400 audit(1754227523.921:581): avc: denied { ioctl } for pid=1517 comm="syz.4.384" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.340177][ T1484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.345822][ T462] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 90.349077][ T1484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.359529][ T462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.367618][ T292] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 90.376780][ T462] usb 3-1: Product: syz [ 90.392262][ T462] usb 3-1: Manufacturer: syz [ 90.399693][ T462] usb 3-1: SerialNumber: syz [ 90.406685][ T462] usb 3-1: config 0 descriptor?? [ 90.456202][ T462] smsc75xx v1.0.0 [ 90.635756][ T292] usb 4-1: Using ep0 maxpacket: 16 [ 90.755756][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.769203][ T292] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 90.783623][ T292] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 90.794516][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.804340][ T292] usb 4-1: config 0 descriptor?? [ 91.036192][ T1484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.043737][ T1484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.065749][ T1189] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 91.073502][ T1189] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 91.081709][ T1189] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 8a:29:ee:f1:e7:73 [ 91.103183][ T30] audit: type=1400 audit(1754227524.801:582): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 91.126420][ T30] audit: type=1400 audit(1754227524.801:583): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.151175][ T30] audit: type=1400 audit(1754227524.801:584): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=3252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.176249][ T30] audit: type=1400 audit(1754227524.801:585): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.203230][ T30] audit: type=1400 audit(1754227524.801:586): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.208694][ T140] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 91.230236][ T30] audit: type=1400 audit(1754227524.831:587): avc: denied { read } for pid=1521 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.268502][ T292] hid-generic 0003:057E:2019.000D: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 91.282024][ T30] audit: type=1400 audit(1754227524.831:588): avc: denied { open } for pid=1521 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.292762][ T1189] usb 2-1: USB disconnect, device number 18 [ 91.319648][ T1189] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 91.405925][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 91.645908][ T332] usb 1-1: selecting invalid altsetting 0 [ 91.653998][ T332] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 91.662528][ T332] usb 1-1: No valid video chain found. [ 91.673108][ T1189] usb 4-1: USB disconnect, device number 22 [ 91.755706][ T462] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 91.769474][ T462] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 91.795826][ T462] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 91.808690][ T462] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 91.819595][ T462] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 91.832588][ T462] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 91.844121][ T462] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 91.854300][ T462] usb 3-1: USB disconnect, device number 13 [ 91.872128][ T1564] ================================================================== [ 91.881993][ T1564] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 91.892784][ T1564] Read of size 1 at addr ffff88810f8693f8 by task syz.1.386/1564 [ 91.901599][ T1564] [ 91.918096][ T1564] CPU: 0 PID: 1564 Comm: syz.1.386 Tainted: G W 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 91.934356][ T1564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.947635][ T1564] Call Trace: [ 91.953670][ T1564] [ 91.959414][ T1564] __dump_stack+0x21/0x30 [ 91.964604][ T1564] dump_stack_lvl+0xee/0x150 [ 91.971692][ T1564] ? show_regs_print_info+0x20/0x20 [ 91.979121][ T1564] ? load_image+0x3a0/0x3a0 [ 91.989860][ T1564] ? unwind_get_return_address+0x4d/0x90 [ 92.000807][ T1564] print_address_description+0x7f/0x2c0 [ 92.007631][ T1564] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 92.019213][ T1564] kasan_report+0xf1/0x140 [ 92.026710][ T1564] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 92.040920][ T1564] __asan_report_load1_noabort+0x14/0x20 [ 92.047972][ T1564] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 92.055824][ T1564] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 92.065254][ T1564] ? xfrm_netlink_rcv+0x72/0x90 [ 92.071435][ T1564] ? netlink_unicast+0x876/0xa40 [ 92.078617][ T1564] ? netlink_sendmsg+0x86a/0xb70 [ 92.084574][ T1564] ? ____sys_sendmsg+0x5a2/0x8c0 [ 92.090191][ T1564] ? ___sys_sendmsg+0x1f0/0x260 [ 92.095357][ T1564] ? x64_sys_call+0x4b/0x9a0 [ 92.101496][ T1564] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.108287][ T1564] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 92.116344][ T1564] xfrm_policy_inexact_insert+0x70/0x1130 [ 92.123030][ T1564] ? __get_hash_thresh+0x10c/0x420 [ 92.129067][ T1564] ? policy_hash_bysel+0x110/0x4f0 [ 92.134715][ T1564] xfrm_policy_insert+0x126/0x9a0 [ 92.140829][ T1564] ? xfrm_policy_construct+0x54f/0x1f00 [ 92.148031][ T1564] xfrm_add_policy+0x4d1/0x830 [ 92.155053][ T1564] ? xfrm_dump_sa_done+0xc0/0xc0 [ 92.160766][ T1564] xfrm_user_rcv_msg+0x45c/0x6e0 [ 92.166975][ T1564] ? xfrm_netlink_rcv+0x90/0x90 [ 92.173785][ T1564] ? avc_has_perm_noaudit+0x460/0x460 [ 92.180029][ T1564] ? x64_sys_call+0x4b/0x9a0 [ 92.185425][ T1564] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 92.192198][ T1564] netlink_rcv_skb+0x1e0/0x430 [ 92.198671][ T1564] ? xfrm_netlink_rcv+0x90/0x90 [ 92.205119][ T1564] ? netlink_ack+0xb60/0xb60 [ 92.210436][ T1564] ? wait_for_completion_killable_timeout+0x10/0x10 [ 92.218351][ T1564] ? __netlink_lookup+0x387/0x3b0 [ 92.225006][ T1564] xfrm_netlink_rcv+0x72/0x90 [ 92.230312][ T1564] netlink_unicast+0x876/0xa40 [ 92.235647][ T1564] netlink_sendmsg+0x86a/0xb70 [ 92.241614][ T1564] ? netlink_getsockopt+0x530/0x530 [ 92.247569][ T1564] ? security_socket_sendmsg+0x82/0xa0 [ 92.254261][ T1564] ? netlink_getsockopt+0x530/0x530 [ 92.260381][ T1564] ____sys_sendmsg+0x5a2/0x8c0 [ 92.265943][ T1564] ? __sys_sendmsg_sock+0x40/0x40 [ 92.272119][ T1564] ? import_iovec+0x7c/0xb0 [ 92.277187][ T1564] ___sys_sendmsg+0x1f0/0x260 [ 92.282341][ T1564] ? __sys_sendmsg+0x250/0x250 [ 92.288197][ T1564] ? __fdget+0x1a1/0x230 [ 92.293835][ T1564] __x64_sys_sendmsg+0x1e2/0x2a0 [ 92.300059][ T1564] ? ___sys_sendmsg+0x260/0x260 [ 92.305754][ T1564] ? __kasan_check_write+0x14/0x20 [ 92.311511][ T1564] ? switch_fpu_return+0x15d/0x2c0 [ 92.317821][ T1564] x64_sys_call+0x4b/0x9a0 [ 92.324555][ T1564] do_syscall_64+0x4c/0xa0 [ 92.330540][ T1564] ? clear_bhb_loop+0x50/0xa0 [ 92.337219][ T1564] ? clear_bhb_loop+0x50/0xa0 [ 92.342562][ T1564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.350621][ T1564] RIP: 0033:0x7f7d41629b69 [ 92.357086][ T1564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.382163][ T1564] RSP: 002b:00007f7d3fc92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.392925][ T1564] RAX: ffffffffffffffda RBX: 00007f7d41850fa0 RCX: 00007f7d41629b69 [ 92.402424][ T1564] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004 [ 92.411213][ T1564] RBP: 00007f7d416acdf1 R08: 0000000000000000 R09: 0000000000000000 [ 92.421959][ T1564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.431902][ T1564] R13: 0000000000000000 R14: 00007f7d41850fa0 R15: 00007ffd9fb1a0d8 [ 92.441677][ T1564] [ 92.445189][ T1564] [ 92.448764][ T1564] Allocated by task 1564: [ 92.454063][ T1564] __kasan_kmalloc+0xda/0x110 [ 92.460607][ T1564] __kmalloc+0x13d/0x2c0 [ 92.468663][ T1564] sk_prot_alloc+0xed/0x320 [ 92.477986][ T1564] sk_alloc+0x38/0x430 [ 92.483496][ T1564] pfkey_create+0x12a/0x660 [ 92.488172][ T1564] __sock_create+0x38d/0x7a0 [ 92.494375][ T1564] __sys_socket+0xec/0x190 [ 92.502093][ T1564] __x64_sys_socket+0x7a/0x90 [ 92.513001][ T1564] x64_sys_call+0x8c5/0x9a0 [ 92.520597][ T1564] do_syscall_64+0x4c/0xa0 [ 92.526883][ T1564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.537212][ T1564] [ 92.540366][ T1564] The buggy address belongs to the object at ffff88810f869000 [ 92.540366][ T1564] which belongs to the cache kmalloc-1k of size 1024 [ 92.559460][ T1564] The buggy address is located 1016 bytes inside of [ 92.559460][ T1564] 1024-byte region [ffff88810f869000, ffff88810f869400) [ 92.579254][ T1564] The buggy address belongs to the page: [ 92.586365][ T1564] page:ffffea00043e1a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f868 [ 92.599667][ T1564] head:ffffea00043e1a00 order:3 compound_mapcount:0 compound_pincount:0 [ 92.611403][ T1564] flags: 0x4000000000010200(slab|head|zone=1) [ 92.620395][ T1564] raw: 4000000000010200 0000000000000000 0000000f00000001 ffff888100043080 [ 92.630771][ T1564] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 92.642794][ T1564] page dumped because: kasan: bad access detected [ 92.650898][ T1564] page_owner tracks the page as allocated [ 92.658794][ T1564] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 101, ts 6997723477, free_ts 0 [ 92.683951][ T1564] post_alloc_hook+0x192/0x1b0 [ 92.689497][ T1564] prep_new_page+0x1c/0x110 [ 92.694696][ T1564] get_page_from_freelist+0x2cc5/0x2d50 [ 92.701646][ T1564] __alloc_pages+0x18f/0x440 [ 92.706962][ T1564] new_slab+0xa1/0x4d0 [ 92.715111][ T1564] ___slab_alloc+0x381/0x810 [ 92.720692][ T1564] __slab_alloc+0x49/0x90 [ 92.725626][ T1564] __kmalloc_track_caller+0x169/0x2c0 [ 92.732836][ T1564] __alloc_skb+0x21a/0x740 [ 92.738063][ T1564] netlink_sendmsg+0x602/0xb70 [ 92.745932][ T1564] ____sys_sendmsg+0x5a2/0x8c0 [ 92.752807][ T1564] ___sys_sendmsg+0x1f0/0x260 [ 92.758791][ T1564] __x64_sys_sendmsg+0x1e2/0x2a0 [ 92.765270][ T1564] x64_sys_call+0x4b/0x9a0 [ 92.770467][ T1564] do_syscall_64+0x4c/0xa0 [ 92.776160][ T1564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.783368][ T1564] page_owner free stack trace missing [ 92.789782][ T1564] [ 92.792485][ T1564] Memory state around the buggy address: [ 92.800360][ T1564] ffff88810f869280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.810523][ T1564] ffff88810f869300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.820839][ T1564] >ffff88810f869380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 92.831479][ T1564] ^ [ 92.842153][ T1564] ffff88810f869400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.852339][ T1564] ffff88810f869480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.862765][ T1564] ================================================================== [ 92.872600][ T1564] Disabling lock debugging due to kernel taint [ 95.808246][ T1189] usb 1-1: USB disconnect, device number 11