last executing test programs: 3.85629469s ago: executing program 2 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0x7, 0x1, 0x7, 0x2, 0x8, 0xd7e, 0x6}, {0x1, 0x80000000, 0x2, 0x0, 0x10001, 0x8, 0x5}, {0x7, 0x5, 0x2, 0xae97, 0x0, 0x1ff, 0xfff}]}) 3.715987482s ago: executing program 2 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x34, r1, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}]}, 0x34}}, 0x0) 3.707647582s ago: executing program 2 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 3.60635048s ago: executing program 2 (id=111): r0 = syz_usb_connect(0x0, 0x28, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x33, 0xcc, 0x99, 0x20, 0x1b3d, 0x1a6, 0x2c6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0xf6, 0xdb, 0x78, 0x0, [@generic={0x2, 0xd}, @generic={0x2}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0x23, 0x2, {0x2, 0x30}}, 0x0}, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x0, 0xb, 0x4, "03f26a59"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0x18, 0x2, "1036"}, 0x0, 0x0, 0x0, 0x0}) 1.927908695s ago: executing program 1 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x2}) 1.87720316s ago: executing program 1 (id=128): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX]) 1.792100006s ago: executing program 1 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff5f, &(0x7f0000000200)={&(0x7f0000000e40)={0x70, r1, 0xc4fc9e906872338b, 0x70bd29, 0xffffffff, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0xc}}}}, [@NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x75}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_NOACK={0x0, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x0, 0x11d, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL, @NL80211_TID_CONFIG_ATTR_TIDS={0x0, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x0, 0xb, 0x1}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x0, 0x5, 0xd1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE, @NL80211_TID_CONFIG_ATTR_OVERRIDE]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x0, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x0, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, @NL80211_TID_CONFIG_ATTR_TIDS={0x0, 0x5, 0xfe}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x20048980) 1.791921906s ago: executing program 1 (id=130): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.738294941s ago: executing program 1 (id=132): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.697873034s ago: executing program 1 (id=133): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.603921901s ago: executing program 0 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1dc}}, 0x0) 1.560109244s ago: executing program 0 (id=135): syz_usb_connect$cdc_ecm(0x5, 0x55, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x82, {{0x5}, {0x5, 0x24, 0x0, 0x337}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x8, 0x1}, [@mdlm_detail={0x4, 0x24, 0x13, 0x9d}, @mdlm_detail={0x4, 0x24, 0x13, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xf8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x5, 0x4}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 555.969095ms ago: executing program 2 (id=138): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x800001}, 0x1c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000200)) 549.185576ms ago: executing program 3 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861657329000000000000000000000000000000000000000000000000140000e4"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 533.853597ms ago: executing program 3 (id=142): unshare(0x20000400) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 472.146552ms ago: executing program 3 (id=143): timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r0, &(0x7f0000000240)) 471.949192ms ago: executing program 3 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 412.915247ms ago: executing program 3 (id=145): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000680)={{{0x1, 0x1}}, 0x20, 0x0, 0x0}) 397.496088ms ago: executing program 0 (id=146): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) 331.946484ms ago: executing program 3 (id=147): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 324.921814ms ago: executing program 0 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 236.211701ms ago: executing program 0 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000400)={0xa3, 0x0, &(0x7f00000003c0)}) 102.188262ms ago: executing program 0 (id=150): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 0s ago: executing program 2 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. [ 24.632567][ T36] audit: type=1400 audit(1754776776.920:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.633992][ T282] cgroup: Unknown subsys name 'net' [ 24.655253][ T36] audit: type=1400 audit(1754776776.920:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.682512][ T36] audit: type=1400 audit(1754776776.950:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.682739][ T282] cgroup: Unknown subsys name 'devices' [ 24.869847][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.875455][ T282] cgroup: Unknown subsys name 'rlimit' [ 25.030198][ T36] audit: type=1400 audit(1754776777.320:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.053541][ T36] audit: type=1400 audit(1754776777.320:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.064162][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.078470][ T36] audit: type=1400 audit(1754776777.320:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.110019][ T36] audit: type=1400 audit(1754776777.370:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.135768][ T36] audit: type=1400 audit(1754776777.370:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.165463][ T36] audit: type=1400 audit(1754776777.450:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.191074][ T36] audit: type=1400 audit(1754776777.450:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.191106][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.033661][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.040746][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.047862][ T289] bridge_slave_0: entered allmulticast mode [ 26.054130][ T289] bridge_slave_0: entered promiscuous mode [ 26.069610][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.076659][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.083821][ T289] bridge_slave_1: entered allmulticast mode [ 26.090213][ T289] bridge_slave_1: entered promiscuous mode [ 26.109361][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.116425][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.123594][ T290] bridge_slave_0: entered allmulticast mode [ 26.129846][ T290] bridge_slave_0: entered promiscuous mode [ 26.136413][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.143505][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.150585][ T290] bridge_slave_1: entered allmulticast mode [ 26.156946][ T290] bridge_slave_1: entered promiscuous mode [ 26.188651][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.195720][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.202840][ T291] bridge_slave_0: entered allmulticast mode [ 26.209130][ T291] bridge_slave_0: entered promiscuous mode [ 26.218637][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.225675][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.232821][ T291] bridge_slave_1: entered allmulticast mode [ 26.239085][ T291] bridge_slave_1: entered promiscuous mode [ 26.276350][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.283448][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.290590][ T292] bridge_slave_0: entered allmulticast mode [ 26.296813][ T292] bridge_slave_0: entered promiscuous mode [ 26.303237][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.310293][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.317355][ T292] bridge_slave_1: entered allmulticast mode [ 26.323726][ T292] bridge_slave_1: entered promiscuous mode [ 26.479813][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.486888][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.494227][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.501266][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.513354][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.520439][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.527794][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.534867][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.546635][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.553707][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.561001][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.568052][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.590431][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.597522][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.604805][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.611869][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.647486][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.654744][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.662766][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.670196][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.677375][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.684614][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.692225][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.699488][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.711819][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.718890][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.726622][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.733677][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.757151][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.764213][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.772628][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.779688][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.802224][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.809290][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.817018][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.824093][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.859554][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.866612][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.874325][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.881383][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.891885][ T290] veth0_vlan: entered promiscuous mode [ 26.906747][ T289] veth0_vlan: entered promiscuous mode [ 26.928317][ T291] veth0_vlan: entered promiscuous mode [ 26.942087][ T289] veth1_macvtap: entered promiscuous mode [ 26.949981][ T290] veth1_macvtap: entered promiscuous mode [ 26.983053][ T291] veth1_macvtap: entered promiscuous mode [ 27.011869][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.032972][ T292] veth0_vlan: entered promiscuous mode [ 27.059208][ T292] veth1_macvtap: entered promiscuous mode [ 27.078372][ T335] usb usb4: usbfs: process 335 (syz.2.3) did not claim interface 0 before use [ 27.143570][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.235381][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.262523][ T356] rust_binder: Got transaction with invalid offset. [ 27.262607][ T356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.269513][ T356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 27.281273][ T349] process 'syz.3.5' launched './file0' with NULL argv: empty string added [ 27.398622][ T363] kvm: pic: level sensitive irq not supported [ 27.398728][ T363] kvm: pic: non byte read [ 27.409415][ T363] kvm: pic: level sensitive irq not supported [ 27.409467][ T363] kvm: pic: non byte read [ 27.420301][ T363] kvm: pic: level sensitive irq not supported [ 27.420369][ T363] kvm: pic: non byte read [ 27.431314][ T363] kvm: pic: level sensitive irq not supported [ 27.431356][ T363] kvm: pic: non byte read [ 27.442395][ T363] kvm: pic: level sensitive irq not supported [ 27.442437][ T363] kvm: pic: non byte read [ 27.453112][ T363] kvm: pic: level sensitive irq not supported [ 27.453166][ T363] kvm: pic: non byte read [ 27.463900][ T363] kvm: pic: level sensitive irq not supported [ 27.463941][ T363] kvm: pic: non byte read [ 27.474767][ T363] kvm: pic: level sensitive irq not supported [ 27.474805][ T363] kvm: pic: non byte read [ 27.485477][ T363] kvm: pic: level sensitive irq not supported [ 27.485521][ T363] kvm: pic: non byte read [ 27.737499][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.897631][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 27.904020][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.914343][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.925438][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 27.927462][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.939362][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.956043][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.965653][ T10] usb 3-1: SerialNumber: syz [ 27.972608][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 27.978581][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 27.985977][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 28.097509][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 28.103990][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.114860][ T45] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 28.123415][ T45] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 28.133855][ T45] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 28.143020][ T45] usb 4-1: config 128 has no interface number 0 [ 28.149524][ T45] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 28.161097][ T45] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33851, setting to 1024 [ 28.177454][ T45] usb 4-1: config 128 interface 127 has no altsetting 0 [ 28.186041][ T378] kvm: pic: non byte write [ 28.193043][ T45] usb 4-1: string descriptor 0 read error: -22 [ 28.202021][ T45] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 28.211298][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.220216][ T369] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.235952][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.307609][ T31] usb 3-1: USB disconnect, device number 2 [ 28.440113][ T61] usb 4-1: USB disconnect, device number 2 [ 28.715686][ T385] rust_binder: Write failure EINVAL in pid:11 [ 28.716571][ T385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 28.722839][ T385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:11 [ 29.170123][ T397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.230585][ T401] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.307481][ T353] Bluetooth: hci0: command 0x1003 tx timeout [ 29.313699][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.342073][ T411] tipc: Started in network mode [ 29.347053][ T411] tipc: Node identity 96e75729cede, cluster identity 4711 [ 29.354734][ T411] tipc: Enabled bearer , priority 0 [ 29.384386][ T411] syzkaller0: entered promiscuous mode [ 29.390024][ T411] syzkaller0: entered allmulticast mode [ 29.397214][ T411] tipc: Resetting bearer [ 29.405694][ T409] tipc: Resetting bearer [ 29.417202][ T409] tipc: Disabling bearer [ 29.627932][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.720619][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 29.720637][ T36] audit: type=1400 audit(1754776782.010:150): avc: denied { create } for pid=433 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.778575][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.789719][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.799536][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=003d, bcdDevice= 0.00 [ 29.808726][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.817514][ T45] usb 1-1: config 0 descriptor?? [ 29.840436][ T36] audit: type=1400 audit(1754776782.130:151): avc: denied { append } for pid=437 comm="syz.2.42" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.228231][ T45] wacom 0003:056A:003D.0001: unknown main item tag 0x6 [ 30.235758][ T45] wacom 0003:056A:003D.0001: Unknown device_type for 'HID 056a:003d'. Ignoring. [ 30.289173][ T448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 30.289207][ T448] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.297257][ T444] kvm: pic: single mode not supported [ 30.298432][ T448] rust_binder: Read failure Err(EFAULT) in pid:31 [ 30.306521][ T444] kvm: pic: level sensitive irq not supported [ 30.420508][ T36] audit: type=1400 audit(1754776782.710:152): avc: denied { bind } for pid=454 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.456769][ T31] usb 1-1: USB disconnect, device number 2 [ 30.479023][ T36] audit: type=1400 audit(1754776782.770:153): avc: denied { read } for pid=457 comm="syz.1.50" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.509812][ T36] audit: type=1400 audit(1754776782.790:154): avc: denied { open } for pid=457 comm="syz.1.50" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.612632][ T472] incfs: Options parsing error. -22 [ 30.617991][ T472] incfs: mount failed -22 [ 30.867497][ T61] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.978837][ T477] capability: warning: `syz.0.58' uses deprecated v2 capabilities in a way that may be insecure [ 31.003890][ T36] audit: type=1400 audit(1754776783.290:155): avc: denied { read write } for pid=478 comm="syz.0.59" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.027086][ T61] usb 2-1: Using ep0 maxpacket: 8 [ 31.027930][ T36] audit: type=1400 audit(1754776783.290:156): avc: denied { open } for pid=478 comm="syz.0.59" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.034159][ T61] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 31.064009][ T61] usb 2-1: config 0 has no interface number 0 [ 31.069913][ T36] audit: type=1400 audit(1754776783.290:157): avc: denied { ioctl } for pid=478 comm="syz.0.59" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.100488][ T61] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 31.109744][ T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.117821][ T61] usb 2-1: Product: syz [ 31.119079][ T36] audit: type=1400 audit(1754776783.410:158): avc: denied { write } for pid=482 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.122211][ T61] usb 2-1: Manufacturer: syz [ 31.146384][ T61] usb 2-1: SerialNumber: syz [ 31.153494][ T61] usb 2-1: config 0 descriptor?? [ 31.160656][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.333598][ T36] audit: type=1400 audit(1754776783.620:159): avc: denied { read } for pid=488 comm="syz.3.64" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.364225][ T61] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 31.370924][ T61] usb 2-1: No streaming interface found for terminal 6. [ 31.574824][ T45] usb 2-1: USB disconnect, device number 2 [ 31.797547][ T61] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.949363][ T61] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.957755][ T61] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.968281][ T61] usb 4-1: config 220 has no interface number 2 [ 31.974604][ T61] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.987941][ T61] usb 4-1: config 220 interface 0 has no altsetting 0 [ 31.994797][ T61] usb 4-1: config 220 interface 76 has no altsetting 0 [ 32.001718][ T61] usb 4-1: config 220 interface 1 has no altsetting 0 [ 32.010006][ T61] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 32.019145][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.027140][ T61] usb 4-1: Product: syz [ 32.031865][ T61] usb 4-1: Manufacturer: syz [ 32.036510][ T61] usb 4-1: SerialNumber: syz [ 32.249236][ T61] usb 4-1: selecting invalid altsetting 0 [ 32.265221][ T61] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 32.285261][ T61] usb 4-1: No valid video chain found. [ 32.305949][ T61] usb 4-1: USB disconnect, device number 3 [ 32.497683][ T522] incfs_lookup_dentry err:-5 [ 32.502324][ T522] incfs: Can't find or create .index dir in ./file0 [ 32.511538][ T522] incfs: mount failed -5 [ 32.653366][ T539] Zero length message leads to an empty skb [ 32.763116][ T541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.227523][ T353] Bluetooth: hci0: command 0x1003 tx timeout [ 33.227517][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.487473][ T337] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.666400][ T337] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.679038][ T337] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 33.686601][ T337] usb 1-1: can't read configurations, error -71 [ 33.697472][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.733992][ T569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 34.267456][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 34.276070][ T10] usb 2-1: config 1 has an invalid interface number: 129 but max is 2 [ 34.285262][ T10] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 34.296297][ T10] usb 2-1: config 1 has no interface number 3 [ 34.302567][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.314758][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.328717][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 34.338609][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 34.346691][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.356135][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.364517][ T10] usb 2-1: Product: syz [ 34.368852][ T10] usb 2-1: Manufacturer: syz [ 34.373536][ T10] usb 2-1: SerialNumber: syz [ 34.404345][ T592] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 34.604807][ T10] usb 2-1: USB disconnect, device number 3 [ 34.691154][ T606] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.691179][ T606] rust_binder: Read failure Err(EFAULT) in pid:60 [ 34.732285][ T36] kauditd_printk_skb: 1403 callbacks suppressed [ 34.732303][ T36] audit: type=1326 audit(1754776787.010:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.768353][ T36] audit: type=1326 audit(1754776787.020:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.777485][ T337] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.791623][ T61] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.806609][ T36] audit: type=1326 audit(1754776787.020:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.830589][ T36] audit: type=1326 audit(1754776787.020:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.853840][ T36] audit: type=1326 audit(1754776787.020:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.877038][ T36] audit: type=1326 audit(1754776787.020:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.900503][ T36] audit: type=1326 audit(1754776787.020:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.923732][ T36] audit: type=1326 audit(1754776787.020:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.947666][ T36] audit: type=1326 audit(1754776787.020:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.970932][ T36] audit: type=1326 audit(1754776787.020:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bd78ebe9 code=0x7fc00000 [ 34.997494][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 35.003806][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.007473][ T61] usb 3-1: Using ep0 maxpacket: 32 [ 35.015136][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.028104][ T61] usb 3-1: config 0 has an invalid interface number: 90 but max is 0 [ 35.037661][ T61] usb 3-1: config 0 has no interface number 0 [ 35.042746][ T337] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 35.048798][ T61] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01a6, bcdDevice=2c.6f [ 35.062148][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.070058][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.076783][ T61] usb 3-1: Product: syz [ 35.085217][ T61] usb 3-1: Manufacturer: syz [ 35.095380][ T337] usb 1-1: config 0 descriptor?? [ 35.103455][ T61] usb 3-1: SerialNumber: syz [ 35.118133][ T61] usb 3-1: config 0 descriptor?? [ 35.134107][ T61] ftdi_sio 3-1:0.90: FTDI USB Serial Device converter detected [ 35.156475][ T61] ftdi_sio ttyUSB0: unknown device type: 0x2c6f [ 35.517132][ T337] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 35.717871][ T337] usb 1-1: USB disconnect, device number 4 [ 36.257518][ T337] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.286570][ T642] kvm: pic: non byte write [ 36.291815][ T642] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 36.297819][ T645] 9pnet_fd: Insufficient options for proto=fd [ 36.321437][ T647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.129'. [ 36.376576][ T651] kvm: MWAIT instruction emulated as NOP! [ 36.417469][ T337] usb 4-1: Using ep0 maxpacket: 16 [ 36.423783][ T337] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.436658][ T337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.447332][ T337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.458364][ T337] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.471421][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.479578][ T337] usb 4-1: Product: syz [ 36.483937][ T337] usb 4-1: Manufacturer: syz [ 36.488687][ T337] usb 4-1: SerialNumber: syz [ 36.707525][ T61] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.797468][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.858567][ T61] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.868793][ T61] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.881262][ T61] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.890359][ T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.899306][ T61] usb 2-1: Product: syz [ 36.899370][ T337] usb 4-1: 0:2 : does not exist [ 36.903488][ T61] usb 2-1: Manufacturer: syz [ 36.903507][ T61] usb 2-1: SerialNumber: syz [ 36.911122][ T337] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 36.920473][ T61] cdc_mbim 2-1:1.0: skipping garbage [ 36.932224][ T337] usb 4-1: USB disconnect, device number 4 [ 36.947491][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 36.954583][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.963055][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 36.972868][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 36.984218][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.993361][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.001414][ T45] usb 1-1: Product: syz [ 37.005663][ T45] usb 1-1: Manufacturer: syz [ 37.010308][ T45] usb 1-1: SerialNumber: syz [ 37.016239][ T663] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.023583][ T663] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.233578][ T45] usb 1-1: bad CDC descriptors [ 37.239732][ T45] usb 1-1: USB disconnect, device number 5 [ 37.533527][ T10] usb 3-1: USB disconnect, device number 3 [ 37.539960][ T10] ftdi_sio 3-1:0.90: device disconnected [ 37.561597][ T669] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.747710][ T685] usb usb8: usbfs: process 685 (syz.3.145) did not claim interface 0 before use [ 37.923059][ T61] cdc_mbim 2-1:1.0: bind() failure [ 37.932416][ T61] usb 2-1: USB disconnect, device number 4 [ 38.027961][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.117817][ T699] ------------[ cut here ]------------ [ 38.123341][ T699] WARNING: CPU: 1 PID: 699 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 38.132751][ T699] Modules linked in: [ 38.136761][ T699] CPU: 1 UID: 0 PID: 699 Comm: syz.2.151 Not tainted 6.12.38-syzkaller-gd0c633175c04 #0 79f03ae2e0a264f34f505a942aaa3597bcba712e [ 38.150096][ T699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.160227][ T699] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 38.166142][ T699] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 71 28 ee 05 00 0f 85 be 00 00 00 c6 05 64 28 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 38.185788][ T699] RSP: 0018:ffffc9000d4cf9a0 EFLAGS: 00010246 [ 38.191933][ T699] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 38.200035][ T699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d4cfa58 [ 38.208073][ T699] RBP: ffffc9000d4cfad0 R08: ffffc9000d4cfa57 R09: 0000000000000000 [ 38.216071][ T699] R10: ffffc9000d4cfa40 R11: fffff52001a99f4b R12: ffffc9000d4cf9e0 [ 38.224113][ T699] R13: dffffc0000000000 R14: 1ffff92001a99f38 R15: 0000000000000000 [ 38.232141][ T699] FS: 00007f53456806c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 38.241114][ T699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.247755][ T699] CR2: 0000001b2ef23ffc CR3: 000000010afce000 CR4: 00000000003526b0 [ 38.255769][ T699] Call Trace: [ 38.257472][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.259090][ T699] [ 38.269507][ T699] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.275280][ T699] ? futex_wait_setup+0x1bc/0x260 [ 38.280344][ T699] ? __futex_wait+0x218/0x2a0 [ 38.285048][ T699] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 38.291251][ T699] ___kmalloc_large_node+0x9c/0x1d0 [ 38.296497][ T699] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 38.302707][ T699] __kmalloc_large_node_noprof+0x1e/0xe0 [ 38.308399][ T699] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 38.314572][ T699] __kmalloc_noprof+0x26d/0x450 [ 38.319490][ T699] ? __kasan_check_write+0x18/0x20 [ 38.324633][ T699] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 38.330663][ T699] ? futex_setup_timer+0xb4/0xd0 [ 38.335639][ T699] ? futex_wait+0x29a/0x7a0 [ 38.340181][ T699] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 38.346628][ T699] ? selinux_file_ioctl+0x6e0/0x1360 [ 38.351971][ T699] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 38.357619][ T699] ? do_futex+0x309/0x500 [ 38.361966][ T699] ? __cfi_do_futex+0x10/0x10 [ 38.366661][ T699] ? __fget_files+0x2c5/0x340 [ 38.371371][ T699] ? bpf_lsm_file_ioctl+0xd/0x20 [ 38.376351][ T699] ? security_file_ioctl+0x34/0xd0 [ 38.381503][ T699] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 38.387993][ T699] __se_sys_ioctl+0x132/0x1b0 [ 38.392785][ T699] __x64_sys_ioctl+0x7f/0xa0 [ 38.397480][ T699] x64_sys_call+0x1878/0x2ee0 [ 38.402193][ T699] do_syscall_64+0x58/0xf0 [ 38.406629][ T699] ? clear_bhb_loop+0x50/0xa0 [ 38.411374][ T699] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.417300][ T699] RIP: 0033:0x7f534478ebe9 [ 38.421794][ T699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.427459][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 38.441540][ T699] RSP: 002b:00007f5345680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.455097][ T699] RAX: ffffffffffffffda RBX: 00007f53449b5fa0 RCX: 00007f534478ebe9 [ 38.456732][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 38.463174][ T699] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000007 [ 38.463195][ T699] RBP: 00007f5344811e19 R08: 0000000000000000 R09: 0000000000000000 [ 38.475135][ T10] usb 1-1: config 0 has no interface number 0 [ 38.479380][ T699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.487742][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 38.493436][ T699] R13: 00007f53449b6038 R14: 00007f53449b5fa0 R15: 00007ffe0c7f0758 [ 38.509575][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 38.516229][ T699] [ 38.516242][ T699] ---[ end trace 0000000000000000 ]--- [ 38.527605][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 38.539162][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.549027][ T10] usb 1-1: Product: syz [ 38.553258][ T10] usb 1-1: Manufacturer: syz [ 38.555220][ T45] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 38.557947][ T10] usb 1-1: SerialNumber: syz [ 38.566501][ T45] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 38.576417][ T10] usb 1-1: config 0 descriptor?? [ 38.579595][ T45] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 38.593680][ T45] usb 4-1: config 250 has no interface number 0 [ 38.600174][ T45] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 38.602890][ T10] smsc75xx v1.0.0 [ 38.612123][ T45] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 38.625978][ T45] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 38.636319][ T45] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 38.646662][ T45] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 38.660217][ T45] usb 4-1: config 250 interface 228 has no altsetting 0 [ 38.669117][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 38.678281][ T45] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 38.686718][ T45] usb 4-1: Product: syz [ 38.690985][ T45] usb 4-1: SerialNumber: syz [ 38.700136][ T45] hub 4-1:250.228: bad descriptor, ignoring hub [ 38.706549][ T45] hub 4-1:250.228: probe with driver hub failed with error -5 [ 38.802160][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 38.812394][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 38.823212][ T10] usb 1-1: USB disconnect, device number 6 [ 38.901474][ T45] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 39.187595][ T475] usb 4-1: USB disconnect, device number 5 [ 39.194201][ T475] usblp0: removed