last executing test programs: 3.174375473s ago: executing program 2 (id=347): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x700) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x3, {[@main=@item_012={0x1, 0x0, 0x9, '8'}, @local=@item_012={0x0, 0x2, 0x4}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.634559136s ago: executing program 1 (id=349): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 2.558729428s ago: executing program 1 (id=350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0x1, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 2.558429158s ago: executing program 1 (id=351): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.47744871s ago: executing program 1 (id=358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="4182aa", 0x3}], 0x1}}], 0x1, 0x48045) 2.417919071s ago: executing program 1 (id=359): inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c000280050001000600000014000180080001"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) 2.354736403s ago: executing program 1 (id=361): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.590910271s ago: executing program 0 (id=362): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x11, 0xc, 0x14a, 0x0}) 1.590621011s ago: executing program 0 (id=363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 1.530481273s ago: executing program 0 (id=364): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="974504a8000000000000000000b4a06bbd2c7a", 0x13}], 0x1}, 0x400c804) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.446843544s ago: executing program 0 (id=365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x7, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.394179416s ago: executing program 2 (id=366): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x953\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\x98?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.378998097s ago: executing program 2 (id=367): setrlimit(0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setpgid(0x0, 0x0) tkill(0x0, 0x7) wait4(0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) 1.258830369s ago: executing program 2 (id=368): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xd) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.241941309s ago: executing program 2 (id=369): syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1.2292029s ago: executing program 2 (id=370): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 606.804935ms ago: executing program 0 (id=374): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24008860) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, 0x0) timer_create(0xfffffffffffffffd, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b98d0400000f322280818ee067660f350f01d166b9940a000066b80048000066ba000000000f3066b8640000000f23c00f21f8663503000a000f23f866b9040100c00f320f5429660f73fc95670f234f", 0x51}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 562.786426ms ago: executing program 0 (id=375): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xfffffee2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) splice(r1, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x0) 147.558766ms ago: executing program 3 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/virtio/drivers_probe\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='v', 0x1) 118.291427ms ago: executing program 3 (id=379): r0 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, 0x0, 0x0) 22.924089ms ago: executing program 3 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) close(0x3) 22.736269ms ago: executing program 3 (id=381): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 14.66213ms ago: executing program 3 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 0s ago: executing program 3 (id=383): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=385): socket(0x840000000002, 0x3, 0x100) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x5, 0x20, 0x50, 0x10, 0x2304, 0x22e, 0x326b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x5, "", [{{0x9, 0x4, 0xf8, 0x4, 0x2, 0x77, 0x76, 0x4d, 0x0, [], [{{0x9, 0x5, 0x9, 0x3, 0x400, 0x1, 0x40, 0x3}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x7}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)={0x40, 0x11, 0x1, "b6"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000015c0)={0x44, &(0x7f0000001380)={0x10, 0x16, 0x9, "5b4eefa51346850423"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 27.684485][ T36] audit: type=1400 audit(1786504204.769:64): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.685585][ T288] cgroup: Unknown subsys name 'net' [ 27.707139][ T36] audit: type=1400 audit(1786504204.769:65): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.734405][ T36] audit: type=1400 audit(1786504204.799:66): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.734601][ T288] cgroup: Unknown subsys name 'devices' [ 27.836353][ T288] cgroup: Unknown subsys name 'hugetlb' [ 27.841985][ T288] cgroup: Unknown subsys name 'rlimit' [ 27.933773][ T36] audit: type=1400 audit(1786504205.009:67): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.957047][ T36] audit: type=1400 audit(1786504205.009:68): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.982003][ T36] audit: type=1400 audit(1786504205.019:69): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.989633][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.014169][ T36] audit: type=1400 audit(1786504205.099:70): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.039659][ T36] audit: type=1400 audit(1786504205.099:71): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.041190][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.065558][ T36] audit: type=1400 audit(1786504205.129:72): avc: denied { read } for pid=288 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.099740][ T36] audit: type=1400 audit(1786504205.129:73): avc: denied { open } for pid=288 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.412651][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.419893][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.427156][ T298] bridge_slave_0: entered allmulticast mode [ 29.433403][ T298] bridge_slave_0: entered promiscuous mode [ 29.439994][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.447067][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.454237][ T298] bridge_slave_1: entered allmulticast mode [ 29.460411][ T298] bridge_slave_1: entered promiscuous mode [ 29.478331][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.485531][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.492599][ T296] bridge_slave_0: entered allmulticast mode [ 29.498984][ T296] bridge_slave_0: entered promiscuous mode [ 29.505346][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.512393][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.519518][ T296] bridge_slave_1: entered allmulticast mode [ 29.525826][ T296] bridge_slave_1: entered promiscuous mode [ 29.544451][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.551518][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.558720][ T297] bridge_slave_0: entered allmulticast mode [ 29.565031][ T297] bridge_slave_0: entered promiscuous mode [ 29.581464][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.588565][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.595657][ T297] bridge_slave_1: entered allmulticast mode [ 29.601825][ T297] bridge_slave_1: entered promiscuous mode [ 29.631103][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.638187][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.645318][ T295] bridge_slave_0: entered allmulticast mode [ 29.651484][ T295] bridge_slave_0: entered promiscuous mode [ 29.660716][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.667790][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.674968][ T295] bridge_slave_1: entered allmulticast mode [ 29.681254][ T295] bridge_slave_1: entered promiscuous mode [ 29.806634][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.813822][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.821361][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.828512][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.841718][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.848826][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.856122][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.863242][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.887616][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.894709][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.901998][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.909079][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.946253][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.953320][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.960653][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.967729][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.977105][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.984428][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.991664][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.999315][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.006609][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.013776][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.021278][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.028699][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.057434][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.064591][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.072077][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.079135][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.087833][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.094913][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.102584][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.109689][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.127156][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.134235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.153610][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.160708][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.169005][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.176081][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.184527][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.191585][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.229543][ T298] veth0_vlan: entered promiscuous mode [ 30.248843][ T298] veth1_macvtap: entered promiscuous mode [ 30.261662][ T295] veth0_vlan: entered promiscuous mode [ 30.271812][ T296] veth0_vlan: entered promiscuous mode [ 30.296172][ T296] veth1_macvtap: entered promiscuous mode [ 30.321769][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.339703][ T297] veth0_vlan: entered promiscuous mode [ 30.350052][ T295] veth1_macvtap: entered promiscuous mode [ 30.369354][ T297] veth1_macvtap: entered promiscuous mode [ 30.418481][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.499995][ T328] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 30.511367][ T328] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 30.595039][ T331] Zero length message leads to an empty skb [ 30.694161][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.704184][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.775225][ T335] ======================================================= [ 30.775225][ T335] WARNING: The mand mount option has been deprecated and [ 30.775225][ T335] and is ignored by this kernel. Remove the mand [ 30.775225][ T335] option from the mount to silence this warning. [ 30.775225][ T335] ======================================================= [ 30.844195][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 30.850891][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 30.865260][ T10] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 30.865770][ T31] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 30.880694][ T10] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 30.889763][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.903646][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 30.905314][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 30.912939][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 30.921746][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.930450][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.941993][ T31] usb 2-1: config 0 descriptor?? [ 30.952386][ T10] usb 3-1: Product: syz [ 30.961412][ T10] usb 3-1: Manufacturer: syz [ 30.966735][ T10] usb 3-1: SerialNumber: syz [ 30.980523][ T335] binfmt_misc: register: failed to install interpreter file ./file0 [ 31.028323][ T348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 31.125470][ T366] tipc: Enabling of bearer rejected, failed to enable media [ 31.176333][ T10] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 31.193820][ T10] usb 3-1: No valid video chain found. [ 31.208460][ T10] usb 3-1: USB disconnect, device number 2 [ 31.313354][ T394] netlink: 44 bytes leftover after parsing attributes in process `syz.3.35'. [ 31.364217][ T31] logitech-djreceiver 0003:046D:C51B.0001: unknown main item tag 0x0 [ 31.381510][ T31] logitech-djreceiver 0003:046D:C51B.0001: unknown main item tag 0x0 [ 31.399497][ T31] logitech-djreceiver 0003:046D:C51B.0001: unknown main item tag 0x0 [ 31.412743][ T31] logitech-djreceiver 0003:046D:C51B.0001: unknown main item tag 0x0 [ 31.566772][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.575158][ T31] usb 2-1: USB disconnect, device number 2 [ 32.547383][ T514] tipc: Started in network mode [ 32.552292][ T514] tipc: Node identity 668587fa000c, cluster identity 4711 [ 32.560554][ T514] tipc: Enabled bearer , priority 1 [ 32.567844][ T513] tipc: Resetting bearer [ 32.576068][ T513] tipc: Disabling bearer [ 32.828622][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 32.828639][ T36] audit: type=1400 audit(1786504209.909:155): avc: denied { read } for pid=563 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.020973][ T582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 33.069644][ T36] audit: type=1400 audit(1786504210.149:156): avc: denied { create } for pid=591 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.089199][ T36] audit: type=1400 audit(1786504210.149:157): avc: denied { bind } for pid=591 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.109067][ T36] audit: type=1400 audit(1786504210.149:158): avc: denied { name_bind } for pid=591 comm="syz.0.133" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 33.130605][ T36] audit: type=1400 audit(1786504210.149:159): avc: denied { node_bind } for pid=591 comm="syz.0.133" saddr=172.20.20.187 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 33.153546][ T36] audit: type=1400 audit(1786504210.149:160): avc: denied { bind } for pid=593 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.191708][ T610] tipc: Enabled bearer , priority 1 [ 33.199152][ T609] tipc: Resetting bearer [ 33.206907][ T609] tipc: Disabling bearer [ 33.374318][ T36] audit: type=1400 audit(1786504210.449:161): avc: denied { create } for pid=639 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.393882][ T36] audit: type=1400 audit(1786504210.459:162): avc: denied { ioctl } for pid=639 comm="syz.0.157" path="socket:[5321]" dev="sockfs" ino=5321 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.452010][ T652] wg0: entered allmulticast mode [ 33.459010][ T652] wg0: left allmulticast mode [ 33.528318][ T36] audit: type=1400 audit(1786504210.609:163): avc: denied { name_bind } for pid=665 comm="syz.3.170" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 33.587533][ T677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 33.603376][ T36] audit: type=1400 audit(1786504210.689:164): avc: denied { read } for pid=678 comm="syz.0.176" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.686303][ T685] syzkaller0: tun_chr_ioctl cmd 1074025698 [ 33.905781][ T718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.189'. [ 34.254140][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.405578][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 34.412882][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.427127][ T31] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 34.436600][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.446089][ T31] usb 2-1: Product: syz [ 34.450567][ T31] usb 2-1: Manufacturer: syz [ 34.456334][ T31] usb 2-1: SerialNumber: syz [ 34.466713][ T31] usb 2-1: config 0 descriptor?? [ 34.740847][ T724] syz.2.195 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 34.755451][ T31] usb 2-1: USB disconnect, device number 3 [ 34.780009][ T724] CPU: 1 UID: 0 PID: 724 Comm: syz.2.195 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 34.780041][ T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.780061][ T724] Call Trace: [ 34.780068][ T724] [ 34.780076][ T724] __dump_stack+0x21/0x30 [ 34.780112][ T724] dump_stack_lvl+0x140/0x1c0 [ 34.780145][ T724] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.780168][ T724] ? ___ratelimit+0x41c/0x5c0 [ 34.780192][ T724] ? __kasan_check_write+0x18/0x20 [ 34.780213][ T724] dump_stack+0x19/0x20 [ 34.780237][ T724] dump_header+0xd9/0x460 [ 34.780261][ T724] oom_kill_process+0x35d/0x640 [ 34.780283][ T724] out_of_memory+0x5d1/0xa20 [ 34.780303][ T724] ? __cfi_out_of_memory+0x10/0x10 [ 34.780323][ T724] ? mutex_lock_killable+0x97/0x1d0 [ 34.780350][ T724] ? __cfi_mutex_lock_killable+0x10/0x10 [ 34.780378][ T724] mem_cgroup_out_of_memory+0x2c5/0x390 [ 34.780399][ T724] ? css_next_descendant_pre+0x1ec/0x210 [ 34.780421][ T724] ? __kasan_check_write+0x18/0x20 [ 34.780439][ T724] ? drain_obj_stock+0xec0/0xec0 [ 34.780459][ T724] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 34.780479][ T724] try_charge_memcg+0x925/0xe10 [ 34.780505][ T724] ? lruvec_init+0x1f1/0x280 [ 34.780525][ T724] ? __cfi_try_charge_memcg+0x10/0x10 [ 34.780550][ T724] ? preempt_schedule_irq+0xab/0x110 [ 34.780573][ T724] ? __alloc_pages_noprof+0x35a/0x7e0 [ 34.780600][ T724] __mem_cgroup_charge+0xfc/0x420 [ 34.780618][ T724] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 34.780643][ T724] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 34.780662][ T724] ? __folio_alloc_noprof+0x4f/0x80 [ 34.780687][ T724] folio_prealloc+0x67/0x220 [ 34.780709][ T724] do_wp_page+0x187e/0x2e80 [ 34.780731][ T724] ? __schedule+0x149e/0x20b0 [ 34.780754][ T724] ? folio_put+0x90/0x90 [ 34.780774][ T724] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.780796][ T724] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 34.780824][ T724] handle_mm_fault+0x1017/0x1ba0 [ 34.780847][ T724] ? __cfi_handle_mm_fault+0x10/0x10 [ 34.780868][ T724] ? lock_vma_under_rcu+0x4cf/0x590 [ 34.780893][ T724] ? do_user_addr_fault+0x1bd/0x1230 [ 34.780921][ T724] do_user_addr_fault+0x951/0x1230 [ 34.780948][ T724] ? switch_fpu_return+0x12/0x20 [ 34.780969][ T724] exc_page_fault+0x58/0xc0 [ 34.780986][ T724] asm_exc_page_fault+0x2b/0x30 [ 34.781009][ T724] RIP: 0033:0x7f29e38517fc [ 34.781026][ T724] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 34.781042][ T724] RSP: 002b:00007fff56500d18 EFLAGS: 00010246 [ 34.781065][ T724] RAX: 0000000000000000 RBX: ffffffff827d8215 RCX: ffffffff81cae215 [ 34.781080][ T724] RDX: 0000000000000215 RSI: ffffffff827d8215 RDI: 0000000000000006 [ 34.781092][ T724] RBP: 0000000000000000 R08: 00007f29e3c10000 R09: 00007f29e3c12000 [ 34.781104][ T724] R10: 00000000827d8219 R11: 0000000000000006 R12: 00007f29e3c26038 [ 34.781117][ T724] R13: 0000000000000060 R14: ffffffff827d8215 R15: 00007f29e4755720 [ 34.781131][ T724] ? hook_cred_prepare+0x135/0x1c0 [ 34.781161][ T724] ? hook_cred_prepare+0x135/0x1c0 [ 34.781183][ T724] ? pcpu_alloc_noprof+0x35/0x1440 [ 34.781204][ T724] ? hook_cred_prepare+0x135/0x1c0 [ 34.781227][ T724] [ 34.781238][ T724] memory: usage 96kB, limit 96kB, failcnt 43 [ 35.116422][ T724] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 35.124001][ T724] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 35.131343][ T724] Memory cgroup stats for /syz2/test: [ 35.131566][ T724] cache 0 [ 35.141218][ T724] rss 8192 [ 35.144811][ T724] rss_huge 0 [ 35.151650][ T724] shmem 0 [ 35.154788][ T724] mapped_file 0 [ 35.158248][ T724] dirty 0 [ 35.161184][ T724] writeback 0 [ 35.164492][ T724] workingset_refault_anon 0 [ 35.169180][ T724] workingset_refault_file 0 [ 35.173687][ T724] swap 0 [ 35.176943][ T724] swapcached 90112 [ 35.186631][ T724] pgpgin 24 [ 35.189836][ T724] pgpgout 1 [ 35.192954][ T724] pgfault 35 [ 35.196271][ T724] pgmajfault 0 [ 35.199740][ T724] inactive_anon 94208 [ 35.203895][ T724] active_anon 0 [ 35.207424][ T724] inactive_file 0 [ 35.211177][ T724] active_file 0 [ 35.214703][ T724] unevictable 0 [ 35.218155][ T724] hierarchical_memory_limit 98304 [ 35.223172][ T724] hierarchical_memsw_limit 9223372036854771712 [ 35.229361][ T724] total_cache 0 [ 35.232818][ T724] total_rss 8192 [ 35.236659][ T724] total_rss_huge 0 [ 35.240468][ T724] total_shmem 0 [ 35.243926][ T724] total_mapped_file 0 [ 35.247938][ T724] total_dirty 0 [ 35.251484][ T724] total_writeback 0 [ 35.255332][ T724] total_workingset_refault_anon 0 [ 35.260351][ T724] total_workingset_refault_file 0 [ 35.265458][ T724] total_swap 0 [ 35.268850][ T724] total_swapcached 90112 [ 35.273096][ T724] total_pgpgin 24 [ 35.276763][ T724] total_pgpgout 1 [ 35.280397][ T724] total_pgfault 35 [ 35.284325][ T724] total_pgmajfault 0 [ 35.288214][ T724] total_inactive_anon 94208 [ 35.334418][ T724] total_active_anon 0 [ 35.339515][ T724] total_inactive_file 0 [ 35.347853][ T724] total_active_file 0 [ 35.352489][ T724] total_unevictable 0 [ 35.358743][ T724] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.195,pid=724,uid=0 [ 35.389364][ T724] Memory cgroup out of memory: Killed process 724 (syz.2.195) total-vm:94104kB, anon-rss:1412kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 35.655503][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.729182][ T767] input: syz1 as /devices/virtual/input/input4 [ 35.814081][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 35.820573][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 35.829870][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 35.841771][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 35.852828][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 35.865548][ T31] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 35.874664][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.882662][ T31] usb 2-1: Product: syz [ 35.886882][ T31] usb 2-1: Manufacturer: syz [ 35.891480][ T31] usb 2-1: SerialNumber: syz [ 35.905242][ T31] usb 2-1: config 0 descriptor?? [ 35.910671][ T742] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.964086][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 36.044098][ T67] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 36.114822][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 36.123738][ T10] usb 3-1: config 6 has an invalid interface number: 179 but max is 0 [ 36.132460][ T10] usb 3-1: config 6 has no interface number 0 [ 36.138809][ T10] usb 3-1: config 6 interface 179 has no altsetting 0 [ 36.147191][ T10] usb 3-1: New USB device found, idVendor=1385, idProduct=5f01, bcdDevice=79.2a [ 36.156425][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.164615][ T10] usb 3-1: Product: syz [ 36.168816][ T10] usb 3-1: Manufacturer: syz [ 36.173439][ T10] usb 3-1: SerialNumber: syz [ 36.204088][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 36.210461][ T67] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.220759][ T67] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 36.232409][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 36.244923][ T67] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 36.254085][ T67] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 36.262169][ T67] usb 4-1: Product: syz [ 36.266404][ T67] usb 4-1: Manufacturer: syz [ 36.271005][ T67] usb 4-1: SerialNumber: syz [ 36.276586][ T67] usb 4-1: config 0 descriptor?? [ 36.389979][ T10] usb 3-1: USB disconnect, device number 3 [ 36.485869][ T67] usb 4-1: USB disconnect, device number 2 [ 36.944119][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.104951][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.115936][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.125856][ T67] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 37.135218][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.144645][ T67] usb 1-1: config 0 descriptor?? [ 37.234079][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.415139][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.425591][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.435780][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.447025][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.460086][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 37.469140][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.556299][ T67] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.563888][ T67] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.571336][ T67] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.578797][ T67] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.586334][ T67] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 37.594673][ T67] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 38.004083][ T320] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 38.156261][ T67] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (5), disabling calibration. [ 38.167393][ T67] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 38.180150][ T320] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 38.189318][ T67] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 38.201376][ T320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.209434][ T67] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 38.221558][ T320] usb 3-1: Product: syz [ 38.225802][ T320] usb 3-1: Manufacturer: syz [ 38.230685][ T320] usb 3-1: SerialNumber: syz [ 38.236035][ T67] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0002/input/input5 [ 38.247971][ T320] usb 3-1: config 0 descriptor?? [ 38.255365][ T67] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0002/input/input6 [ 38.274096][ T67] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0002/input/input7 [ 38.302474][ T67] playstation 0003:054C:0DF2.0002: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 38.359490][ T10] usb 1-1: USB disconnect, device number 2 [ 38.420341][ T504] usb 2-1: USB disconnect, device number 4 [ 38.436337][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 38.436354][ T36] audit: type=1400 audit(1786504215.519:192): avc: denied { map } for pid=806 comm="syz.1.229" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.470318][ T36] audit: type=1400 audit(1786504215.519:193): avc: denied { read write } for pid=806 comm="syz.1.229" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.497740][ T36] audit: type=1400 audit(1786504215.519:194): avc: denied { map } for pid=806 comm="syz.1.229" path="socket:[5660]" dev="sockfs" ino=5660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 38.655697][ T822] IPv4: Oversized IP packet from 127.202.26.0 [ 38.877811][ T36] audit: type=1400 audit(1786504215.959:195): avc: denied { execute } for pid=830 comm="syz.0.236" path="/116/cpuacct.usage_percpu" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.994158][ T67] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.060588][ T36] audit: type=1400 audit(1786504216.139:196): avc: denied { read } for pid=834 comm="syz.0.237" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.083533][ T36] audit: type=1400 audit(1786504216.139:197): avc: denied { open } for pid=834 comm="syz.0.237" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.194203][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 39.200558][ T67] usb 2-1: config 0 has no interfaces? [ 39.207608][ T67] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 39.216733][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.224768][ T67] usb 2-1: Product: syz [ 39.229107][ T67] usb 2-1: Manufacturer: syz [ 39.233755][ T67] usb 2-1: SerialNumber: syz [ 39.239689][ T67] usb 2-1: config 0 descriptor?? [ 39.447081][ T504] usb 2-1: USB disconnect, device number 5 [ 39.534117][ T67] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.684072][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 39.690290][ T67] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 39.699401][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.708018][ T67] usb 1-1: config 0 descriptor?? [ 39.995678][ T36] audit: type=1400 audit(1786504217.079:198): avc: denied { create } for pid=849 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.009949][ T67] usb 4-1: USB disconnect, device number 3 [ 40.015083][ T36] audit: type=1400 audit(1786504217.079:199): avc: denied { setopt } for pid=849 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.054073][ T36] audit: type=1400 audit(1786504217.079:200): avc: denied { bind } for pid=849 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.087573][ T36] audit: type=1400 audit(1786504217.079:201): avc: denied { map } for pid=849 comm="syz.1.242" path="socket:[6455]" dev="sockfs" ino=6455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.314204][ T869] netlink: 96 bytes leftover after parsing attributes in process `syz.3.249'. [ 40.584069][ T67] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.745361][ T67] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.755512][ T67] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.768590][ T67] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.787911][ T805] usb 3-1: USB disconnect, device number 4 [ 40.794863][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.815491][ T67] usb 2-1: config 0 descriptor?? [ 40.821783][ T67] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 41.199950][ T805] usb 2-1: USB disconnect, device number 6 [ 41.704185][ T805] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.905065][ T805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.936419][ T805] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 41.948565][ T805] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.974546][ T805] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 41.983769][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.992371][ T805] usb 2-1: Product: syz [ 41.996871][ T805] usb 2-1: Manufacturer: syz [ 42.001564][ T805] usb 2-1: SerialNumber: syz [ 42.214728][ T10] usb 2-1: USB disconnect, device number 7 [ 42.274105][ T805] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.311828][ T67] usb 1-1: USB disconnect, device number 3 [ 42.384081][ T320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.425232][ T805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.435509][ T805] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.448450][ T805] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 42.457601][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.467051][ T805] usb 3-1: config 0 descriptor?? [ 42.473260][ T805] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 42.546662][ T320] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 42.555802][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.563889][ T320] usb 4-1: Product: syz [ 42.568099][ T320] usb 4-1: Manufacturer: syz [ 42.572700][ T320] usb 4-1: SerialNumber: syz [ 42.578095][ T320] usb 4-1: config 0 descriptor?? [ 42.674804][ T320] usb 3-1: USB disconnect, device number 5 [ 43.653848][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 43.653863][ T36] audit: type=1400 audit(1786504220.729:210): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.158664][ T954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.274118][ T504] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 44.424184][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 44.432738][ T504] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.443761][ T504] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.453536][ T504] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.466348][ T504] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.472988][ T504] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 44.482152][ T504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.490920][ T504] usb 1-1: config 0 descriptor?? [ 44.595195][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.610340][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 44.619885][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.630870][ T10] usb 3-1: Product: syz [ 44.635135][ T10] usb 3-1: Manufacturer: syz [ 44.639766][ T10] usb 3-1: SerialNumber: syz [ 44.663149][ T10] usb 3-1: config 0 descriptor?? [ 44.673862][ T36] audit: type=1400 audit(1786504221.759:211): avc: denied { mount } for pid=964 comm="syz.1.286" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.682142][ T965] syz.1.286 uses obsolete (PF_INET,SOCK_PACKET) [ 44.696720][ T36] audit: type=1400 audit(1786504221.759:212): avc: denied { read write } for pid=964 comm="syz.1.286" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.726250][ T36] audit: type=1400 audit(1786504221.759:213): avc: denied { open } for pid=964 comm="syz.1.286" path="/56/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.750917][ T36] audit: type=1400 audit(1786504221.789:214): avc: denied { ioctl } for pid=964 comm="syz.1.286" path="/56/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.777464][ T36] audit: type=1400 audit(1786504221.809:215): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.871387][ T10] usb 3-1: USB disconnect, device number 6 [ 44.912773][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.920081][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.927356][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.934525][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.941783][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.949010][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.956257][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.963672][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.970975][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.978225][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.985379][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.992512][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 44.999668][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.006884][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.014062][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.021240][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.029076][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.036289][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.043494][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.051775][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.058969][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.066189][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.073343][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.080632][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.087830][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.095085][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.102226][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.104111][ T805] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.109455][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.124114][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.131625][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.138813][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.145990][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.157428][ T10] usb 4-1: USB disconnect, device number 4 [ 45.163829][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.171816][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.179961][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.188390][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.195829][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.203518][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.211011][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.218426][ T504] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 45.226769][ T504] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 45.245214][ T504] usb 1-1: USB disconnect, device number 4 [ 45.284114][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 45.291862][ T805] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 45.303952][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 45.316595][ T805] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 45.334185][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.342219][ T805] usb 2-1: Product: syz [ 45.346970][ T805] usb 2-1: Manufacturer: syz [ 45.351599][ T805] usb 2-1: SerialNumber: syz [ 45.357206][ T805] usb 2-1: config 0 descriptor?? [ 45.393877][ T36] audit: type=1400 audit(1786504222.469:216): avc: denied { mounton } for pid=983 comm="syz.2.294" path="/45/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.693109][ T36] audit: type=1400 audit(1786504222.769:217): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.772721][ T36] audit: type=1400 audit(1786504222.849:218): avc: denied { read } for pid=1004 comm="syz.0.303" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 45.804288][ T504] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.844310][ T36] audit: type=1400 audit(1786504222.919:219): avc: denied { read } for pid=1006 comm="syz.0.304" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 46.334086][ T805] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.455168][ T504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.465326][ T504] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 46.475172][ T504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 61952, setting to 1024 [ 46.486333][ T504] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 46.495141][ T805] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 46.496331][ T504] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 46.507435][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.521529][ T504] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 46.530969][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.530998][ T805] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 46.540810][ T504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.551366][ T805] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 46.563955][ T504] usb 4-1: Product: syz [ 46.571710][ T805] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 46.580962][ T504] usb 4-1: Manufacturer: syz [ 46.584942][ T805] usb 1-1: Manufacturer: syz [ 46.593232][ T504] usb 4-1: SerialNumber: syz [ 46.607795][ T805] usb 1-1: config 0 descriptor?? [ 46.608254][ T996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.831458][ T320] usb 4-1: USB disconnect, device number 5 [ 47.017755][ T805] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 47.025048][ T805] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 47.033766][ T805] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 47.594148][ T504] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 47.746577][ T504] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 47.755748][ T504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.763729][ T504] usb 4-1: Product: syz [ 47.767926][ T504] usb 4-1: Manufacturer: syz [ 47.772552][ T504] usb 4-1: SerialNumber: syz [ 47.777706][ T504] usb 4-1: config 0 descriptor?? [ 47.837210][ T805] usb 1-1: USB disconnect, device number 5 [ 47.862213][ T504] usb 2-1: USB disconnect, device number 8 [ 48.584121][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.755052][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.767793][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.767978][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 48.767990][ T36] audit: type=1400 audit(1786504225.859:221): avc: denied { setopt } for pid=1044 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.782384][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.803991][ T1045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 48.814477][ T10] usb 1-1: config 0 descriptor?? [ 48.834594][ T36] audit: type=1400 audit(1786504225.919:222): avc: denied { create } for pid=1048 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 49.094084][ T504] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 49.228536][ T10] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 49.239079][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input8 [ 49.251702][ T504] usb 2-1: unable to get BOS descriptor or descriptor too short [ 49.260104][ T504] usb 2-1: config 4 has an invalid interface number: 138 but max is 0 [ 49.268345][ T504] usb 2-1: config 4 has no interface number 0 [ 49.274505][ T504] usb 2-1: config 4 interface 138 has no altsetting 0 [ 49.283252][ T504] usb 2-1: string descriptor 0 read error: -22 [ 49.289503][ T504] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 49.298667][ T504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.317682][ T10] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 49.634338][ T31] usb 1-1: USB disconnect, device number 6 [ 49.874099][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 50.025303][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.036322][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.046224][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.059165][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 50.068242][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.076866][ T10] usb 3-1: config 0 descriptor?? [ 50.402074][ T946] usb 4-1: USB disconnect, device number 6 [ 50.499443][ T10] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 50.520143][ T10] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 50.528420][ T10] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 50.559555][ T10] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 50.576930][ T10] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 50.584537][ T10] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 50.608444][ T10] playstation 0003:054C:09CC.0006: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 50.688086][ T10] playstation 0003:054C:09CC.0006: Failed to retrieve feature with reportID 18: -71 [ 50.708237][ T10] playstation 0003:054C:09CC.0006: Failed to retrieve DualShock4 pairing info: -71 [ 50.718133][ T10] playstation 0003:054C:09CC.0006: Failed to get MAC address from DualShock4 [ 50.727070][ T10] playstation 0003:054C:09CC.0006: Failed to create dualshock4. [ 50.741288][ T10] playstation 0003:054C:09CC.0006: probe with driver playstation failed with error -71 [ 50.772879][ T10] usb 3-1: USB disconnect, device number 7 [ 50.884185][ T946] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 51.035589][ T946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.073791][ T946] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 51.085387][ T946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 51.096417][ T946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 51.106888][ T946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 51.121428][ T946] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 51.130587][ T946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 51.138818][ T946] usb 4-1: Product: syz [ 51.143097][ T946] usb 4-1: Manufacturer: syz [ 51.147745][ T946] usb 4-1: SerialNumber: syz [ 51.156877][ T946] usb 4-1: config 0 descriptor?? [ 51.166618][ T1076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.369870][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 51.381319][ T946] usb 4-1: USB disconnect, device number 7 [ 51.507061][ T36] audit: type=1400 audit(1786504228.589:223): avc: denied { bind } for pid=1091 comm="syz.0.332" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.527270][ T36] audit: type=1400 audit(1786504228.589:224): avc: denied { name_bind } for pid=1091 comm="syz.0.332" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 51.548337][ T36] audit: type=1400 audit(1786504228.589:225): avc: denied { node_bind } for pid=1091 comm="syz.0.332" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 51.696960][ T36] audit: type=1400 audit(1786504228.779:226): avc: denied { mount } for pid=1093 comm="syz.0.333" name="/" dev="configfs" ino=2486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 51.719815][ T36] audit: type=1400 audit(1786504228.779:227): avc: denied { create } for pid=1093 comm="syz.0.333" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 51.740814][ T36] audit: type=1400 audit(1786504228.779:228): avc: denied { write } for pid=1093 comm="syz.0.333" name="serialnumber" dev="configfs" ino=7364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 51.764030][ T36] audit: type=1400 audit(1786504228.779:229): avc: denied { open } for pid=1093 comm="syz.0.333" path="/140/config/usb_gadget/g1/strings/0x409/serialnumber" dev="configfs" ino=7364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 51.884153][ T946] usb 2-1: USB disconnect, device number 9 [ 51.959276][ T36] audit: type=1400 audit(1786504229.039:230): avc: denied { bind } for pid=1097 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.524054][ T1107] mmap: syz.2.338 (1107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.014069][ T805] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 53.165185][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.176176][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.185993][ T805] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 53.195084][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.203836][ T805] usb 3-1: config 0 descriptor?? [ 53.391253][ T1122] process 'syz.3.344' launched './file0' with NULL argv: empty string added [ 53.774165][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 53.784151][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.817973][ T805] hid-led 0003:1D34:000A.0007: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 53.833666][ T805] hid-led 0003:1D34:000A.0007: Dream Cheeky Webmail Notifier initialized [ 53.925718][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.934918][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 53.944046][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 53.944082][ T31] usb 4-1: config 200 has an invalid interface number: 97 but max is 0 [ 53.957751][ T31] usb 4-1: config 200 has no interface number 0 [ 53.959157][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 53.972536][ T31] usb 4-1: config 200 interface 97 has no altsetting 0 [ 53.972764][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.990167][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.991576][ T31] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 54.009427][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.009689][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.027738][ T31] usb 4-1: Product: syz [ 54.030555][ T504] usb 3-1: USB disconnect, device number 8 [ 54.038000][ T31] usb 4-1: Manufacturer: syz [ 54.040742][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.056733][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.056958][ T31] usb 4-1: SerialNumber: syz [ 54.094090][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.292439][ T31] usb 4-1: USB disconnect, device number 8 [ 54.322064][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 54.322080][ T36] audit: type=1400 audit(1786504231.399:239): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.868534][ T36] audit: type=1400 audit(1786504231.949:240): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.954069][ T31] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 55.105230][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.116288][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.126063][ T31] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.135165][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.144258][ T31] usb 3-1: config 0 descriptor?? [ 55.748131][ T36] audit: type=1400 audit(1786504232.829:241): avc: denied { write } for pid=1204 comm="syz.3.377" name="instances" dev="tracefs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.771061][ T31] usb 3-1: string descriptor 0 read error: -22 [ 55.777159][ T36] audit: type=1400 audit(1786504232.829:242): avc: denied { add_name } for pid=1204 comm="syz.3.377" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.797745][ T36] audit: type=1400 audit(1786504232.829:243): avc: denied { create } for pid=1204 comm="syz.3.377" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 55.831086][ T36] audit: type=1400 audit(1786504232.909:244): avc: denied { read } for pid=1208 comm="syz.3.379" name="/" dev="configfs" ino=2486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.853136][ T36] audit: type=1400 audit(1786504232.909:245): avc: denied { open } for pid=1208 comm="syz.3.379" path="/" dev="configfs" ino=2486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.882509][ T1211] dummy_hcd dummy_hcd.0: remove, state 1 [ 55.888215][ T1211] usb usb1: USB disconnect, device number 1 [ 55.896016][ T1211] dummy_hcd dummy_hcd.0: stopped [ 55.900995][ T1211] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 55.971698][ T31] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 55.980622][ T31] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 55.988851][ T31] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 55.996986][ T31] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 56.004498][ T31] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 56.014641][ T31] usb 3-1: USB disconnect, device number 9 [ 56.194097][ T805] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 56.247684][ T1221] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 56.260294][ T1221] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 56.268802][ T1221] CPU: 1 UID: 0 PID: 1221 Comm: syz.0.385 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 56.280250][ T1221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.290301][ T1221] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 56.295788][ T1221] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 54 02 ce fd eb 0c e8 4d 02 ce fd eb 05 e8 46 02 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a0 c6 26 fe 4d 8b 36 4c 89 f7 e8 [ 56.315645][ T1221] RSP: 0018:ffffc9001012f818 EFLAGS: 00010246 [ 56.321735][ T1221] RAX: 0000000000000000 RBX: ffff88810e784010 RCX: 0000000000080000 [ 56.329697][ T1221] RDX: ffffc90001671000 RSI: 0000000000000989 RDI: 000000000000098a [ 56.337661][ T1221] RBP: ffffc9001012f840 R08: ffff888119fd9300 R09: 0000000000000004 [ 56.345624][ T1221] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 56.353585][ T1221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 56.361545][ T1221] FS: 00007f303f0f66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 56.370461][ T1221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.377035][ T1221] CR2: 00007f303e187240 CR3: 0000000119532000 CR4: 00000000003526b0 [ 56.384998][ T1221] Call Trace: [ 56.388283][ T1221] [ 56.391203][ T1221] ? __cfi_dummy_udc_start+0x10/0x10 [ 56.396506][ T1221] gadget_bind_driver+0x3e4/0x9c0 [ 56.401520][ T1221] ? __cfi_gadget_bind_driver+0x10/0x10 [ 56.407056][ T1221] really_probe+0x2e1/0x8b0 [ 56.411605][ T1221] __driver_probe_device+0x193/0x280 [ 56.416887][ T1221] driver_probe_device+0x54/0x3f0 [ 56.421903][ T1221] __driver_attach+0x422/0x5e0 [ 56.426680][ T1221] bus_for_each_dev+0x249/0x2d0 [ 56.431523][ T1221] ? __cfi___driver_attach+0x10/0x10 [ 56.436811][ T1221] ? __cfi_bus_for_each_dev+0x10/0x10 [ 56.442175][ T1221] ? __kasan_kmalloc+0x96/0xb0 [ 56.446933][ T1221] ? _raw_spin_unlock+0x45/0x60 [ 56.451774][ T1221] ? klist_add_tail+0x1dd/0x220 [ 56.456610][ T1221] driver_attach+0x46/0x50 [ 56.461020][ T1221] bus_add_driver+0x393/0x730 [ 56.465683][ T1221] driver_register+0x2b7/0x3c0 [ 56.470431][ T1221] usb_gadget_register_driver_owner+0xfc/0x270 [ 56.476580][ T1221] raw_ioctl+0x144c/0x37a0 [ 56.481023][ T1221] ? __cfi_raw_ioctl+0x10/0x10 [ 56.485814][ T1221] ? selinux_file_ioctl+0x732/0x1480 [ 56.491212][ T1221] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 56.496790][ T1221] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.501720][ T1221] ? security_file_ioctl+0x3e/0x110 [ 56.506913][ T1221] ? __cfi_raw_ioctl+0x10/0x10 [ 56.511672][ T1221] __se_sys_ioctl+0x135/0x1b0 [ 56.516362][ T1221] __x64_sys_ioctl+0x7f/0xa0 [ 56.521035][ T1221] x64_sys_call+0x1878/0x2ee0 [ 56.525894][ T1221] do_syscall_64+0x57/0xf0 [ 56.530391][ T1221] ? clear_bhb_loop+0x50/0xa0 [ 56.535061][ T1221] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.540942][ T1221] RIP: 0033:0x7f303e19dd6b [ 56.545348][ T1221] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 56.564947][ T1221] RSP: 002b:00007f303f0f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.573526][ T1221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f303e19dd6b [ 56.581522][ T1221] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 56.589489][ T1221] RBP: 00007f303f0f4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 56.597478][ T1221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.605569][ T1221] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 56.613618][ T1221] [ 56.616654][ T1221] Modules linked in: [ 56.620947][ T1221] ---[ end trace 0000000000000000 ]--- [ 56.621978][ T36] audit: type=1400 audit(1786504233.699:246): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 56.634597][ T1221] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 56.655734][ T504] usb 2-1: USB disconnect, device number 10 [ 56.657154][ T1221] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 54 02 ce fd eb 0c e8 4d 02 ce fd eb 05 e8 46 02 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a0 c6 26 fe 4d 8b 36 4c 89 f7 e8 [ 56.668390][ T36] audit: type=1400 audit(1786504233.699:247): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.683393][ T1221] RSP: 0018:ffffc9001012f818 EFLAGS: 00010246 [ 56.708283][ T36] audit: type=1400 audit(1786504233.699:248): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.713214][ T1221] RAX: 0000000000000000 RBX: ffff88810e784010 RCX: 0000000000080000 [ 56.742874][ T1221] RDX: ffffc90001671000 RSI: 0000000000000989 RDI: 000000000000098a [ 56.750907][ T1221] RBP: ffffc9001012f840 R08: ffff888119fd9300 R09: 0000000000000004 [ 56.758981][ T1221] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 56.761179][ T805] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 56.767070][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 56.776172][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.783777][ T1221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 56.791874][ T805] usb 4-1: Product: syz [ 56.801094][ T1221] FS: 00007f303f0f66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.803865][ T805] usb 4-1: Manufacturer: syz [ 56.803883][ T805] usb 4-1: SerialNumber: syz [ 56.822761][ T1221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.829682][ T1221] CR2: 00007f29e3987240 CR3: 0000000119532000 CR4: 00000000003526b0 [ 56.837922][ T1221] Kernel panic - not syncing: Fatal exception [ 56.844122][ T1221] Kernel Offset: disabled [ 56.848435][ T1221] Rebooting in 86400 seconds..