last executing test programs: 1m15.157825173s ago: executing program 0 (id=77): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) close(r1) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='wchan\x00') pread64(r3, &(0x7f0000000240)=""/20, 0x14, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) fdatasync(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103", @ANYRESHEX], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) close(r1) (async) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) (async) syz_open_procfs(r2, &(0x7f00000000c0)='wchan\x00') (async) pread64(r3, &(0x7f0000000240)=""/20, 0x14, 0x8) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) fdatasync(0xffffffffffffffff) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) (async) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) (async) openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) 1m14.580479141s ago: executing program 0 (id=78): mlockall(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xc7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x10036f}) statx(0xffffffffffffffff, &(0x7f0000000200)='./dev\x00', 0x800, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000180), 0x4c000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}]}}) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) mlockall(0x7) 1m14.306867924s ago: executing program 0 (id=79): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xfffffff9, 0x1000000, 0x10, 0xffffffffffffffff, 0x20000000) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="36650f380ae20f21ddba6100ed6766c7442400695e00006766c7442402a5c9f6dd6766c744240600000000670f011424f20f78d200c3c54c090f20d90fc79e4a6bda302e260fc43d00", 0x49}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x6, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x4, 0x262, 0x0, 0x0, 0x1000, 0x3, r6}}}, &(0x7f00000001c0)) 1m13.459985414s ago: executing program 0 (id=84): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b9047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x40021, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m13.077111612s ago: executing program 0 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x25fffffc, 0xcffffff, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x5, 0x0, 0x2080, {0x0, 0x8000000, {}, 0x0, 0x5}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) read(r7, &(0x7f00000001c0)=""/113, 0x71) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m12.107211938s ago: executing program 0 (id=91): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000140)=""/301, 0x12d, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x2000000000000004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4e, 0x1000008, 0xffffeffffffffffb, 0x1, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x4, 0x7, 0x10000008d], 0xddcd0000, 0x100001}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x80000001, 0x4) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) 1m12.05816164s ago: executing program 32 (id=91): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000140)=""/301, 0x12d, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x2000000000000004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4e, 0x1000008, 0xffffeffffffffffb, 0x1, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x4, 0x7, 0x10000008d], 0xddcd0000, 0x100001}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x80000001, 0x4) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) 2.696162233s ago: executing program 3 (id=500): mkdir(&(0x7f00000001c0)='./file0\x00', 0x6b) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x10}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$selinux_create(r0, &(0x7f0000000140)=@access={'system_u:object_r:public_content_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x100000000}, 0x60) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1400) 2.571474348s ago: executing program 3 (id=505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "39b138d4300bc48f", "ccf149b57883a43d088357d86882e1e4", "f30add4d", "c3d07f5fede7b038"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './sys/bus/pci/devices/0000:00:03.0/remove', [{}]}, 0x2e) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0xa, 0x80) ioctl$EVIOCGUNIQ(r4, 0x80404508, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 2.489203402s ago: executing program 1 (id=507): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) (async) syz_usb_connect$midi(0x4, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x5, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x7, [@ms_header={0x7, 0x24, 0x1, 0xaa50, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0xa, 0x1, [{0x8, 0x2}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x55}, @midi_out_jack={0x1b, 0x24, 0x3, 0x1, 0x1, 0xa, [{0xd, 0x6}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0xf4}, {0x8, 0x3}, {0x6, 0x9}, {0x3, 0x3e}, {0x8, 0x6}, {0x10, 0x3a}, {0x18, 0x8}], 0x5}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x7f, 0x3, [{0x3, 0x6}, {0x7, 0xab}, {0x1b, 0x5}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x8}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0xc0, 0x8, 0x1, {0x13, 0x25, 0x1, 0xf, "c6fa07922b1a9c95423316bf7240f0"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x9, 0x4f, 0xff}, 0x49, &(0x7f0000000100)={0x5, 0xf, 0x49, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "0181c509945890617ad9e4e0779aa01f"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0xf9, 0xdf, 0xe10a, 0xed}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "79afaf2ff07abe4c7085dfbc26b322c9"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xa0, 0x2, 0x9, 0x1, 0xaf}, @ptm_cap={0x3}]}, 0x3, [{0x25, &(0x7f0000000180)=@string={0x25, 0x3, "60ce8cba5d1627168f4d319425e9b20a6ad683dccbdfbd5f42d4420704a9ec89ee96fe"}}, {0xd5, &(0x7f00000001c0)=@string={0xd5, 0x3, "3035dbd40e85f2d98b34413812a036177e424915c4c0cbdda9bdf18eb6203bd7d9d15f06875909feaf3e3fd6c89b078d607ffeccf859cfb605bc862b14a9fd2a936801c604b67907f5d48d84c42cc2db655caf354de59fd36bc2727107de11508cd475177e2cd777430d8a6fca328983f3ba081bdef78a8a3cf013ea3ed4bce77b71b0af1ee99a4c65043b1390ea24fe03ed9cd4db65a25245afada96bbb4cd0cece2fdbf7cad1cf0262e1ea2dec1fd29d41501afbca5f5b207def11803afdd3d8a257ac9a59ad8ad373ca0a8610177d0a7e15"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3001}}]}) 2.287953162s ago: executing program 3 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x20000002) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="c20ac99b954fbe7405e9e96bb6f24db61c2e3dc63ecfcc08abebe26f1e561c071fb5ea993438302920b622ccdeddb41871ceb33a2efb6d653c986026987f525d7e96c091e47e3a726c7a180d2792c770a5e296fe6d7eca1561f93eb19331ef50f6bad4604a84e736110514a2901de143503110140d7bba365c9e4c2d4900b494d5b3bd2bee08ec57c6dec2163be6136619d274ce8b3eed75139de71fea1373c9423da19cdd30f8435bc10b8b65d51543a5306d44d93dc61e70d20005724ba054454076e8d12b486d1e269f2a37204019fa5e554ba05750ea75b4dea239982ebee4b66ed83baf56c6b2f700a2f73d2c43ddd29c01cb56269358bda6415072119b") (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002b80)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/57, 0x39}, {&(0x7f00000023c0)=""/162, 0xa2}, {&(0x7f0000002480)=""/20, 0x14}], 0x6, &(0x7f0000002540)=""/103, 0x67}, 0x3}, {{&(0x7f00000025c0)=@ieee802154, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002640)=""/88, 0x58}, {&(0x7f00000026c0)=""/197, 0xc5}, {&(0x7f00000027c0)=""/199, 0xc7}, {&(0x7f00000028c0)=""/91, 0x5b}, {&(0x7f0000002940)=""/133, 0x85}], 0x5, &(0x7f0000002a80)=""/206, 0xce}, 0x3}], 0x2, 0x12100, &(0x7f0000002c00)={0x0, 0x989680}) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000002c40), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002d80)={'syztnl1\x00', &(0x7f0000002cc0)={'gre0\x00', 0x0, 0x8000, 0x7, 0x7, 0x401, {{0x1a, 0x4, 0x0, 0x1, 0x68, 0x68, 0x0, 0xf, 0x4, 0x0, @private=0xa010101, @remote, {[@generic={0x89, 0x8, "6117d9670193"}, @timestamp_addr={0x44, 0x4c, 0x31, 0x1, 0x1, [{@remote, 0x2}, {@multicast1, 0xc}, {@private=0xa010102, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x38}}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffff107c}, {@loopback, 0x1856}, {@rand_addr=0x64010102, 0xfff}, {@multicast1, 0xcec}, {@local, 0x7}]}]}}}}}) getresuid(&(0x7f0000002dc0), &(0x7f0000002e00)=0x0, &(0x7f0000002e40)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003040)={&(0x7f0000002e80)=@allocspi={0x1b4, 0x16, 0x800, 0x70bd26, 0x25dfdbff, {{{@in6=@private0, @in=@multicast1, 0x4e24, 0x3, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x3b, r4, r5}, {@in=@loopback, 0x4d4, 0xa1}, @in=@multicast1, {0x10000, 0x4, 0x58c3, 0x80000000, 0x8, 0x1b7, 0xffffffff, 0x9}, {0x8, 0x3ff, 0x1, 0x69c}, {0x7ff, 0x80, 0x3}, 0x70bd29, 0x3500, 0x0, 0x5, 0xb, 0x40}, 0x827, 0xfffffff9}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x1800}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @sec_ctx={0xa9, 0x8, {0xa5, 0x8, 0x1, 0x8, 0x9d, "cebfa8faa60442b703306485d125d432cec96c4013dcd676d37ff71b4b788380865435284b14542d43d50eb5db78c83636598920831babffa57981d1e19d0b3183a16a8eb2bc60963ba6e8d35c5b63c118e6a6b3524ed19f20d8bc315405c0c900798c26830076f1f540645d37e70334ae1228468f4fef68c69862584213e2867ede79510c641d6f2f29a7d0410cce4091df176fb4e6fc01b969dffa0d"}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003100), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x30, r6, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000001, 0xb}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c1}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x20, r8, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000003340)={0x1, {{0xa, 0x4e21, 0x6, @local}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x9, @empty, 0x3}}, {{0xa, 0x4e22, 0x4, @remote, 0x5}}, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}, {{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e23, 0x7f, @empty}}, {{0xa, 0x4e24, 0xf3, @remote, 0xbc19}}]}, 0x390) (async) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000003340)={0x1, {{0xa, 0x4e21, 0x6, @local}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x9, @empty, 0x3}}, {{0xa, 0x4e22, 0x4, @remote, 0x5}}, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}, {{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e23, 0x7f, @empty}}, {{0xa, 0x4e24, 0xf3, @remote, 0xbc19}}]}, 0x390) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f00000038c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003880)={&(0x7f0000003740)={0x120, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa947}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe09}, @NFQA_CT={0x34, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1ff}, @CTA_ID={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6219bd34d64984dd}]}, @NFQA_CT={0x84, 0xb, 0x0, 0x1, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x3}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x420}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x99}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x400}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x80) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003900), 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r11, 0x8912, &(0x7f0000004940)=@buf={0x1000, &(0x7f0000003940)="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"}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000049c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f0000004c00)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004a00)={0x1b8, r12, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x24008051) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f0000004c00)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004a00)={0x1b8, r12, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x24008051) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x5, &(0x7f0000006040)=[&(0x7f0000004d40)={0x0, 0x0, 0x0, 0x1, 0xfff8, r10, &(0x7f0000004c40)="2b83c7c420ec4450b4c0d163e027300edc18fceeabe4e01cadba00d5c87f2f84a0661d2a0ef0df7bedd79729bad786f71098519f2c395933bf928ce37afb77cf0e832b48e0b5bb2867d85751bdd8ba03e2e84eeb77e7feca307de481e2f7ddb695794147dec938f86135e6135a73a963b7ef2addeeb83452a252b9ceb235babfbd6dd581cd6357026532fbf93aad89a05c40e2d8b7b4ee3265ef6d19fa87b8a4399959c3a5f543331f6447fc89bec6166ecf6b471a8257603a03cd0f5fe3527e78c1d2fa39530edcfe8a6223a63685ed50c40de10364d6bc45f6872fac835ec811", 0xe1, 0x7fffffffffffffff, 0x0, 0x0, r11}, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x7, 0x12d2, r0, &(0x7f0000004d80)="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", 0x1000, 0x7d17, 0x0, 0x2}, &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f0000005dc0)="02deacb1631874910c58a8eda475027f4a2940167e9409b8aca08af09d32c1fc4f2d986ffd50729c1eb76e375363b7e1f317a387edfaec5b3897bc142a2a03346ba0eb12dfdd42859ecd977c1fbaf8700e4b334bc911450ab4d5ad2ca8149ae18a8d0cbecfd4cdc6f3d0de63a0ff232e7ccf", 0x72, 0x1, 0x0, 0x0, r11}, &(0x7f0000005f40)={0x0, 0x0, 0x0, 0x1, 0x9, r13, &(0x7f0000005e80)="113f007eb4e7473c3ae38f850d0b5472def7d94257511622ad8cee8b0ddc5c93ea84e686d55e97da0a05c5dcfba0ecbab4f5f2bb88501cb7a795513a5a4848639bd68108008de61e76dc0521130f2dfc6fc38a3954616aecc849537a7d2b7b4e823ad371bb7e384dad4532298827b57251fd0b04b02f26c767db7b238ad7363844f2bce1e3", 0x85, 0x6, 0x0, 0x1, r11}, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000005f80)="bb9311cdb1485855f3683743e0bbbbee7b4f36401683018d46afa398c360128cd670f9aead9df15dcbe5526011cc8ccd7fd68866448ac5c574d5318f7e0d95bf94ad19a97b11bede3fca28a0089974939b", 0x51, 0x5, 0x0, 0x0, r11}]) sendmsg$NFT_MSG_GETGEN(r11, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000061c0), r7) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000061c0), r7) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000006340)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006300)={&(0x7f0000006280)={0x48, r14, 0xf30, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000006340)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006300)={&(0x7f0000006280)={0x48, r14, 0xf30, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.129117639s ago: executing program 3 (id=510): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000540)=ANY=[@ANYBLOB="73697a653d25382c000b4a73fb44c84a6a39b5ff850c212a1af4a376a6c75261f7d6f5b79ab616f4450d4a2f0215585d24ccadbf223011c779c49734565e2df1a8bc54604e92ce4b6e98abc87eafb89333175978326c7b84233b479abb222c6e17b873191c2ad8841811628a0b30aa5c4fa32d01fee9fef965905b1ad87af32c19df1e506ad4a751c3e452bcae8018010000000000000000000000000028ee40d34d6fb2f864b6970cc70533e7b7065808c54a905f42d934414b776194f72af7866c89abeaacf5aee26e894dcabdf7c47c58923ddcc3e7650ad9a2217e42a9e93b9273bbfb84374ae9af3b2a667dd1"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x2e80, &(0x7f00000000c0)={0x0, 0x784f, 0x2, 0x3, 0x3b3}, &(0x7f00000001c0), &(0x7f0000000240), 0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(r6, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000000)='./file0/file0\x00', 0x146) mkdir(&(0x7f0000000140)='./bus\x00', 0x90) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000200)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x5, &(0x7f0000000640)=[{0x9, 0x1, 0x6, 0x4}, {0x6, 0x1, 0x1, 0xfffffffa}, {0x8, 0x6, 0x6, 0x1}, {0x5, 0x6, 0x4, 0x1}, {0x1, 0xc, 0x4, 0x40}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000500)={r8, &(0x7f0000000340)='upperdir', 0x402801, &(0x7f00000003c0)={@_ha_fsid={[0x1, 0x1]}, {0x401, 0x7, 0x8, 0x7}}, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x6}) pwrite64(r9, &(0x7f0000000400)="f3fe884bbb78a4c2b302901c438d74fa6ef9eb9e11e55c0ec7d445f7a383d6a08bd3365aa795a423c7417c7aea1ebeee3ef8c1ef0dd2d37f0370a1bafce6b797a8c1692d71798b99b4589ba2fcb3a67df4059095d40b7b990e0d501da22f29aae5d7729eb7e28504ab44a9aa449aae74a8f85fb95e", 0x5a, 0x0) 2.071540482s ago: executing program 3 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000300)={0x6, 0x80000001, 0x10001010, 0xdb1, 0x1, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) write$binfmt_aout(r0, 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0xa, 0x5) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file1/file0\x00'}, 0x6e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe000006a}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local}}}], 0x20}}], 0x1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000180)) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x401, 0x5, 0x6, 0x7, "7ac8cca918797c6a2b17f4f3a2290d716a24ac"}) creat(&(0x7f0000000080)='./file1/file0\x00', 0x182) 1.858944192s ago: executing program 3 (id=512): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$midi(0x2, 0x103, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x1, 0x9, 0xe0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x60, 0x9, [@ms_header={0x7, 0x24, 0x1, 0xfff7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0xa5}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x0, 0x2, [{0x6, 0x1}, {0x0, 0x6}], 0x9e}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0xa}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x5}], [{{0x9, 0x5, 0xb, 0xe, 0x8, 0x2, 0x7, 0x8, {0x13, 0x25, 0x1, 0xf, "4208f975ad2c803d000791be96ba61"}}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x7, 0x1, 0x7, {0x13, 0x25, 0x1, 0xf, "8f433ba71eb6b9dbbbf4bde2dc20eb"}}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7e, 0xd, 0x1a, {0x11, 0x25, 0x1, 0xd, "4752c9fd670ad9e8c781155bff"}}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x3e, 0x40, {0xd, 0x25, 0x1, 0x9, "d268ac552d953d431a"}}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0xa6, 0x8, 0x8, {0xd, 0x25, 0x1, 0x9, "459f2fff91cca07466"}}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x31, 0x5, {0xd, 0x25, 0x1, 0x9, "e0210ddcb5b2124803"}}}, {{0x9, 0x5, 0x5, 0xfe217a4ade7d1b42, 0x3bf, 0x80, 0x5, 0xfa, {0x5, 0x25, 0x1, 0x1, ']'}}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x10, 0x2, 0x4, {0xa, 0x25, 0x1, 0x6, "7fb5179ebe4c"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x8, 0xe, 0xc, 0x10, 0x3}, 0x49, &(0x7f0000000340)={0x5, 0xf, 0x49, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "224b38d11a1678ae69a8cdba6c989372"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x2, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xba, 0x1, 0xdd7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f5a66190a93e600a6cbdeec7d8605e68"}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x146e}}, {0x71, &(0x7f0000000400)=@string={0x71, 0x3, "1501e231672a619f188de57f84c365f0e6ed42706cc2014c0d826b4248fb5ac7b2091da77f20b4c01808f241608a2eecbc3996f4b8f9d9066e00b4599332b5a295074b8ee60c5feb5f1c0c149105c28fe5e944f2018a679e1717da3689b5100223f61612384a15350eb3ee6f67cf30"}}]}) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x152, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102cb6bd608012001372b9e010203010902400101050990050904a3ff06a23bf60109210006ea0122030309050b00ff03030701072501080405000725010407090009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x801600, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.27267009s ago: executing program 1 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000c40)="306663353a313232373a3f7092c0f0bccc488e937ed29879e6083376cf4e4fcb63d6ab4698cbbb31a7ce557cfc4d4701eae01794dc7af761ad80bd22fa41d7f8513cdb1e2a86ce27766a638ca1a0dbff0c85be04150f6b59b4719b80b595564162b2a30c402cc54c62e0ac0dc98f0720a05a4f83a132a90ebe109155f8ba470b", 0x80) (async) write(r0, &(0x7f0000000c40)="306663353a313232373a3f7092c0f0bccc488e937ed29879e6083376cf4e4fcb63d6ab4698cbbb31a7ce557cfc4d4701eae01794dc7af761ad80bd22fa41d7f8513cdb1e2a86ce27766a638ca1a0dbff0c85be04150f6b59b4719b80b595564162b2a30c402cc54c62e0ac0dc98f0720a05a4f83a132a90ebe109155f8ba470b", 0x80) mount_setattr(0xffffffffffffffff, 0x0, 0x2800, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) writev(r1, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) unshare(0x22020600) unshare(0x60000600) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x860f2b026d8c83da, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb37b, 0x10000) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000080)) (async) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000080)) 1.245288491s ago: executing program 1 (id=515): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) (async, rerun: 64) close(r0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000880) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000000)={0x0, "ea241af04c64a3157f9ccb1f1712df17"}) (async) mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000002) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async, rerun: 64) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000005c0)) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) 1.129174327s ago: executing program 4 (id=516): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x1c8) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) recvfrom$inet(r2, 0x0, 0x25, 0x61, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x51, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40006, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) syz_ublk_add_dev(r6, r8, r9, r10, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(r7, r12, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ef5, 0x2000, 0x401, 0x31c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff69, 0x10, 0x1, 0x2000008, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r7}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r11, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0xc0011022}]}) 993.060523ms ago: executing program 4 (id=517): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) setgroups(0x1, &(0x7f0000000040)=[0x0]) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x6, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@private1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) (async, rerun: 64) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007ac0)={&(0x7f0000007900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffd) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000001500)={&(0x7f0000000f80)={0x568, 0x14, 0x200, 0x70bd27, 0x25dfdbfe, {0x1e, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "2adf4c5c612d11146dc81fcb2cffe3a12cdacfeee305affeeb877c4f2763172a98b3b2868e15fd96d33dfe29658c95eb58557b538e801b2bc7aa6cc5babbac097d38dd31081b2cac76b2b419cb9b602bc5ffb19407a5414b516b31d276417008ff417c6800131d09b206733a7c468f990dd21ee665e8c14526"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "9dfc3cc9c80851814ba022c2a392146f2f1ef78ad6105fbbc2d09f41cc4ff6e4ccacb1fa7dcd32375d9993a890432d41ab65d4a1e500c06fa89b4b6aaf9aedfe70b70a7bafa13589801f740d1691b68522dd3d9ccb2913ccc583589e142eee606fddbc5f433a5cc51fc3cd53053e8805b156bfca8cc9bfd75ef1"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "70dfc284868f4ba048bd1dee20b594fb12dad25bebf266da7382a37e78ee9387abc807c693f2919b46fa6031fc793890f1e3a0238373f2b666c17b6bb75d1c1b1158e5908387973a8d92e705"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "000120e94b3a018edecea7c3e27f34bec2a46a7d5ab3e6156b29da44b53124cca3dbf3b1c44cba823fb0f62354f202111050ec31d39cf515c37d772cec4a9a55bff77a4ca1fdd358e1a7e266fef8490955763d8792aa9508d96d1eeda031b47ab97abe5aafa9c31d253c0c23494f4f6968db46b4768bc1197356528f5bea585990c9ef1972054982e998cadcbfe541cfc6832332a791f12d4a6a6e54a1ca4e83d2c5132d735967dbbcd9817b21b17d9fc0f6516510a84630ba957fb43e746195cef375dc38e21596eb4a28061639df86eb67ab97c84d354c40f68bf4008bc81a906c6d67c12684b67ccf5003b8e108ba"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "6db805f25ba2c06ca57fd072f34fc77e56c5309468bcf7d5cdbb3d5c634dfb60a7c9ada9fba7a784ac0f8eb188702c599f6e91ba503d5be0c9d87e2a6908ae5b1ff780681682b9404a578c64de6d4cff639f81883832d9f5c8d233f1ff95794d73850dfb727ec72abe49bbea7ee2c9ddfb0039abe35f5ea830f5f6227bd178b95cc9915fb852b2e25d21874e402e75bcb24a5f18873409f9e794"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "a56b448c2bdf4cef0438599c9482ed6962916e16ba64386d76ff7d4f924564d0f2fb844d1daebccc175240a6f711d5b843919a6a2f6db3af2c6c117d94ab65b8028aa401dcde8c39171d22b791bf648dd18deb5524795470698579d4a6ca2de0e9510a810dd9086937c884849c9be7148c00c900c132ee314c670357013ef00f3b73b4514afdb80aafa017294fc9286ee24b4825988e2e524db4d522a3190b725400a08e3388ce4cc46afb029d5bbf141c9b6337c5329eca982fe80fec76"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "1f94d5b5e6c8d453da4acf7adc5254b4be55fefce980ed2567d996b0f3672913f099918375d4d0ead3401d333b9b7a87830d44b4f46e72748013cb6ad175c8d745747ea44ea68b9da5733e6d17861327f32ad795f859af9723262d82723bfe8d045a96ece8307a3baa42ee28ee1737917166fe0b357f2d865a6e9d96d1b6e8edf98b580b08bc35009707b0ae3aeb236ede9bc4ce08dda046e9395155ba1bf859a9c644a3f43b4a8c011a2395bca62b8bfd2f8a8509f8bed5eaac432e45469549b5ffa74fc71b5a79333a2106a626bedc58603797909b08c2"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "41d319991af76ddd21438a64409029d0d0f091ec6ad607bc3dd71253f62dcc228dbfd9"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "db5fb3f4fe9fc2df0e94176aa370232537a0d5ab774389fb4f5c66d9aa0b773175959332361e84217a514b795b5bf3fe3af2829c3d2bbb03900a3c4d8f0c80d350e2cd132f0a53fd01091f6a467781988a321ec1b1f3248186a5bb5496deb3442d7aed042882abe7e2ed6303c6e2df52f60d23fb4af27f77f0e323495b2dbdce6db5cf2a4fe131cf702103843fa02b15074131c5561a7f784e4e2a8ac806627935"}]}, 0x568}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) (async) memfd_secret(0x80000) (async, rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x4000009c}}], 0x18}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) r11 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000380)=@ethtool_rx_ntuple={0x35, {0x3, @tcp_ip4_spec={@empty, @multicast1, 0x4e22, 0x4e20, 0x28}, @tcp_ip4_spec={@private=0xa010102, @multicast2, 0x4e22, 0x4e24, 0x3}, 0x2, 0x7fff, 0x8, 0x10000, 0xfffffffffffffffe}}}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 957.555475ms ago: executing program 4 (id=518): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) 889.086948ms ago: executing program 4 (id=519): creat(&(0x7f0000000180)='./file0\x00', 0x18b) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f0000000280)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000), 0x280c00c, &(0x7f0000000040)={[{@favordynmods}, {@memory_localevents}]}) creat(&(0x7f0000000180)='./file0\x00', 0x18b) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) (async) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f0000000280)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000), 0x280c00c, &(0x7f0000000040)={[{@favordynmods}, {@memory_localevents}]}) (async) 888.680248ms ago: executing program 4 (id=520): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)={0x14, 0x42, 0x601, 0x0, 0x25dfdbff, "", [@typed={0x4, 0x200}]}, 0x14}], 0x1}, 0x800) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000)=0x9000000, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)=ANY=[@ANYBLOB='t[ans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) mknod(&(0x7f0000000440)='./file0\x00', 0x8000, 0xf92e) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000004c0)) sendmmsg(r5, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="240627d0a1b0ae220732a7c9a4794f540c37f1", 0x13}, {&(0x7f0000000040)="38032f2c8e9b62bd895bdad18be1a5579f22e49ea6e3570b797a81b5a4f0d8448a5d37bc69f7c85aafe1d8232fdd34c24dc41f660f229a9eb9ead5155aaa24a9142b16401303bacde4effb5f9b41609a8bdbc3babeab5beef27ec7389b369c0d14492a769c5057106b05ff18f664b7a7", 0x70}, {&(0x7f00000000c0)="2fdc2e1c48c17c5d4baf3d211419df28b2b1f187195f32b1a7639c4689996283a3c270ea055733249f7b85d19bc65a5cadb9eb34158a58657a8d90ea26ca31fea67f98e2eedff2a5713f9499c1a0a015fbd37bf6d15d10ffa431040fc780aa0b62e1ed3ea65720f7d8d56ab73426304bdeb703d64051a559c6efc186f0c6729db6996d108ddbf62000dc8e32f7dc1a661dddfa3bc29770780e41800d620eeb8b8fdce2904126d542f01acda36053e415d9c5343dd6fe284759dd3a58dfe1f92d55fb14c9d8e50c4dbe15a5f915a91f1551c60cf7f72f413abde0ba65b4fdb756a3045825dad85de4e62548b35f52f6d2e24911e4", 0xf4}], 0x3, &(0x7f0000000240)}}, {{&(0x7f0000000280)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000300)="ca3e9ce2a51c11366c2c0d2939340bdf445fd7145ae2a21183a9f89087701cc18cf00a680958c23df52f97919405f659728894757fee5c8d148f98a35d4825bc0c95204237262ea0aee84e25fefac88d19a869dd851dfaece5a0947bc0d2b2a3b0088bd550a60a3477266242f2fe573149021ecac3", 0x75}, {&(0x7f0000000380)="604b8798334bb7d37ddf41b986603c244fc9210d28ca6d8678c0d0a6433e957bb7db94b85c9a467eed57328d5078a53f3a42252fb424418cf69aad44b6c690aa669f0452f4ae438778ec1635ce7de2c63eeb0a12758eb756a838b152bc1b6b86464b3c782c053d2a9db72de4e53e6715af36b32e6fc7cba05381369478c6a11c5e4a3b1ce62def42e54f", 0x8a}, {&(0x7f0000000540)="05e2d79be21b46378550d3c38e5d03f1c8b7b0f057022384e359b5f46f7518285d9c70f672a4572cc8d0b64c68b3c427b4b4b03074f6d02dcaa1046ebbb20b12cf456cf9198fb099c2ffccd5228a4f1e664276612b4699d43c1bdca6f8d01b8f76a5134b17513bde5d193b3c138c2f98c0900f8cab4b01bd77cff3f8a35fcc84ae409714b8b10225c436dd9daedde8391e432a03416f924dbd632e2619d5cc79bf3467d8c8da38ea61a90dff9863946e3eb74c975b3afe041edc76b226e68cfcb99cd1fc0bf8cb41b535334eea8acdce3b8d70", 0xd3}, {&(0x7f0000000640)="0bef03c0ae32c29fce30b756", 0xc}, {&(0x7f0000000680)="c44ab9ad139f398943bcc0c7cfa83c8478a3493d6a2cf337971059ad03771b869294fa2185cf24df7caf28e8cebbbda830d95cdd7f667ce3a4afcafebfaedf3191c0033e490db3abc6181d8083774853568a7d757c2f08433a950d3899846a96b733e62b249327df25c0248fbc46af1c2137ccaa38ca0b72042f6c309dafa36e5580cee01b603b7e0d2afe328828bc43a8d8acfa1ea52b467c95885afe863f243cdf07b3d1417c8d19debbe03b5527ad5b0f4a4b8042", 0xb6}, {&(0x7f0000000740)="140f67bef21352666d8d154a7dd790f75aea74ab19076d439b0b9d045a168a6db33a79732e73f99d2cfc5c4f2578d0f1a9987d43fc1d84a32c17f988b2138fa4102e0a60dc3ac34135d55c8a396f0369e30dc5330d08b26f20e4002c00f66b179434660709eb61b32cc88ac961c6a17c4dd6ea586a171fd986433da9febb3b144b2d0bae0ca6c8bba5681434279e2e3561ca358405fa1caabec54069e7c5e08fab57849632adfb82c6524815cfb13fd7b35bae54f7cfa6b39d60d56e0ae2810cf9c607665828cb6259bc1c7efb586876f6f723e08d06a691d96427950fcfb19635879aa27e9b619bd5a17cb06b0ede0b", 0xf0}, {&(0x7f0000000840)="0b2efb35f469a9a9b740fd2f982bae014c346eb65ef5d14a185564fe0d0f7b51de1f1d5aec3baaa8f2f175a7ac86d18f87f73159a921f825d8416da2", 0x3c}, {&(0x7f0000000880)="ca88ffd9befb5aa4cc5048c9d89d7558d91458b5ce86c9f04dd72660f077dd2e7135631da9568ff2398bb15245d0e3a2412d0bd5e2eb59828e0d2b995aff85d2ebb29e64255fb84ba4007c87ad2d780672bb547510eb1a3c7871f7e94508e286ba7b5040b3d3aaa829c266e93dfc65182062a2bc", 0x74}, {&(0x7f0000000900)="6bd9dfa270099d4f73262dd2b6269fcb03bd750907484f31615f266f7e613badbee6a493e95f3134e194c2240058a5bf373b83fadefd1840f5b7d2c0bf97669417ad3548ba96c9b4b60a12ead2f2ec194a1eacb9ae487418dbe4c076c5b269db95ce3cdf", 0x64}, {&(0x7f0000000980)="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", 0x1000}], 0xa, &(0x7f0000001a40)=[{0x10, 0x111, 0x5}, {0x18, 0x138, 0x5, "98e910e00bd6"}, {0x70, 0x103, 0x4, "7187fde70bc0b2fb89d176d174c593d347a685e103b4dc7e2a160376f27b58cfaf936b347849b1f71421d3a9f433da533323c803585f6d0ecc03915aa2f575599d4351cf928a9cf86f41e5328cffde71fb4c58c3e519cfb1b06be7d3d8bcbd"}], 0x98}}, {{&(0x7f0000001b00)=@phonet={0x23, 0x7, 0x6c, 0x3}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001b80)="7bc0643d5d8d1cc47d42f8cc2b443c49eb36e3bf2b3ee509ffc347ce057a5579b3730be7297565", 0x27}, {&(0x7f0000001bc0)="3d09fdb50c6b031dc8eed69ef91682c05835faf50404a8d418a8face329efb639931dc5c600ad1be3d575ba243d7977e6c9311433f6538e4b6fdee75ef6939dd4ef320dfd7d56979ee1f0d4e38ff3246530a7ed61e1f29fcbc6e52452d7c57196b46330c6edb41104c408ad71b2d26d7b2c2dea903a13d1939e4b56cf1634496630811343ab4610095e3069a8106654740cb08f2e6c1f01126b7f4a8432a8b86413517919514d5468f11c26fc5d7a7a18f9f95c67d65cdaa6e09017489cf6c92e86aca16248a9660cf850b29468ea12703f2c8d540f9679484beb469ebfd5e62f0", 0xe1}, {&(0x7f0000001cc0)="e31adb8425a6ba9efaf5655a7461c31bfca002c59cc385f4b893dcf9343078f3c490a6f192df20e1bb8fdcf202a71d529373c974ba76e4e81aa6bcead1fd426307dcd7923c71f59d25b380afc8cd006f19453f2e9c2371724496c08d05186b96778324d6ab57a9044eb3a53e5a0df95e165f452465e00e6502d411c70bd460cf43db3794", 0x84}, {&(0x7f0000001d80)="4523e5b90bc1a74506e73073e575b60ba5f10d120047982886426e68abe8469ca8210af66a2c4eb8e29b135ecc0d818076ee297ed4ee8979f206e8dcca728b857009f53023705216236813874aa3203d6857433719298c86a1862f61567ce4db75391ca2b4396d4bceca0109c077d2fcfea49e5d51bb6e26401ff1f17cb55867a99dc5519285b8c74ee35129a787b7005d94704f029ec63055a5989972", 0x9d}], 0x4, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x3b0}}], 0x3, 0x800) 742.365525ms ago: executing program 4 (id=522): openat$kvm(0xffffffffffffff9c, 0x0, 0x616002, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x616002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904214000020d00", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r1], 0x0) 417.0304ms ago: executing program 2 (id=528): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000800)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x492e015bd3f18f6d, @remote}, 0x1e, {0x2, 0x4e20, @empty}}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x6, 0x7, 0x81, 0x4}, {0x8, 0xf8, 0x2, 0x7}, {0x1, 0x8, 0x6, 0x7}, {0xffff, 0x54, 0xf3, 0x2}, {0x8001, 0x6, 0xd, 0x3}]}, 0x10) 415.381451ms ago: executing program 2 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000100)=[{0x48, 0x40, 0x0, 0xffffffff}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000240)={0x9c, 0x1f21}) socket$tipc(0x1e, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044888) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./tracing\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', r3, 0x0) 392.198061ms ago: executing program 2 (id=530): unshare(0x4000600) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f9, 0x100, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x20008004) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x6, 0x1, 0x1, 0x6, 0x0, 0x1}, &(0x7f0000000040)=0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc00100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x8014}, 0x200000f0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) unshare(0x6020400) 347.162294ms ago: executing program 2 (id=531): mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) listen(r0, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x288, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xc0}, {0x8, 0xb, 0x10}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb37}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb8bb}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xffa5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0xe256}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x68}, {0x8, 0xb, 0x6}}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000880}, 0x20014801) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x15, 0x3, 0x80}, 0x30, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x5, 0x6, 0x1}, {0x8000000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xeeef0000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x5, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x44, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x88c, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) close(0x3) 290.519046ms ago: executing program 1 (id=532): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x66) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x2}) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000840)={0xff600000, 0x8}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8008, &(0x7f0000000500)={[{@verity_require}, {@metacopy_off}]}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x10, 0x5, 0x0, 0x5, 0xfd, 0x2, 0x5, 0xff, 0xf6, 0x7f, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x26000, 0xd, 0x7c, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x6, 0xeb, 0x4, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0x4000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0x6}, {0x6000, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x8000000, 0xffff1000, 0x0, 0x0, 0xc2, 0x6, 0x4, 0x6, 0x2, 0x14}, {0x54000, 0x1, 0x0, 0x8, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x1, 0x0, 0xfd, 0x4, 0x20}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x6, 0x3, 0x0, 0xfe}, {0x80f1000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x7, 0xf801, 0x3000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 145.081343ms ago: executing program 1 (id=533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, @in6=@private0, {0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x2}, 0x0, 0x3501, 0xa, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 132.792824ms ago: executing program 1 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000001c0)=@generic={0x0, 0x7f, 0x1}) setresuid(0xee00, 0xee00, 0x0) setpriority(0x1, 0x0, 0xfffffffffffff000) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f0000000040)=0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1105}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 1.19417ms ago: executing program 2 (id=535): socket(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 0s ago: executing program 2 (id=536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x9, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffd, 0x0, 0x0, 0x1, 0x100}}, 0x50) mmap$IORING_OFF_SQES(0x0, 0x9, 0x2, 0x40010, r2, 0x10000000) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x2d, 0x14c, 0x8000, 0x6, 0x1, 0xe, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4}) kernel console output (not intermixed with test programs): 360 [ 56.309308][ T868] ? __kasan_check_write+0x18/0x20 [ 56.309331][ T868] ? rwsem_read_trylock+0x275/0x5a0 [ 56.309372][ T868] __lookup_slow+0x150/0x420 [ 56.309394][ T868] ? lookup_one_len+0x300/0x300 [ 56.309415][ T868] ? down_read+0x7f/0xe0 [ 56.309449][ T868] ? __cfi_down_read+0x10/0x10 [ 56.309481][ T868] lookup_slow+0x57/0x80 [ 56.309511][ T868] walk_component+0x308/0x450 [ 56.309536][ T868] link_path_walk+0x723/0xeb0 [ 56.309573][ T868] path_openat+0x298/0x35a0 [ 56.309612][ T868] ? schedule+0xc5/0x240 [ 56.309638][ T868] ? kasan_save_alloc_info+0x3a/0x50 [ 56.309659][ T868] ? __kasan_slab_alloc+0x73/0x90 [ 56.309691][ T868] ? getname+0x1b/0x30 [ 56.309709][ T868] ? x64_sys_call+0xe69/0x2ee0 [ 56.309724][ T868] ? do_syscall_64+0x57/0xf0 [ 56.309741][ T868] ? do_filp_open+0x440/0x440 [ 56.309793][ T868] do_filp_open+0x1f2/0x440 [ 56.309823][ T868] ? __cfi_do_filp_open+0x10/0x10 [ 56.309858][ T868] ? __cfi_kfree_link+0x10/0x10 [ 56.309884][ T868] ? alloc_fd+0x4c1/0x570 [ 56.309924][ T868] do_sys_openat2+0x134/0x1d0 [ 56.309956][ T868] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.309981][ T868] ? do_sys_open+0x100/0x100 [ 56.310019][ T868] __x64_sys_openat+0x13a/0x170 [ 56.310044][ T868] x64_sys_call+0xe69/0x2ee0 [ 56.310080][ T868] do_syscall_64+0x57/0xf0 [ 56.310100][ T868] ? clear_bhb_loop+0x50/0xa0 [ 56.310128][ T868] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.310158][ T868] RIP: 0033:0x7f9deb15e98e [ 56.310172][ T868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.310186][ T868] RSP: 002b:00007f9debfddec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.310228][ T868] RAX: ffffffffffffffda RBX: 00007f9debfde6c0 RCX: 00007f9deb15e98e [ 56.310246][ T868] RDX: 0000000000000002 RSI: 00007f9debfddf90 RDI: ffffffffffffff9c [ 56.310262][ T868] RBP: 00007f9deb23506b R08: 0000000000000000 R09: 0000000000000000 [ 56.310277][ T868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.310297][ T868] R13: 00007f9deb426038 R14: 00007f9deb425fa0 R15: 00007ffc0fefb9a8 [ 56.310312][ T868] [ 56.651163][ C1] usb 4-1: eth1: intr status -71 [ 56.656383][ C1] usb 4-1: eth1: intr status -71 [ 56.661529][ C1] usb 4-1: eth1: intr status -71 [ 56.666596][ T311] usb 4-1: USB disconnect, device number 16 [ 56.672542][ C1] usb 4-1: eth1: intr status -71 [ 56.677586][ T481] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 56.689796][ T481] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.703355][ T481] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 56.714458][ T481] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 56.737509][ T481] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.749932][ T481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.758171][ T481] usb 5-1: SerialNumber: syz [ 56.767213][ T864] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 56.875781][ T444] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 56.921694][ T893] mmap: syz.2.152 (893) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.934186][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 56.934205][ T36] audit: type=1400 audit(2000000008.600:323): avc: denied { open } for pid=891 comm="syz.2.152" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.934968][ T892] 9pnet_fd: Insufficient options for proto=fd [ 56.977704][ T481] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 56.985255][ T481] usb 5-1: USB disconnect, device number 4 [ 57.032132][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.041010][ T901] FAULT_INJECTION: forcing a failure. [ 57.041010][ T901] name failslab, interval 1, probability 0, space 0, times 0 [ 57.042233][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.053719][ T901] CPU: 1 UID: 0 PID: 901 Comm: syz.2.153 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 57.053812][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.053853][ T901] Call Trace: [ 57.053873][ T901] [ 57.053901][ T901] __dump_stack+0x21/0x30 [ 57.054009][ T901] dump_stack_lvl+0x140/0x1c0 [ 57.054092][ T901] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.054173][ T901] ? _raw_spin_lock+0x92/0x120 [ 57.054231][ T901] ? __cfi__raw_spin_lock+0x10/0x10 [ 57.054282][ T901] ? __asan_memset+0x39/0x50 [ 57.054338][ T901] dump_stack+0x19/0x20 [ 57.054405][ T901] should_fail_ex+0x3c2/0x510 [ 57.054481][ T901] should_failslab+0xac/0x100 [ 57.054539][ T901] kmem_cache_alloc_noprof+0x42/0x410 [ 57.054601][ T901] ? alloc_empty_file+0xbf/0x270 [ 57.054673][ T901] ? mntput_no_expire+0x104/0x6c0 [ 57.054766][ T901] alloc_empty_file+0xbf/0x270 [ 57.054845][ T901] dentry_open+0x4b/0xb0 [ 57.054927][ T901] __se_sys_open_tree+0x798/0x900 [ 57.054988][ T901] ? __x64_sys_open_tree+0xa0/0xa0 [ 57.055048][ T901] ? __kasan_check_write+0x18/0x20 [ 57.055109][ T901] ? fpregs_restore_userregs+0x11c/0x260 [ 57.055186][ T901] __x64_sys_open_tree+0x7f/0xa0 [ 57.055260][ T901] x64_sys_call+0x2d58/0x2ee0 [ 57.055330][ T901] do_syscall_64+0x57/0xf0 [ 57.055381][ T901] ? clear_bhb_loop+0x50/0xa0 [ 57.055452][ T901] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.055524][ T901] RIP: 0033:0x7feb6f99e159 [ 57.055578][ T901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.055629][ T901] RSP: 002b:00007feb708b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 57.055690][ T901] RAX: ffffffffffffffda RBX: 00007feb6fc26360 RCX: 00007feb6f99e159 [ 57.055733][ T901] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 57.055772][ T901] RBP: 00007feb6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 57.055813][ T901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.055844][ T901] R13: 00007feb6fc263f8 R14: 00007feb6fc26360 R15: 00007fff374711d8 [ 57.055894][ T901] [ 57.278577][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.280849][ T444] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 57.288536][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.296499][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.306306][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.313345][ T444] usb 2-1: Product: syz [ 57.323828][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.327608][ T444] usb 2-1: Manufacturer: syz [ 57.336112][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.339661][ T444] usb 2-1: SerialNumber: syz [ 57.349372][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.358100][ T444] ums-karma 2-1:1.0: USB Mass Storage device detected [ 57.368006][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.371963][ T444] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 57.371963][ T444] Please send a copy of this message to and [ 57.379811][ T897] kvm: kvm [896]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 57.523653][ T910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.156'. [ 57.735480][ T481] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 57.758003][ T870] netlink: 'syz.1.149': attribute type 10 has an invalid length. [ 57.796359][ T444] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 57.808303][ T444] usb 2-1: USB disconnect, device number 14 [ 57.815871][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.865776][ T311] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 57.885310][ T481] usb 3-1: Using ep0 maxpacket: 8 [ 57.891475][ T481] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 57.899664][ T481] usb 3-1: config 0 has no interface number 0 [ 57.907117][ T481] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 57.916247][ T481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.924268][ T481] usb 3-1: Product: syz [ 57.928524][ T481] usb 3-1: Manufacturer: syz [ 57.933133][ T481] usb 3-1: SerialNumber: syz [ 57.938980][ T481] usb 3-1: config 0 descriptor?? [ 57.966824][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.975384][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.985802][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.996623][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 58.005725][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.013737][ T9] usb 5-1: Product: syz [ 58.017442][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.018480][ T9] usb 5-1: Manufacturer: syz [ 58.028577][ T311] usb 4-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 58.032663][ T9] usb 5-1: SerialNumber: syz [ 58.041969][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.055675][ T9] usb 5-1: selecting invalid altsetting 1 [ 58.061616][ T9] usb 5-1: unit 6 not found! [ 58.066333][ T311] usb 4-1: config 0 descriptor?? [ 58.238839][ T481] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 58.245682][ T481] usb 3-1: No valid video chain found. [ 58.252371][ T481] usb 3-1: USB disconnect, device number 18 [ 58.306213][ T36] audit: type=1400 audit(2000000009.970:324): avc: denied { read } for pid=919 comm="syz.1.160" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.347580][ T36] audit: type=1400 audit(2000000010.010:325): avc: denied { ioctl } for pid=919 comm="syz.1.160" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.473769][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 58.480340][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 58.489715][ T311] usb 4-1: USB disconnect, device number 17 [ 58.645304][ T444] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 58.796322][ T444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.808391][ T444] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.817884][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.825991][ T444] usb 2-1: Product: syz [ 58.830315][ T444] usb 2-1: Manufacturer: syz [ 58.834940][ T444] usb 2-1: SerialNumber: syz [ 58.863431][ T9] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 58.878991][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.897548][ T9] usb 5-1: USB disconnect, device number 5 [ 58.908251][ T926] udevd[926]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.992230][ T36] audit: type=1400 audit(2000000010.650:326): avc: denied { read write } for pid=927 comm="syz.3.162" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.995513][ T922] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 59.016232][ T36] audit: type=1400 audit(2000000010.650:327): avc: denied { open } for pid=927 comm="syz.3.162" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.026151][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.059875][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.205956][ T922] usb 3-1: not running at top speed; connect to a high speed hub [ 59.214952][ T922] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 59.226271][ T922] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 147, changing to 4 [ 59.239486][ T922] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 59.248745][ T922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.257335][ T922] usb 3-1: Product: ꅷﯡꃝ榤洳샋抪뿚甥슭ⶄ湈෉ṅ儥㶙ퟄ涰䙤㜢╆쭬磹⪢甧샙숉␸紶셴醒쨲匡쎆구䶓셿 [ 59.272237][ T922] usb 3-1: Manufacturer: 䘉雱抶龃⌌ᓇ鸃ö⪕ⰻ旽떂후⎉䁱惛発鸓眴룜磼 [ 59.282611][ T922] usb 3-1: SerialNumber: С [ 59.405289][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 59.462504][ T36] audit: type=1326 audit(2000000011.120:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=931 comm="syz.4.163" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70be39e159 code=0x0 [ 59.494682][ T922] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 59.506452][ T922] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 59.518025][ T922] usb 3-1: USB disconnect, device number 19 [ 59.531687][ T926] udevd[926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.566513][ T9] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 59.568692][ T933] overlayfs: failed to resolve 'upper': -2 [ 59.577865][ T9] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.593701][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 59.604293][ T9] usb 4-1: string descriptor 0 read error: -22 [ 59.610836][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 59.619971][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.037747][ T928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.044029][ T940] device-mapper: ioctl: device name cannot contain '/' [ 60.055547][ T928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.066140][ T9] usbhid 4-1:1.0: can't add hid device: -32 [ 60.074470][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 60.093285][ T9] usb 4-1: USB disconnect, device number 18 [ 60.121275][ T944] wireguard: wg1: Could not create IPv4 socket [ 60.312529][ T36] audit: type=1400 audit(2000000011.970:329): avc: denied { read } for pid=952 comm="syz.4.169" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.335529][ T36] audit: type=1400 audit(2000000011.970:330): avc: denied { open } for pid=952 comm="syz.4.169" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.358417][ T36] audit: type=1400 audit(2000000011.970:331): avc: denied { ioctl } for pid=952 comm="syz.4.169" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.688243][ T36] audit: type=1400 audit(2000000268.351:332): avc: denied { write } for pid=966 comm="syz.3.173" name="/" dev="incremental-fs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.395605][ T990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.500751][ T995] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 61.716242][ T1004] veth1: entered allmulticast mode [ 61.737003][ T1006] fuse: Bad value for 'fd' [ 61.741601][ T1006] fuse: Bad value for 'fd' [ 61.760322][ T1006] fuse: Bad value for 'fd' [ 61.765992][ T1006] fuse: Bad value for 'fd' [ 61.775369][ T1006] fuse: Bad value for 'fd' [ 61.785462][ T1006] fuse: Bad value for 'fd' [ 61.805478][ T1006] fuse: Bad value for 'fd' [ 61.810118][ T1006] fuse: Bad value for 'fd' [ 61.815527][ T1006] fuse: Bad value for 'fd' [ 61.825522][ T1006] fuse: Bad value for 'fd' [ 61.845431][ T1006] fuse: Bad value for 'fd' [ 61.855380][ T1006] fuse: Bad value for 'fd' [ 61.859970][ T1006] fuse: Bad value for 'fd' [ 61.874648][ T1006] fuse: Bad value for 'fd' [ 61.885447][ T1006] fuse: Bad value for 'fd' [ 61.890013][ T1006] fuse: Bad value for 'fd' [ 61.894583][ T1006] fuse: Bad value for 'fd' [ 61.913920][ T1006] fuse: Bad value for 'fd' [ 61.925411][ T1006] fuse: Bad value for 'fd' [ 61.929985][ T1006] fuse: Bad value for 'fd' [ 61.934534][ T1006] fuse: Bad value for 'fd' [ 61.953319][ T1006] fuse: Bad value for 'fd' [ 61.965420][ T1006] fuse: Bad value for 'fd' [ 61.970046][ T1006] fuse: Bad value for 'fd' [ 61.974584][ T1006] fuse: Bad value for 'fd' [ 62.005501][ T1006] fuse: Bad value for 'fd' [ 62.010384][ T1006] fuse: Bad value for 'fd' [ 62.015126][ T1006] fuse: Bad value for 'fd' [ 62.045377][ T1006] fuse: Bad value for 'fd' [ 62.050272][ T1006] fuse: Bad value for 'fd' [ 62.054884][ T1006] fuse: Bad value for 'fd' [ 62.059556][ T1006] fuse: Bad value for 'fd' [ 62.064220][ T1006] fuse: Bad value for 'fd' [ 62.069755][ T1003] veth1: left allmulticast mode [ 62.137188][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 62.137206][ T36] audit: type=1400 audit(2000000269.801:338): avc: denied { ioctl } for pid=1014 comm="syz.4.181" path="socket:[16675]" dev="sockfs" ino=16675 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.210801][ T36] audit: type=1400 audit(2000000269.801:339): avc: denied { getopt } for pid=1014 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.412038][ T1022] cgroup: fork rejected by pids controller in /syz2 [ 62.565277][ T311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 62.725277][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 62.733091][ T311] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 62.742497][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.750861][ T311] usb 5-1: Product: syz [ 62.755083][ T311] usb 5-1: Manufacturer: syz [ 62.759960][ T311] usb 5-1: SerialNumber: syz [ 62.866752][ T36] audit: type=1400 audit(2000000270.531:340): avc: denied { read } for pid=1089 comm="syz.2.185" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.174123][ T1095] FAULT_INJECTION: forcing a failure. [ 63.174123][ T1095] name failslab, interval 1, probability 0, space 0, times 0 [ 63.186995][ T1095] CPU: 0 UID: 0 PID: 1095 Comm: syz.2.187 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 63.187027][ T1095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.187050][ T1095] Call Trace: [ 63.187056][ T1095] [ 63.187065][ T1095] __dump_stack+0x21/0x30 [ 63.187101][ T1095] dump_stack_lvl+0x140/0x1c0 [ 63.187130][ T1095] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.187159][ T1095] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 63.187180][ T1095] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 63.187201][ T1095] dump_stack+0x19/0x20 [ 63.187227][ T1095] should_fail_ex+0x3c2/0x510 [ 63.187255][ T1095] should_failslab+0xac/0x100 [ 63.187281][ T1095] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 63.187304][ T1095] ? __sock_create+0x3a2/0x810 [ 63.187326][ T1095] ? __sys_socket+0xe1/0x1c0 [ 63.187348][ T1095] ? __d_alloc+0x42/0x8c0 [ 63.187368][ T1095] ? expand_files+0xda/0x6f0 [ 63.187395][ T1095] __d_alloc+0x42/0x8c0 [ 63.187414][ T1095] d_alloc_pseudo+0x23/0xc0 [ 63.187434][ T1095] alloc_file_pseudo+0xde/0x1f0 [ 63.187461][ T1095] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 63.187489][ T1095] ? _raw_spin_unlock+0x45/0x60 [ 63.187512][ T1095] sock_alloc_file+0xbe/0x2b0 [ 63.187532][ T1095] __sys_socket+0x14c/0x1c0 [ 63.187557][ T1095] __x64_sys_socket+0x7e/0x90 [ 63.187579][ T1095] x64_sys_call+0x2608/0x2ee0 [ 63.187597][ T1095] do_syscall_64+0x57/0xf0 [ 63.187616][ T1095] ? clear_bhb_loop+0x50/0xa0 [ 63.187643][ T1095] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.187667][ T1095] RIP: 0033:0x7feb6f99e159 [ 63.187684][ T1095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.187701][ T1095] RSP: 002b:00007feb7093a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 63.187722][ T1095] RAX: ffffffffffffffda RBX: 00007feb6fc25fa0 RCX: 00007feb6f99e159 [ 63.187738][ T1095] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 63.187750][ T1095] RBP: 00007feb6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 63.187763][ T1095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.187777][ T1095] R13: 00007feb6fc26038 R14: 00007feb6fc25fa0 R15: 00007fff374711d8 [ 63.187795][ T1095] [ 63.434882][ T1095] kvm_pr_unimpl_wrmsr: 55 callbacks suppressed [ 63.434917][ T1095] kvm: kvm [1094]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 63.450197][ T1095] kvm: kvm [1094]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 63.462657][ T1095] kvm: kvm [1094]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 63.476072][ T1095] kvm: kvm [1094]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 63.485624][ T1095] kvm: kvm [1094]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 63.570805][ T36] audit: type=1400 audit(2000000271.231:341): avc: denied { write } for pid=1018 comm="syz.4.183" path="socket:[16808]" dev="sockfs" ino=16808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 64.075276][ T922] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 64.225320][ T922] usb 4-1: device descriptor read/64, error -71 [ 64.465277][ T922] usb 4-1: device descriptor read/64, error -71 [ 64.505464][ T444] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 64.525513][ T444] cdc_ncm 2-1:1.0: bind() failure [ 64.531776][ T444] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 64.538810][ T444] cdc_ncm 2-1:1.1: bind() failure [ 64.595166][ T311] usb 5-1: MIDIStreaming interface descriptor not found [ 64.610728][ T311] usb 5-1: USB disconnect, device number 6 [ 64.618455][ T31] usb 2-1: USB disconnect, device number 15 [ 64.640585][ T652] udevd[652]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.643088][ T1107] netlink: 'syz.1.190': attribute type 58 has an invalid length. [ 64.725413][ T922] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 64.865327][ T922] usb 4-1: device descriptor read/64, error -71 [ 65.105306][ T922] usb 4-1: device descriptor read/64, error -71 [ 65.191211][ T1114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.199934][ T1114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.215451][ T922] usb usb4-port1: attempt power cycle [ 65.435304][ T444] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 65.555305][ T922] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 65.576460][ T922] usb 4-1: device descriptor read/8, error -71 [ 65.611055][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.622223][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.644202][ T444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.657597][ T444] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.666928][ T444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.692808][ T444] usb 5-1: config 0 descriptor?? [ 65.711807][ T922] usb 4-1: device descriptor read/8, error -71 [ 65.965270][ T922] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 65.997735][ T922] usb 4-1: device descriptor read/8, error -71 [ 66.126453][ T922] usb 4-1: device descriptor read/8, error -71 [ 66.235456][ T922] usb usb4-port1: unable to enumerate USB device [ 66.755292][ T922] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 66.848716][ T1125] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 66.858992][ T36] audit: type=1400 audit(2000000274.521:342): avc: denied { relabelto } for pid=1124 comm="syz.3.194" name="mysys" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 66.904942][ T36] audit: type=1400 audit(2000000274.521:343): avc: denied { associate } for pid=1124 comm="syz.3.194" name="mysys" dev="tmpfs" ino=209 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 66.928023][ T922] usb 3-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 66.934026][ T36] audit: type=1400 audit(2000000274.561:344): avc: denied { rmdir } for pid=295 comm="syz-executor" name="mysys" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 66.955390][ T922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.975840][ T922] usb 3-1: Product: syz [ 66.980100][ T922] usb 3-1: Manufacturer: syz [ 66.984769][ T922] usb 3-1: SerialNumber: syz [ 67.206577][ T1122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.216528][ T1122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.226617][ T1122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.236752][ T1122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.245095][ T36] audit: type=1400 audit(2000000274.901:345): avc: denied { setopt } for pid=1121 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.420743][ T922] usb 3-1: Can't get UAC3 power state for id 10 [ 67.431702][ T922] usb 3-1: BAAD SPEAKERPHONE c_chmask mismatch [ 67.452289][ T922] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 67.470323][ T922] usb 3-1: USB disconnect, device number 20 [ 67.485691][ T926] udevd[926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.611727][ T311] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 67.644845][ T1141] fido_id[1141]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.847659][ T36] audit: type=1400 audit(2000000275.511:346): avc: denied { associate } for pid=1146 comm="syz.2.202" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.925272][ T922] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 68.095529][ T922] usb 2-1: Invalid ep0 maxpacket: 16 [ 68.155282][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 68.235324][ T922] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 68.243929][ T444] usbhid 5-1:0.0: can't add hid device: -71 [ 68.250827][ T444] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 68.261971][ T444] usb 5-1: USB disconnect, device number 7 [ 68.316353][ T9] usb 3-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 68.326655][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.335606][ T9] usb 3-1: config 0 interface 0 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.350351][ T36] audit: type=1400 audit(2000000276.011:347): avc: denied { read } for pid=1156 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.369713][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.386247][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 68.395504][ T922] usb 2-1: Invalid ep0 maxpacket: 16 [ 68.407313][ T922] usb usb2-port1: attempt power cycle [ 68.413220][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.421776][ T9] usb 3-1: Product: syz [ 68.426482][ T9] usb 3-1: Manufacturer: syz [ 68.431322][ T9] usb 3-1: SerialNumber: syz [ 68.440341][ T9] usb 3-1: config 0 descriptor?? [ 68.451687][ T9] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 68.458205][ T9] usb 3-1: No valid video chain found. [ 68.649149][ T9] usb 3-1: USB disconnect, device number 21 [ 68.725312][ T444] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.755304][ T922] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 68.779895][ T1181] SELinux: failed to load policy [ 68.785316][ T36] audit: type=1400 audit(2000000276.431:348): avc: denied { load_policy } for pid=1176 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.805724][ T922] usb 2-1: Invalid ep0 maxpacket: 16 [ 68.905335][ T444] usb 5-1: Using ep0 maxpacket: 16 [ 68.911099][ T444] usb 5-1: no configurations [ 68.916013][ T444] usb 5-1: can't read configurations, error -22 [ 68.945296][ T922] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 68.965694][ T922] usb 2-1: Invalid ep0 maxpacket: 16 [ 68.971355][ T922] usb usb2-port1: unable to enumerate USB device [ 69.045291][ T444] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.205301][ T444] usb 5-1: Using ep0 maxpacket: 16 [ 69.211069][ T444] usb 5-1: no configurations [ 69.215834][ T444] usb 5-1: can't read configurations, error -22 [ 69.222355][ T444] usb usb5-port1: attempt power cycle [ 69.435302][ T922] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 69.565285][ T444] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 69.573284][ T922] usb 3-1: device descriptor read/64, error -71 [ 69.581516][ T1186] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.605782][ T444] usb 5-1: Using ep0 maxpacket: 16 [ 69.611406][ T444] usb 5-1: no configurations [ 69.616265][ T444] usb 5-1: can't read configurations, error -22 [ 69.644073][ T36] audit: type=1400 audit(2000000277.301:349): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.755473][ T444] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 69.786307][ T444] usb 5-1: Using ep0 maxpacket: 16 [ 69.791935][ T444] usb 5-1: no configurations [ 69.796944][ T444] usb 5-1: can't read configurations, error -22 [ 69.803538][ T36] audit: type=1400 audit(2000000277.461:350): avc: denied { mounton } for pid=1202 comm="syz.3.217" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 69.826860][ T444] usb usb5-port1: unable to enumerate USB device [ 69.835294][ T922] usb 3-1: device descriptor read/64, error -71 [ 69.852702][ T1206] FAULT_INJECTION: forcing a failure. [ 69.852702][ T1206] name fail_futex, interval 1, probability 0, space 0, times 1 [ 69.865616][ T1206] CPU: 0 UID: 0 PID: 1206 Comm: syz.3.218 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 69.865660][ T1206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.865679][ T1206] Call Trace: [ 69.865685][ T1206] [ 69.865693][ T1206] __dump_stack+0x21/0x30 [ 69.865722][ T1206] dump_stack_lvl+0x140/0x1c0 [ 69.865745][ T1206] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.865771][ T1206] dump_stack+0x19/0x20 [ 69.865793][ T1206] should_fail_ex+0x3c2/0x510 [ 69.865814][ T1206] should_fail+0xf/0x20 [ 69.865833][ T1206] get_futex_key+0x178/0x940 [ 69.865854][ T1206] ? __cfi___futex_wait+0x10/0x10 [ 69.865870][ T1206] ? __cfi_get_futex_key+0x10/0x10 [ 69.865890][ T1206] ? __cfi_futex_wake_mark+0x10/0x10 [ 69.865906][ T1206] futex_wake+0x150/0x950 [ 69.865921][ T1206] ? futex_wait+0x2b8/0x7c0 [ 69.865936][ T1206] ? __cfi_futex_wake+0x10/0x10 [ 69.865952][ T1206] ? __fget_files+0x2bc/0x330 [ 69.865973][ T1206] do_futex+0x37d/0x510 [ 69.865995][ T1206] ? __cfi_do_futex+0x10/0x10 [ 69.866019][ T1206] __se_sys_futex+0x13c/0x320 [ 69.866043][ T1206] ? __x64_sys_futex+0x110/0x110 [ 69.866065][ T1206] ? __cfi_ksys_write+0x10/0x10 [ 69.866084][ T1206] __x64_sys_futex+0xe9/0x110 [ 69.866107][ T1206] x64_sys_call+0x227f/0x2ee0 [ 69.866123][ T1206] do_syscall_64+0x57/0xf0 [ 69.866140][ T1206] ? clear_bhb_loop+0x50/0xa0 [ 69.866161][ T1206] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.866181][ T1206] RIP: 0033:0x7fbaa2d9e159 [ 69.866195][ T1206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.866209][ T1206] RSP: 002b:00007fbaa3c030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.866227][ T1206] RAX: ffffffffffffffda RBX: 00007fbaa3025fa8 RCX: 00007fbaa2d9e159 [ 69.866240][ T1206] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbaa3025fac [ 69.866251][ T1206] RBP: 00007fbaa3025fa0 R08: 4000000000000000 R09: 0000000000000000 [ 69.866263][ T1206] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 69.866274][ T1206] R13: 00007fbaa3026038 R14: 00007ffea16f19d0 R15: 00007ffea16f1ab8 [ 69.866289][ T1206] [ 70.111374][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.225301][ T922] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 70.355293][ T922] usb 3-1: device descriptor read/64, error -71 [ 70.595365][ T922] usb 3-1: device descriptor read/64, error -71 [ 70.705400][ T922] usb usb3-port1: attempt power cycle [ 71.045327][ T922] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 71.066485][ T922] usb 3-1: device descriptor read/8, error -71 [ 71.196416][ T922] usb 3-1: device descriptor read/8, error -71 [ 71.445390][ T922] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 71.469151][ T922] usb 3-1: device descriptor read/8, error -71 [ 71.606466][ T922] usb 3-1: device descriptor read/8, error -71 [ 71.715386][ T922] usb usb3-port1: unable to enumerate USB device [ 72.185362][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.185383][ T1213] Bluetooth: hci0: command 0x1003 tx timeout [ 72.241078][ T1246] kernel read not supported for file /policy (pid: 1246 comm: syz.3.229) [ 72.242609][ T36] audit: type=1400 audit(2000000279.901:351): avc: denied { module_load } for pid=1245 comm="syz.3.229" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 72.273547][ T36] audit: type=1400 audit(2000000279.921:352): avc: denied { bind } for pid=1245 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.605357][ T481] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 72.625326][ T922] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 72.755747][ T922] usb 4-1: device descriptor read/64, error -71 [ 72.756724][ T481] usb 3-1: config 6 has an invalid interface number: 240 but max is 0 [ 72.770432][ T481] usb 3-1: config 6 has no interface number 0 [ 72.776596][ T481] usb 3-1: config 6 interface 240 altsetting 68 endpoint 0x6 has invalid wMaxPacketSize 0 [ 72.786576][ T481] usb 3-1: config 6 interface 240 altsetting 68 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 72.797679][ T481] usb 3-1: config 6 interface 240 has no altsetting 0 [ 72.806134][ T481] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=c4.60 [ 72.815303][ T481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.823379][ T481] usb 3-1: Product: syz [ 72.827591][ T481] usb 3-1: Manufacturer: syz [ 72.832199][ T481] usb 3-1: SerialNumber: syz [ 72.995309][ T922] usb 4-1: device descriptor read/64, error -71 [ 73.040669][ T481] usbhid 3-1:6.240: couldn't find an input interrupt endpoint [ 73.049456][ T481] usb 3-1: USB disconnect, device number 26 [ 73.134675][ T1258] kvm: kvm [1257]: vcpu1, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 73.235321][ T922] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 73.309957][ T1268] mmap: syz.4.235 (1268): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 73.365335][ T922] usb 4-1: device descriptor read/64, error -71 [ 73.481807][ T36] audit: type=1400 audit(2000000281.141:353): avc: denied { sqpoll } for pid=1277 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.605307][ T922] usb 4-1: device descriptor read/64, error -71 [ 73.664715][ T36] audit: type=1400 audit(2000000281.321:354): avc: denied { setopt } for pid=1324 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.669027][ T1325] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 73.685418][ T36] audit: type=1400 audit(2000000281.321:355): avc: denied { relabelfrom } for pid=1324 comm="syz.2.240" name="IEEE-802.15.4-MAC" dev="sockfs" ino=25477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.718671][ T36] audit: type=1400 audit(2000000281.351:356): avc: denied { relabelto } for pid=1324 comm="syz.2.240" name="IEEE-802.15.4-MAC" dev="sockfs" ino=25477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=ieee802154_socket permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 73.727290][ T922] usb usb4-port1: attempt power cycle [ 73.771425][ T36] audit: type=1400 audit(2000000281.421:357): avc: denied { unlink } for pid=1314 comm="syz.1.239" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 73.794102][ T36] audit: type=1400 audit(2000000281.431:358): avc: denied { execute } for pid=1327 comm="syz.2.241" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.858490][ T36] audit: type=1400 audit(2000000281.521:359): avc: denied { mount } for pid=1331 comm="syz.1.243" name="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.005302][ T481] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 74.125307][ T922] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 74.146288][ T922] usb 4-1: device descriptor read/8, error -71 [ 74.155284][ T481] usb 3-1: Using ep0 maxpacket: 8 [ 74.161408][ T481] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 74.169733][ T481] usb 3-1: config 0 has no interface number 0 [ 74.177479][ T481] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 74.186718][ T481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.200046][ T481] usb 3-1: Product: syz [ 74.204254][ T481] usb 3-1: Manufacturer: syz [ 74.209065][ T481] usb 3-1: SerialNumber: syz [ 74.215513][ T481] usb 3-1: config 0 descriptor?? [ 74.261884][ T1340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.271573][ T1340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.276754][ T922] usb 4-1: device descriptor read/8, error -71 [ 74.368436][ T36] audit: type=1400 audit(2000000282.031:360): avc: denied { ioctl } for pid=1347 comm="syz.4.249" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 74.370106][ T1349] ±ÿtivebacku: renamed from lo (while UP) [ 74.393633][ T36] audit: type=1400 audit(2000000282.031:361): avc: denied { create } for pid=1347 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 74.426525][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.439813][ T1359] FAULT_INJECTION: forcing a failure. [ 74.439813][ T1359] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.446280][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.459589][ T1359] CPU: 0 UID: 0 PID: 1359 Comm: syz.1.250 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 74.459695][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.459735][ T1359] Call Trace: [ 74.459760][ T1359] [ 74.459781][ T1359] __dump_stack+0x21/0x30 [ 74.459881][ T1359] dump_stack_lvl+0x140/0x1c0 [ 74.459957][ T1359] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.460039][ T1359] ? unwind_get_return_address+0x51/0x90 [ 74.460124][ T1359] dump_stack+0x19/0x20 [ 74.460206][ T1359] should_fail_ex+0x3c2/0x510 [ 74.460288][ T1359] should_fail+0xf/0x20 [ 74.460357][ T1359] get_futex_key+0x178/0x940 [ 74.460449][ T1359] ? __cfi_get_futex_key+0x10/0x10 [ 74.460539][ T1359] ? kasan_save_track+0x4f/0x80 [ 74.460610][ T1359] ? kasan_save_track+0x3e/0x80 [ 74.460680][ T1359] ? kasan_save_free_info+0x44/0x50 [ 74.460735][ T1359] futex_wake+0x150/0x950 [ 74.460798][ T1359] ? __cfi_futex_wake+0x10/0x10 [ 74.460860][ T1359] do_futex+0x37d/0x510 [ 74.460941][ T1359] ? __kasan_check_write+0x18/0x20 [ 74.461002][ T1359] ? __cfi_do_futex+0x10/0x10 [ 74.461084][ T1359] __se_sys_futex+0x13c/0x320 [ 74.461166][ T1359] ? tty_set_ldisc+0x10b/0x5b0 [ 74.461233][ T1359] ? __x64_sys_futex+0x110/0x110 [ 74.461317][ T1359] ? __kasan_check_write+0x18/0x20 [ 74.461379][ T1359] ? __kasan_check_write+0x18/0x20 [ 74.461441][ T1359] __x64_sys_futex+0xe9/0x110 [ 74.461523][ T1359] x64_sys_call+0x227f/0x2ee0 [ 74.461569][ T1359] do_syscall_64+0x57/0xf0 [ 74.461629][ T1359] ? clear_bhb_loop+0x50/0xa0 [ 74.461702][ T1359] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.461775][ T1359] RIP: 0033:0x7f9deb19e159 [ 74.461834][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.461906][ T1359] RSP: 002b:00007f9debfde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.461987][ T1359] RAX: ffffffffffffffda RBX: 00007f9deb425fa8 RCX: 00007f9deb19e159 [ 74.462035][ T1359] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9deb425fac [ 74.462076][ T1359] RBP: 00007f9deb425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 74.462118][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.462157][ T1359] R13: 00007f9deb426038 R14: 00007ffc0fefb8c0 R15: 00007ffc0fefb9a8 [ 74.462210][ T1359] [ 74.551772][ T922] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 74.568809][ T481] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 74.568861][ T481] usb 3-1: No valid video chain found. [ 74.596702][ T922] usb 4-1: device descriptor read/8, error -71 [ 74.605519][ T481] usb 3-1: USB disconnect, device number 27 [ 74.751056][ T922] usb 4-1: device descriptor read/8, error -71 [ 74.769790][ T1363] kvm: emulating exchange as write [ 74.830701][ T1368] FAULT_INJECTION: forcing a failure. [ 74.830701][ T1368] name failslab, interval 1, probability 0, space 0, times 0 [ 74.843424][ T1368] CPU: 0 UID: 0 PID: 1368 Comm: syz.1.254 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 74.843461][ T1368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.843477][ T1368] Call Trace: [ 74.843485][ T1368] [ 74.843494][ T1368] __dump_stack+0x21/0x30 [ 74.843534][ T1368] dump_stack_lvl+0x140/0x1c0 [ 74.843558][ T1368] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.843583][ T1368] dump_stack+0x19/0x20 [ 74.843605][ T1368] should_fail_ex+0x3c2/0x510 [ 74.843626][ T1368] should_failslab+0xac/0x100 [ 74.843650][ T1368] __kmalloc_cache_noprof+0x41/0x470 [ 74.843668][ T1368] ? ____ip_mc_inc_group+0x1a8/0x940 [ 74.843688][ T1368] ____ip_mc_inc_group+0x1a8/0x940 [ 74.843708][ T1368] __ip_mc_join_group+0x333/0x410 [ 74.843729][ T1368] ip_mc_join_group+0x23/0x40 [ 74.843748][ T1368] ip_mcast_join_leave+0x1be/0x280 [ 74.843774][ T1368] ? compat_ip_mcast_join_leave+0x290/0x290 [ 74.843803][ T1368] ? __cfi_mutex_lock+0x10/0x10 [ 74.843824][ T1368] ? avc_has_perm_noaudit+0x289/0x360 [ 74.843846][ T1368] do_ip_setsockopt+0x1924/0x2af0 [ 74.843872][ T1368] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 74.843897][ T1368] ? selinux_socket_setsockopt+0x324/0x3d0 [ 74.843921][ T1368] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 74.843946][ T1368] ip_setsockopt+0x63/0x100 [ 74.843961][ T1368] udp_setsockopt+0xa3/0xc0 [ 74.843985][ T1368] sock_common_setsockopt+0xb8/0xd0 [ 74.844002][ T1368] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 74.844020][ T1368] do_sock_setsockopt+0x27c/0x410 [ 74.844044][ T1368] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 74.844078][ T1368] ? __fget_files+0x2bc/0x330 [ 74.844100][ T1368] __x64_sys_setsockopt+0x18c/0x220 [ 74.844124][ T1368] x64_sys_call+0x2adc/0x2ee0 [ 74.844143][ T1368] do_syscall_64+0x57/0xf0 [ 74.844159][ T1368] ? clear_bhb_loop+0x50/0xa0 [ 74.844180][ T1368] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.844201][ T1368] RIP: 0033:0x7f9deb19e159 [ 74.844214][ T1368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.844229][ T1368] RSP: 002b:00007f9debfde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.844247][ T1368] RAX: ffffffffffffffda RBX: 00007f9deb425fa0 RCX: 00007f9deb19e159 [ 74.844259][ T1368] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 74.844269][ T1368] RBP: 00007f9deb23506b R08: 0000000000000088 R09: 0000000000000000 [ 74.844280][ T1368] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 74.844291][ T1368] R13: 00007f9deb426038 R14: 00007f9deb425fa0 R15: 00007ffc0fefb9a8 [ 74.844305][ T1368] [ 74.975367][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 74.979680][ T922] usb usb4-port1: unable to enumerate USB device [ 75.135297][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 75.146052][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.157068][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.167002][ T31] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 75.176233][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.185043][ T31] usb 5-1: config 0 descriptor?? [ 75.207259][ T1373] netlink: 'syz.2.256': attribute type 4 has an invalid length. [ 75.263802][ T1376] kvm: kvm [1375]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 75.326933][ T1383] netlink: 'syz.1.258': attribute type 29 has an invalid length. [ 75.457767][ T1388] Bluetooth: ISO socket layer initialized [ 75.613969][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.629677][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.637076][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.645980][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.653268][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.661387][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.668593][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.686526][ T31] chicony 0003:04F2:0418.0005: unknown main item tag 0x0 [ 75.700744][ T31] chicony 0003:04F2:0418.0005: hidraw0: USB HID v0.00 Device [HID 04f2:0418] on usb-dummy_hcd.4-1/input0 [ 75.824289][ T922] usb 5-1: USB disconnect, device number 12 [ 75.845399][ T1419] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 76.435298][ T311] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 76.445428][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 76.585288][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 76.590423][ T481] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 76.598088][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 76.604443][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.611903][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 76.621558][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.630166][ T311] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 76.639644][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.647988][ T31] usb 2-1: config 0 descriptor?? [ 76.653482][ T311] usb 3-1: Product: syz [ 76.659076][ T311] usb 3-1: Manufacturer: syz [ 76.663779][ T311] usb 3-1: SerialNumber: syz [ 76.670777][ T311] usb 3-1: config 0 descriptor?? [ 76.692119][ T1463] ÿÿÿÿÿÿ: renamed from veth0_vlan (while UP) [ 76.766714][ T481] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.775187][ T481] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.785407][ T481] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.799410][ T481] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 76.808762][ T481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 76.816809][ T481] usb 5-1: Product: syz [ 76.820998][ T481] usb 5-1: Manufacturer: syz [ 76.827930][ T481] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 76.834379][ T481] usb 5-1: No streaming interface found for terminal 2. [ 76.881910][ T481] usb 3-1: USB disconnect, device number 28 [ 76.935302][ T311] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 77.027531][ T922] usb 5-1: USB disconnect, device number 13 [ 77.063701][ T31] wacom 0003:056A:032C.0006: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 77.096571][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.106834][ T311] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.119791][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 77.128880][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.140517][ T311] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 77.263334][ T311] usb 2-1: USB disconnect, device number 20 [ 77.339373][ T31] usb 4-1: USB disconnect, device number 27 [ 77.428680][ T1469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.282'. [ 77.496337][ T1472] overlayfs: failed to resolve './bus': -2 [ 77.502441][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 77.502484][ T36] audit: type=1400 audit(2000000285.161:370): avc: denied { setopt } for pid=1471 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.564067][ T1479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.658976][ T1494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 77.965531][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 78.025536][ T922] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 78.045556][ T311] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 78.116804][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 78.127781][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 78.140377][ T10] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 78.149494][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.157594][ T10] usb 5-1: Product: syz [ 78.161830][ T10] usb 5-1: Manufacturer: syz [ 78.166467][ T10] usb 5-1: SerialNumber: syz [ 78.175575][ T922] usb 2-1: Using ep0 maxpacket: 8 [ 78.181075][ T922] usb 2-1: no configurations [ 78.185742][ T922] usb 2-1: can't read configurations, error -22 [ 78.197067][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.205602][ T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 78.218120][ T311] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 78.227287][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.235308][ T311] usb 3-1: Product: syz [ 78.239581][ T311] usb 3-1: Manufacturer: syz [ 78.244202][ T311] usb 3-1: SerialNumber: syz [ 78.315680][ T922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 78.453721][ T311] usb 3-1: MBOX3: Invalid descriptor size=127. [ 78.460672][ T311] usb 3-1: MBOX3: Invalid descriptor size=127. [ 78.467649][ T311] usb 3-1: MBOX3: Invalid descriptor size=127. [ 78.474591][ T311] usb 3-1: USB disconnect, device number 29 [ 78.477364][ T922] usb 2-1: Using ep0 maxpacket: 8 [ 78.487576][ T922] usb 2-1: no configurations [ 78.492233][ T922] usb 2-1: can't read configurations, error -22 [ 78.498887][ T922] usb usb2-port1: attempt power cycle [ 78.709125][ T36] audit: type=1400 audit(2000000286.370:371): avc: denied { ioctl } for pid=1506 comm="syz.3.291" path="socket:[27499]" dev="sockfs" ino=27499 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.837528][ T922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 78.841910][ T1514] : renamed from bridge0 (while UP) [ 78.866277][ T922] usb 2-1: Using ep0 maxpacket: 8 [ 78.873421][ T922] usb 2-1: no configurations [ 78.889779][ T922] usb 2-1: can't read configurations, error -22 [ 78.896661][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.908012][ T10] usb 5-1: cannot setup if 2: error -71 [ 78.913690][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 78.928504][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.943090][ T10] usb 5-1: cannot setup if 2: error -71 [ 78.955109][ T10] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 78.966865][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.992697][ T10] usb 5-1: cannot setup if 2: error -71 [ 79.003923][ T1524] netlink: 'syz.2.297': attribute type 25 has an invalid length. [ 79.014128][ T10] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 79.026030][ T922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 79.044465][ T10] usb 5-1: USB disconnect, device number 14 [ 79.069035][ T926] udevd[926]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.094215][ T922] usb 2-1: Using ep0 maxpacket: 8 [ 79.105740][ T1306] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.111929][ T922] usb 2-1: no configurations [ 79.118951][ T922] usb 2-1: can't read configurations, error -22 [ 79.126031][ T922] usb usb2-port1: unable to enumerate USB device [ 79.132833][ T36] audit: type=1400 audit(2000000286.790:372): avc: denied { map } for pid=1528 comm="syz.4.298" path="pipe:[10195]" dev="pipefs" ino=10195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 79.566304][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 79.716364][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 79.722893][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 79.731194][ T10] usb 5-1: config 0 has no interface number 0 [ 79.737327][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 79.747382][ T10] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.757360][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 79.767481][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 79.775712][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 79.784833][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.792868][ T10] usb 5-1: Product: syz [ 79.797106][ T10] usb 5-1: Manufacturer: syz [ 79.801792][ T10] usb 5-1: SerialNumber: syz [ 79.807204][ T10] usb 5-1: config 0 descriptor?? [ 79.812510][ T1547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.021580][ T36] audit: type=1400 audit(2000000287.680:373): avc: denied { ioctl } for pid=1546 comm="syz.4.302" path="socket:[28901]" dev="sockfs" ino=28901 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.448257][ T10] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 80.457471][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 80.623476][ T150] ipheth 5-1:0.196: ipheth_rx_submit: usb_submit_urb: -90 [ 80.651845][ T311] usb 5-1: USB disconnect, device number 15 [ 80.689750][ T311] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 80.884512][ T1579] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 80.895260][ T36] audit: type=1400 audit(2000000288.549:374): avc: denied { relabelto } for pid=1577 comm="syz.1.304" name="file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 80.924018][ T36] audit: type=1400 audit(2000000288.549:375): avc: denied { associate } for pid=1577 comm="syz.1.304" name="file0" dev="tmpfs" ino=363 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 81.147092][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.147720][ T1213] Bluetooth: hci0: command 0x1003 tx timeout [ 81.207106][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 81.367369][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 81.379053][ T10] usb 2-1: config 0 has no interfaces? [ 81.384725][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.413152][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.422878][ T10] usb 2-1: config 0 descriptor?? [ 81.438338][ T1591] FAULT_INJECTION: forcing a failure. [ 81.438338][ T1591] name failslab, interval 1, probability 0, space 0, times 0 [ 81.460902][ T1591] CPU: 1 UID: 0 PID: 1591 Comm: syz.4.307 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 81.460938][ T1591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.460951][ T1591] Call Trace: [ 81.460958][ T1591] [ 81.460967][ T1591] __dump_stack+0x21/0x30 [ 81.461003][ T1591] dump_stack_lvl+0x140/0x1c0 [ 81.461034][ T1591] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.461067][ T1591] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 81.461100][ T1591] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 81.461124][ T1591] dump_stack+0x19/0x20 [ 81.461155][ T1591] should_fail_ex+0x3c2/0x510 [ 81.461185][ T1591] should_failslab+0xac/0x100 [ 81.461213][ T1591] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 81.461239][ T1591] ? __sock_create+0x3a2/0x810 [ 81.461264][ T1591] ? __sys_socket+0xe1/0x1c0 [ 81.461289][ T1591] ? __d_alloc+0x42/0x8c0 [ 81.461312][ T1591] ? expand_files+0xda/0x6f0 [ 81.461341][ T1591] __d_alloc+0x42/0x8c0 [ 81.461365][ T1591] d_alloc_pseudo+0x23/0xc0 [ 81.461389][ T1591] alloc_file_pseudo+0xde/0x1f0 [ 81.461421][ T1591] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 81.461454][ T1591] ? _raw_spin_unlock+0x45/0x60 [ 81.461478][ T1591] sock_alloc_file+0xbe/0x2b0 [ 81.461501][ T1591] __sys_socket+0x14c/0x1c0 [ 81.461527][ T1591] __x64_sys_socket+0x7e/0x90 [ 81.461553][ T1591] x64_sys_call+0x2608/0x2ee0 [ 81.461574][ T1591] do_syscall_64+0x57/0xf0 [ 81.461594][ T1591] ? clear_bhb_loop+0x50/0xa0 [ 81.461623][ T1591] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.461651][ T1591] RIP: 0033:0x7f70be39e159 [ 81.461669][ T1591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.461688][ T1591] RSP: 002b:00007f70bf24d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 81.461713][ T1591] RAX: ffffffffffffffda RBX: 00007f70be625fa0 RCX: 00007f70be39e159 [ 81.461730][ T1591] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 81.461743][ T1591] RBP: 00007f70be43506b R08: 0000000000000000 R09: 0000000000000000 [ 81.461759][ T1591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.461773][ T1591] R13: 00007f70be626038 R14: 00007f70be625fa0 R15: 00007ffe59cc1c98 [ 81.461792][ T1591] [ 81.691823][ T311] usb 2-1: USB disconnect, device number 25 [ 81.752825][ T36] audit: type=1400 audit(2000000289.409:376): avc: denied { mounton } for pid=1600 comm="syz.4.310" path="/dev/sda1" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.752834][ T1605] fuse: Unknown parameter './file0' [ 81.970044][ T1621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1346 sclass=netlink_route_socket pid=1621 comm=syz.2.314 [ 82.017723][ T36] audit: type=1400 audit(2000000289.679:377): avc: denied { search } for pid=1622 comm="syz.2.315" name="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.040942][ T36] audit: type=1400 audit(2000000289.679:378): avc: denied { create } for pid=1622 comm="syz.2.315" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.077508][ T36] audit: type=1400 audit(2000000289.679:379): avc: denied { write } for pid=1622 comm="syz.2.315" name="usb_gadget" dev="configfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.747900][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 82.787771][ T1698] usb usb9: usbfs: process 1698 (syz.4.326) did not claim interface 30 before use [ 82.899107][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.910076][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.919913][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 82.929079][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.937841][ T10] usb 4-1: config 0 descriptor?? [ 83.351120][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 83.357970][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 83.364880][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 83.371746][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 83.378623][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 83.385427][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 83.392316][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 83.400343][ T10] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 83.528282][ T922] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 83.549625][ T10] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device [ 83.557159][ T10] arvo 0003:1E7D:30D4.0007: couldn't install keyboard [ 83.564864][ T10] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -5 [ 83.679791][ T922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.688095][ T922] usb 3-1: not running at top speed; connect to a high speed hub [ 83.698475][ T922] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 83.707942][ T922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.716398][ T922] usb 3-1: Product: syz [ 83.721076][ T922] usb 3-1: Manufacturer: syz [ 83.725941][ T922] usb 3-1: SerialNumber: syz [ 83.752650][ T10] usb 4-1: USB disconnect, device number 28 [ 83.995039][ T922] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 84.013564][ T922] usb 3-1: USB disconnect, device number 30 [ 84.324669][ T1724] overlayfs: failed to resolve './bus': -2 [ 84.414536][ T1726] process 'syz.3.335' launched '/dev/fd/5' with NULL argv: empty string added [ 84.423533][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 84.423552][ T36] audit: type=1400 audit(2000000292.068:386): avc: denied { execute } for pid=1725 comm="syz.3.335" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.470763][ T36] audit: type=1400 audit(2000000292.118:387): avc: denied { execute_no_trans } for pid=1725 comm="syz.3.335" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.536017][ T1730] 9pnet_fd: Insufficient options for proto=fd [ 84.550457][ T1730] loop5: detected capacity change from 0 to 7 [ 84.564870][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.578759][ T1730] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.594277][ T1730] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.604602][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.612579][ T1730] loop5: unable to read partition table [ 84.618472][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.636570][ T1730] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰•�¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ`ÉæÖ㫅ˆ) failed (rc=-5) [ 84.648959][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.656962][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.664980][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.675012][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.689837][ T329] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.715095][ T36] audit: type=1400 audit(2000000292.367:388): avc: denied { getopt } for pid=1732 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.759105][ T1735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.767844][ T1735] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 84.807267][ T1735] overlayfs: missing 'lowerdir' [ 84.812960][ T36] audit: type=1400 audit(2000000292.477:389): avc: denied { remount } for pid=1734 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.859131][ T1743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.340'. [ 85.067896][ T1757] futex_wake_op: syz.2.343 tries to shift op by 32; fix this program [ 85.076264][ T1756] futex_wake_op: syz.2.343 tries to shift op by 32; fix this program [ 85.099047][ T922] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 85.243974][ T1765] rust_binder: 1764:1765 no such ref 3 [ 85.260304][ T922] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.271336][ T922] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.284226][ T922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.291019][ T922] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 85.300206][ T922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.310376][ T922] usb 5-1: config 0 descriptor?? [ 85.559272][ T311] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 85.689339][ T311] usb 4-1: device descriptor read/64, error -71 [ 85.720160][ T922] logitech 0003:046D:C286.0008: unknown main item tag 0x0 [ 85.727423][ T922] logitech 0003:046D:C286.0008: item fetching failed at offset 19/24 [ 85.735796][ T922] logitech 0003:046D:C286.0008: parse failed [ 85.741881][ T922] logitech 0003:046D:C286.0008: probe with driver logitech failed with error -22 [ 85.861327][ T36] audit: type=1400 audit(2000000293.517:390): avc: denied { mounton } for pid=1771 comm="syz.2.348" path="/91/file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.923755][ T1777] netlink: 44 bytes leftover after parsing attributes in process `syz.4.340'. [ 85.933433][ T1780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.942000][ T311] usb 4-1: device descriptor read/64, error -71 [ 85.946351][ T1780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.040192][ T1785] 9pnet_fd: Insufficient options for proto=fd [ 86.048121][ T1785] futex_wake_op: syz.2.349 tries to shift op by 144; fix this program [ 86.199595][ T311] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 86.209576][ T1792] incfs: Options parsing error. -22 [ 86.214875][ T1792] incfs: mount failed -22 [ 86.222833][ T36] audit: type=1400 audit(2000000293.877:391): avc: denied { read } for pid=1791 comm="syz.2.352" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.247254][ T36] audit: type=1400 audit(2000000293.877:392): avc: denied { open } for pid=1791 comm="syz.2.352" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.339725][ T311] usb 4-1: device descriptor read/64, error -71 [ 86.459767][ T45] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 86.579831][ T311] usb 4-1: device descriptor read/64, error -71 [ 86.609805][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 86.616101][ T45] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 86.624363][ T45] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 86.634565][ T45] usb 3-1: config 32 has no interface number 0 [ 86.640894][ T45] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 86.649954][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.691148][ T311] usb usb4-port1: attempt power cycle [ 86.861274][ T922] usb 3-1: USB disconnect, device number 31 [ 87.030037][ T311] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 87.051094][ T311] usb 4-1: device descriptor read/8, error -71 [ 87.127051][ T36] audit: type=1400 audit(2000000294.776:393): avc: denied { setattr } for pid=1801 comm="syz.1.354" name="PPPOL2TP" dev="sockfs" ino=29435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.181181][ T311] usb 4-1: device descriptor read/8, error -71 [ 87.391437][ T1813] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 87.400685][ T1813] overlayfs: missing 'lowerdir' [ 87.410340][ T67] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 87.420193][ T311] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 87.431019][ T1815] random: crng reseeded on system resumption [ 87.441367][ T311] usb 4-1: device descriptor read/8, error -71 [ 87.489591][ T36] audit: type=1400 audit(2000000295.136:394): avc: denied { mounton } for pid=1820 comm="syz.2.361" path="/proc/427/cgroup" dev="proc" ino=29478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 87.560248][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 87.571091][ T67] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.590878][ T67] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 87.602447][ T311] usb 4-1: device descriptor read/8, error -71 [ 87.609803][ T67] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 87.619162][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.629107][ T67] usb 2-1: Product: syz [ 87.633416][ T67] usb 2-1: Manufacturer: syz [ 87.638039][ T67] usb 2-1: SerialNumber: syz [ 87.710470][ T311] usb usb4-port1: unable to enumerate USB device [ 87.849943][ T67] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 87.868106][ T922] usb 5-1: USB disconnect, device number 16 [ 87.868783][ T67] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.049390][ T67] usb 2-1: 2:1 : can't get High Capability descriptor [ 88.210609][ T922] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 88.250344][ T36] audit: type=1400 audit(2000000295.906:395): avc: denied { read } for pid=1808 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.270587][ T1809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.279120][ T1809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.291936][ T1809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.301706][ T1809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.311276][ T1837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.322184][ T1837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.372035][ T922] usb 5-1: not running at top speed; connect to a high speed hub [ 88.380832][ T922] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 88.391685][ T922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.415602][ T922] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.433139][ T922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.443509][ T922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.451598][ T922] usb 5-1: Product: Ќ [ 88.455895][ T922] usb 5-1: Manufacturer: 霹梔䮗빉玴娼๞⎏䵯Šⱽ氀Ҥ׶䈷顤륳푕䗒ባ薕絺麴ჽ낇쨏곌涿 [ 88.467770][ T922] usb 5-1: SerialNumber: 욀쏖閌쓙㏄臩ŻⳲ᭘瀊뭞搷쑼﹙垍詍扵폑㖍獂䡮꒠⮡㦎䯐俎準 [ 88.544996][ T1842] overlayfs: conflicting options: userxattr,verity=on [ 88.607631][ T1844] cgroup: noprefix used incorrectly [ 88.617952][ T1845] ./dev/sda1: Can't lookup blockdev [ 88.712901][ T1859] netlink: 'syz.3.370': attribute type 3 has an invalid length. [ 88.720618][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 88.730783][ T1859] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 88.740551][ T1859] SELinux: failed to load policy [ 88.960967][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 89.011003][ T67] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 89.091033][ T31] usb 3-1: device descriptor read/64, error -71 [ 89.161058][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 89.167310][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 89.178494][ T67] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 89.191443][ T67] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 89.200508][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.209675][ T67] usb 4-1: config 0 descriptor?? [ 89.218025][ T922] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 89.226227][ T922] cdc_ncm 5-1:1.0: bind() failure [ 89.235775][ T922] usb 5-1: USB disconnect, device number 17 [ 89.351165][ T31] usb 3-1: device descriptor read/64, error -71 [ 89.601309][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 89.618641][ T67] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 89.625646][ T67] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 89.632480][ T67] kone 0003:1E7D:2CED.0009: item fetching failed at offset 6/8 [ 89.640183][ T67] kone 0003:1E7D:2CED.0009: parse failed [ 89.645916][ T67] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -22 [ 89.731374][ T31] usb 3-1: device descriptor read/64, error -71 [ 89.819258][ T67] usb 4-1: USB disconnect, device number 33 [ 89.971524][ T31] usb 3-1: device descriptor read/64, error -71 [ 90.081740][ T31] usb usb3-port1: attempt power cycle [ 90.184755][ T922] usb 2-1: USB disconnect, device number 26 [ 90.218687][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 90.218706][ T36] audit: type=1400 audit(2000000297.875:399): avc: denied { getopt } for pid=1878 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.272788][ T1879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 90.362734][ T1889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.371444][ T1889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.421710][ T31] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 90.443474][ T31] usb 3-1: device descriptor read/8, error -71 [ 90.452827][ T36] audit: type=1400 audit(2000000298.115:400): avc: denied { bind } for pid=1894 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.457416][ T1895] netlink: 'syz.4.380': attribute type 32 has an invalid length. [ 90.481596][ T444] rust_binder: 1894: undelivered TRANSACTION_COMPLETE [ 90.492196][ T311] rust_binder: 1894: undelivered transaction 7, process died [ 90.582822][ T31] usb 3-1: device descriptor read/8, error -71 [ 90.601816][ T922] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 90.731861][ T922] usb 4-1: device descriptor read/64, error -71 [ 90.741870][ T444] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 90.821905][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 90.842973][ T31] usb 3-1: device descriptor read/8, error -71 [ 90.871932][ T444] usb 5-1: device descriptor read/64, error -71 [ 90.971987][ T922] usb 4-1: device descriptor read/64, error -71 [ 90.973386][ T31] usb 3-1: device descriptor read/8, error -71 [ 91.067850][ T9] wacom 0003:056A:003F.000A: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 91.092102][ T31] usb usb3-port1: unable to enumerate USB device [ 91.118868][ T1901] netlink: 200 bytes leftover after parsing attributes in process `syz.1.382'. [ 91.118868][ T36] audit: type=1400 audit(2000000298.774:401): avc: denied { nlmsg_read } for pid=1898 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.148487][ T444] usb 5-1: device descriptor read/64, error -71 [ 91.181244][ T1905] Invalid argument reading file caps for ./file0 [ 91.212139][ T922] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 91.342178][ T922] usb 4-1: device descriptor read/64, error -71 [ 91.392371][ T444] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 91.522271][ T444] usb 5-1: device descriptor read/64, error -71 [ 91.582296][ T922] usb 4-1: device descriptor read/64, error -71 [ 91.692447][ T922] usb usb4-port1: attempt power cycle [ 91.762417][ T444] usb 5-1: device descriptor read/64, error -71 [ 91.872542][ T444] usb usb5-port1: attempt power cycle [ 92.032523][ T922] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 92.053498][ T922] usb 4-1: device descriptor read/8, error -71 [ 92.112620][ T31] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 92.162861][ T36] audit: type=1400 audit(2000000299.824:402): avc: denied { mounton } for pid=1921 comm="syz.1.389" path="/74/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=29687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 92.189978][ T922] usb 4-1: device descriptor read/8, error -71 [ 92.206863][ T36] audit: type=1400 audit(2000000299.864:403): avc: denied { getopt } for pid=1923 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.213300][ T444] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 92.229003][ T36] audit: type=1400 audit(2000000299.864:404): avc: denied { shutdown } for pid=1923 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.254266][ T31] usb 3-1: device descriptor read/64, error -71 [ 92.261353][ T444] usb 5-1: device descriptor read/8, error -71 [ 92.273833][ T36] audit: type=1400 audit(2000000299.934:405): avc: denied { listen } for pid=1929 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.393865][ T444] usb 5-1: device descriptor read/8, error -71 [ 92.433416][ T922] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 92.455064][ T922] usb 4-1: device descriptor read/8, error -71 [ 92.492863][ T31] usb 3-1: device descriptor read/64, error -71 [ 92.542783][ T67] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 92.583919][ T922] usb 4-1: device descriptor read/8, error -71 [ 92.642907][ T444] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 92.664066][ T444] usb 5-1: device descriptor read/8, error -71 [ 92.692852][ T67] usb 2-1: Invalid ep0 maxpacket: 16 [ 92.693078][ T922] usb usb4-port1: unable to enumerate USB device [ 92.732870][ T31] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 92.794110][ T444] usb 5-1: device descriptor read/8, error -71 [ 92.822927][ T67] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 92.862948][ T31] usb 3-1: device descriptor read/64, error -71 [ 92.903070][ T444] usb usb5-port1: unable to enumerate USB device [ 92.973028][ T67] usb 2-1: Invalid ep0 maxpacket: 16 [ 92.978525][ T67] usb usb2-port1: attempt power cycle [ 93.113060][ T31] usb 3-1: device descriptor read/64, error -71 [ 93.223270][ T31] usb usb3-port1: attempt power cycle [ 93.323174][ T67] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 93.343628][ T67] usb 2-1: Invalid ep0 maxpacket: 16 [ 93.473426][ T67] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 93.474834][ T1955] overlayfs: maximum fs stacking depth exceeded [ 93.488086][ T1955] overlay: Unknown parameter ' ' [ 93.493325][ T1955] overlay: Unknown parameter ' ' [ 93.498372][ T1955] overlay: Unknown parameter ' ' [ 93.503957][ T67] usb 2-1: Invalid ep0 maxpacket: 16 [ 93.509330][ T1955] overlay: Unknown parameter ' ' [ 93.514438][ T67] usb usb2-port1: unable to enumerate USB device [ 93.521426][ T1955] overlay: Unknown parameter ' ' [ 93.526858][ T1955] overlay: Unknown parameter ' ' [ 93.537638][ T1955] overlay: Unknown parameter ' ' [ 93.542852][ T1955] overlay: Unknown parameter ' ' [ 93.548297][ T1955] overlay: Unknown parameter ' ' [ 93.553693][ T1955] overlay: Unknown parameter ' ' [ 93.558869][ T1955] overlay: Unknown parameter ' ' [ 93.566127][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 93.577282][ T1955] overlay: Unknown parameter ' ' [ 93.582476][ T1955] overlay: Unknown parameter ' ' [ 93.587738][ T1955] overlay: Unknown parameter ' ' [ 93.592821][ T1955] overlay: Unknown parameter ' ' [ 93.598163][ T1955] overlay: Unknown parameter ' ' [ 93.603321][ T1955] overlay: Unknown parameter ' ' [ 93.608562][ T1955] overlay: Unknown parameter ' ' [ 93.608945][ T31] usb 3-1: device descriptor read/8, error -71 [ 93.619864][ T1955] overlay: Unknown parameter ' ' [ 93.624989][ T1955] overlay: Unknown parameter ' ' [ 93.630122][ T1955] overlay: Unknown parameter ' ' [ 93.635266][ T1955] overlay: Unknown parameter ' ' [ 93.640377][ T1955] overlay: Unknown parameter ' ' [ 93.645510][ T1955] overlay: Unknown parameter ' ' [ 93.650632][ T1955] overlay: Unknown parameter ' ' [ 93.655747][ T1955] overlay: Unknown parameter ' ' [ 93.660855][ T1955] overlay: Unknown parameter ' ' [ 93.665994][ T1955] overlay: Unknown parameter ' ' [ 93.671084][ T1955] overlay: Unknown parameter ' ' [ 93.676188][ T1955] overlay: Unknown parameter ' ' [ 93.681252][ T1955] overlay: Unknown parameter ' ' [ 93.686348][ T1955] overlay: Unknown parameter ' ' [ 93.691411][ T1955] overlay: Unknown parameter ' ' [ 93.696496][ T1955] overlay: Unknown parameter ' ' [ 93.701588][ T1955] overlay: Unknown parameter ' ' [ 93.706693][ T1955] overlay: Unknown parameter ' ' [ 93.711758][ T1955] overlay: Unknown parameter ' ' [ 93.716852][ T1955] overlay: Unknown parameter ' ' [ 93.721939][ T1955] overlay: Unknown parameter ' ' [ 93.727094][ T1955] overlay: Unknown parameter ' ' [ 93.732181][ T1955] overlay: Unknown parameter ' ' [ 93.737282][ T1955] overlay: Unknown parameter ' ' [ 93.742354][ T1955] overlay: Unknown parameter ' ' [ 93.747546][ T1955] overlay: Unknown parameter ' ' [ 93.752763][ T1955] overlay: Unknown parameter ' ' [ 93.758047][ T1955] overlay: Unknown parameter ' ' [ 93.763071][ T31] usb 3-1: device descriptor read/8, error -71 [ 93.769405][ T1955] overlay: Unknown parameter ' ' [ 93.774583][ T1955] overlay: Unknown parameter ' ' [ 93.779693][ T1955] overlay: Unknown parameter ' ' [ 93.784839][ T1955] overlay: Unknown parameter ' ' [ 93.789993][ T1955] overlay: Unknown parameter ' ' [ 93.795201][ T1955] overlay: Unknown parameter ' ' [ 93.800401][ T1955] overlay: Unknown parameter ' ' [ 93.805498][ T1955] overlay: Unknown parameter ' ' [ 93.810570][ T1955] overlay: Unknown parameter ' ' [ 93.815669][ T1955] overlay: Unknown parameter ' ' [ 93.820771][ T1955] overlay: Unknown parameter ' ' [ 93.825873][ T1955] overlay: Unknown parameter ' ' [ 93.830952][ T1955] overlay: Unknown parameter ' ' [ 93.836069][ T1955] overlay: Unknown parameter ' ' [ 93.841157][ T1955] overlay: Unknown parameter ' ' [ 93.846262][ T1955] overlay: Unknown parameter ' ' [ 93.851748][ T67] rust_binder: 1953: undelivered death notification, 0000000000000000 [ 93.923474][ T444] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 93.932311][ T36] audit: type=1400 audit(2000000301.583:406): avc: denied { setcheckreqprot } for pid=1963 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.013514][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 94.034600][ T31] usb 3-1: device descriptor read/8, error -71 [ 94.084686][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.095656][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.105452][ T444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.118401][ T444] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.127488][ T444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.136297][ T444] usb 5-1: config 0 descriptor?? [ 94.164717][ T31] usb 3-1: device descriptor read/8, error -71 [ 94.273793][ T31] usb usb3-port1: unable to enumerate USB device [ 94.550181][ T444] usbhid 5-1:0.0: can't add hid device: -71 [ 94.556265][ T444] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.565013][ T444] usb 5-1: USB disconnect, device number 22 [ 94.807506][ T36] audit: type=1326 audit(2000000302.462:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1973 comm="syz.2.406" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb6f99e159 code=0x0 [ 94.841257][ T36] audit: type=1326 audit(2000000302.492:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1973 comm="syz.2.406" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb6f99e159 code=0x0 [ 94.843902][ T1971] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 95.116977][ T1983] netlink: 'syz.4.408': attribute type 25 has an invalid length. [ 95.524264][ T31] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 95.675467][ T31] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.687218][ T31] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.698353][ T31] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 95.710301][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 95.714476][ T444] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 95.719501][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 95.734994][ T31] usb 5-1: Manufacturer: syz [ 95.743271][ T1995] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.805678][ T2011] pim6reg1: entered promiscuous mode [ 95.811090][ T2011] pim6reg1: entered allmulticast mode [ 95.875678][ T444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.887690][ T444] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 95.894549][ T45] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 95.898827][ T444] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.916117][ T444] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.937428][ T444] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 95.952342][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.961910][ T444] usb 2-1: Product: syz [ 95.966171][ T444] usb 2-1: Manufacturer: syz [ 95.970971][ T444] usb 2-1: SerialNumber: syz [ 95.988914][ T2015] netlink: 340 bytes leftover after parsing attributes in process `syz.3.417'. [ 96.016104][ T31] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 96.024836][ T31] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input16 [ 96.035249][ T36] audit: type=1400 audit(2000000303.692:409): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=586 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.050821][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 96.067122][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 96.072274][ T31] usb 5-1: USB disconnect, device number 23 [ 96.081771][ T36] audit: type=1400 audit(2000000303.692:410): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=586 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.108783][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 96.129377][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 96.134918][ T36] audit: type=1400 audit(2000000303.692:411): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=586 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.143354][ T45] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 96.176469][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.179082][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.203557][ T45] usb 3-1: config 0 descriptor?? [ 96.211702][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.233837][ T444] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 96.251193][ T444] usb 2-1: USB disconnect, device number 31 [ 96.262413][ T926] udevd[926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.317913][ T2032] kvm: MONITOR instruction emulated as NOP! [ 96.511654][ T2039] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.420'. [ 96.521495][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 96.531646][ T36] audit: type=1400 audit(2000000304.181:412): avc: denied { write } for pid=2038 comm="syz.3.420" path="socket:[31456]" dev="sockfs" ino=31456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.598028][ T36] audit: type=1400 audit(2000000304.251:413): avc: denied { connect } for pid=2040 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.623108][ T36] audit: type=1400 audit(2000000304.271:414): avc: denied { bind } for pid=2001 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.627641][ T45] smartjoyplus 0003:0925:8866.000B: item fetching failed at offset 2/8 [ 96.653144][ T2046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 96.662422][ T45] smartjoyplus 0003:0925:8866.000B: parse failed [ 96.668892][ T45] smartjoyplus 0003:0925:8866.000B: probe with driver smartjoyplus failed with error -22 [ 96.823872][ T444] usb 3-1: USB disconnect, device number 40 [ 97.125040][ T45] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 97.218721][ T36] audit: type=1400 audit(2000000304.871:415): avc: denied { create } for pid=2062 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.247931][ T36] audit: type=1400 audit(2000000304.901:416): avc: denied { create } for pid=2064 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.268855][ T36] audit: type=1400 audit(2000000304.901:417): avc: denied { execmem } for pid=2064 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.286656][ T45] usb 2-1: device descriptor read/all, error -61 [ 97.415196][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 97.447525][ T2068] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 97.447704][ T36] audit: type=1400 audit(2000000305.101:418): avc: granted { setsecparam } for pid=2066 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 97.556123][ T31] rust_binder: 2066: undelivered TRANSACTION_ERROR: 29189 [ 97.565385][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.755392][ T444] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 97.805423][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.905462][ T444] usb 3-1: Using ep0 maxpacket: 8 [ 97.910675][ T922] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 97.919329][ T444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.925817][ T45] usb usb2-port1: attempt power cycle [ 97.929467][ T444] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.943867][ T444] usb 3-1: New USB device found, idVendor=045e, idProduct=97ba, bcdDevice= 0.00 [ 97.952963][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.961554][ T444] usb 3-1: config 0 descriptor?? [ 98.071252][ T922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.084510][ T922] usb 5-1: not running at top speed; connect to a high speed hub [ 98.097902][ T922] usb 5-1: config 1 has an invalid interface number: 99 but max is 0 [ 98.106237][ T922] usb 5-1: config 1 has no interface number 0 [ 98.112357][ T922] usb 5-1: config 1 interface 99 has no altsetting 0 [ 98.121428][ T922] usb 5-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 98.130922][ T922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.139139][ T922] usb 5-1: Product: syz [ 98.143345][ T922] usb 5-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 98.156142][ T922] usb 5-1: SerialNumber: syz [ 98.232597][ T2110] overlayfs: statfs failed on './file0' [ 98.265630][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 98.286793][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.363814][ T922] usb 5-1: NDI device with a latency value of 1 [ 98.370547][ T922] ftdi_sio 5-1:1.99: FTDI USB Serial Device converter detected [ 98.378662][ T922] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 98.385979][ T922] usb 5-1: USB disconnect, device number 24 [ 98.392484][ T922] ftdi_sio 5-1:1.99: device disconnected [ 98.426869][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.665835][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 98.686969][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.817061][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.926061][ T45] usb usb2-port1: unable to enumerate USB device [ 99.135802][ T2136] kvm_intel: kvm [2135]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xd8ea [ 99.146678][ T2136] kvm: kvm [2135]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xbd2c [ 99.156135][ T2136] kvm: kvm [2135]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x38c5 [ 99.366245][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 99.516246][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 99.522508][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.533438][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 99.544633][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.553711][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 99.561540][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.571668][ T45] usb 4-1: config 0 descriptor?? [ 99.577044][ T2139] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 99.585017][ T45] hub 4-1:0.0: USB hub found [ 99.706352][ T31] usb 5-1: device descriptor read/64, error -71 [ 99.784905][ T45] hub 4-1:0.0: 1 port detected [ 99.966485][ T31] usb 5-1: device descriptor read/64, error -71 [ 100.206638][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 100.336695][ T31] usb 5-1: device descriptor read/64, error -71 [ 100.525018][ T922] usb 3-1: USB disconnect, device number 41 [ 100.576796][ T31] usb 5-1: device descriptor read/64, error -71 [ 100.594350][ T2174] 9pnet: p9_errstr2errno: server reported unknown error [ 100.686936][ T31] usb usb5-port1: attempt power cycle [ 100.794253][ T2139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.803303][ T2139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.837752][ T45] hub 4-1:0.0: hub_ext_port_status failed (err = 2) [ 100.967614][ T45] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 101.027052][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 101.056686][ T31] usb 5-1: device descriptor read/8, error -71 [ 101.188152][ T31] usb 5-1: device descriptor read/8, error -71 [ 101.307159][ T922] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 101.427247][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 101.448374][ T31] usb 5-1: device descriptor read/8, error -71 [ 101.458637][ T922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.467099][ T922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.477253][ T922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.488604][ T922] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 101.497735][ T922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.505867][ T922] usb 3-1: Product: syz [ 101.510125][ T922] usb 3-1: Manufacturer: syz [ 101.514759][ T922] usb 3-1: SerialNumber: syz [ 101.526164][ T922] usb 3-1: selecting invalid altsetting 1 [ 101.532302][ T922] usb 3-1: unit 6 not found! [ 101.578397][ T31] usb 5-1: device descriptor read/8, error -71 [ 101.687414][ T31] usb usb5-port1: unable to enumerate USB device [ 101.778738][ T2225] fuse: Bad value for 'group_id' [ 101.783757][ T2225] fuse: Bad value for 'group_id' [ 101.790738][ T2225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.466'. [ 101.800435][ T2225] 9pnet: Could not find request transport: f%Mrfdno=0x0000000000000003 [ 101.977474][ T45] usb 4-1: device descriptor read/64, error -71 [ 102.057560][ T444] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 102.087915][ T45] usb 4-1: device reset changed ep0 maxpacket size! [ 102.094863][ T311] usb 4-1: USB disconnect, device number 38 [ 102.129767][ T922] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 102.227612][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 102.233972][ T444] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 102.245006][ T444] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.256111][ T444] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.266121][ T444] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 102.279301][ T444] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.286025][ T444] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 102.295121][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.303987][ T444] usb 2-1: config 0 descriptor?? [ 102.337645][ T311] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 102.351294][ T922] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.361202][ T922] usb 3-1: USB disconnect, device number 42 [ 102.369518][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.498902][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.509176][ T311] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.522131][ T311] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 102.531242][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.717536][ T444] wacom 0003:056A:0000.000C: ignoring exceeding usage max [ 102.719244][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 102.734197][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.741213][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.748172][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.755135][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.762116][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.769088][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.775992][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.782915][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.789843][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.796744][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.803658][ T444] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 102.813233][ T444] wacom 0003:056A:0000.000C: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 102.824263][ T444] wacom 0003:056A:0000.000C: hidraw0: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 102.836870][ T444] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.000C/input/input17 [ 103.052496][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 103.052516][ T36] audit: type=1400 audit(2000000310.698:429): avc: denied { mounton } for pid=2249 comm="syz.2.471" path="/117/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.092352][ T36] audit: type=1400 audit(2000000310.738:430): avc: denied { setopt } for pid=2252 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.161639][ T36] audit: type=1400 audit(2000000310.808:431): avc: denied { create } for pid=2259 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 103.187180][ T36] audit: type=1400 audit(2000000310.808:432): avc: denied { getopt } for pid=2259 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.228180][ T2266] /dev/nbd2: Can't lookup blockdev [ 103.468856][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 103.480382][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 103.491566][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 103.578295][ T2216] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 103.739489][ T2216] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.752089][ T2216] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 103.761253][ T2216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.769321][ T2216] usb 3-1: Product: syz [ 103.773616][ T2216] usb 3-1: Manufacturer: syz [ 103.778361][ T2216] usb 3-1: SerialNumber: syz [ 103.786105][ T2216] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 103.792089][ T2216] cdc_wdm 3-1:1.0: Unknown control protocol [ 103.952822][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 103.964603][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 103.975732][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 103.988764][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 103.996471][ T36] audit: type=1400 audit(2000000311.638:433): avc: denied { read write } for pid=2271 comm="syz.2.476" name="cdc-wdm0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 104.000565][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 104.025601][ T36] audit: type=1400 audit(2000000311.638:434): avc: denied { open } for pid=2271 comm="syz.2.476" path="/dev/cdc-wdm0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 104.034929][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 104.065069][ T444] usb 3-1: USB disconnect, device number 43 [ 104.069799][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 104.086483][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 104.097592][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 104.108725][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 104.119871][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 104.130929][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 104.141948][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.152924][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.163865][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.174829][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 104.185803][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.196782][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.207845][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.218887][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.229899][ T311] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.243611][ T311] ax88179_178a 4-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, d6:b7:4a:f9:1c:1d [ 104.259028][ T311] usb 4-1: USB disconnect, device number 39 [ 104.268369][ T311] ax88179_178a 4-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 104.838283][ T444] usb 2-1: USB disconnect, device number 36 [ 113.564973][ T36] audit: type=1400 audit(2000000321.213:435): avc: denied { create } for pid=2320 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 113.588342][ T36] audit: type=1400 audit(2000000321.233:436): avc: denied { read write } for pid=2304 comm="syz.2.479" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.614218][ T36] audit: type=1400 audit(2000000321.233:437): avc: denied { open } for pid=2304 comm="syz.2.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.637672][ T36] audit: type=1400 audit(2000000321.233:438): avc: denied { ioctl } for pid=2304 comm="syz.2.479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.753439][ T45] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 113.823392][ T444] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 113.851078][ T36] audit: type=1400 audit(2000000321.493:439): avc: denied { write } for pid=2336 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.871939][ T36] audit: type=1400 audit(2000000321.493:440): avc: denied { audit_write } for pid=2336 comm="syz.4.485" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.898685][ T2342] usb usb9: usbfs: process 2342 (syz.4.486) did not claim interface 0 before use [ 113.908192][ T374] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 113.908854][ T2342] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 113.926239][ T36] audit: type=1400 audit(2000000321.573:441): avc: denied { relabelto } for pid=2341 comm="syz.4.486" name="112" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 113.940485][ T45] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.954444][ T36] audit: type=1400 audit(2000000321.573:442): avc: denied { associate } for pid=2341 comm="syz.4.486" name="112" dev="tmpfs" ino=638 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 113.971399][ T45] usb 2-1: config 0 has no interface number 0 [ 113.990921][ T36] audit: type=1400 audit(2000000321.573:443): avc: denied { map } for pid=2341 comm="syz.4.486" path="socket:[34666]" dev="sockfs" ino=34666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.003763][ T45] usb 2-1: config 0 interface 41 has no altsetting 0 [ 114.027900][ T444] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.036193][ T444] usb 3-1: not running at top speed; connect to a high speed hub [ 114.036914][ T45] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 114.053226][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.054565][ T444] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.061746][ T45] usb 2-1: Product: syz [ 114.074983][ T444] usb 3-1: config 1 interface 0 has no altsetting 0 [ 114.082971][ T45] usb 2-1: Manufacturer: syz [ 114.089669][ T45] usb 2-1: SerialNumber: syz [ 114.093641][ T374] usb 4-1: device descriptor read/64, error -71 [ 114.102286][ T444] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 114.113644][ T45] usb 2-1: config 0 descriptor?? [ 114.121592][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.129701][ T444] usb 3-1: Product: syz [ 114.134067][ T444] usb 3-1: Manufacturer: syz [ 114.138812][ T444] usb 3-1: SerialNumber: syz [ 114.333675][ T374] usb 4-1: device descriptor read/64, error -71 [ 114.346107][ T2305] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2305 comm=syz.2.479 [ 114.583786][ T374] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 114.713848][ T374] usb 4-1: device descriptor read/64, error -71 [ 114.722781][ T45] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 114.867087][ T444] usbhid 3-1:1.0: can't add hid device: -71 [ 114.873189][ T444] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 114.882306][ T444] usb 3-1: USB disconnect, device number 44 [ 114.953983][ T374] usb 4-1: device descriptor read/64, error -71 [ 115.074167][ T374] usb usb4-port1: attempt power cycle [ 115.294144][ T444] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 115.414194][ T374] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 115.435384][ T374] usb 4-1: device descriptor read/8, error -71 [ 115.445528][ T444] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.456605][ T444] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 115.467547][ T444] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.480496][ T444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.487245][ T444] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 115.496356][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.505349][ T444] usb 3-1: config 0 descriptor?? [ 115.510654][ T2353] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 115.565378][ T374] usb 4-1: device descriptor read/8, error -71 [ 115.804557][ T374] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 115.825528][ T374] usb 4-1: device descriptor read/8, error -71 [ 115.921499][ T444] hid-steam 0003:28DE:1205.000D: item fetching failed at offset 0/3 [ 115.929950][ T444] hid-steam 0003:28DE:1205.000D: steam_probe:parse of hid interface failed [ 115.938904][ T444] hid-steam 0003:28DE:1205.000D: probe with driver hid-steam failed with error -22 [ 115.965542][ T374] usb 4-1: device descriptor read/8, error -71 [ 116.043502][ T2367] syzkaller1: entered promiscuous mode [ 116.049125][ T2367] syzkaller1: entered allmulticast mode [ 116.056939][ T36] audit: type=1400 audit(2000000323.702:444): avc: denied { mounton } for pid=2366 comm="syz.4.494" path="/118/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 116.084823][ T374] usb usb4-port1: unable to enumerate USB device [ 116.119612][ T2369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 116.127520][ T374] usb 3-1: USB disconnect, device number 45 [ 116.414701][ T45] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 116.525955][ T67] usb 2-1: USB disconnect, device number 37 [ 116.566853][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.593540][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.605157][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 116.614265][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.625057][ T45] usb 5-1: config 0 descriptor?? [ 116.647949][ T2384] overlayfs: failed to resolve './bus': -2 [ 116.689707][ T2391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.504'. [ 117.004974][ T374] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 117.042100][ T45] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 117.051002][ T45] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 117.059147][ T45] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 117.067176][ T45] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 117.074808][ T45] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 117.087092][ T45] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 117.149598][ T2413] tmpfs: Bad value for 'size' [ 117.165085][ T374] usb 2-1: Using ep0 maxpacket: 32 [ 117.185430][ T374] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.206653][ T374] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 117.227040][ T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.238241][ T2416] syz.3.511 uses obsolete (PF_INET,SOCK_PACKET) [ 117.247760][ T374] usb 2-1: Product: syz [ 117.255230][ T374] usb 2-1: Manufacturer: syz [ 117.265078][ T374] usb 2-1: SerialNumber: syz [ 117.276107][ T374] usb 2-1: config 0 descriptor?? [ 117.292140][ T374] smsc75xx v1.0.0 [ 117.297839][ T374] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 117.315423][ T374] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22 [ 117.493401][ T922] usb 2-1: USB disconnect, device number 38 [ 117.577202][ T45] playstation 0003:054C:0DF2.000E: Failed to retrieve feature with reportID 32: -71 [ 117.587411][ T45] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense firmware info: -71 [ 117.597352][ T45] playstation 0003:054C:0DF2.000E: Failed to get firmware info from DualSense [ 117.606950][ T45] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 117.616480][ T45] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -71 [ 117.638682][ T45] usb 5-1: USB disconnect, device number 30 [ 117.675385][ T374] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 117.836471][ T374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.847456][ T374] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.856537][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.865191][ T374] usb 4-1: config 0 descriptor?? [ 118.021572][ T2424] usbcore.quirks: string doesn't fit in 127 chars. [ 118.028223][ T2425] usbcore.quirks: string doesn't fit in 127 chars. [ 118.071525][ T2419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.080844][ T2419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.091075][ T374] usbhid 4-1:0.0: can't add hid device: -71 [ 118.099312][ T374] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 118.124481][ T374] usb 4-1: USB disconnect, device number 44 [ 118.425731][ T374] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 118.587470][ T374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.598981][ T374] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 118.608142][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.617005][ T374] usb 4-1: config 0 descriptor?? [ 118.687618][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 118.687637][ T36] audit: type=1400 audit(2000000326.330:447): avc: denied { cmd } for pid=2466 comm="iou-wrk-2467" path="socket:[36260]" dev="sockfs" ino=36260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.796717][ T922] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 118.807054][ T36] audit: type=1400 audit(2000000326.440:448): avc: granted { setsecparam } for pid=2480 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 118.829922][ T2430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.841192][ T2430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.864131][ T36] audit: type=1400 audit(2000000326.500:449): avc: denied { setattr } for pid=2485 comm="syz.2.529" name="trace_pipe_raw" dev="tracefs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 118.906847][ T36] audit: type=1400 audit(2000000326.550:450): avc: denied { nlmsg_tty_audit } for pid=2487 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.977061][ T922] usb 5-1: config 1 has an invalid interface number: 33 but max is 1 [ 118.986417][ T922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.997350][ T922] usb 5-1: config 1 has no interface number 1 [ 119.003636][ T922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.014860][ T922] usb 5-1: config 1 interface 33 has no altsetting 0 [ 119.023312][ T922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.033002][ T922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.043534][ T922] usb 5-1: Product: syz [ 119.047975][ T922] usb 5-1: Manufacturer: syz [ 119.061930][ T922] usb 5-1: SerialNumber: syz [ 119.068951][ T922] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 119.086009][ T922] cdc_ncm 5-1:1.0: bind() failure [ 119.109954][ T2490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.170164][ T2490] overlayfs: statfs failed on './file0' [ 119.256483][ T374] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 119.264247][ T374] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 119.287329][ T922] usb 5-1: USB disconnect, device number 31 [ 119.307052][ C0] ------------[ cut here ]------------ [ 119.312654][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 119.321274][ C0] index 547 is out of range for type 'const int[34]' [ 119.327989][ C0] CPU: 0 UID: 0 PID: 2313 Comm: udevd Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 119.328038][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.328054][ C0] Call Trace: [ 119.328063][ C0] [ 119.328072][ C0] __dump_stack+0x21/0x30 [ 119.328115][ C0] dump_stack_lvl+0x140/0x1c0 [ 119.328149][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.328186][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 119.328211][ C0] dump_stack+0x19/0x20 [ 119.328245][ C0] ubsan_epilogue+0xe/0x40 [ 119.328266][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 119.328307][ C0] aiptek_irq+0x208d/0x2a00 [ 119.328344][ C0] ? _raw_spin_unlock+0x45/0x60 [ 119.328369][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 119.328397][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 119.328424][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 119.328449][ C0] dummy_timer+0xa3f/0x4900 [ 119.328486][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 119.328511][ C0] ? timerqueue_del+0xd7/0x130 [ 119.328547][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 119.328582][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 119.328608][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 119.328647][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 119.328682][ C0] ? read_tsc+0xd/0x20 [ 119.328714][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 119.328746][ C0] hrtimer_run_softirq+0x159/0x560 [ 119.328775][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 119.328812][ C0] handle_softirqs+0x1aa/0x620 [ 119.328839][ C0] __irq_exit_rcu+0x47/0xb0 [ 119.328863][ C0] irq_exit_rcu+0xd/0x30 [ 119.328885][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 119.328919][ C0] [ 119.328928][ C0] [ 119.328937][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 119.328971][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 119.329001][ C0] Code: 98 05 48 89 de e8 f0 c3 54 00 5b 5d e9 49 37 20 04 cc cc cc cc cc cc cc cc cc b8 c5 7a da 79 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0d 3c 71 7d 7e 65 8b [ 119.329123][ C0] RSP: 0018:ffffc9000e88f868 EFLAGS: 00000246 [ 119.329154][ C0] RAX: ffffffff82738fac RBX: 0000000000000001 RCX: 0000000000000000 [ 119.329172][ C0] RDX: ffff888132c34c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.329188][ C0] RBP: ffffc9000e88f890 R08: 000000003ffdffff R09: 00000001effbffef [ 119.329207][ C0] R10: effbffef00000000 R11: 0000000000000001 R12: 0000000000000000 [ 119.329225][ C0] R13: ffffffff8210a460 R14: ffff8881105d8000 R15: 0000000000000000 [ 119.329247][ C0] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 119.329288][ C0] ? security_inode_permission+0xbc/0x150 [ 119.329331][ C0] ? security_inode_permission+0x134/0x150 [ 119.329371][ C0] inode_permission+0xf3/0x4c0 [ 119.329402][ C0] link_path_walk+0x828/0xeb0 [ 119.329432][ C0] path_openat+0x298/0x35a0 [ 119.329491][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 119.329515][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 119.329548][ C0] ? getname+0x1b/0x30 [ 119.329575][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 119.329599][ C0] ? do_syscall_64+0x57/0xf0 [ 119.329625][ C0] ? do_filp_open+0x440/0x440 [ 119.329661][ C0] do_filp_open+0x1f2/0x440 [ 119.329697][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 119.329737][ C0] ? alloc_fd+0x4c1/0x570 [ 119.329768][ C0] do_sys_openat2+0x134/0x1d0 [ 119.329806][ C0] ? do_sys_open+0x100/0x100 [ 119.329843][ C0] ? cp_old_stat+0x4d0/0x4d0 [ 119.329880][ C0] __x64_sys_openat+0x13a/0x170 [ 119.329918][ C0] x64_sys_call+0xe69/0x2ee0 [ 119.329941][ C0] do_syscall_64+0x57/0xf0 [ 119.329963][ C0] ? clear_bhb_loop+0x50/0xa0 [ 119.329996][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.330026][ C0] RIP: 0033:0x7f9b0d4a7407 [ 119.330047][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 119.330070][ C0] RSP: 002b:00007fff83f2ba30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 119.330096][ C0] RAX: ffffffffffffffda RBX: 00007f9b0dbe2880 RCX: 00007f9b0d4a7407 [ 119.330115][ C0] RDX: 0000000000080000 RSI: 00007fff83f2bb60 RDI: ffffffffffffff9c [ 119.330134][ C0] RBP: 00005576557d4d40 R08: 0000000000000000 R09: 0000000000000000 [ 119.330160][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005576557d4e30 [ 119.330177][ C0] R13: 00007fff83f2bb60 R14: 00007fff83f2cfc1 R15: 00007fff83f2cfc8 [ 119.330200][ C0] [ 119.330210][ C0] ---[ end trace ]--- [ 119.408487][ T2499] rust_binder: 2498:2499 no such ref 3 [ 119.410904][ C0] ================================================================== [ 119.410919][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 119.416305][ T36] audit: type=1400 audit(2000000327.050:451): avc: denied { transfer } for pid=2498 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 119.420656][ C0] Read of size 4 at addr ffffffff8670618c by task udevd/2313 [ 119.420684][ C0] [ 119.816295][ C0] CPU: 0 UID: 0 PID: 2313 Comm: udevd Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 119.816334][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.816351][ C0] Call Trace: [ 119.816361][ C0] [ 119.816385][ C0] __dump_stack+0x21/0x30 [ 119.816423][ C0] dump_stack_lvl+0x140/0x1c0 [ 119.816446][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.816470][ C0] ? __cfi__printk+0x10/0x10 [ 119.816492][ C0] print_address_description+0x71/0x210 [ 119.816516][ C0] print_report+0x4a/0x70 [ 119.816539][ C0] kasan_report+0x162/0x1a0 [ 119.816561][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 119.816587][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 119.816611][ C0] __asan_report_load4_noabort+0x18/0x20 [ 119.816641][ C0] aiptek_irq+0x20ab/0x2a00 [ 119.816665][ C0] ? _raw_spin_unlock+0x45/0x60 [ 119.816681][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 119.816701][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 119.816719][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 119.816735][ C0] dummy_timer+0xa3f/0x4900 [ 119.816761][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 119.816779][ C0] ? timerqueue_del+0xd7/0x130 [ 119.816802][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 119.816828][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 119.816845][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 119.816872][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 119.816896][ C0] ? read_tsc+0xd/0x20 [ 119.816918][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 119.816940][ C0] hrtimer_run_softirq+0x159/0x560 [ 119.816955][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 119.816981][ C0] handle_softirqs+0x1aa/0x620 [ 119.817017][ C0] __irq_exit_rcu+0x47/0xb0 [ 119.817034][ C0] irq_exit_rcu+0xd/0x30 [ 119.817049][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 119.817071][ C0] [ 119.817077][ C0] [ 119.817083][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 119.817104][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 119.817124][ C0] Code: 98 05 48 89 de e8 f0 c3 54 00 5b 5d e9 49 37 20 04 cc cc cc cc cc cc cc cc cc b8 c5 7a da 79 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0d 3c 71 7d 7e 65 8b [ 119.817140][ C0] RSP: 0018:ffffc9000e88f868 EFLAGS: 00000246 [ 119.817156][ C0] RAX: ffffffff82738fac RBX: 0000000000000001 RCX: 0000000000000000 [ 119.817169][ C0] RDX: ffff888132c34c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.817180][ C0] RBP: ffffc9000e88f890 R08: 000000003ffdffff R09: 00000001effbffef [ 119.817192][ C0] R10: effbffef00000000 R11: 0000000000000001 R12: 0000000000000000 [ 119.817204][ C0] R13: ffffffff8210a460 R14: ffff8881105d8000 R15: 0000000000000000 [ 119.817217][ C0] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 119.817240][ C0] ? security_inode_permission+0xbc/0x150 [ 119.817267][ C0] ? security_inode_permission+0x134/0x150 [ 119.817311][ C0] inode_permission+0xf3/0x4c0 [ 119.817344][ C0] link_path_walk+0x828/0xeb0 [ 119.817376][ C0] path_openat+0x298/0x35a0 [ 119.817401][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 119.817417][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 119.817438][ C0] ? getname+0x1b/0x30 [ 119.817455][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 119.817471][ C0] ? do_syscall_64+0x57/0xf0 [ 119.817487][ C0] ? do_filp_open+0x440/0x440 [ 119.817512][ C0] do_filp_open+0x1f2/0x440 [ 119.817535][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 119.817561][ C0] ? alloc_fd+0x4c1/0x570 [ 119.817582][ C0] do_sys_openat2+0x134/0x1d0 [ 119.817608][ C0] ? do_sys_open+0x100/0x100 [ 119.817638][ C0] ? cp_old_stat+0x4d0/0x4d0 [ 119.817662][ C0] __x64_sys_openat+0x13a/0x170 [ 119.817688][ C0] x64_sys_call+0xe69/0x2ee0 [ 119.817704][ C0] do_syscall_64+0x57/0xf0 [ 119.817719][ C0] ? clear_bhb_loop+0x50/0xa0 [ 119.817740][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.817761][ C0] RIP: 0033:0x7f9b0d4a7407 [ 119.817775][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 119.817789][ C0] RSP: 002b:00007fff83f2ba30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 119.817806][ C0] RAX: ffffffffffffffda RBX: 00007f9b0dbe2880 RCX: 00007f9b0d4a7407 [ 119.817818][ C0] RDX: 0000000000080000 RSI: 00007fff83f2bb60 RDI: ffffffffffffff9c [ 119.817830][ C0] RBP: 00005576557d4d40 R08: 0000000000000000 R09: 0000000000000000 [ 119.817842][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005576557d4e30 [ 119.817852][ C0] R13: 00007fff83f2bb60 R14: 00007fff83f2cfc1 R15: 00007fff83f2cfc8 [ 119.817867][ C0] [ 119.817872][ C0] [ 120.019249][ T2509] netlink: 284 bytes leftover after parsing attributes in process `syz.1.538'. [ 120.030667][ C0] The buggy address belongs to the variable: [ 120.030680][ C0] .str.48+0xc/0x20 [ 120.030717][ C0] [ 120.030723][ C0] The buggy address belongs to the physical page: [ 120.030733][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6706 [ 120.276692][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 120.281705][ C0] flags: 0x4000(reserved|zone=0) [ 120.281781][ C0] raw: 0000000000004000 ffffea000019c188 ffffea000019c188 0000000000000000 [ 120.324163][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 120.332744][ C0] page dumped because: kasan: bad access detected [ 120.339174][ C0] page_owner info is not present (never set?) [ 120.345252][ C0] [ 120.347604][ C0] Memory state around the buggy address: [ 120.353253][ C0] ffffffff86706080: 06 f9 f9 f9 00 01 f9 f9 05 f9 f9 f9 00 00 00 00 [ 120.361319][ C0] ffffffff86706100: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 120.369383][ C0] >ffffffff86706180: 06 f9 f9 f9 00 01 f9 f9 04 f9 f9 f9 00 f9 f9 f9 [ 120.377529][ C0] ^ [ 120.381903][ C0] ffffffff86706200: 06 f9 f9 f9 07 f9 f9 f9 06 f9 f9 f9 00 04 f9 f9 [ 120.389962][ C0] ffffffff86706280: 05 f9 f9 f9 00 03 f9 f9 00 03 f9 f9 00 00 00 00 [ 120.398055][ C0] ================================================================== [ 120.406114][ C0] Disabling lock debugging due to kernel taint [ 120.412281][ C0] ------------[ cut here ]------------ [ 120.417737][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 120.426322][ C0] index 548 is out of range for type 'const int[34]' [ 120.426739][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 120.433003][ C0] CPU: 0 UID: 0 PID: 2313 Comm: udevd Tainted: G B syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 120.433043][ C0] Tainted: [B]=BAD_PAGE [ 120.433053][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.433104][ C0] Call Trace: [ 120.433134][ C0] [ 120.433169][ C0] __dump_stack+0x21/0x30 [ 120.433279][ C0] dump_stack_lvl+0x140/0x1c0 [ 120.433390][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.433483][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 120.433540][ C0] dump_stack+0x19/0x20 [ 120.433624][ C0] ubsan_epilogue+0xe/0x40 [ 120.433678][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 120.433782][ C0] aiptek_irq+0x1f3c/0x2a00 [ 120.433880][ C0] ? _raw_spin_unlock+0x45/0x60 [ 120.433939][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 120.434004][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 120.434072][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 120.434127][ C0] dummy_timer+0xa3f/0x4900 [ 120.434221][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 120.434290][ C0] ? timerqueue_del+0xd7/0x130 [ 120.434383][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 120.434469][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 120.434540][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 120.434668][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 120.434757][ C0] ? read_tsc+0xd/0x20 [ 120.434826][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 120.434911][ C0] hrtimer_run_softirq+0x159/0x560 [ 120.434972][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 120.435057][ C0] handle_softirqs+0x1aa/0x620 [ 120.435128][ C0] __irq_exit_rcu+0x47/0xb0 [ 120.435181][ C0] irq_exit_rcu+0xd/0x30 [ 120.435241][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 120.435316][ C0] [ 120.435336][ C0] [ 120.435357][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 120.435439][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 120.435497][ C0] Code: 98 05 48 89 de e8 f0 c3 54 00 5b 5d e9 49 37 20 04 cc cc cc cc cc cc cc cc cc b8 c5 7a da 79 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0d 3c 71 7d 7e 65 8b [ 120.435549][ C0] RSP: 0018:ffffc9000e88f868 EFLAGS: 00000246 [ 120.435610][ C0] RAX: ffffffff82738fac RBX: 0000000000000001 RCX: 0000000000000000 [ 120.435658][ C0] RDX: ffff888132c34c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.435692][ C0] RBP: ffffc9000e88f890 R08: 000000003ffdffff R09: 00000001effbffef [ 120.435740][ C0] R10: effbffef00000000 R11: 0000000000000001 R12: 0000000000000000 [ 120.435781][ C0] R13: ffffffff8210a460 R14: ffff8881105d8000 R15: 0000000000000000 [ 120.435825][ C0] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 120.435920][ C0] ? security_inode_permission+0xbc/0x150 [ 120.436042][ C0] ? security_inode_permission+0x134/0x150 [ 120.436142][ C0] inode_permission+0xf3/0x4c0 [ 120.436226][ C0] link_path_walk+0x828/0xeb0 [ 120.436298][ C0] path_openat+0x298/0x35a0 [ 120.436398][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 120.436453][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 120.436527][ C0] ? getname+0x1b/0x30 [ 120.436596][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 120.436643][ C0] ? do_syscall_64+0x57/0xf0 [ 120.436716][ C0] ? do_filp_open+0x440/0x440 [ 120.436795][ C0] do_filp_open+0x1f2/0x440 [ 120.436879][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 120.436967][ C0] ? alloc_fd+0x4c1/0x570 [ 120.437037][ C0] do_sys_openat2+0x134/0x1d0 [ 120.437125][ C0] ? do_sys_open+0x100/0x100 [ 120.437203][ C0] ? cp_old_stat+0x4d0/0x4d0 [ 120.437283][ C0] __x64_sys_openat+0x13a/0x170 [ 120.437399][ C0] x64_sys_call+0xe69/0x2ee0 [ 120.437468][ C0] do_syscall_64+0x57/0xf0 [ 120.437520][ C0] ? clear_bhb_loop+0x50/0xa0 [ 120.437601][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.437684][ C0] RIP: 0033:0x7f9b0d4a7407 [ 120.437734][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 120.437769][ C0] RSP: 002b:00007fff83f2ba30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 120.437829][ C0] RAX: ffffffffffffffda RBX: 00007f9b0dbe2880 RCX: 00007f9b0d4a7407 [ 120.437871][ C0] RDX: 0000000000080000 RSI: 00007fff83f2bb60 RDI: ffffffffffffff9c [ 120.437933][ C0] RBP: 00005576557d4d40 R08: 0000000000000000 R09: 0000000000000000 [ 120.437996][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005576557d4e30 [ 120.438039][ C0] R13: 00007fff83f2bb60 R14: 00007fff83f2cfc1 R15: 00007fff83f2cfc8 [ 120.438092][ C0] [ 120.438113][ C0] ---[ end trace ]--- [ 120.448406][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.503388][ T9] usb 4-1: USB disconnect, device number 45 [ 120.503482][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 120.509866][ T36] audit: type=1400 audit(2000000328.140:452): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.515119][ T36] audit: type=1400 audit(2000000328.140:453): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.949729][ T36] audit: type=1400 audit(2000000328.140:454): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.949900][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.971964][ T36] audit: type=1400 audit(2000000328.140:455): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.002273][ T36] audit: type=1400 audit(2000000328.140:456): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.013912][ T45] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 121.032418][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.040614][ T45] usb 2-1: Product: syz [ 121.044890][ T45] usb 2-1: Manufacturer: syz [ 121.051125][ T45] usb 2-1: SerialNumber: syz [ 121.972805][ T45] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 121.981365][ T45] usb 2-1: USB disconnect, device number 39