last executing test programs: 1m1.959790382s ago: executing program 3 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x0, 0x40000000) write(r2, &(0x7f00000000c0)="05a7fb5af4478a278189da89f20d2e48fa34fb95d8fd5d2783332a348be36fd9501981790ece2fd5fc284332cd03b2c051f9b1daa0fc55d6bab146c66710168846d7e7871dc8bace44d524627ecfe598d7a51e0be873de9977c944da9586b513f0cf5d8bfb2ad15a2212ecbc177a773948382234ace65ffec7e975c0a1baf40f1280a1e5e85594b344522bb93a838102d619e3bc818ba152618bcc8dc4132bf534fea76ba40f01cc1e69317fd36dcfbffd6773", 0xb3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"b01c324d3e90405b7c29ef5c24bc57c2000af61b7dfe1c6d0441250abc09714b8983d94ae9d1c9b299bc3f662a486f837ce790473266f7e3a876990f4329e3462bb8c56e3e337b4f3a7f348162e9c25cfca716583ded89b9f53e2a5437bf4f586ec536975db535bda9c309212b8791297126fb23192a470103a4958de2c44ad9b4bff0d08a7414fa233bddd0ea2a22c52b9f2e250e104d8b1e8186739e31598654a352a29284eca7d0d9515b7ea1cb833a54be62185e258cce05ae7684cb9ede4bd2886f961e67fdd7c44a9f8174a3cd6d5d45ea0e945b53ecd047ba510a005dad6910fdc2337d482c66226a079c9b8e079f86551493ed53c28fd4acab2e99d02911a95dd24f6fe3d7dcc49698895fabb4f42160dcce3d4fd9c6d386dcf885d2a705b77ae1309412d6a058340d767295610abdfe1b00ef8ccb5bf9754fadffbe5e66b63a91828b26acf25818b605b3e7c1772faee05681f4af52f4fe4f63f28be514a9326d9ee6af500514077a52d953b3d541a2846da2a0192fda41c5bb7ad29b2ab5b486188d22925b69b97043af1eeb7320892c6b7c379a8bc9cf0487de8a3f8dc03b5862a01ff2b184618cd5ac92c3fdbed69d2f8f6df774c0ffade18b6771a387f2d4ad4ca2047c3408c36beb3fb870d08df2d69484d6fcc2070a09c039a738a3e2925954a571c8fb6f83c07408e831c4e610cbae40d03527723fe3e1848b19ef42c3e6edcf2041eee1877e679309ac054c3988836f44036fe38f388d13b93522484d26d1e85770b9f9aae6117e02c208b03f9d727ef0aba560eae168a5199c703f60459e3e37f3d987b6247f41f00fa586fe29b98fa524a1180b32256403f3c56d3f21b1fd1d9eaf18bba625f295dc2f2630890ceaf1760fd111eb9e63d68c202b744e1f3b5c5996048a343ff6ba2c71e71b7dfb36982c6bade3548adbd6b0e15fbca8bbb7b7cf0d2cb9c6e3da3255e5fd29e11c955d1d05bc20dc2e1b58fa941b8cd2ec39300196ec863f0afd8e6dc6a11d1baf4f479a0a17cd0e45a0fea9405b0107d1b7bfb3ccad322cceebd9d55db1f3e0e47227f83c9aa1dd46c8ac3bd3576bfc727e1a2190a6140b671cd8497c07a0e973bcd5cfb872ac255cb365911b9b6ba0855b338fa2f0573305fb71fe2030dca87abdb89e2a0b03ab43bfe712c0cbe4bce69fe41316adfc86707044a0f285d34e9860cd0ca084b650f4a9529a6d77d56e0c916b69ba3aa16addda592453a13b7c708ac3f1248b114079cdf84d561156c59be38b4aab1c488481006d948b3b2c63daeb9756cee6b189f39d5d7167026aa7a4a828f14421b2973b4b53065fc2b53d9c6b09abce5d8fac51c9efdb87529c0f916d9a72257f0ffa30e2f19a9c19882f7306690b425ba80112a62743224cb9ab3e41abb1547a5a7c2c30131e326cc77e3e6b438883d13410b70e"}) 1m1.65292222s ago: executing program 3 (id=1009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e1221b23bb601c494d3df173e75", 0xe}, {&(0x7f00000001c0)="0400810002", 0x5}], 0x2) 1m1.524276493s ago: executing program 3 (id=1010): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000"], 0x0) sendto$inet6(r0, &(0x7f0000000380)="78a4f58549b504000000", 0xa, 0x1340ae453ecab964, 0x0, 0x0) 1m0.883934559s ago: executing program 3 (id=1011): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d000100000000090400000503001500092105000001220500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003c000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) 1m0.260783534s ago: executing program 3 (id=1020): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prctl$PR_SET_FP_MODE(0x42, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='e:my_eprobe sched/sched_switch', 0x1e) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f00000000c0)) 1m0.111919098s ago: executing program 3 (id=1022): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c00000018000718ab09250009fc07000a0700000000000600003693", 0x1c) 45.067562124s ago: executing program 32 (id=1022): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c00000018000718ab09250009fc07000a0700000000000600003693", 0x1c) 7.724109916s ago: executing program 4 (id=1387): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x3, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$nl_route(0x10, 0x3, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) open(&(0x7f00000001c0)='.\x00', 0x200140, 0x1a8) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8016, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 6.819913629s ago: executing program 0 (id=1391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x75) 6.77152912s ago: executing program 4 (id=1392): r0 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x18}, 0xc4) socket(0x5, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCSETS(r2, 0x5434, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300f5f93e5f131f5ba206020105490c8100"/104, @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 6.735355132s ago: executing program 0 (id=1393): readlink(0x0, &(0x7f0000000300)=""/194, 0xc2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x60040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) flock(r0, 0xe) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r7, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x1, 0x1da, 0x0, 0x0, 0x1000, 0x5, r3, 0x0, 0xc0}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x810, 0xfffffffe, 0xa8}}], 0x1, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000084409010240000102030109022b03000000007f090400008101030001072401062007aa78f44f1368aad40009050403080001080809"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0xb1, 0x10, 0x10, 0x3}, 0x0, 0x0}) 6.047880279s ago: executing program 0 (id=1394): socket(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2, 0x0, 0x0, 0x448}}], 0x40000000000003a, 0x0) 6.039930069s ago: executing program 0 (id=1395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.842882334s ago: executing program 0 (id=1396): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003c000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) 5.460139603s ago: executing program 4 (id=1399): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x0, 0xe, {0x8, 0xb, 0x1, 0x2, 0x1, 0xf, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3b7, 0x8, 0x6, 0x0, {0x8, 0x25, 0x1, 0x1, 0x28, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x6, 0x8, {0x8, 0x25, 0x1, 0x3, 0xc, 0x2, 0x1}}}}}}}}]}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 4.016729469s ago: executing program 4 (id=1406): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x35) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'rose0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001ec989e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x8c, r1, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_sfeatures}) sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="3699147832fc17a0ab2f3488b12c2a2742fc34569df14c92f2d178e1e18de0a542d4e217bd1374158faf71210a40c7755e58b2c874d9961f", 0x38}, {&(0x7f0000000140)="57ba690bd9fe4d36a7687e8e80602bfc6cbe03f453b7ecdf73a8e6d70a5e747e5125108e3fa20e1ed97faf6f51a6ca2fc30968", 0x33}], 0x2}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xf000}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)='15', 0x2}], 0x1) syz_usb_disconnect(r7) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) 3.476236033s ago: executing program 1 (id=1412): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0xfffffffc, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 3.383958545s ago: executing program 1 (id=1413): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x17d004, 0xd, 0x0, 0x0, 0x7, 0x7, 0x0, 0x4, 0x1, 0x4}, {0x118004, 0xffff1000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0xa000, 0x2000, 0xa, 0xfd, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x5c, 0x0, 0xfd, 0x1c, 0x7, 0x88}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0xcf, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0x8}, {0xeeee8000, 0x10000, 0xf, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x26000, 0x10, 0xffffffffffffffd, 0x0, 0x900, [0x0, 0x0, 0x2, 0x4]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.81010459s ago: executing program 0 (id=1416): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x28c540, 0x0) socket(0x1e, 0x80005, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 2.664075063s ago: executing program 2 (id=1418): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@private=0xa010100, @loopback, @multicast1}, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x1a, &(0x7f0000000080)=ANY=[], 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x400002, &(0x7f00000000c0)={@align=0x800, {0x9, 0x200, 0x5, 0x6}}, 0xfe64, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupsid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x5, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x7, 0xfffffffe, 0x1, 0x1, 0x8000, 0x4, r6, r7, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="66643da0aba3504ec800"/25, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030303030303030313230302c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030322c626c6b73697a653d3078303030303030303030303030316130302c646f6e745f686173682c736d61636b6673726f6f743daaaaaaaaaa2c657569643d", @ANYRESDEC=r8, @ANYBLOB=',dont_measure,euid<', @ANYRESDEC=0x0, @ANYBLOB=',measure,smackfshat=/,\x00']) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) r9 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4) sendto$inet(r9, 0x0, 0x0, 0x40, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) recvmmsg$unix(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) shutdown(r3, 0x1) 2.636785484s ago: executing program 2 (id=1419): socket(0x10, 0x3, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0201000a0a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, 0x0, 0x4e010) socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xdb21}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, r4, 0x0, 0x5) unlinkat(r4, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0x6a) r5 = socket$nl_audit(0x10, 0x3, 0x9) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) 2.511907067s ago: executing program 1 (id=1420): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xc43, 0x0) flock(r1, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x2, {0x8}}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x0, 0xb, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x2, 0x4, 0x9, 0x6, 0x9, 0xf, 'macsec0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x240}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @multicast2, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e22, @empty}, {0x2, 0x0, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x18eb, &(0x7f00000001c0)='team_slave_1\x00', 0x40005, 0x1, 0x3}) 2.511671047s ago: executing program 4 (id=1421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socket$inet6(0xa, 0x3, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) epoll_create1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0xa) syz_ublk_setup_io_uring(0x1943, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0xa, 0x300) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r2, r4, r3, r5, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000000180)={0x0, 0x5b5b, 0x0, 0xfffffffe, 0x200034d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x5f, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73a3, 0x4000, 0x7, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x24a02, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.490029478s ago: executing program 1 (id=1422): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) 2.361914011s ago: executing program 1 (id=1423): socket$packet(0x11, 0x3, 0x300) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="f20f2338b9a00100000f32f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d70f01c2ac8de87ae8", 0x33}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.279802813s ago: executing program 4 (id=1424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x56, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x87, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2, 0x9}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x2, 0x3, [{0xba, 0xd}, {0x9, 0x4}, {0x58, 0x7}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x7, 0x6, [{0x5, 0x7}, {0x5, 0x21}, {0x8, 0xd}, {0x3, 0x3}, {0x3, 0x9}, {0x6f, 0x7}], 0xbf}]}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.031920949s ago: executing program 2 (id=1425): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000002080)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x10, &(0x7f0000000840)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000240)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 1.515110152s ago: executing program 2 (id=1426): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={0x0}}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.412796105s ago: executing program 1 (id=1427): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x24, &(0x7f0000000f00)={0x0, 0x14, 0x2, "178d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000700)={0x40, 0x6, 0xfffffffffffffcc1}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000340)={0x40, 0x31}, 0x0, 0x0}) 592.334165ms ago: executing program 2 (id=1428): syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) 0s ago: executing program 2 (id=1429): socket(0x10, 0x3, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x100) userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYBLOB="853f693190d769231b0067d772bf1ba7f715ab8c052e0d891b1a9e2870ecb38af0180f05dd73724cf755fde22498", @ANYBLOB='\a'], 0x0) kernel console output (not intermixed with test programs): [ 152.742725][ T2727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.768559][ T329] usb usb1-port1: unable to enumerate USB device [ 152.789247][ T2725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16189569 (129516552 ns) > initial count (4730920 ns). Using initial count to start timer. [ 153.167321][ T2743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=60 sclass=netlink_audit_socket pid=2743 comm=syz.1.858 [ 153.179840][ T2743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=2743 comm=syz.1.858 [ 153.319503][ T2747] FAULT_INJECTION: forcing a failure. [ 153.319503][ T2747] name failslab, interval 1, probability 0, space 0, times 0 [ 153.365114][ T2747] CPU: 1 UID: 0 PID: 2747 Comm: syz.0.860 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 153.365147][ T2747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.365160][ T2747] Call Trace: [ 153.365168][ T2747] [ 153.365177][ T2747] __dump_stack+0x21/0x30 [ 153.365210][ T2747] dump_stack_lvl+0x140/0x1c0 [ 153.365235][ T2747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.365260][ T2747] ? poison_kmalloc_large_redzone+0x97/0xf0 [ 153.365286][ T2747] dump_stack+0x19/0x20 [ 153.365310][ T2747] should_fail_ex+0x3c2/0x510 [ 153.365331][ T2747] ? process_vm_rw+0x3f4/0xc70 [ 153.365355][ T2747] should_failslab+0xac/0x100 [ 153.365379][ T2747] __kmalloc_noprof+0x69/0x510 [ 153.365400][ T2747] ? process_vm_rw+0x3f4/0xc70 [ 153.365424][ T2747] process_vm_rw+0x3f4/0xc70 [ 153.365447][ T2747] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 153.365471][ T2747] ? proc_fail_nth_write+0x184/0x220 [ 153.365498][ T2747] ? vfs_write+0xbcf/0xfd0 [ 153.365519][ T2747] ? __kasan_check_write+0x18/0x20 [ 153.365539][ T2747] ? __kasan_check_write+0x18/0x20 [ 153.365557][ T2747] ? fput+0x1a4/0x230 [ 153.365581][ T2747] ? __cfi_ksys_write+0x10/0x10 [ 153.365601][ T2747] __x64_sys_process_vm_readv+0xeb/0x100 [ 153.365627][ T2747] x64_sys_call+0x2df4/0x2ee0 [ 153.365646][ T2747] do_syscall_64+0x57/0xf0 [ 153.365668][ T2747] ? clear_bhb_loop+0x50/0xa0 [ 153.365692][ T2747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.365716][ T2747] RIP: 0033:0x7f8201b9e0d9 [ 153.365732][ T2747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.365748][ T2747] RSP: 002b:00007f8202a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 153.365786][ T2747] RAX: ffffffffffffffda RBX: 00007f8201e25fa0 RCX: 00007f8201b9e0d9 [ 153.365803][ T2747] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000001d8 [ 153.365818][ T2747] RBP: 00007f8202a12090 R08: 0000000000000286 R09: 0000000000000000 [ 153.365832][ T2747] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 153.365846][ T2747] R13: 00007f8201e26038 R14: 00007f8201e25fa0 R15: 00007ffce37fdc68 [ 153.365864][ T2747] [ 153.477966][ T2753] bpf: Bad value for 'mode' [ 153.865625][ T2768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.891455][ T2768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.893531][ T2771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.914384][ T2771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.928306][ T2768] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 154.028102][ T66] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 154.201254][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.212182][ T66] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 154.230024][ T66] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 154.239351][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.247379][ T66] usb 2-1: Product: syz [ 154.251734][ T66] usb 2-1: Manufacturer: syz [ 154.256358][ T66] usb 2-1: SerialNumber: syz [ 155.040543][ T2792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (4294967295 ns) > initial count (2 ns). Using initial count to start timer. [ 155.208096][ T66] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 155.345495][ T36] kauditd_printk_skb: 3539 callbacks suppressed [ 155.345516][ T36] audit: type=1400 audit(1786213836.010:50464): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.359817][ T2811] kvm: kvm [2810]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 155.387059][ T36] audit: type=1400 audit(1786213836.010:50465): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.391152][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 155.413463][ T36] audit: type=1400 audit(1786213836.010:50466): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.429425][ T2811] kvm: kvm [2810]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 155.446794][ T36] audit: type=1400 audit(1786213836.020:50467): avc: denied { read write } for pid=2810 comm="syz.2.888" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.458128][ T2815] fuse: Unknown parameter '*&}d' [ 155.476863][ T36] audit: type=1400 audit(1786213836.020:50468): avc: denied { read write open } for pid=2810 comm="syz.2.888" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.482454][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.506138][ T36] audit: type=1400 audit(1786213836.020:50469): avc: denied { ioctl } for pid=2810 comm="syz.2.888" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.541554][ T36] audit: type=1400 audit(1786213836.120:50470): avc: denied { read write } for pid=2763 comm="syz.1.868" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.548088][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.582561][ T36] audit: type=1400 audit(1786213836.120:50471): avc: denied { read write open } for pid=2763 comm="syz.1.868" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.588393][ T2816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 155.608643][ T36] audit: type=1400 audit(1786213836.120:50472): avc: denied { ioctl } for pid=2763 comm="syz.1.868" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.628864][ T66] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.665124][ T36] audit: type=1400 audit(1786213836.120:50473): avc: denied { create } for pid=2763 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.672879][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.693537][ T66] usb 1-1: Product: syz [ 155.697720][ T66] usb 1-1: Manufacturer: syz [ 155.702352][ T66] usb 1-1: SerialNumber: syz [ 155.913696][ T66] usb 1-1: 0:2 : does not exist [ 155.922042][ T66] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 155.951098][ T66] usb 1-1: USB disconnect, device number 66 [ 156.050135][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.687445][ T2838] kvm: kvm [2837]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 156.696608][ T2838] kvm: kvm [2837]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 156.752196][ T66] usb 2-1: USB disconnect, device number 61 [ 156.760742][ T2840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 156.768122][ T9] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 156.841077][ T2842] bpf: Bad value for 'mode' [ 156.950995][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.963310][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.973785][ T9] usb 1-1: config 1 has no interface number 0 [ 156.997549][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.018895][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 157.038092][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 157.057000][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.072396][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.085306][ T9] usb 1-1: Product: syz [ 157.090316][ T9] usb 1-1: Manufacturer: syz [ 157.098927][ T9] usb 1-1: SerialNumber: syz [ 157.115218][ T2836] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 157.132520][ T2847] bpf: Bad value for 'mode' [ 157.145504][ T2851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.161188][ T2851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.337150][ T2863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.349464][ T2863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.539962][ T2836] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 157.688889][ T2882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 157.767370][ T2836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.778345][ T2836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.801642][ T9] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 157.815575][ T9] cdc_ncm 1-1:1.1: bind() failure [ 157.833541][ T9] usb 1-1: USB disconnect, device number 67 [ 158.168362][ T2895] netlink: 'syz.2.918': attribute type 4 has an invalid length. [ 158.667934][ T2907] kvm: kvm [2906]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 158.676919][ T2907] kvm: kvm [2906]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 158.726552][ T2913] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 158.953173][ T2922] fuse: Unknown parameter '*&}d' [ 159.248117][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 159.398103][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 159.406247][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.415719][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 159.426852][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 159.440420][ T31] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 159.449582][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.457570][ T31] usb 1-1: Product: syz [ 159.461782][ T31] usb 1-1: Manufacturer: syz [ 159.466413][ T31] usb 1-1: SerialNumber: syz [ 159.474826][ T2926] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 159.750624][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 159.775968][ T31] usb 1-1: USB disconnect, device number 68 [ 159.885225][ T2011] udevd[2011]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.933577][ T2937] FAULT_INJECTION: forcing a failure. [ 159.933577][ T2937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.950112][ T2936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.932'. [ 159.995430][ T2937] CPU: 0 UID: 0 PID: 2937 Comm: syz.2.933 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 159.995468][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.995482][ T2937] Call Trace: [ 159.995489][ T2937] [ 159.995497][ T2937] __dump_stack+0x21/0x30 [ 159.995529][ T2937] dump_stack_lvl+0x140/0x1c0 [ 159.995554][ T2937] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.995579][ T2937] ? _parse_integer+0x2e/0x40 [ 159.995599][ T2937] ? kstrtoull+0x13b/0x1e0 [ 159.995618][ T2937] dump_stack+0x19/0x20 [ 159.995641][ T2937] should_fail_ex+0x3c2/0x510 [ 159.995663][ T2937] should_fail+0xf/0x20 [ 159.995683][ T2937] should_fail_usercopy+0x1e/0x30 [ 159.995706][ T2937] _copy_from_user+0x20/0xa0 [ 159.995730][ T2937] ___sys_sendmsg+0x1c7/0x370 [ 159.995751][ T2937] ? __sys_sendmsg+0x2a0/0x2a0 [ 159.995771][ T2937] ? proc_fail_nth_write+0x184/0x220 [ 159.995800][ T2937] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 159.995832][ T2937] ? __fget_files+0x2bc/0x330 [ 159.995857][ T2937] __x64_sys_sendmsg+0x206/0x2e0 [ 159.995876][ T2937] ? fput+0x1a4/0x230 [ 159.995899][ T2937] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 159.995919][ T2937] ? ksys_write+0x1f3/0x260 [ 159.995958][ T2937] ? __kasan_check_read+0x15/0x20 [ 159.995988][ T2937] x64_sys_call+0x2a4c/0x2ee0 [ 159.996008][ T2937] do_syscall_64+0x57/0xf0 [ 159.996032][ T2937] ? clear_bhb_loop+0x50/0xa0 [ 159.996060][ T2937] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.996086][ T2937] RIP: 0033:0x7f323b59e0d9 [ 159.996104][ T2937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.996122][ T2937] RSP: 002b:00007f323c48b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.996147][ T2937] RAX: ffffffffffffffda RBX: 00007f323b825fa0 RCX: 00007f323b59e0d9 [ 159.996164][ T2937] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 159.996178][ T2937] RBP: 00007f323c48b090 R08: 0000000000000000 R09: 0000000000000000 [ 159.996193][ T2937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.996206][ T2937] R13: 00007f323b826038 R14: 00007f323b825fa0 R15: 00007ffe5e3cf358 [ 159.996225][ T2937] [ 160.115539][ T2941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'. [ 160.259457][ T2940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 160.372127][ T36] kauditd_printk_skb: 1598 callbacks suppressed [ 160.372145][ T36] audit: type=1400 audit(1786213841.040:52072): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.434723][ T36] audit: type=1400 audit(1786213841.080:52073): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.461335][ T36] audit: type=1400 audit(1786213841.080:52074): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.491115][ T36] audit: type=1400 audit(1786213841.080:52075): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.547943][ T2955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.556407][ T36] audit: type=1400 audit(1786213841.080:52076): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.598277][ T2955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.626784][ T36] audit: type=1400 audit(1786213841.080:52077): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.688096][ T36] audit: type=1400 audit(1786213841.100:52078): avc: denied { create } for pid=2949 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.696740][ T2961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.728513][ T36] audit: type=1400 audit(1786213841.100:52079): avc: denied { create } for pid=2949 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.749761][ T36] audit: type=1400 audit(1786213841.100:52080): avc: denied { write } for pid=2949 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.752369][ T2960] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.777936][ T2961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.787455][ T2963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.803568][ T2963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.343800][ T2974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.352359][ T2974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.358113][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 161.365654][ T2974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.376246][ T2974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.387338][ T2974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.396244][ T2974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.407357][ T2974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.415904][ T2974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.528157][ T329] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 161.535807][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 161.544085][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.554555][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.566331][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.575442][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.583459][ T9] usb 1-1: Product: syz [ 161.587775][ T9] usb 1-1: Manufacturer: syz [ 161.592452][ T9] usb 1-1: SerialNumber: syz [ 161.690423][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.705151][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.715246][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.738097][ T329] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 161.739046][ T2976] kvm: kvm [2975]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 161.747232][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.764651][ T329] usb 2-1: config 0 descriptor?? [ 161.765770][ T2976] kvm: kvm [2975]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 161.804659][ T2976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 161.821450][ T9] usb 1-1: 0:2 : does not exist [ 161.830079][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 161.855901][ T9] usb 1-1: USB disconnect, device number 69 [ 161.928412][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.119611][ T2987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 162.128990][ T2981] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3696184877 (59138958032 ns) > initial count (23075282992 ns). Using initial count to start timer. [ 162.154317][ T2987] netlink: 188 bytes leftover after parsing attributes in process `syz.3.953'. [ 162.168143][ T2981] kvm: pic: non byte write [ 162.191651][ T329] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 162.209166][ T329] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 162.227383][ T329] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 162.244252][ T329] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 162.260930][ T329] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 162.278119][ T329] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 162.296812][ T329] playstation 0003:054C:09CC.000D: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 162.392932][ T2972] random: crng reseeded on system resumption [ 162.405847][ T329] playstation 0003:054C:09CC.000D: Failed to retrieve feature with reportID 18: -32 [ 162.435529][ T329] playstation 0003:054C:09CC.000D: Failed to retrieve DualShock4 pairing info: -32 [ 162.459046][ T329] playstation 0003:054C:09CC.000D: Failed to get MAC address from DualShock4 [ 162.473566][ T2998] netlink: 'syz.1.948': attribute type 13 has an invalid length. [ 162.487846][ T329] playstation 0003:054C:09CC.000D: Failed to create dualshock4. [ 162.513528][ T329] playstation 0003:054C:09CC.000D: probe with driver playstation failed with error -32 [ 162.534782][ T329] usb 2-1: USB disconnect, device number 62 [ 162.573998][ T3003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.586358][ T3003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.758153][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 162.908159][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 162.915681][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.925906][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.937418][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.946606][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.954638][ T9] usb 1-1: Product: syz [ 162.958928][ T9] usb 1-1: Manufacturer: syz [ 162.963613][ T9] usb 1-1: SerialNumber: syz [ 163.175708][ T9] usb 1-1: 0:2 : does not exist [ 163.195786][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 163.200227][ T3009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 163.228539][ T9] usb 1-1: USB disconnect, device number 70 [ 163.277941][ T3012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.289867][ T3012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.343367][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.353451][ T3016] netlink: 'syz.1.964': attribute type 3 has an invalid length. [ 163.388129][ T3014] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16189569 (129516552 ns) > initial count (4730920 ns). Using initial count to start timer. [ 163.515284][ T3021] incfs: Backing dir is not set, filesystem can't be mounted. [ 163.532470][ T3021] incfs: mount failed -2 [ 163.798507][ T3024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.807183][ T3024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.858113][ T324] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 164.008120][ T324] usb 2-1: Using ep0 maxpacket: 16 [ 164.015365][ T324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.025645][ T324] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 164.034728][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.044514][ T324] usb 2-1: config 0 descriptor?? [ 164.422532][ T3032] kvm: kvm [3031]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 164.431477][ T3032] kvm: kvm [3031]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 164.456540][ T3032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 164.683684][ T3045] incfs: Backing dir is not set, filesystem can't be mounted. [ 164.691239][ T3045] incfs: mount failed -2 [ 164.828105][ T362] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 164.868416][ T3051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.878412][ T3051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.887281][ T3051] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 164.958735][ T3052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.967300][ T3052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.978154][ T362] usb 1-1: device descriptor read/64, error -71 [ 165.218108][ T362] usb 1-1: device descriptor read/64, error -71 [ 165.398525][ T36] kauditd_printk_skb: 702 callbacks suppressed [ 165.398567][ T36] audit: type=1400 audit(1786213846.070:52781): avc: denied { ioctl } for pid=3034 comm="syz.0.973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.446880][ T36] audit: type=1400 audit(1786213846.110:52782): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.471186][ T362] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 165.475267][ T36] audit: type=1400 audit(1786213846.110:52783): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.504227][ T36] audit: type=1400 audit(1786213846.110:52784): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.531050][ T36] audit: type=1400 audit(1786213846.130:52785): avc: denied { create } for pid=3053 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.551635][ T36] audit: type=1400 audit(1786213846.130:52786): avc: denied { create } for pid=3053 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.572183][ T36] audit: type=1400 audit(1786213846.130:52787): avc: denied { write } for pid=3053 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.592689][ T36] audit: type=1400 audit(1786213846.130:52788): avc: denied { read } for pid=3053 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.613024][ T36] audit: type=1400 audit(1786213846.130:52789): avc: denied { read } for pid=3053 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.618094][ T362] usb 1-1: device descriptor read/64, error -71 [ 165.633396][ T36] audit: type=1400 audit(1786213846.140:52790): avc: denied { write } for pid=3053 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.898184][ T362] usb 1-1: device descriptor read/64, error -71 [ 166.008538][ T362] usb usb1-port1: attempt power cycle [ 166.348131][ T362] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 166.372268][ T362] usb 1-1: device descriptor read/8, error -71 [ 166.431458][ T3068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.443295][ T3068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.510132][ T362] usb 1-1: device descriptor read/8, error -71 [ 166.577905][ T3070] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 166.586287][ T3070] overlayfs: missing 'lowerdir' [ 166.622050][ T324] usb 2-1: USB disconnect, device number 63 [ 166.748186][ T362] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 166.792796][ T362] usb 1-1: device descriptor read/8, error -71 [ 166.941048][ T362] usb 1-1: device descriptor read/8, error -71 [ 167.050263][ T362] usb usb1-port1: unable to enumerate USB device [ 167.337874][ T3096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.358247][ T3096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.376300][ T3096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.387462][ T3096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.858689][ T3104] kvm: kvm [3103]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 167.867777][ T3104] kvm: kvm [3103]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 167.918670][ T3104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 168.018121][ T329] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 168.018274][ T3109] kvm: kvm [3108]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 168.040549][ T3109] kvm: kvm [3108]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 168.122625][ T3113] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 168.172315][ T3115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1006'. [ 168.198079][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 168.214933][ T329] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 168.242751][ T329] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 168.278076][ T329] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.288148][ T329] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 168.316861][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.335022][ T329] usb 1-1: config 0 descriptor?? [ 168.444942][ T3125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.458182][ T3125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.752446][ T329] hid (null): global environment stack underflow [ 168.760834][ T329] logitech-djreceiver 0003:046D:C51B.000E: ignoring exceeding usage max [ 168.783579][ T329] logitech-djreceiver 0003:046D:C51B.000E: global environment stack underflow [ 168.801335][ T329] logitech-djreceiver 0003:046D:C51B.000E: item 0 2 1 11 parsing failed [ 168.810917][ T329] logitech-djreceiver 0003:046D:C51B.000E: logi_dj_probe: parse failed [ 168.820918][ T329] logitech-djreceiver 0003:046D:C51B.000E: probe with driver logitech-djreceiver failed with error -22 [ 168.959426][ T329] usb 1-1: USB disconnect, device number 75 [ 169.041424][ T3127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.065670][ T3127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.083698][ T3127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.096284][ T3127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.281003][ T3132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 169.585586][ T3145] netlink: 'syz.1.1019': attribute type 6 has an invalid length. [ 169.708011][ T3149] batadv_slave_0: entered promiscuous mode [ 169.732629][ T3148] batadv_slave_0: left promiscuous mode [ 170.410809][ T36] kauditd_printk_skb: 4128 callbacks suppressed [ 170.410828][ T36] audit: type=1400 audit(1786213851.080:56919): avc: denied { map } for pid=3150 comm="syz.0.1021" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.480728][ T3151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.495486][ T36] audit: type=1400 audit(1786213851.080:56920): avc: denied { read } for pid=3150 comm="syz.0.1021" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.499753][ T3168] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.521646][ T36] audit: type=1400 audit(1786213851.080:56921): avc: denied { create } for pid=3150 comm="syz.0.1021" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.526718][ T3151] audit: audit_lost=209 audit_rate_limit=0 audit_backlog_limit=64 [ 170.550934][ T36] audit: type=1400 audit(1786213851.080:56922): avc: denied { map } for pid=3150 comm="syz.0.1021" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.584542][ T3169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.588122][ T3168] audit: audit_lost=210 audit_rate_limit=0 audit_backlog_limit=64 [ 170.591232][ T3169] audit: audit_lost=211 audit_rate_limit=0 audit_backlog_limit=64 [ 170.698124][ T329] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 170.849306][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 170.863475][ T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.874737][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 170.891765][ T329] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 170.904671][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.930699][ T329] usb 2-1: config 0 descriptor?? [ 170.948634][ T329] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 171.848449][ T3184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.861515][ T3184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.398532][ T329] usb 2-1: USB disconnect, device number 64 [ 173.968805][ T3200] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16189569 (129516552 ns) > initial count (4730920 ns). Using initial count to start timer. [ 174.809824][ T310] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 174.978088][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 174.986391][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.998631][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.028086][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.047846][ T310] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 175.058567][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.069711][ T310] usb 2-1: config 0 descriptor?? [ 175.337771][ T3223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.346371][ T3223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.482209][ T36] kauditd_printk_skb: 417 callbacks suppressed [ 175.482227][ T36] audit: type=1400 audit(1786213856.150:57325): avc: denied { ioctl } for pid=3215 comm="syz.1.1046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.517118][ T36] audit: type=1400 audit(1786213856.180:57326): avc: denied { ioctl } for pid=3215 comm="syz.1.1046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.545319][ T310] nintendo 0003:057E:2019.000F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 175.627935][ T310] nintendo 0003:057E:2019.000F: Failed to get joycon info; ret=-38 [ 175.636028][ T310] nintendo 0003:057E:2019.000F: Failed to retrieve controller info; ret=-38 [ 175.650473][ T310] nintendo 0003:057E:2019.000F: Failed to initialize controller; ret=-38 [ 175.669450][ T310] nintendo 0003:057E:2019.000F: probe - fail = -38 [ 175.677056][ T310] nintendo 0003:057E:2019.000F: probe with driver nintendo failed with error -38 [ 175.719187][ T36] audit: type=1400 audit(1786213856.390:57327): avc: denied { ioctl } for pid=3215 comm="syz.1.1046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.872731][ T36] audit: type=1400 audit(1786213856.540:57328): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.912938][ T36] audit: type=1400 audit(1786213856.560:57329): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.941962][ T3216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.950749][ T3227] rust_binder: Write failure EFAULT in pid:729 [ 175.952299][ T36] audit: type=1400 audit(1786213856.560:57330): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.952637][ T3216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.978072][ T36] audit: type=1400 audit(1786213856.610:57331): avc: denied { read write } for pid=3226 comm="syz.2.1050" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.021263][ T36] audit: type=1400 audit(1786213856.610:57332): avc: denied { read write open } for pid=3226 comm="syz.2.1050" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.047267][ T36] audit: type=1400 audit(1786213856.610:57333): avc: denied { read write } for pid=3215 comm="syz.1.1046" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.058298][ T324] usb 2-1: USB disconnect, device number 65 [ 176.076495][ T36] audit: type=1400 audit(1786213856.610:57334): avc: denied { read write open } for pid=3215 comm="syz.1.1046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.208099][ T3233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.227863][ T3233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.799087][ T3261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 177.982548][ T3265] kvm: kvm [3264]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 177.991561][ T3265] kvm: kvm [3264]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 178.022587][ T3265] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 178.159327][ T3268] kvm: kvm [3267]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 178.168350][ T3268] kvm: kvm [3267]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 178.198328][ T3268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 178.298295][ T3271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.319066][ T3271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.487835][ T3274] incfs_lookup_dentry err:-13 [ 179.088732][ T3283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.098268][ T3283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.257777][ T3286] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16189569 (129516552 ns) > initial count (4730920 ns). Using initial count to start timer. [ 179.974695][ T3299] incfs_lookup_dentry err:-13 [ 180.238192][ T3308] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 180.403808][ T3313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3313 comm=syz.2.1081 [ 180.522062][ T36] kauditd_printk_skb: 364 callbacks suppressed [ 180.522079][ T36] audit: type=1400 audit(1786213861.190:57699): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.565981][ T36] audit: type=1400 audit(1786213861.230:57700): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.592495][ T36] audit: type=1400 audit(1786213861.230:57701): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.649454][ T36] audit: type=1400 audit(1786213861.290:57702): avc: denied { read write } for pid=3316 comm="syz.1.1083" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.679614][ T36] audit: type=1400 audit(1786213861.290:57703): avc: denied { read write open } for pid=3316 comm="syz.1.1083" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.705107][ T36] audit: type=1400 audit(1786213861.310:57704): avc: denied { ioctl } for pid=3316 comm="syz.1.1083" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.761503][ T36] audit: type=1400 audit(1786213861.320:57705): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.786437][ T36] audit: type=1400 audit(1786213861.320:57706): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.812206][ T36] audit: type=1400 audit(1786213861.320:57707): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.838736][ T36] audit: type=1400 audit(1786213861.410:57708): avc: denied { read write } for pid=3318 comm="syz.1.1084" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.969031][ T310] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 181.138081][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 181.146433][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.159100][ T310] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 181.181432][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.191272][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.208254][ T310] usb 2-1: Product: syz [ 181.212598][ T310] usb 2-1: Manufacturer: syz [ 181.217256][ T310] usb 2-1: SerialNumber: syz [ 181.458896][ T9] usb 2-1: USB disconnect, device number 66 [ 181.533455][ T3333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 182.208334][ T3349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3349 comm=syz.1.1095 [ 182.974312][ T3360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.989728][ T3360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.408074][ T310] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 183.558069][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 183.569294][ T310] usb 2-1: no configurations [ 183.573928][ T310] usb 2-1: can't read configurations, error -22 [ 183.728103][ T310] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 183.888084][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 183.899243][ T310] usb 2-1: no configurations [ 183.908094][ T310] usb 2-1: can't read configurations, error -22 [ 183.925306][ T310] usb usb2-port1: attempt power cycle [ 184.085649][ T3379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'. [ 184.268101][ T310] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 184.309536][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 184.318194][ T310] usb 2-1: no configurations [ 184.326102][ T310] usb 2-1: can't read configurations, error -22 [ 184.468687][ T310] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 184.499211][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 184.508848][ T310] usb 2-1: no configurations [ 184.518368][ T310] usb 2-1: can't read configurations, error -22 [ 184.530194][ T310] usb usb2-port1: unable to enumerate USB device [ 184.783002][ T3387] netlink: 444 bytes leftover after parsing attributes in process `syz.2.1109'. [ 184.970706][ T309] bridge_slave_1: left allmulticast mode [ 184.970892][ T324] usb 4-1: USB disconnect, device number 23 [ 184.976427][ T309] bridge_slave_1: left promiscuous mode [ 184.976532][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.007739][ T3392] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 185.026080][ T309] bridge_slave_0: left allmulticast mode [ 185.047950][ T309] bridge_slave_0: left promiscuous mode [ 185.058208][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.160965][ T3395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 185.183159][ T3395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.196894][ T3395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.213264][ T309] veth1_macvtap: left promiscuous mode [ 185.218921][ T309] veth0_vlan: left promiscuous mode [ 185.272996][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.280102][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.287256][ T3391] bridge_slave_0: entered allmulticast mode [ 185.296496][ T3391] bridge_slave_0: entered promiscuous mode [ 185.304245][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.311461][ T3391] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.318614][ T3391] bridge_slave_1: entered allmulticast mode [ 185.325039][ T3391] bridge_slave_1: entered promiscuous mode [ 185.389715][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.396785][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.404141][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.411342][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.452868][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.461409][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.475833][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.482923][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.494400][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.501476][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.530775][ T36] kauditd_printk_skb: 1238 callbacks suppressed [ 185.530794][ T36] audit: type=1400 audit(1786213866.200:58947): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.559715][ T36] audit: type=1400 audit(1786213866.200:58948): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.580477][ T3391] veth0_vlan: entered promiscuous mode [ 185.586510][ T36] audit: type=1400 audit(1786213866.200:58949): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.609616][ T36] audit: type=1400 audit(1786213866.200:58950): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.621879][ T3391] veth1_macvtap: entered promiscuous mode [ 185.636824][ T36] audit: type=1400 audit(1786213866.200:58951): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.658943][ T36] audit: type=1400 audit(1786213866.200:58952): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.684878][ T36] audit: type=1400 audit(1786213866.210:58953): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.706675][ T36] audit: type=1400 audit(1786213866.210:58954): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.729130][ T36] audit: type=1400 audit(1786213866.210:58955): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.750907][ T36] audit: type=1400 audit(1786213866.210:58956): avc: denied { sys_module } for pid=3391 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.801053][ T3400] rust_binder: Write failure EFAULT in pid:810 [ 185.944762][ T3409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.975350][ T3409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.001580][ T3409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.007249][ T3411] syzkaller1: entered promiscuous mode [ 186.015824][ T3411] syzkaller1: entered allmulticast mode [ 186.028242][ T3409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.268117][ T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.418086][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 186.425067][ T310] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 186.433339][ T310] usb 5-1: config 0 has no interface number 0 [ 186.439466][ T310] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 186.451981][ T310] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 186.461035][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.469604][ T310] usb 5-1: Product: syz [ 186.473781][ T310] usb 5-1: Manufacturer: syz [ 186.478401][ T310] usb 5-1: SerialNumber: syz [ 186.484225][ T310] usb 5-1: config 0 descriptor?? [ 186.492071][ T3411] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 186.638137][ T329] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 186.661723][ T3419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.671093][ T3419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.704040][ T3411] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 186.804394][ T329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.813394][ T329] usb 2-1: not running at top speed; connect to a high speed hub [ 186.829830][ T329] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 186.839661][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.847850][ T329] usb 2-1: Product: syz [ 186.852921][ T329] usb 2-1: Manufacturer: syz [ 186.857547][ T329] usb 2-1: SerialNumber: syz [ 187.079959][ T329] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 187.095121][ T329] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 187.107838][ T329] usb 2-1: USB disconnect, device number 71 [ 187.168613][ T1903] udevd[1903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.392998][ T3433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.401616][ T3433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.848893][ T329] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 188.008074][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 188.020502][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.032003][ T329] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.043949][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.058221][ T329] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 188.067295][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.079067][ T329] usb 2-1: config 0 descriptor?? [ 188.256613][ T3453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.268306][ T3453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.508257][ T329] nintendo 0003:057E:2019.0010: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 188.578829][ T329] nintendo 0003:057E:2019.0010: Failed to get joycon info; ret=-38 [ 188.588077][ T329] nintendo 0003:057E:2019.0010: Failed to retrieve controller info; ret=-38 [ 188.596791][ T329] nintendo 0003:057E:2019.0010: Failed to initialize controller; ret=-38 [ 188.631876][ T329] nintendo 0003:057E:2019.0010: probe - fail = -38 [ 188.648121][ T329] nintendo 0003:057E:2019.0010: probe with driver nintendo failed with error -38 [ 188.839397][ T3461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.848248][ T3461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.906164][ T3435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.914799][ T3435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.925355][ T329] usb 2-1: USB disconnect, device number 72 [ 189.004988][ T310] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 189.017269][ T310] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 189.027878][ T310] asix 5-1:0.188: probe with driver asix failed with error -71 [ 189.037929][ T310] usb 5-1: USB disconnect, device number 2 [ 189.048319][ T1987] udevd[1987]: setting owner of /dev/bus/usb/005/002 to uid=0, gid=0 failed: No such file or directory [ 189.202964][ T3463] kvm: kvm [3462]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 189.212494][ T3463] kvm: kvm [3462]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 189.238491][ T3463] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 189.495041][ T3472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.508247][ T3472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.618150][ T365] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 189.748141][ T365] usb 5-1: device descriptor read/64, error -71 [ 189.938134][ T324] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 189.988264][ T365] usb 5-1: device descriptor read/64, error -71 [ 190.098152][ T324] usb 2-1: Using ep0 maxpacket: 16 [ 190.105766][ T324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.115949][ T324] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.138903][ T324] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.148402][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.156503][ T324] usb 2-1: Product: syz [ 190.161732][ T324] usb 2-1: Manufacturer: syz [ 190.168144][ T324] usb 2-1: SerialNumber: syz [ 190.238103][ T365] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.378108][ T365] usb 5-1: device descriptor read/64, error -71 [ 190.387599][ T324] usb 2-1: 0:2 : does not exist [ 190.408541][ T324] usb 2-1: USB disconnect, device number 73 [ 190.474575][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.554614][ T36] kauditd_printk_skb: 629 callbacks suppressed [ 190.554633][ T36] audit: type=1400 audit(1786213871.220:59586): avc: denied { read write } for pid=3493 comm="syz.2.1152" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.584679][ T36] audit: type=1400 audit(1786213871.230:59587): avc: denied { read write open } for pid=3493 comm="syz.2.1152" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.609474][ T3494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16189569 (129516552 ns) > initial count (4730920 ns). Using initial count to start timer. [ 190.609511][ T36] audit: type=1400 audit(1786213871.230:59588): avc: denied { ioctl } for pid=3493 comm="syz.2.1152" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.638132][ T3494] kvm: pic: non byte write [ 190.652148][ T36] audit: type=1400 audit(1786213871.280:59589): avc: denied { ioctl } for pid=3467 comm="syz.4.1142" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.678116][ T365] usb 5-1: device descriptor read/64, error -71 [ 190.681600][ T36] audit: type=1400 audit(1786213871.300:59590): avc: denied { watch watch_reads } for pid=3493 comm="syz.2.1152" path="/340" dev="tmpfs" ino=1824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.759459][ T36] audit: type=1400 audit(1786213871.430:59591): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.778997][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.783996][ T36] audit: type=1400 audit(1786213871.430:59592): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.796642][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.823361][ T36] audit: type=1400 audit(1786213871.430:59593): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.826237][ T365] usb usb5-port1: attempt power cycle [ 190.850859][ T36] audit: type=1400 audit(1786213871.430:59594): avc: denied { read write } for pid=3496 comm="syz.2.1153" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.871012][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.887827][ T36] audit: type=1400 audit(1786213871.430:59595): avc: denied { read write open } for pid=3496 comm="syz.2.1153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.893511][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.228088][ T365] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.270749][ T365] usb 5-1: device descriptor read/8, error -71 [ 191.400957][ T365] usb 5-1: device descriptor read/8, error -71 [ 191.541245][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.549836][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.588228][ T362] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 191.638103][ T365] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.661536][ T365] usb 5-1: device descriptor read/8, error -71 [ 191.740042][ T362] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.749878][ T362] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.762981][ T362] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 191.772304][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.780416][ T362] usb 2-1: Product: syz [ 191.784619][ T362] usb 2-1: Manufacturer: syz [ 191.789248][ T362] usb 2-1: SerialNumber: syz [ 191.805925][ T365] usb 5-1: device descriptor read/8, error -71 [ 191.918220][ T365] usb usb5-port1: unable to enumerate USB device [ 192.002417][ T362] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 192.410345][ T9] usb 2-1: USB disconnect, device number 74 [ 192.428514][ T9] usblp0: removed [ 192.768141][ T365] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.918098][ T365] usb 5-1: Using ep0 maxpacket: 32 [ 192.927342][ T365] usb 5-1: unable to get BOS descriptor or descriptor too short [ 192.938497][ T365] usb 5-1: config 1 has an invalid interface number: 242 but max is 2 [ 192.947227][ T365] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.958958][ T365] usb 5-1: config 1 has no interface number 2 [ 192.965227][ T365] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 192.977127][ T365] usb 5-1: config 1 interface 1 has no altsetting 0 [ 192.991347][ T365] usb 5-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 193.000557][ T365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.009539][ T365] usb 5-1: Product: syz [ 193.013817][ T365] usb 5-1: Manufacturer: syz [ 193.019347][ T365] usb 5-1: SerialNumber: syz [ 193.242990][ T365] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 193.257585][ T365] usb 5-1: 1:1 : unsupported format bits 0x2004 [ 193.265688][ T365] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 193.277312][ T365] usb 5-1: selecting invalid altsetting 0 [ 193.284395][ T365] usb 5-1: selecting invalid altsetting 0 [ 193.306379][ T365] usb 5-1: USB disconnect, device number 7 [ 193.355806][ T3533] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.418290][ T1903] udevd[1903]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 193.758136][ T365] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 193.811371][ T3540] can: request_module (can-proto-5) failed. [ 193.858925][ T3543] 9pnet_fd: Insufficient options for proto=fd [ 193.920094][ T365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.931021][ T365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.940887][ T365] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 193.949983][ T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.959548][ T365] usb 2-1: config 0 descriptor?? [ 194.428767][ T365] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 194.435702][ T365] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 194.443552][ T365] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 194.450431][ T365] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 194.457261][ T365] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 194.464111][ T365] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 194.470934][ T365] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 194.479863][ T365] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 194.620461][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.629603][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.237354][ T3571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.254019][ T3571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.261904][ T365] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 195.275126][ T365] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 195.283040][ T365] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 195.292858][ T365] usb 2-1: USB disconnect, device number 75 [ 195.318094][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.458084][ T9] usb 5-1: device descriptor read/64, error -71 [ 195.578705][ T36] kauditd_printk_skb: 380 callbacks suppressed [ 195.578724][ T36] audit: type=1400 audit(1786213876.250:59976): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.609910][ T36] audit: type=1400 audit(1786213876.250:59977): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.634896][ T36] audit: type=1400 audit(1786213876.250:59978): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.659882][ T36] audit: type=1400 audit(1786213876.250:59979): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.685020][ T36] audit: type=1400 audit(1786213876.250:59980): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.710259][ T36] audit: type=1400 audit(1786213876.250:59981): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.735242][ T36] audit: type=1400 audit(1786213876.250:59982): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.738076][ T9] usb 5-1: device descriptor read/64, error -71 [ 195.760309][ T36] audit: type=1400 audit(1786213876.330:59983): avc: denied { ioctl } for pid=3566 comm="syz.4.1180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.791658][ T36] audit: type=1400 audit(1786213876.440:59984): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 195.811804][ T36] audit: type=1400 audit(1786213876.440:59985): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.841889][ T3573] netlink: 26148 bytes leftover after parsing attributes in process `syz.2.1184'. [ 195.852156][ T3573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 195.898791][ T3575] syzkaller1: entered promiscuous mode [ 195.904444][ T3575] syzkaller1: entered allmulticast mode [ 195.940128][ T3577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16189569 (129516552 ns) > initial count (4730920 ns). Using initial count to start timer. [ 195.964176][ T3577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.972791][ T3577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.018070][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.168104][ T9] usb 5-1: device descriptor read/64, error -71 [ 196.186835][ T3585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=60 sclass=netlink_audit_socket pid=3585 comm=syz.1.1188 [ 196.418083][ T9] usb 5-1: device descriptor read/64, error -71 [ 196.533954][ T9] usb usb5-port1: attempt power cycle [ 196.908112][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.930754][ T9] usb 5-1: device descriptor read/8, error -71 [ 197.060416][ T9] usb 5-1: device descriptor read/8, error -71 [ 197.298100][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.320515][ T9] usb 5-1: device descriptor read/8, error -71 [ 197.450920][ T9] usb 5-1: device descriptor read/8, error -71 [ 197.568169][ T9] usb usb5-port1: unable to enumerate USB device [ 197.601141][ T3616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.609800][ T3616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.638100][ T329] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 197.793963][ T329] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 197.803385][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.812422][ T329] usb 2-1: Product: syz [ 197.826027][ T329] usb 2-1: Manufacturer: syz [ 197.838061][ T329] usb 2-1: SerialNumber: syz [ 197.844601][ T329] usb 2-1: config 0 descriptor?? [ 198.184968][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.185623][ T3629] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1207'. [ 198.193634][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.366167][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 198.746737][ T3647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.755315][ T3647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.758879][ T362] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.928477][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.944423][ T362] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.953586][ T362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.964149][ T362] usb 5-1: config 0 descriptor?? [ 199.298515][ T3661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.307140][ T3661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.376865][ T362] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 199.387094][ T362] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input30 [ 199.473151][ T362] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 199.585128][ T3645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.594232][ T3645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.810429][ T362] usb 5-1: USB disconnect, device number 12 [ 199.872355][ T3666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.881015][ T3666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.407670][ T362] usb 2-1: USB disconnect, device number 76 [ 200.577189][ T3680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.589048][ T3680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.602148][ T36] kauditd_printk_skb: 398 callbacks suppressed [ 200.602166][ T36] audit: type=1400 audit(1786213881.270:60384): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.648155][ T36] audit: type=1400 audit(1786213881.270:60385): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.673333][ T36] audit: type=1400 audit(1786213881.270:60386): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.699196][ T36] audit: type=1400 audit(1786213881.290:60387): avc: denied { read write } for pid=3681 comm="syz.1.1229" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.722983][ T36] audit: type=1400 audit(1786213881.290:60388): avc: denied { read write open } for pid=3681 comm="syz.1.1229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.747540][ T36] audit: type=1400 audit(1786213881.290:60389): avc: denied { ioctl } for pid=3681 comm="syz.1.1229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.772541][ T36] audit: type=1400 audit(1786213881.290:60390): avc: denied { ioctl } for pid=3681 comm="syz.1.1229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.797727][ T36] audit: type=1400 audit(1786213881.290:60391): avc: denied { ioctl } for pid=3681 comm="syz.1.1229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.822739][ T36] audit: type=1400 audit(1786213881.290:60392): avc: denied { ioctl } for pid=3681 comm="syz.1.1229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.847928][ T36] audit: type=1400 audit(1786213881.420:60393): avc: denied { ioctl } for pid=3681 comm="syz.1.1229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.878154][ T362] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 201.030035][ T362] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.039810][ T362] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 201.061816][ T362] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 201.071511][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.080374][ T362] usb 2-1: Product: syz [ 201.086086][ T362] usb 2-1: Manufacturer: syz [ 201.091543][ T362] usb 2-1: SerialNumber: syz [ 201.166915][ T3689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.186553][ T3689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.208509][ T3689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.224785][ T3689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.239269][ T3689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.250785][ T3689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.837918][ T3699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.848099][ T3699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.031465][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.040121][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.302047][ T3712] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1242'. [ 202.447384][ T3720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.458126][ T3720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.056441][ T3739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.069534][ T3739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.278116][ T329] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.430421][ T329] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 203.441644][ T329] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 203.450912][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.458942][ T329] usb 5-1: Product: syz [ 203.463115][ T329] usb 5-1: Manufacturer: syz [ 203.467724][ T329] usb 5-1: SerialNumber: syz [ 203.633061][ T66] usb 2-1: USB disconnect, device number 77 [ 203.861377][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.873703][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.298153][ T66] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 204.458083][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 204.464241][ T3763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.467796][ T66] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.474850][ T3763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.491095][ T66] usb 2-1: config 0 has no interface number 0 [ 204.500575][ T66] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 204.509688][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.517680][ T66] usb 2-1: Product: syz [ 204.521924][ T66] usb 2-1: Manufacturer: syz [ 204.526542][ T66] usb 2-1: SerialNumber: syz [ 204.534559][ T66] usb 2-1: config 0 descriptor?? [ 205.799991][ T36] kauditd_printk_skb: 362 callbacks suppressed [ 205.800005][ T36] audit: type=1400 audit(1786213886.470:60756): avc: denied { ioctl } for pid=3758 comm="syz.1.1263" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.878994][ T36] audit: type=1400 audit(1786213886.550:60757): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.903237][ T36] audit: type=1400 audit(1786213886.550:60758): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.929182][ T36] audit: type=1400 audit(1786213886.550:60759): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.940744][ T3777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.963585][ T3777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.969605][ T36] audit: type=1400 audit(1786213886.560:60760): avc: denied { read write } for pid=3774 comm="syz.2.1269" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 205.994927][ T36] audit: type=1400 audit(1786213886.570:60761): avc: denied { read write open } for pid=3774 comm="syz.2.1269" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 206.019500][ T36] audit: type=1400 audit(1786213886.570:60762): avc: denied { read write } for pid=3774 comm="syz.2.1269" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 206.040960][ T329] usb 5-1: USB disconnect, device number 13 [ 206.043008][ T36] audit: type=1400 audit(1786213886.570:60763): avc: denied { read write open } for pid=3774 comm="syz.2.1269" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 206.076462][ T36] audit: type=1400 audit(1786213886.580:60764): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.103441][ T36] audit: type=1400 audit(1786213886.580:60765): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.428144][ T329] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 206.522442][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.531044][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.580238][ T329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.593813][ T329] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 206.603699][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.611727][ T329] usb 5-1: Product: syz [ 206.615974][ T329] usb 5-1: Manufacturer: syz [ 206.620601][ T329] usb 5-1: SerialNumber: syz [ 207.064817][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.072908][ T329] usb 2-1: USB disconnect, device number 78 [ 207.078178][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.548112][ T329] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 207.700985][ T329] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.713230][ T329] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.726268][ T329] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 207.739131][ T329] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 207.749049][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.762693][ T3797] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.851960][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.863307][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.462019][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.470577][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.481050][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.489555][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.700261][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.709399][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.126401][ T66] usb 5-1: USB disconnect, device number 14 [ 209.205964][ T3837] usb usb8: usbfs: process 3837 (syz.4.1297) did not claim interface 0 before use [ 209.349227][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.358004][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.368830][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.377296][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.387819][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.396355][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.406381][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.414869][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.598120][ T66] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 209.625262][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.633886][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.748094][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 209.755581][ T66] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 209.763738][ T66] usb 5-1: config 0 has no interface number 0 [ 209.769911][ T66] usb 5-1: config 0 interface 12 has no altsetting 0 [ 209.780236][ T66] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 209.789411][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.797419][ T66] usb 5-1: Product: syz [ 209.801630][ T66] usb 5-1: Manufacturer: syz [ 209.806272][ T66] usb 5-1: SerialNumber: syz [ 209.812628][ T66] usb 5-1: config 0 descriptor?? [ 210.287650][ T3857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.296332][ T3857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.798317][ T329] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 210.808115][ T329] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input31 [ 210.827648][ T329] usb 2-1: USB disconnect, device number 79 [ 210.832150][ T36] kauditd_printk_skb: 374 callbacks suppressed [ 210.832168][ T36] audit: type=1400 audit(1786213891.490:61140): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.876359][ T36] audit: type=1400 audit(1786213891.510:61141): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.900000][ T36] audit: type=1400 audit(1786213891.510:61142): avc: denied { read open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.926857][ T36] audit: type=1400 audit(1786213891.530:61143): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.961750][ T36] audit: type=1400 audit(1786213891.530:61145): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.986968][ T36] audit: type=1400 audit(1786213891.530:61146): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.012694][ T36] audit: type=1400 audit(1786213891.530:61144): avc: denied { read open } for pid=95 comm="acpid" path=2F6465762F696E7075742F6576656E7433202864656C6574656429 dev="devtmpfs" ino=960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.039720][ T36] audit: type=1400 audit(1786213891.590:61147): avc: denied { read write } for pid=3860 comm="syz.2.1308" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 211.065460][ T36] audit: type=1400 audit(1786213891.590:61148): avc: denied { read write open } for pid=3860 comm="syz.2.1308" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 211.090014][ T36] audit: type=1400 audit(1786213891.620:61149): avc: denied { mounton } for pid=3860 comm="syz.2.1308" path="/401/file0" dev="tmpfs" ino=2144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.146960][ T3866] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1309'. [ 211.184258][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.192917][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.458117][ T31] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 211.610076][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.622840][ T31] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 211.631955][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.639988][ T31] usb 2-1: Product: syz [ 211.644150][ T31] usb 2-1: Manufacturer: syz [ 211.648780][ T31] usb 2-1: SerialNumber: syz [ 211.654669][ T31] usb 2-1: config 0 descriptor?? [ 211.856401][ T3881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.883263][ T3881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.272813][ T329] usb 5-1: USB disconnect, device number 15 [ 212.608157][ T329] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 212.760494][ T329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.771569][ T329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.781367][ T329] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 212.790929][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.268557][ T329] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0013/input/input32 [ 213.307870][ T329] hid-picolcd 0003:04D8:C002.0013: No report with id 0x92 found [ 213.315753][ T329] hid-picolcd 0003:04D8:C002.0013: No report with id 0x94 found [ 213.329457][ T329] hid-picolcd 0003:04D8:C002.0013: failed to configure display [ 213.416653][ T310] usb 5-1: USB disconnect, device number 16 [ 213.453448][ T3897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.462446][ T3897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.080789][ T3907] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1327'. [ 214.146342][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.164028][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.205593][ T3913] kvm: emulating exchange as write [ 214.227825][ T310] usb 2-1: USB disconnect, device number 80 [ 214.568120][ T310] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 214.608114][ T329] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 214.724320][ T310] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.733528][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.743493][ T310] usb 2-1: Product: syz [ 214.747686][ T310] usb 2-1: Manufacturer: syz [ 214.753234][ T310] usb 2-1: SerialNumber: syz [ 214.758091][ T329] usb 5-1: Using ep0 maxpacket: 16 [ 214.770218][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.781269][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.792386][ T329] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.811975][ T329] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.821584][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.840445][ T329] usb 5-1: config 0 descriptor?? [ 214.845758][ T3926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.854423][ T3926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.272267][ T329] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input33 [ 215.295657][ T329] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 215.416468][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.427324][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.442102][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.453749][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.483230][ T310] usb 5-1: USB disconnect, device number 17 [ 215.974731][ T36] kauditd_printk_skb: 325 callbacks suppressed [ 215.974749][ T36] audit: type=1400 audit(1786213896.640:61475): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.033462][ T36] audit: type=1400 audit(1786213896.640:61476): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.051765][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.077130][ T36] audit: type=1400 audit(1786213896.640:61477): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.098092][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.103538][ T36] audit: type=1400 audit(1786213896.660:61478): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.134637][ T36] audit: type=1400 audit(1786213896.660:61479): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.160865][ T36] audit: type=1400 audit(1786213896.660:61480): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.186746][ T36] audit: type=1400 audit(1786213896.690:61481): avc: denied { read write } for pid=3391 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.211623][ T36] audit: type=1400 audit(1786213896.690:61482): avc: denied { read write open } for pid=3391 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.239282][ T36] audit: type=1400 audit(1786213896.690:61483): avc: denied { ioctl } for pid=3391 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.264973][ T36] audit: type=1400 audit(1786213896.700:61484): avc: denied { ioctl } for pid=3915 comm="syz.1.1331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.478138][ T310] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 216.630141][ T310] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.642533][ T310] usb 5-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice= 0.40 [ 216.651713][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.659757][ T310] usb 5-1: Product: syz [ 216.663919][ T310] usb 5-1: Manufacturer: syz [ 216.668530][ T310] usb 5-1: SerialNumber: syz [ 216.809468][ T3952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.818287][ T3952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.880529][ T310] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 216.894004][ T310] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 216.907823][ T310] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 216.917596][ T310] usb 5-1: USB disconnect, device number 18 [ 216.959596][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.268524][ T310] usb 2-1: USB disconnect, device number 81 [ 217.691543][ T3970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.704701][ T3970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.718065][ T310] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 217.878063][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 217.886702][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.899412][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 217.911491][ T310] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 217.925446][ T310] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 217.935602][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.946096][ T310] usb 5-1: config 0 descriptor?? [ 218.483319][ T3981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.492263][ T3981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.548342][ T31] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 218.569391][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.578068][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.588160][ T310] usbhid 5-1:0.0: can't add hid device: -71 [ 218.594146][ T310] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 218.604818][ T310] usb 5-1: USB disconnect, device number 19 [ 218.698120][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 218.705626][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.715770][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.727327][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.736606][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.758075][ T31] usb 2-1: Product: syz [ 218.762294][ T31] usb 2-1: Manufacturer: syz [ 218.766904][ T31] usb 2-1: SerialNumber: syz [ 218.956501][ T3987] FAULT_INJECTION: forcing a failure. [ 218.956501][ T3987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.970843][ T3987] CPU: 1 UID: 0 PID: 3987 Comm: syz.0.1359 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 218.970878][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.970904][ T3987] Call Trace: [ 218.970912][ T3987] [ 218.970920][ T3987] __dump_stack+0x21/0x30 [ 218.970954][ T3987] dump_stack_lvl+0x140/0x1c0 [ 218.970982][ T3987] ? __cfi_dump_stack_lvl+0x10/0x10 [ 218.971009][ T3987] ? __sys_recvmsg_sock+0x60/0x60 [ 218.971031][ T3987] dump_stack+0x19/0x20 [ 218.971057][ T3987] should_fail_ex+0x3c2/0x510 [ 218.971081][ T3987] should_fail+0xf/0x20 [ 218.971101][ T3987] should_fail_usercopy+0x1e/0x30 [ 218.971125][ T3987] _copy_from_user+0x20/0xa0 [ 218.971151][ T3987] ___sys_recvmsg+0x174/0x590 [ 218.971173][ T3987] ? __sys_recvmsg+0x2a0/0x2a0 [ 218.971195][ T3987] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 218.971216][ T3987] ? selinux_file_permission+0x318/0xb60 [ 218.971240][ T3987] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 218.971269][ T3987] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 218.971294][ T3987] do_recvmmsg+0x36d/0x7f0 [ 218.971316][ T3987] ? __sys_recvmmsg+0x2a0/0x2a0 [ 218.971337][ T3987] ? __cfi_vfs_write+0x10/0x10 [ 218.971361][ T3987] ? fput+0x1a4/0x230 [ 218.971387][ T3987] __x64_sys_recvmmsg+0x199/0x250 [ 218.971408][ T3987] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 218.971430][ T3987] ? __kasan_check_read+0x15/0x20 [ 218.971452][ T3987] x64_sys_call+0x292c/0x2ee0 [ 218.971470][ T3987] do_syscall_64+0x57/0xf0 [ 218.971493][ T3987] ? clear_bhb_loop+0x50/0xa0 [ 218.971519][ T3987] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 218.971545][ T3987] RIP: 0033:0x7f8201b9e0d9 [ 218.971562][ T3987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.971579][ T3987] RSP: 002b:00007f82029f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 218.971604][ T3987] RAX: ffffffffffffffda RBX: 00007f8201e26090 RCX: 00007f8201b9e0d9 [ 218.971620][ T3987] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 218.971635][ T3987] RBP: 00007f82029f1090 R08: 0000000000000000 R09: 0000000000000000 [ 218.971649][ T3987] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000002 [ 218.971663][ T3987] R13: 00007f8201e26128 R14: 00007f8201e26090 R15: 00007ffce37fdc68 [ 218.971680][ T3987] [ 219.246726][ T31] usb 2-1: 0:2 : does not exist [ 219.254599][ T31] usb 2-1: USB disconnect, device number 82 [ 219.397211][ T4002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.415532][ T4002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.426964][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.538061][ T66] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 219.709933][ T66] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.726123][ T66] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 219.735379][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.743500][ T66] usb 5-1: Product: syz [ 219.747660][ T66] usb 5-1: Manufacturer: syz [ 219.752422][ T66] usb 5-1: SerialNumber: syz [ 220.149597][ T66] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 220.166678][ T4017] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1370: No space for directory leaf checksum. Please run e2fsck -D. [ 220.182296][ T66] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 220.188701][ T4017] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1370: checksumming directory block 0 [ 220.197002][ T66] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 220.202082][ T31] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 220.218743][ T4017] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 220.219998][ T66] usb 5-1: USB disconnect, device number 20 [ 220.246294][ T4017] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1370: No space for directory leaf checksum. Please run e2fsck -D. [ 220.284938][ T4017] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1370: checksumming directory block 0 [ 220.287644][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.298135][ T4017] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 220.327989][ T4017] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1370: No space for directory leaf checksum. Please run e2fsck -D. [ 220.344758][ T4017] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1370: checksumming directory block 0 [ 220.357718][ T4017] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 220.369042][ T4017] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1370: No space for directory leaf checksum. Please run e2fsck -D. [ 220.384582][ T4017] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.2.1370: checksumming directory block 0 [ 220.396862][ T4017] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 220.406246][ T4017] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 220.434720][ T31] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.449507][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.456146][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 220.467355][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.478153][ T31] usb 2-1: config 0 descriptor?? [ 220.712821][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 220.728716][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 220.751420][ T31] usb 2-1: USB disconnect, device number 83 [ 220.990233][ T36] kauditd_printk_skb: 2393 callbacks suppressed [ 220.990250][ T36] audit: type=1400 audit(1786213901.660:63878): avc: denied { read } for pid=4035 comm="syz.2.1378" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.000870][ T4036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.021163][ T36] audit: type=1400 audit(1786213901.660:63879): avc: denied { read open } for pid=4035 comm="syz.2.1378" path="/dev/input/event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.033358][ T4036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.057189][ T36] audit: type=1400 audit(1786213901.670:63880): avc: denied { create } for pid=4035 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.083220][ T36] audit: type=1400 audit(1786213901.670:63881): avc: denied { read write } for pid=4035 comm="syz.2.1378" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.088082][ T362] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 221.106895][ T36] audit: type=1400 audit(1786213901.670:63882): avc: denied { read write open } for pid=4035 comm="syz.2.1378" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.138916][ T36] audit: type=1400 audit(1786213901.670:63883): avc: denied { ioctl } for pid=4035 comm="syz.2.1378" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.163889][ T36] audit: type=1400 audit(1786213901.670:63884): avc: denied { ioctl } for pid=4035 comm="syz.2.1378" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.188926][ T36] audit: type=1400 audit(1786213901.700:63885): avc: denied { ioctl } for pid=4029 comm="syz.4.1376" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.213909][ T36] audit: type=1400 audit(1786213901.740:63886): avc: denied { read write } for pid=4035 comm="syz.2.1378" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 221.237330][ T36] audit: type=1400 audit(1786213901.740:63887): avc: denied { read write open } for pid=4035 comm="syz.2.1378" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 221.288066][ T362] usb 5-1: Using ep0 maxpacket: 16 [ 221.301481][ T362] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.312227][ T362] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.325834][ T362] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.336372][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.344501][ T362] usb 5-1: Product: syz [ 221.348806][ T362] usb 5-1: Manufacturer: syz [ 221.353399][ T362] usb 5-1: SerialNumber: syz [ 221.548104][ T324] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 221.565693][ T362] usb 5-1: 0:2 : does not exist [ 221.574270][ T362] usb 5-1: USB disconnect, device number 21 [ 221.620654][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.717136][ T324] usb 2-1: config 4 has an invalid interface number: 29 but max is 0 [ 221.726246][ T324] usb 2-1: config 4 has no interface number 0 [ 221.733418][ T324] usb 2-1: config 4 interface 29 altsetting 0 endpoint 0x4 has invalid maxpacket 2039, setting to 64 [ 221.744357][ T324] usb 2-1: config 4 interface 29 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 221.754460][ T324] usb 2-1: config 4 interface 29 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 221.767540][ T324] usb 2-1: Dual-Role OTG device on HNP port [ 221.773782][ T324] usb 2-1: New USB device found, idVendor=0bda, idProduct=c811, bcdDevice=b0.13 [ 221.782947][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.791041][ T324] usb 2-1: Product: syz [ 221.795215][ T324] usb 2-1: Manufacturer: syz [ 221.801869][ T324] usb 2-1: SerialNumber: syz [ 221.869183][ T4046] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16189569 (129516552 ns) > initial count (4730920 ns). Using initial count to start timer. [ 222.219744][ T4061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.232290][ T4061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.478078][ T66] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 223.628067][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 223.635665][ T66] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.645923][ T66] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.657677][ T66] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.666950][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.675502][ T66] usb 5-1: Product: syz [ 223.679794][ T66] usb 5-1: Manufacturer: syz [ 223.684426][ T66] usb 5-1: SerialNumber: syz [ 223.899245][ T66] usb 5-1: 0:2 : does not exist [ 223.919287][ T66] usb 5-1: USB disconnect, device number 22 [ 224.004631][ T1903] udevd[1903]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 224.282171][ T324] usb 2-1: USB disconnect, device number 84 [ 224.958126][ T362] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 225.112403][ T362] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.120952][ T362] usb 5-1: not running at top speed; connect to a high speed hub [ 225.133579][ T362] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 225.145312][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.154167][ T362] usb 5-1: Product: syz [ 225.159038][ T362] usb 5-1: Manufacturer: syz [ 225.163666][ T362] usb 5-1: SerialNumber: syz [ 225.188160][ T310] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 225.193216][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.205113][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.340019][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.350250][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.362428][ T310] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 225.371783][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.379852][ T310] usb 2-1: Product: syz [ 225.384064][ T310] usb 2-1: Manufacturer: syz [ 225.388775][ T310] usb 2-1: SerialNumber: syz [ 225.395190][ T362] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 225.403314][ T362] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 225.418749][ T362] usb 5-1: USB disconnect, device number 23 [ 225.438450][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.465447][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.505938][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.616899][ T4104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.625570][ T4104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.636123][ T4104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.644705][ T4104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.668948][ T310] usb 2-1: unit 4 not found! [ 225.676396][ T310] usb 2-1: USB disconnect, device number 85 [ 225.689631][ T1903] udevd[1903]: setting mode of /dev/bus/usb/002/085 to 020664 failed: No such file or directory [ 225.700716][ T1903] udevd[1903]: setting owner of /dev/bus/usb/002/085 to uid=0, gid=0 failed: No such file or directory [ 225.730864][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.946525][ T4108] syz.4.1406 (4108): /proc/4107/oom_adj is deprecated, please use /proc/4107/oom_score_adj instead. [ 226.004833][ T36] kauditd_printk_skb: 2125 callbacks suppressed [ 226.004854][ T36] audit: type=1400 audit(1786213906.670:66013): avc: denied { mounton } for pid=4109 comm="syz.2.1407" path="/447/sys" dev="tmpfs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 226.010496][ T4110] zram0: detected capacity change from 0 to 8 [ 226.011259][ T36] audit: type=1400 audit(1786213906.670:66014): avc: denied { mount } for pid=4109 comm="syz.2.1407" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 226.061800][ T36] audit: type=1400 audit(1786213906.720:66015): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 226.081982][ T36] audit: type=1400 audit(1786213906.730:66016): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.106236][ T36] audit: type=1400 audit(1786213906.730:66017): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.131450][ T36] audit: type=1400 audit(1786213906.730:66018): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.157066][ T36] audit: type=1400 audit(1786213906.760:66019): avc: denied { sys_module } for pid=4114 comm="syz.2.1408" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 226.182292][ T36] audit: type=1400 audit(1786213906.850:66020): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.210591][ T36] audit: type=1400 audit(1786213906.850:66021): avc: denied { read write } for pid=4107 comm="syz.4.1406" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.235761][ T36] audit: type=1400 audit(1786213906.850:66022): avc: denied { read write open } for pid=4107 comm="syz.4.1406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.325217][ T4119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1410'. [ 226.374350][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.383077][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.393413][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.402490][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.418135][ T324] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 226.580868][ T324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.589473][ T324] usb 5-1: not running at top speed; connect to a high speed hub [ 226.599236][ T324] usb 5-1: config 1 has an invalid descriptor of length 40, skipping remainder of the config [ 226.609460][ T324] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.618448][ T324] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.633918][ T324] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 226.643065][ T324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.651078][ T324] usb 5-1: Product: syz [ 226.655273][ T324] usb 5-1: Manufacturer: syz [ 226.659878][ T324] usb 5-1: SerialNumber: syz [ 226.881834][ T324] usb 5-1: USB disconnect, device number 24 [ 226.948918][ T1987] udevd[1987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.991616][ T4127] kvm: kvm [4126]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 227.000640][ T4127] kvm: kvm [4126]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 227.029505][ T4127] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 227.209415][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 227.309597][ T4141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.318237][ T4141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.865235][ T4155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.874151][ T4155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.928105][ T310] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 228.091244][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.102894][ T310] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.112047][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.121976][ T310] usb 5-1: config 0 descriptor?? [ 228.337118][ T310] usbhid 5-1:0.0: can't add hid device: -71 [ 228.350948][ T310] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 228.366133][ T310] usb 5-1: USB disconnect, device number 25 [ 228.768104][ T324] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 228.858084][ T310] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 228.918085][ T324] usb 2-1: Using ep0 maxpacket: 16 [ 228.925130][ T324] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.934167][ T324] usb 2-1: config 0 has no interface number 0 [ 228.943191][ T324] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 228.952320][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.960339][ T324] usb 2-1: Product: syz [ 228.964511][ T324] usb 2-1: Manufacturer: syz [ 228.969141][ T324] usb 2-1: SerialNumber: syz [ 228.975011][ T324] usb 2-1: config 0 descriptor?? [ 229.019892][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.030862][ T310] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 229.039914][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.049314][ T310] usb 5-1: config 0 descriptor?? [ 229.339067][ T4164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.347735][ T4164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.461459][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.470087][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.889194][ T310] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 229.898341][ T310] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 229.909395][ T4167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.936933][ T4167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.961049][ C1] ------------[ cut here ]------------ [ 229.966564][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 229.975181][ C1] index 1796 is out of range for type 'const int[34]' [ 229.981952][ C1] CPU: 1 UID: 0 PID: 95 Comm: acpid Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 229.981979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.981991][ C1] Call Trace: [ 229.981998][ C1] [ 229.982006][ C1] __dump_stack+0x21/0x30 [ 229.982036][ C1] dump_stack_lvl+0x140/0x1c0 [ 229.982062][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.982087][ C1] ? do_syscall_64+0x57/0xf0 [ 229.982111][ C1] dump_stack+0x19/0x20 [ 229.982136][ C1] ubsan_epilogue+0xe/0x40 [ 229.982152][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 229.982180][ C1] aiptek_irq+0x208d/0x2a00 [ 229.982205][ C1] ? _raw_spin_unlock+0x45/0x60 [ 229.982225][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 229.982244][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 229.982271][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 229.982296][ C1] dummy_timer+0xa3f/0x4900 [ 229.982327][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 229.982344][ C1] ? timerqueue_del+0xd7/0x130 [ 229.982361][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 229.982387][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 229.982403][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 229.982429][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 229.982453][ C1] ? read_tsc+0xd/0x20 [ 229.982475][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 229.982498][ C1] hrtimer_run_softirq+0x159/0x560 [ 229.982514][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 229.982538][ C1] handle_softirqs+0x1aa/0x620 [ 229.982557][ C1] __irq_exit_rcu+0x47/0xb0 [ 229.982574][ C1] irq_exit_rcu+0xd/0x30 [ 229.982590][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 229.982622][ C1] [ 229.982628][ C1] [ 229.982635][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 229.982659][ C1] RIP: 0010:__pollwait+0x3f/0x4e0 [ 229.982690][ C1] Code: 48 89 d3 48 89 75 b8 48 89 7d c0 49 be 00 00 00 00 00 fc ff df e8 c1 be 96 ff 4c 8d 63 10 4d 89 e7 49 c1 ef 03 43 80 3c 37 00 <74> 08 4c 89 e7 e8 17 83 ef ff 4c 89 65 c8 4c 8b 73 10 48 89 5d d0 [ 229.982705][ C1] RSP: 0018:ffffc900007ff5a8 EFLAGS: 00000246 [ 229.982722][ C1] RAX: ffffffff81f0b2ff RBX: ffffc900007ff820 RCX: ffff88810c39b900 [ 229.982742][ C1] RDX: 0000000000000000 RSI: ffff888115f44010 RDI: ffff8881215b8780 [ 229.982756][ C1] RBP: ffffc900007ff5f8 R08: ffff888101a77403 R09: 1ffff1102034ee80 [ 229.982769][ C1] R10: 0000000000000000 R11: ffffffff81f0b2d0 R12: ffffc900007ff830 [ 229.982783][ C1] R13: ffffffff81f0b2d0 R14: dffffc0000000000 R15: 1ffff920000fff06 [ 229.982798][ C1] ? __cfi___pollwait+0x10/0x10 [ 229.982821][ C1] ? __cfi___pollwait+0x10/0x10 [ 229.982845][ C1] ? __pollwait+0x2f/0x4e0 [ 229.982867][ C1] ? __pollwait+0x2f/0x4e0 [ 229.982889][ C1] ? __cfi___pollwait+0x10/0x10 [ 229.982911][ C1] evdev_poll+0xb4/0x1f0 [ 229.982926][ C1] ? __cfi_evdev_poll+0x10/0x10 [ 229.982942][ C1] do_select+0xe7f/0x16f0 [ 229.982968][ C1] ? core_sys_select+0x7f0/0x7f0 [ 229.982991][ C1] ? __cfi___pollwait+0x10/0x10 [ 229.983013][ C1] ? __cfi_pollwake+0x10/0x10 [ 229.983036][ C1] ? __cfi_pollwake+0x10/0x10 [ 229.983060][ C1] ? __cfi_pollwake+0x10/0x10 [ 229.983083][ C1] ? __cfi_pollwake+0x10/0x10 [ 229.983106][ C1] ? __cfi_pollwake+0x10/0x10 [ 229.983129][ C1] ? __cfi_pollwake+0x10/0x10 [ 229.983156][ C1] ? __check_object_size+0xdc/0x870 [ 229.983173][ C1] ? evdev_read+0xb99/0xbf0 [ 229.983190][ C1] ? __cfi___check_object_size+0x10/0x10 [ 229.983209][ C1] core_sys_select+0x549/0x7f0 [ 229.983233][ C1] ? __cfi_core_sys_select+0x10/0x10 [ 229.983259][ C1] ? __cfi_set_user_sigmask+0x10/0x10 [ 229.983283][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 229.983303][ C1] ? __set_current_blocked+0x281/0x2d0 [ 229.983328][ C1] __se_sys_pselect6+0x268/0x320 [ 229.983351][ C1] ? __x64_sys_pselect6+0x110/0x110 [ 229.983374][ C1] ? __cfi_ksys_read+0x10/0x10 [ 229.983393][ C1] __x64_sys_pselect6+0xe9/0x110 [ 229.983416][ C1] x64_sys_call+0x2980/0x2ee0 [ 229.983432][ C1] do_syscall_64+0x57/0xf0 [ 229.983452][ C1] ? clear_bhb_loop+0x50/0xa0 [ 229.983475][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.983497][ C1] RIP: 0033:0x7f37fc24e407 [ 229.983511][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 229.983525][ C1] RSP: 002b:00007ffe88183620 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 229.983543][ C1] RAX: ffffffffffffffda RBX: 00007f37fc1c4740 RCX: 00007f37fc24e407 [ 229.983557][ C1] RDX: 0000000000000000 RSI: 00007ffe88183730 RDI: 000000000000000b [ 229.983569][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 229.983580][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560590cc41e4 [ 229.983592][ C1] R13: 0000000000000000 R14: 0000000000000007 R15: 000000000000000a [ 229.983605][ C1] [ 229.983611][ C1] ---[ end trace ]--- [ 230.459732][ C1] ------------[ cut here ]------------ [ 230.465188][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 230.473776][ C1] index 1797 is out of range for type 'const int[34]' [ 230.480538][ C1] CPU: 1 UID: 0 PID: 95 Comm: acpid Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 230.480563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.480580][ C1] Call Trace: [ 230.480586][ C1] [ 230.480593][ C1] __dump_stack+0x21/0x30 [ 230.480622][ C1] dump_stack_lvl+0x140/0x1c0 [ 230.480645][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 230.480667][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 230.480690][ C1] dump_stack+0x19/0x20 [ 230.480712][ C1] ubsan_epilogue+0xe/0x40 [ 230.480726][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 230.480751][ C1] aiptek_irq+0x1f3c/0x2a00 [ 230.480774][ C1] ? _raw_spin_unlock+0x45/0x60 [ 230.480793][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 230.480812][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 230.480838][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 230.480862][ C1] dummy_timer+0xa3f/0x4900 [ 230.480887][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 230.480904][ C1] ? timerqueue_del+0xd7/0x130 [ 230.480921][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 230.480945][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 230.480962][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 230.480987][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 230.481011][ C1] ? read_tsc+0xd/0x20 [ 230.481033][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 230.481055][ C1] hrtimer_run_softirq+0x159/0x560 [ 230.481072][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 230.481097][ C1] handle_softirqs+0x1aa/0x620 [ 230.481116][ C1] __irq_exit_rcu+0x47/0xb0 [ 230.481132][ C1] irq_exit_rcu+0xd/0x30 [ 230.481148][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 230.481173][ C1] [ 230.481179][ C1] [ 230.481186][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 230.481209][ C1] RIP: 0010:__pollwait+0x3f/0x4e0 [ 230.481234][ C1] Code: 48 89 d3 48 89 75 b8 48 89 7d c0 49 be 00 00 00 00 00 fc ff df e8 c1 be 96 ff 4c 8d 63 10 4d 89 e7 49 c1 ef 03 43 80 3c 37 00 <74> 08 4c 89 e7 e8 17 83 ef ff 4c 89 65 c8 4c 8b 73 10 48 89 5d d0 [ 230.481249][ C1] RSP: 0018:ffffc900007ff5a8 EFLAGS: 00000246 [ 230.481266][ C1] RAX: ffffffff81f0b2ff RBX: ffffc900007ff820 RCX: ffff88810c39b900 [ 230.481280][ C1] RDX: 0000000000000000 RSI: ffff888115f44010 RDI: ffff8881215b8780 [ 230.481293][ C1] RBP: ffffc900007ff5f8 R08: ffff888101a77403 R09: 1ffff1102034ee80 [ 230.481306][ C1] R10: 0000000000000000 R11: ffffffff81f0b2d0 R12: ffffc900007ff830 [ 230.481318][ C1] R13: ffffffff81f0b2d0 R14: dffffc0000000000 R15: 1ffff920000fff06 [ 230.481332][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.481354][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.481375][ C1] ? __pollwait+0x2f/0x4e0 [ 230.481396][ C1] ? __pollwait+0x2f/0x4e0 [ 230.481417][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.481438][ C1] evdev_poll+0xb4/0x1f0 [ 230.481453][ C1] ? __cfi_evdev_poll+0x10/0x10 [ 230.481468][ C1] do_select+0xe7f/0x16f0 [ 230.481494][ C1] ? core_sys_select+0x7f0/0x7f0 [ 230.481521][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.481543][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.481572][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.481595][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.481618][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.481640][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.481663][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.481689][ C1] ? __check_object_size+0xdc/0x870 [ 230.481706][ C1] ? evdev_read+0xb99/0xbf0 [ 230.481721][ C1] ? __cfi___check_object_size+0x10/0x10 [ 230.481739][ C1] core_sys_select+0x549/0x7f0 [ 230.481763][ C1] ? __cfi_core_sys_select+0x10/0x10 [ 230.481788][ C1] ? __cfi_set_user_sigmask+0x10/0x10 [ 230.481811][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 230.481830][ C1] ? __set_current_blocked+0x281/0x2d0 [ 230.481854][ C1] __se_sys_pselect6+0x268/0x320 [ 230.481877][ C1] ? __x64_sys_pselect6+0x110/0x110 [ 230.481900][ C1] ? __cfi_ksys_read+0x10/0x10 [ 230.481918][ C1] __x64_sys_pselect6+0xe9/0x110 [ 230.481941][ C1] x64_sys_call+0x2980/0x2ee0 [ 230.481957][ C1] do_syscall_64+0x57/0xf0 [ 230.481975][ C1] ? clear_bhb_loop+0x50/0xa0 [ 230.481998][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 230.482020][ C1] RIP: 0033:0x7f37fc24e407 [ 230.482034][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 230.482048][ C1] RSP: 002b:00007ffe88183620 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 230.482066][ C1] RAX: ffffffffffffffda RBX: 00007f37fc1c4740 RCX: 00007f37fc24e407 [ 230.482080][ C1] RDX: 0000000000000000 RSI: 00007ffe88183730 RDI: 000000000000000b [ 230.482092][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 230.482102][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560590cc41e4 [ 230.482114][ C1] R13: 0000000000000000 R14: 0000000000000007 R15: 000000000000000a [ 230.482127][ C1] [ 230.482134][ C1] ---[ end trace ]--- [ 230.960023][ C1] ================================================================== [ 230.968083][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x1f5a/0x2a00 [ 230.975643][ C1] Read of size 4 at addr ffffffff86706414 by task acpid/95 [ 230.982839][ C1] [ 230.985163][ C1] CPU: 1 UID: 0 PID: 95 Comm: acpid Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 230.985188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.985199][ C1] Call Trace: [ 230.985207][ C1] [ 230.985214][ C1] __dump_stack+0x21/0x30 [ 230.985240][ C1] dump_stack_lvl+0x140/0x1c0 [ 230.985264][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 230.985288][ C1] ? __cfi__printk+0x10/0x10 [ 230.985310][ C1] print_address_description+0x71/0x210 [ 230.985335][ C1] print_report+0x4a/0x70 [ 230.985358][ C1] kasan_report+0x162/0x1a0 [ 230.985381][ C1] ? aiptek_irq+0x1f5a/0x2a00 [ 230.985404][ C1] ? aiptek_irq+0x1f5a/0x2a00 [ 230.985426][ C1] __asan_report_load4_noabort+0x18/0x20 [ 230.985444][ C1] aiptek_irq+0x1f5a/0x2a00 [ 230.985466][ C1] ? _raw_spin_unlock+0x45/0x60 [ 230.985487][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 230.985507][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 230.985534][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 230.985559][ C1] dummy_timer+0xa3f/0x4900 [ 230.985589][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 230.985606][ C1] ? timerqueue_del+0xd7/0x130 [ 230.985624][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 230.985649][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 230.985666][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 230.985692][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 230.985716][ C1] ? read_tsc+0xd/0x20 [ 230.985740][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 230.985762][ C1] hrtimer_run_softirq+0x159/0x560 [ 230.985779][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 230.985803][ C1] handle_softirqs+0x1aa/0x620 [ 230.985822][ C1] __irq_exit_rcu+0x47/0xb0 [ 230.985839][ C1] irq_exit_rcu+0xd/0x30 [ 230.985855][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 230.985880][ C1] [ 230.985887][ C1] [ 230.985893][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 230.985918][ C1] RIP: 0010:__pollwait+0x3f/0x4e0 [ 230.985943][ C1] Code: 48 89 d3 48 89 75 b8 48 89 7d c0 49 be 00 00 00 00 00 fc ff df e8 c1 be 96 ff 4c 8d 63 10 4d 89 e7 49 c1 ef 03 43 80 3c 37 00 <74> 08 4c 89 e7 e8 17 83 ef ff 4c 89 65 c8 4c 8b 73 10 48 89 5d d0 [ 230.985958][ C1] RSP: 0018:ffffc900007ff5a8 EFLAGS: 00000246 [ 230.985975][ C1] RAX: ffffffff81f0b2ff RBX: ffffc900007ff820 RCX: ffff88810c39b900 [ 230.985989][ C1] RDX: 0000000000000000 RSI: ffff888115f44010 RDI: ffff8881215b8780 [ 230.986003][ C1] RBP: ffffc900007ff5f8 R08: ffff888101a77403 R09: 1ffff1102034ee80 [ 230.986016][ C1] R10: 0000000000000000 R11: ffffffff81f0b2d0 R12: ffffc900007ff830 [ 230.986030][ C1] R13: ffffffff81f0b2d0 R14: dffffc0000000000 R15: 1ffff920000fff06 [ 230.986043][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.986066][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.986088][ C1] ? __pollwait+0x2f/0x4e0 [ 230.986110][ C1] ? __pollwait+0x2f/0x4e0 [ 230.986131][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.986152][ C1] evdev_poll+0xb4/0x1f0 [ 230.986168][ C1] ? __cfi_evdev_poll+0x10/0x10 [ 230.986184][ C1] do_select+0xe7f/0x16f0 [ 230.986210][ C1] ? core_sys_select+0x7f0/0x7f0 [ 230.986232][ C1] ? __cfi___pollwait+0x10/0x10 [ 230.986254][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.986278][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.986301][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.986324][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.986347][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.986369][ C1] ? __cfi_pollwake+0x10/0x10 [ 230.986395][ C1] ? __check_object_size+0xdc/0x870 [ 230.986413][ C1] ? evdev_read+0xb99/0xbf0 [ 230.986428][ C1] ? __cfi___check_object_size+0x10/0x10 [ 230.986447][ C1] core_sys_select+0x549/0x7f0 [ 230.986471][ C1] ? __cfi_core_sys_select+0x10/0x10 [ 230.986495][ C1] ? __cfi_set_user_sigmask+0x10/0x10 [ 230.986519][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 230.986538][ C1] ? __set_current_blocked+0x281/0x2d0 [ 230.986673][ C1] __se_sys_pselect6+0x268/0x320 [ 230.986709][ C1] ? __x64_sys_pselect6+0x110/0x110 [ 230.986732][ C1] ? __cfi_ksys_read+0x10/0x10 [ 230.986751][ C1] __x64_sys_pselect6+0xe9/0x110 [ 230.986774][ C1] x64_sys_call+0x2980/0x2ee0 [ 230.986791][ C1] do_syscall_64+0x57/0xf0 [ 230.986812][ C1] ? clear_bhb_loop+0x50/0xa0 [ 230.986836][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 230.986859][ C1] RIP: 0033:0x7f37fc24e407 [ 230.986876][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 230.986894][ C1] RSP: 002b:00007ffe88183620 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 230.986915][ C1] RAX: ffffffffffffffda RBX: 00007f37fc1c4740 RCX: 00007f37fc24e407 [ 230.986929][ C1] RDX: 0000000000000000 RSI: 00007ffe88183730 RDI: 000000000000000b [ 230.986942][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 230.986954][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560590cc41e4 [ 230.986967][ C1] R13: 0000000000000000 R14: 0000000000000007 R15: 000000000000000a [ 230.986981][ C1] [ 230.986988][ C1] [ 231.476659][ C1] The buggy address belongs to the variable: [ 231.482632][ C1] .str.8+0x14/0x40 [ 231.486447][ C1] [ 231.488769][ C1] The buggy address belongs to the physical page: [ 231.495178][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6706 [ 231.503849][ C1] flags: 0x4000(reserved|zone=0) [ 231.508791][ C1] raw: 0000000000004000 ffffea000019c188 ffffea000019c188 0000000000000000 [ 231.517374][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 231.526037][ C1] page dumped because: kasan: bad access detected [ 231.532549][ C1] page_owner info is not present (never set?) [ 231.538705][ C1] [ 231.541025][ C1] Memory state around the buggy address: [ 231.546738][ C1] ffffffff86706300: f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 00 00 00 03 [ 231.554794][ C1] ffffffff86706380: f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9 00 03 f9 f9 [ 231.562852][ C1] >ffffffff86706400: 00 00 05 f9 f9 f9 f9 f9 00 00 00 03 f9 f9 f9 f9 [ 231.570906][ C1] ^ [ 231.575489][ C1] ffffffff86706480: 00 00 f9 f9 00 00 00 f9 f9 f9 f9 f9 03 f9 f9 f9 [ 231.583544][ C1] ffffffff86706500: 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 [ 231.591608][ C1] ================================================================== [ 231.599661][ C1] Disabling lock debugging due to kernel taint [ 231.625446][ T362] usb 2-1: USB disconnect, device number 86 [ 231.635854][ T310] usb 5-1: USB disconnect, device number 26 [ 231.641838][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 231.683015][ T36] kauditd_printk_skb: 367 callbacks suppressed [ 231.683037][ T36] audit: type=1400 audit(1786213912.340:66390): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.729554][ T36] audit: type=1400 audit(1786213912.360:66391): avc: denied { read write } for pid=3391 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.862733][ T36] audit: type=1400 audit(1786213912.360:66392): avc: denied { read write open } for pid=3391 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.889138][ T36] audit: type=1400 audit(1786213912.360:66393): avc: denied { ioctl } for pid=3391 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.916676][ T36] audit: type=1400 audit(1786213912.390:66394): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.943803][ T36] audit: type=1400 audit(1786213912.390:66395): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.971797][ T36] audit: type=1400 audit(1786213912.430:66396): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.995944][ T36] audit: type=1400 audit(1786213912.430:66397): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.020955][ T36] audit: type=1400 audit(1786213912.430:66398): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.047023][ T36] audit: type=1400 audit(1786213912.550:66399): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1