last executing test programs: 9.424074655s ago: executing program 3 (id=1842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x4, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.350543409s ago: executing program 3 (id=1846): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x20007fff]}, 0x8) read$watch_queue(r0, &(0x7f0000000500)=""/99, 0x63) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000023d000/0x4000)=nil) r1 = epoll_create(0x8017) read(r1, 0x0, 0x0) mlockall(0x6) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="00000040d90455a00000000000010902240001000000000904000001030001000921001001012207000905810320000d0300"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002212000000010f00"], 0x0}, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f00008d1000/0x3000)=nil}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x7, 0x0, 0x5, 0xc, 0x1c, "fee8a2ab78fc979fd1e0fb950720b7fb810000000000b26b000000000000000000000000002300000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac12b8753d7bdb22d0000b520a1a93c060000000000027a8f3d45cdd499a861ac000000000318e341e15ec20e000000000400", "f422741b13103e52f40000ed06000000000200989d8d4200", [0x0, 0x1fffffffbfffd]}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000a38000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/68, 0x44, 0x0, &(0x7f0000000400)=""/221, 0xdd}, &(0x7f0000000280)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="7a9c973828bd498ce27d1de921b90f83bb5d22ef91", @ANYBLOB="24776664dde84b4852306e6f3d8f3988d58c0d64609fe72dddd93a69f86953a168a0bc9e7aa82ab79962b35845d29f0d95c439ae5635dfd4ac33d3dccb58592333830d41c77d252097ef90039eeb71819c0ccab02ec96c224c219941f1c1cd78", @ANYRESHEX=r4, @ANYBLOB=',k']) chdir(&(0x7f0000000240)='./file0\x00') mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x10001, 0x0) rt_sigqueueinfo(0x0, 0x39, &(0x7f0000000340)={0x2b, 0xfffffffd, 0x400}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x8a, &(0x7f0000000140)=0x6, 0x4) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0xa}, 0xa) poll(&(0x7f00000000c0)=[{r6, 0x1000}], 0x1, 0x6) madvise(&(0x7f000047d000/0x4000)=nil, 0x4000, 0xa) 6.229127153s ago: executing program 3 (id=1872): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000980)="a9", 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x69881000) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x1) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x6, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="60071c"], 0x0, 0x0, 0x0, 0x0}, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) syz_usb_connect$uac1(0x1, 0xfc, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x6, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x2, 0x10, 0x9, 0x10, 0x7}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x6, 0x2, 0x7], 0x8}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x4, 0x80, "f54c2dc1c696"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfe, 0x3, 0x4, 0x40, "c6a7df4d"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x2, 0x8, "aef91a2a4c1a7f"}, @as_header={0x7, 0x24, 0x1, 0x89, 0xaa, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x9, 0x0, {0x7, 0x25, 0x1, 0x80, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x5, 0x2, "34f3", 'b1z'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe9, 0x1, 0xff, 0x7, "e02d2be652d6bbd6"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0x0, "d0e47c238e"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf7, 0x4, 0xf1, 0x2, "", "14cb"}, @as_header={0x7, 0x24, 0x1, 0x53, 0x3, 0x4}, @as_header={0x7, 0x24, 0x1, 0xf, 0x9, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x3, 0x2, {0x7, 0x25, 0x1, 0x0, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x3, 0xfc, 0x8f}, 0x39, &(0x7f00000000c0)={0x5, 0xf, 0x39, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x40, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0f96cafc01f154a45b63d09329e4836a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x80, 0x9, 0xb, 0xd}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x9, 0x2, 0x7ff, 0x92}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44b}}]}) 4.492048715s ago: executing program 3 (id=1879): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x80000000, 0x4) rt_sigqueueinfo(0x0, 0x8, &(0x7f0000001340)={0x41, 0x1, 0xc02}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) 4.491759405s ago: executing program 3 (id=1880): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000003380)=ANY=[@ANYBLOB="12010000000000406d0422c200000000000109022400010000000009040000010300010009210010060122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, "fc"}, @global=@item_012={0x2, 0x1, 0x9, '\x00\x00'}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 2.931176937s ago: executing program 3 (id=1887): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="401704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x20, 0x30, 0x4, "012aaebf"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x20000040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0x54, {0x54, 0x4, "9621beb1bf4fc9a6364213da2597df1d8d585da62f8c8368a89729e258b64162cfbba88a626a5d02f92ce4858ab24d50cc5d3cf12a7489a51049b0b4ed849a0155c871d48573967adde4bc26385a6adde0bb"}}, &(0x7f0000000400)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "e2853e6e6c5f2f88ea501b8412e4c05288073f6f00c443e2a9b740670f232e82790f182c26a089671de87f0f6ba675a2ff6392fb27ef6cf806bbed6eb46ea2afabeff075ddba6344faaccfd01b5fde4f3baaff9ca13f226b86c2e9d0e76d61d503fed12a5c180cc66e3e38d2dfdf121060ec5d969894ace8895beb42229c4bbbeac03c5b3636281fac88298052362a05e18683f71262beffb85c50a000f0c2ad"}}, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "6bbdc73b39d8695c477d3268adb263bc"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x7f, 0xfb, "61a2de39", "3212b695"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x3, 0x8, 0x3, 0xfe, 0x1, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000280)={0x40, 0xd, 0x23, "3987a0276e282c248a617fab33cfa296d2ec1a93fb83c3f59c74cbe1889bd3b842dc60"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x6}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x80}}, &(0x7f00000005c0)={0x40, 0x7, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000640)={0x40, 0xb, 0x2, "7f69"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'cy'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000880)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x9, 0x3, 0x81, 0x3, 0x8}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000380)={0x20, 0x5, 0x71, "85111e8b5b496b1ed34de02ef3b52bec53ed33acfcd100771442aa1304a2b4b4e44e96d8754233ecda9559ecc5022e1c2aaad5d8aa6069aa97775c5fe3ff9d86b33e19724a175bddebc4403d92a1761e5d5f2f60061eb237bb4228f8718f4eb7bff852119eaf3acca617838ad2baf0ef95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xe9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x47}}) 2.159978763s ago: executing program 2 (id=1900): r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0) (async) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x5, 0x60000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async, rerun: 32) getsockname$netlink(r2, 0x0, &(0x7f0000000140)) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f00030100d0000904000000010100000a2401f6ffff0101020d240600fe03080000000000000c24020202020608000010000c240200000003000017000009240600050100000009240303000000050009240605000100000009040100000102000009040101010102000009050109000040200007250100008000090402000001020000090402010101020000090582122e"], 0x0) 1.640107003s ago: executing program 2 (id=1907): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="6c6866e4f6f46f9f1a1b14651ffaa8d5", 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24) 1.636810133s ago: executing program 2 (id=1908): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x23, {0x23, 0xb, "b6f354b06c8652ed2c6db8933df7975faaaeaf99b2c947452352f5062f278e73fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x86, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "bc"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x6, 0xf5}, [@country_functional={0x12, 0x24, 0x7, 0xa1, 0x101, [0x63c7, 0x100, 0x5, 0xff, 0x401, 0x8001]}, @mbim={0xc, 0x24, 0x1b, 0xfff6, 0x7ff, 0x80, 0x9, 0xc37, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0x7, 0x89}, @country_functional={0xa, 0x24, 0x7, 0x1, 0xe49d, [0x6, 0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xb0, 0xfc, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x4b, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x0, 0x5, 0x70789d83896ede5e, 0x80}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x75, &(0x7f0000000380)=@string={0x75, 0x3, "291beb8467457d989503144ba3a7a116d5705b2582fad1ae606d9ab22bec05c87f7a02767ee8742193569a02a865ad432da381ccc4c13e17421af3577f47f7f37d8374d34f5e887d6b5627aafe058ed022e81b4342830fa66b8db200bee732a21199195aecd39b889430276d203096ab5b4fb9"}}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mlockall(0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x290000, 0x50) openat(r1, &(0x7f0000000340)='./file0\x00', 0x600040, 0x40) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240)=@v3={0x3000000, [{0x5, 0x7}, {0x0, 0x8}], r4}, 0x18, 0x1) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x40803, &(0x7f0000000600)={[{}, {@memory_recursiveprot}, {}, {@memory_recursiveprot}, {@favordynmods}], [{@uid_lt={'uid<', r3}}, {@smackfsroot}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff9}}, {@subj_type={'subj_type', 0x3d, '/dev/ppp\x00'}}, {@fsname={'fsname', 0x3d, '/dev/ppp\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@uid_eq={'uid', 0x3d, r5}}]}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000740)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') read$FUSE(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22000fff0058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b080800418e224e0004fcff", 0x58}], 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x402, 0x9, 0x1b3, 0x7, 0x80000004, 0x101, 0x2}, 0xfffffffffffffdd3) 1.087743306s ago: executing program 0 (id=1917): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0xb13, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0xad, 0xa1, 0x5d, 0xff, 0x403, 0xff18, 0x418f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb01, 0x3, 0x7, 0x7e, 0x0, 0x2, [{{0x9, 0x4, 0x5e, 0x6, 0xe, 0x65, 0x12, 0x5, 0x7f, [], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0xca, 0x0, 0x5, [@generic={0x7f, 0x31, "ac4bc97cc2e4f0c973ae9dbe0e0c7d63decd054737a23adbd9e7e0f314bafa789a1c021b56bb461b6d47b7e4fb40a00538c587dbaa0a1732ef74fdd2a03224c13076cefdb99eb6a27494b174fd3705dfe68d68819e8fa68c0d8ea8fa1c758b5911fb5a6e5e37c82faa81fe0aed64ff8e5a043866c8fc1e394cf51fa53a"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x7f, 0x32, 0x6, [@generic={0x29, 0x30, "36011dbea9edaf81146eccbb867587defb4b4d29faa3a18387db6e566bebfb005e54efbf41f21a"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x100}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0xe1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfffe}, @generic={0xaf, 0x29, "982e55fb1c994c2972da915cc7bac74b4bc3457007f9385905d6a929eaae9e04fd1df57a68d4671f121408f514b2b6bb00c68cf0f921356e308793837d04dcd2914109c70d38a7afd4fd68a1a229403eff8630ca35d579cf8aa0e76ddd45546e3bea454b9daaad7fabb42f985a330abbb1988ad410d0b426f51e084ede471bdfa16cc7a744e6dd24d6be1cb8c47adb052e9eab5ee7bcde95937abcb9481a391d1f8fbea3f8b9d005cc1eb6ea08"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x18, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x1}, @generic={0xf6, 0xd, "cb2b79b59125c6b1d1d6b57ae38f20a286b5a0ec7205ae83fcd27de6eded2978cbc7afbed7b522673893f473073ddb0fae0724ea74ae5ee311829266318d27ecf578f90a0f6fb0c558a91b300d69773b749a43d3457ec3126c5472a23b21a16d1e6c74106e20ebffa36b791e4f977008551d3a2e0e63fc118778072e30b2c840c2dece19faeba5440e518c74373b6b43e4189c0b2ee44f6b0b00164968d70b1fd46c5bfe37c18c963955917b8b31c087f5f675b86b45f1a4c441ed88ecca857c318877200b6e9a8df18fcfb70cd3db2eefd1238ac8a4998ae87b32cefb7bbb5a2ed0c3c4d9e3519a19f4ed2ad53327df53b14e9e"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x9, 0x8, 0xfe}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xd, 0x3, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8d}, @generic={0x62, 0x11, "197ada24ad789e3e0fa0285af9e4e5600336622f1cf3ee6395d461fdb84cb9b1a088cfb12ef5de5d9f79665c2e8d21ddb83c99cf196b31bc31c7f7cc8ad61dc35cd23c4d9f37ac0199c7b57842e59a43480b6e81ef9f0fd363f62da401429706"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xf, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9a3f}, @generic={0x43, 0x24, "86522322d7a4459a13bca20c4c708123efcc13b72a6d79bb60b4d2191a040329706b57eee6d30e26181290251eeac9dd6a9bb5aaa02cebcf2ce7bdc0602d933ec2"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x5, 0x1, 0x4, [@generic={0x34, 0x4, "9735e1f962872851fb6fb1c0c0df8a41b174c01035dcc1880d69698955b97fc096b636b8b045bf3d95751835c0d40267d0b6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xff}]}}, {{0x9, 0x5, 0xce5f30f3848b4ac8, 0x4, 0x20, 0x5, 0x6, 0x4, [@generic={0x7, 0x4, "0e6db46ad4"}, @generic={0x7c, 0x24, "71f80240561ef6aaeaf2f7d01c6262de1ad4234a332dc24087a2b1506fed61a14aa7b437738ee3a45ce37c94ae2c20dcdc21268e9f4e63c20b36ece692a10ffa78e2dbb04893aa14fbaf05dc16a1507241fe750a503792bcba8738ba99ef50feb6c88af95dd15514f7a1bddcf0a864af6cfe1dbb73aa92bd5e7b"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x1, 0xc7, 0xe}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x58, 0x1, 0x3b, [@generic={0xe3, 0x9, "c4654b02b1b7ada59e2d8c47b2a7d3a92013e6e578053342a1edcca9cd53ae284f93586edaca6f58cfa382bfdc76f58c2a4cddf7a2386e90135e43f0304b6ca76eb20352646fd2877d3d83d85e1a7bc9e637922f7c1dfb2a93931708e47675ceae09915060435058cfeea8f7cf79b6ef6bff1cdf8ceeba25d0caa3db5508b72f59a5798451fbd8d8ee553ce8207a766edb1902277c16ec0b9ba08c5fbe3f32bf36cf8ae238229dec8509ecadd10117f028b444c9296029879f3811d5e6e1244d1e124e4a924ef8affe34b421745430b6c85abbc5071f4f22c92c73cc06aafb2f3d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x5d2e}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x81, 0x2c, 0x7, [@generic={0x30, 0x10, "2768e3dffdd46ff3e26ebc985b6c8d3f848a67d9955295044fe2a519a3a6ea8f92fa13fbe7eb36664c5ebdc95170"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x80, 0x9, 0x7, [@generic={0x61, 0x30, "9d6cc4f8aea39cbc3a32d9118fbfdd9a1840d82c25118049d1f196920717246061d3e91f89dff407e0beeabf8c8180ba61e720fad09ac3e79439405f3bb5a673d3a448f3f5493c05a9c5c6b1234aa32f830af9e0eca1497091d9e5fdb41f68"}, @generic={0x3e, 0x5, "91213f36c3049867b6b6758c82ae354960855a5683af15b6dbcb83cfdd77e3a7856a3b453e74c53a271a363c84afb28ab76c037f03157ca992b3b234"}]}}]}}, {{0x9, 0x4, 0xc1, 0x5b, 0x8, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "1f2dae76ac"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xed5f, 0xff91, 0xf}, {0x6, 0x24, 0x1a, 0x8001, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x4}, @acm={0x4, 0x24, 0x2, 0xb}, @mdlm_detail={0xfd, 0x24, 0x13, 0xac, "664c4d1b923c9cf899fd8654c9f4ad82e00a98f303653c8509879af8c7ce36024f2ec4f338803d21f393d63c3110d9f1a41173f084d4e1b06f0dd04da01bb9db79fdd5fd8f4adcc47a38c5cec205772b8d444569f5b3e854632d31ad9ef50336579d854158c4a44b21cf6a72072885c605de8f0f4df83da06b46bd7c102b1f9813583a6880ced3a76288eb2025f457463371ec6e783ce2726649279f54e9e0d8897523f79c653e2f2ebfd3450a6f1890be4e0f0d2a5e631fa4471d189c92d50d7c403f635c0f0699c4e71e3996942f47fc4ccb0d40119018e94f4f0d942a927c49177f52592c6ccd44f994e85741cde9c9d947bff79e1fa540"}, @dmm={0x7, 0x24, 0x14, 0x3}]}, @uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x3, 0x9f, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf0, 0x2, 0x8, 0x4, "15"}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x8, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x3}, @generic={0x4d, 0x31, "85a63b295f6733b508abd143dd2b3ad983d702424279a6150c832d3475c3c7976234496d6f1c18f462d01eda13c072993f2341df94740388895d625882488e3febaf794b9a8890b41a2ac8"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0xa, 0x5, 0xf, [@generic={0x9b, 0x23, "d06354101315d733437183cace57f50045df9e5c446426435f03d65606e934262bfdd649398d29829ad36dbd5980fbca925d80c9bb91a2a8c10f7ccf9995616e7bc3dc6aa2759a18aad5c1ba906bce9834acdfe50c90d0e15e62dda54c49baf289adffa36fb4bad6d88fbf41addfbee29e1a50ad2d882763b3bb2c41e3c3aed0e9c6adf459959ff3500d4dfda723e11b94c5049c64f53db3ea"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x40, 0xc9, 0x8, [@generic={0x1d, 0x30, "05a005b80334d72934f8a234362853668fdae5148144741d96bc57"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x0, 0x8, 0xc, [@generic={0xec, 0x2, "9194f14449c71e763cb2d5bb5a3ab42c1d244a0c40f14f9265830ecd1c18a931b3779495a515f65e848f1d7b9056a6c61470e1e9fd98e457da98f745b0d9cb383df057781b65a3a27f0cdcc6b9f2832e423c510bd20fbd27c5a17924dea17827232c4ca67f9408b290a9523ffa93f64a66596e159c956770ad51a92bab2f143a6b48d343003fcfc1316997cdc840d4614fd31c3ae106cd2e73199818a3440b412f903d091f0b6f97228c686367d0f39db79d5977c4bbe5b33a24625f5bc720c1dd797e8780fd49bfa6da823f357e3a23eff232918f1de78bb269058f3c8e50a353caea81936bbabd6dd3"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x10}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x5, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0x7}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x2, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x18, 0x24ed}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x3, 0x30, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xe}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3d7, 0x4, 0x3, 0xb, [@generic={0x56, 0x21, "4781919c374029e136b82680d5659960a399b3b6692d387e8055cc285e250c859fd8f2fa0d97bc236f96a42da9dca1e406ef455a1ce1bcc2898ac9c90e7a0cec7d147951edcd7014e574bd6299a95896c06bc2f5"}, @generic={0x20, 0xd, "2416a7477480d7e887806a5e8816c24186c8ab099cd69312f94790a225db"}]}}]}}, {{0x9, 0x4, 0x87, 0x80, 0x3, 0xff, 0xff, 0xff, 0xd, [], [{{0x9, 0x5, 0x4, 0xc, 0x40, 0x34, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0xf8, 0x3, 0x7, [@generic={0x7, 0x22, "9cbef34cd5"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x0, 0xfff8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x6, 0x2, 0x0, [@generic={0x73, 0x11, "1e5f73f8575662fef2d5d9ace4ff90d73881d578046d6f2c8e1906575f1d60b668960cbda88bdde86b3f30c23fa1bdc73a262626cc54fae8a92a364c0bcf704baef1dab32bcace1860e2dcbd943896aef13a729be4a7e6734cb5d45cc3a842e256c31f72b17a387693b4b35119a520d097"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x36, 0x7f, 0x1b, 0x40, 0x5}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0x8, &(0x7f0000000140)=@string={0x8, 0x3, "434168d88f3c"}}, {0xa6, &(0x7f0000000240)=@string={0xa6, 0x3, "809f8ae13c652313fcb8c07af0dc74ca97d3077d33bd261e5165750c715765fa76276cd3ecf91c807f857a00948f781dd3fb5f7d000edc8ba6a01d6c9e7635b0f69430c8de0467fb10d3aefe74739dac1b5262f4bb80aaa2c68adcb6ceceaaaf1e6f30ccc6133646b180bd2632f89f809a9964e14804cd4de68ac1960eeb14955b9f45577bf190545f4ad450b5d2895b59906f483da9fe726f4f3a64bd8e8cb85e793f86"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000780)=0x2, 0x4) unshare(0x64000600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000101"], 0x1c}], 0x1}, 0x0) r4 = dup(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000040)="940910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0xfe) pwritev(r7, &(0x7f0000000840)=[{&(0x7f00000005c0)="c021", 0x2}], 0x1, 0x5, 0x1) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00'}) 1.086748326s ago: executing program 2 (id=1918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, 0x6000}) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000400)=0x200000000) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 862.707289ms ago: executing program 1 (id=1920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000017"], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000001740)={&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/89, 0x59}, {&(0x7f0000001300)=""/20, 0x14}, {&(0x7f0000001340)=""/253, 0xfd}, {&(0x7f0000001440)=""/80, 0x50}, {&(0x7f00000014c0)=""/19, 0x13}, {&(0x7f0000001500)=""/168, 0xa8}, {&(0x7f00000015c0)=""/147, 0x93}], 0xa}, 0x40002000) 721.623178ms ago: executing program 1 (id=1921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'ipvlan1\x00', @remote}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fed"], 0xe) 506.10904ms ago: executing program 2 (id=1919): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff7e) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x100000, 0x0, 0x0}) 432.181615ms ago: executing program 1 (id=1922): openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f7) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x4, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 430.517565ms ago: executing program 2 (id=1923): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1278cfa697d6e2011001040000104c05cc090000000000010902240001000000c609040007010300010009210000050122050005810320000d0801000332e1ac"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r1, &(0x7f0000005a00)=@name={0x1e, 0x2, 0x3, {{0x3, 0x3}, 0x3}}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000404, &(0x7f0000000100)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) fstat(r2, &(0x7f0000001580)) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xf3c342ad85829738) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f00000005c0)=0x2, 0x4) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x7, "579c"}, @main=@item_4={0x3, 0x0, 0xa, "24011f07"}]}}, 0x0}, 0x0) 282.703923ms ago: executing program 1 (id=1924): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) r2 = epoll_create(0x8) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) accept4$vsock_stream(r3, 0x0, 0x0, 0x800) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1c) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040084}, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0) (async) write$FUSE_INTERRUPT(r1, 0x0, 0x0) (async) epoll_create(0x8) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async) accept4$vsock_stream(r3, 0x0, 0x0, 0x800) (async) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1c) (async) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040084}, 0x84) (async) 267.126884ms ago: executing program 1 (id=1925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000080), &(0x7f0000000100)=""/243, 0xf3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6a, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x4, 0xfb, 0x0, 0x10001, 0x2, 0x3, 0xd4, 0x7, 0x2, 0x6, 0x1, 0x0, 0x7, 0x3, 0x65, 0x5, 0x9, 0xc, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 183.795039ms ago: executing program 0 (id=1926): mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x40000000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="1201100300000008b8040202400001020301090224000101032002090400070207"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000f75000/0x2000)=nil, 0x2000, 0x64) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/192, 0xc0, 0xffff, 0x27}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @fda={0x66646185, 0x7, 0x1, 0x22}}, &(0x7f00000003c0)={0x47, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000d3d000/0x4000)=nil, 0x4000, 0x0, 0x2000000000032, r1, 0x38d9d000) mlockall(0x7) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x40000000}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="1201100300000008b8040202400001020301090224000101032002090400070207"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) madvise(&(0x7f0000f75000/0x2000)=nil, 0x2000, 0x64) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/192, 0xc0, 0xffff, 0x27}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @fda={0x66646185, 0x7, 0x1, 0x22}}, &(0x7f00000003c0)={0x47, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap(&(0x7f0000d3d000/0x4000)=nil, 0x4000, 0x0, 0x2000000000032, r1, 0x38d9d000) (async) 130.018872ms ago: executing program 0 (id=1927): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x30020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r1, &(0x7f0000000140)) 116.422173ms ago: executing program 0 (id=1928): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb22878, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 46.360617ms ago: executing program 0 (id=1929): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x42902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe61000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[]) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.249839ms ago: executing program 0 (id=1930): setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r2}}]}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) read(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') pread64(r5, &(0x7f00000000c0)=""/122, 0x7a, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 1 (id=1931): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff7e) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x100000, 0x0, 0x0}) kernel console output (not intermixed with test programs): d-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.525586][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.533159][ T3071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 151.549055][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.559615][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.567089][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.574753][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.582472][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.590115][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.597615][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.608210][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.615902][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.625136][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.625221][ T36] audit: type=1400 audit(1770686120.981:779): avc: denied { execmem } for pid=3074 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 151.633158][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.661926][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.669439][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.677142][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.686262][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.692556][ T36] audit: type=1400 audit(1770686121.021:780): avc: denied { bind } for pid=3074 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.696946][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.729977][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.737542][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.745097][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.752725][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.760251][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.767865][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.779469][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.787007][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.794563][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.802340][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.809898][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.817399][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.824950][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.832466][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.840005][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.847496][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.855053][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.862776][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.870756][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.878282][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.885851][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.893400][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.900920][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.908406][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.915912][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.923432][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.930958][ T338] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 151.938590][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.946218][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.953910][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.961434][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.968930][ T10] hid-generic 0000:10000:0007.0029: unknown main item tag 0x0 [ 151.977930][ T10] hid-generic 0000:10000:0007.0029: hidraw1: HID v9.40 Device [syz1] on syz1 [ 152.002286][ T3083] fido_id[3083]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.035510][ T36] audit: type=1400 audit(1770686121.391:781): avc: denied { accept } for pid=3088 comm="syz.0.887" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.037606][ T3089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.064399][ T3089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.073928][ T3089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.082560][ T3089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.091131][ T3089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.099649][ T338] usb 4-1: Using ep0 maxpacket: 32 [ 152.099894][ T3089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.109462][ T338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.123122][ T338] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.133963][ T338] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 152.143041][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.151250][ T338] usb 4-1: Product: syz [ 152.155451][ T338] usb 4-1: Manufacturer: syz [ 152.160279][ T338] usb 4-1: SerialNumber: syz [ 152.165497][ T338] usb 4-1: config 0 descriptor?? [ 152.657883][ T3103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 152.676971][ T3101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.685915][ T3101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.717635][ T3107] SELinux: policydb version 1309660394 does not match my version range 15-33 [ 152.726622][ T3107] SELinux: failed to load policy [ 152.733527][ T3107] SELinux: policydb version -1607269543 does not match my version range 15-33 [ 152.743504][ T3107] SELinux: failed to load policy [ 152.769487][ T3110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3110 comm=syz.1.896 [ 152.788238][ T3110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.796767][ T3110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.257871][ T3116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.898'. [ 153.333482][ T3119] overlayfs: failed to clone upperpath [ 153.376543][ T3129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 153.517957][ T3141] cgroup: Need name or subsystem set [ 153.534206][ T3143] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 153.550143][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.558830][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.049949][ T3164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.058604][ T3164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.430490][ T3194] __vm_enough_memory: pid: 3194, comm: syz.0.923, bytes: 21200393400320 not enough memory for the allocation [ 154.462827][ T3198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.471424][ T3198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.494882][ T3198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.503538][ T3198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.663391][ T3207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.672011][ T3207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.681047][ T3207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.928'. [ 154.700878][ T3207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.709393][ T3207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.729194][ T338] usb 4-1: USB disconnect, device number 81 [ 155.029675][ T338] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 155.071916][ T3215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.080473][ T3215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.123666][ T3215] kvm: kvm [3214]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000057) = 0x5 [ 155.181000][ T338] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 155.191909][ T338] usb 4-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 62 [ 155.204928][ T338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.211651][ T338] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice= 0.00 [ 155.220736][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.229662][ T338] usb 4-1: config 0 descriptor?? [ 155.304024][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 155.304041][ T36] audit: type=1400 audit(1770686124.661:811): avc: denied { read } for pid=3226 comm="syz.1.936" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.333010][ T36] audit: type=1400 audit(1770686124.661:812): avc: denied { open } for pid=3226 comm="syz.1.936" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.356303][ T36] audit: type=1400 audit(1770686124.661:813): avc: denied { ioctl } for pid=3226 comm="syz.1.936" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.411883][ T36] audit: type=1400 audit(1770686124.771:814): avc: denied { connect } for pid=3229 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.434168][ T36] audit: type=1400 audit(1770686124.791:815): avc: denied { write } for pid=3229 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.454541][ T3230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 155.457566][ T36] audit: type=1400 audit(1770686124.811:816): avc: denied { bind } for pid=3229 comm="syz.2.937" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.484130][ T36] audit: type=1400 audit(1770686124.811:817): avc: denied { name_bind } for pid=3229 comm="syz.2.937" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 155.504642][ T36] audit: type=1400 audit(1770686124.811:818): avc: denied { node_bind } for pid=3229 comm="syz.2.937" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 155.544575][ T3232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.553483][ T3232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.565512][ T3232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.574709][ T3232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.713993][ T338] hid-generic 0003:1B1C:1C06.002A: hidraw1: USB HID v0.04 Device [HID 1b1c:1c06] on usb-dummy_hcd.3-1/input0 [ 155.775606][ T36] audit: type=1400 audit(1770686125.131:819): avc: denied { read } for pid=3242 comm="syz.0.941" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.792191][ T3243] can0: slcan on ttyS3. [ 155.805243][ T36] audit: type=1400 audit(1770686125.131:820): avc: denied { open } for pid=3242 comm="syz.0.941" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.853179][ T3243] can0 (unregistered): slcan off ttyS3. [ 155.877976][ T3252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.887538][ T3252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.898006][ T3252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.907279][ T3252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.126454][ T3277] x_tables: duplicate underflow at hook 1 [ 156.203419][ T3282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.212027][ T3282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.492157][ T3288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.501593][ T3288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.510486][ T3288] overlayfs: failed to clone upperpath [ 156.645818][ T3290] x_tables: unsorted underflow at hook 3 [ 156.907828][ T3297] random: crng reseeded on system resumption [ 156.933317][ T3297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.941896][ T3297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.051918][ T3302] netlink: 37 bytes leftover after parsing attributes in process `syz.0.954'. [ 157.112163][ T3305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.120752][ T3305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.182008][ T3310] netlink: 80 bytes leftover after parsing attributes in process `syz.2.957'. [ 157.463283][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.471906][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.749484][ T3326] netlink: 124 bytes leftover after parsing attributes in process `syz.2.963'. [ 157.750428][ T3328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.767031][ T3328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.854536][ T338] usb 4-1: USB disconnect, device number 82 [ 158.032937][ T3341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=274 sclass=netlink_route_socket pid=3341 comm=syz.1.968 [ 158.061517][ T3343] netlink: 'syz.1.969': attribute type 27 has an invalid length. [ 158.081513][ T3345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.090167][ T3345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.229637][ T338] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 158.369173][ T3357] cgroup: No subsys list or none specified [ 158.384894][ T3359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.393642][ T3359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.395244][ T338] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.410165][ T338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 158.420864][ T338] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 158.430818][ T338] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 158.442789][ T338] usb 4-1: string descriptor 0 read error: -22 [ 158.449021][ T338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.458103][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.466983][ T3337] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 158.919226][ T3371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.927805][ T3371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.493449][ T3385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.503212][ T3385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.514092][ T10] kernel write not supported for file /rfkill (pid: 10 comm: kworker/0:1) [ 159.525129][ T3381] netlink: 228 bytes leftover after parsing attributes in process `syz.0.986'. [ 159.998103][ T3399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.007458][ T3399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.061017][ T3410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.069642][ T3410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.541676][ T3414] fuse: Bad value for 'fd' [ 160.637713][ T3423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.646384][ T3423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.655859][ T3424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.664308][ T3423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.666735][ T3424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.673399][ T3423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.898223][ T338] cdc_ncm 4-1:1.0: bind() failure [ 160.906858][ T338] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 160.909377][ T3426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.915333][ T338] cdc_ncm 4-1:1.1: bind() failure [ 160.933373][ T338] usb 4-1: USB disconnect, device number 83 [ 160.936519][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 160.936565][ T36] audit: type=1400 audit(1770686130.291:869): avc: denied { create } for pid=3427 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.949370][ T3426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.248247][ T36] audit: type=1400 audit(1770686130.601:870): avc: denied { setcheckreqprot } for pid=3447 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.312202][ T36] audit: type=1400 audit(1770686130.671:871): avc: denied { append } for pid=3449 comm="syz.0.1008" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.320010][ T338] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 161.344434][ T36] audit: type=1400 audit(1770686130.701:872): avc: denied { ioctl } for pid=3449 comm="syz.0.1008" path="socket:[24278]" dev="sockfs" ino=24278 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.454309][ T3453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.469115][ T3453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.480481][ T3453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.489892][ T3453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.519598][ T338] usb 4-1: Using ep0 maxpacket: 32 [ 161.526162][ T36] audit: type=1400 audit(1770686130.881:873): avc: denied { setopt } for pid=3445 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.526364][ T338] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 161.595742][ T338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.606040][ T338] usb 4-1: config 0 has no interface number 0 [ 161.612241][ T338] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.622083][ T3455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.630727][ T338] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.645545][ T338] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 161.654801][ T3455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.662730][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.670964][ T338] usb 4-1: Product: syz [ 161.675140][ T338] usb 4-1: Manufacturer: syz [ 161.680682][ T338] usb 4-1: SerialNumber: syz [ 161.689933][ T338] usb 4-1: config 0 descriptor?? [ 161.700378][ T338] smsc95xx v2.0.0 [ 161.704055][ T338] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 161.715931][ T338] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 161.733971][ T36] audit: type=1400 audit(1770686131.091:874): avc: denied { read } for pid=3458 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.849372][ T3466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.858531][ T3466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.385388][ T3476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50983 sclass=netlink_route_socket pid=3476 comm=syz.0.1016 [ 162.504301][ T3479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'. [ 162.564260][ T36] audit: type=1400 audit(1770686131.921:875): avc: denied { create } for pid=3489 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.600251][ T36] audit: type=1400 audit(1770686131.951:876): avc: denied { name_bind } for pid=3492 comm="syz.2.1022" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 162.625827][ T36] audit: type=1400 audit(1770686131.981:877): avc: denied { read } for pid=3495 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.693395][ T36] audit: type=1400 audit(1770686132.051:878): avc: denied { shutdown } for pid=3508 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.980719][ T3531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.989386][ T3531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.208899][ T3534] bond_slave_1: entered allmulticast mode [ 163.286801][ T3536] netlink: 'syz.2.1037': attribute type 4 has an invalid length. [ 164.036286][ T45] usb 4-1: USB disconnect, device number 84 [ 164.073565][ T3558] SELinux: policydb string length 1836477231 does not match expected length 8 [ 164.083078][ T3558] SELinux: failed to load policy [ 164.088480][ T3563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.102473][ T3563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.116244][ T3566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.124856][ T3566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.409758][ T45] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 164.460056][ T3590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.469011][ T3590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.522655][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.531208][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.580647][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.591609][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.600704][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.609331][ T45] usb 4-1: config 0 descriptor?? [ 165.109739][ T3610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.118395][ T3610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.631962][ T3625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 166.640920][ T3625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 166.649845][ T3625] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 167.073027][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 167.083480][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 167.095093][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 167.095111][ T36] audit: type=1400 audit(1770686142.448:886): avc: denied { mount } for pid=3637 comm="syz.3.1070" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 167.095893][ T45] usb 4-1: USB disconnect, device number 85 [ 167.247858][ T36] audit: type=1400 audit(1770686142.598:887): avc: denied { accept } for pid=3646 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.277272][ T36] audit: type=1400 audit(1770686142.628:888): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 167.306853][ T3649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.329754][ T3649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.851855][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 167.903377][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.911986][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.925852][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 167.935463][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.945441][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.953361][ T36] audit: type=1400 audit(1770686143.298:889): avc: denied { create } for pid=3659 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.987787][ T3662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.997426][ T3662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.068608][ T3668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.077275][ T3668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.546100][ T36] audit: type=1400 audit(1770686143.898:890): avc: denied { write } for pid=3674 comm="syz.1.1085" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.576364][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.585039][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.613969][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.623133][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.728601][ T3686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.737071][ T3687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.737391][ T3686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.746149][ T3687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.794502][ T3689] overlayfs: failed to resolve './file1': -2 [ 168.812286][ T3692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.820839][ T3692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.203324][ T3696] EXT4-fs: dax option not supported [ 169.477706][ T3715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.486365][ T3715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.523332][ T36] audit: type=1400 audit(1770686144.878:891): avc: denied { write } for pid=3717 comm="syz.1.1099" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.541717][ T3718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.554877][ T36] audit: type=1400 audit(1770686144.908:892): avc: denied { ioctl } for pid=3717 comm="syz.1.1099" path="socket:[26882]" dev="sockfs" ino=26882 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.557451][ T3718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.011084][ T3724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.019819][ T3724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.101898][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.110779][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.120167][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.128711][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.300051][ T3730] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1104'. [ 170.315456][ T36] audit: type=1400 audit(1770686145.668:893): avc: denied { ioctl } for pid=3729 comm="syz.3.1104" path="socket:[25978]" dev="sockfs" ino=25978 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.366073][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 170.486419][ T3744] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1110'. [ 170.492126][ T36] audit: type=1400 audit(1770686145.838:894): avc: denied { mount } for pid=3742 comm="syz.3.1110" name="/" dev="overlay" ino=887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.532997][ T36] audit: type=1400 audit(1770686145.888:895): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.819645][ T338] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 170.970635][ T338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.977303][ T338] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 170.986473][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.995260][ T338] usb 4-1: config 0 descriptor?? [ 171.343876][ T3777] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.352671][ T3777] overlayfs: missing 'lowerdir' [ 171.445231][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.454397][ T338] pantherlord 0003:0810:0002.002B: hidraw1: USB HID v0.02 Device [HID 0810:0002] on usb-dummy_hcd.3-1/input0 [ 171.454466][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.478398][ T338] pantherlord 0003:0810:0002.002B: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 171.675053][ T45] usb 4-1: USB disconnect, device number 86 [ 171.678939][ T3789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.689967][ T3789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.895337][ T3791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1126'. [ 172.057475][ T3806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.066121][ T3806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.497737][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 172.497756][ T36] audit: type=1400 audit(1770686147.848:900): avc: denied { remount } for pid=3818 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.523756][ T10] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 172.589940][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.598994][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.608519][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.617943][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.627602][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.638671][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.638980][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.647931][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.665712][ T3831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.675235][ T3831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.683045][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 172.698023][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.709470][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 172.714976][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.728656][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.737929][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.750827][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.754021][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.769619][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.779042][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.787878][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.797325][ T10] usb 4-1: config 0 descriptor?? [ 173.016882][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 173.023107][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 173.037190][ T10] usb 4-1: USB disconnect, device number 87 [ 173.299140][ T3855] exFAT-fs (rnullb0): invalid boot record signature [ 173.305844][ T3855] exFAT-fs (rnullb0): failed to read boot sector [ 173.312470][ T3855] exFAT-fs (rnullb0): failed to recognize exfat type [ 173.333676][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.344034][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.387720][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 173.560878][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.571981][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.582268][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 173.591561][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.610371][ T10] usb 4-1: config 0 descriptor?? [ 173.872974][ T3868] netlink: 'syz.0.1154': attribute type 15 has an invalid length. [ 173.912486][ T36] audit: type=1400 audit(1770686149.268:901): avc: denied { getopt } for pid=3873 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.049995][ T10] ntrig 0003:1B96:0012.002C: unknown main item tag 0x5 [ 174.056889][ T10] ntrig 0003:1B96:0012.002C: unknown main item tag 0x3 [ 174.069634][ T10] ntrig 0003:1B96:0012.002C: unknown main item tag 0x0 [ 174.079716][ T10] ntrig 0003:1B96:0012.002C: hidraw1: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.3-1/input0 [ 174.249658][ T10] ntrig 0003:1B96:0012.002C: Firmware version: 4.2.19.19.6 (4ae8 7e6a) [ 174.534082][ T45] usb 4-1: USB disconnect, device number 88 [ 174.631697][ T36] audit: type=1400 audit(1770686149.988:902): avc: denied { create } for pid=3882 comm="syz.2.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 174.708318][ T3886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.879764][ T3886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.952504][ T3887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.962744][ T3887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.052392][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.058874][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.065320][ T3891] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.059672][ T368] Bluetooth: hci0: command 0x1003 tx timeout [ 177.059677][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.529291][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.537868][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.546419][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.554395][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.573761][ T36] audit: type=1400 audit(1770686161.928:903): avc: denied { write } for pid=3911 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 186.759631][ T45] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 186.909652][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 186.915853][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 186.923988][ T45] usb 4-1: config 0 has no interface number 0 [ 186.930134][ T45] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 186.942496][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 186.951631][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.959647][ T45] usb 4-1: Product: syz [ 186.963906][ T45] usb 4-1: Manufacturer: syz [ 186.968546][ T45] usb 4-1: SerialNumber: syz [ 186.974250][ T45] usb 4-1: config 0 descriptor?? [ 186.980523][ T45] smsc95xx v2.0.0 [ 186.984183][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 186.994252][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 187.084307][ T3921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.093091][ T3921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.224775][ T36] audit: type=1400 audit(1770686162.578:904): avc: denied { checkpoint_restore } for pid=3924 comm="syz.2.1173" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.265287][ T3928] overlayfs: failed to clone upperpath [ 187.614586][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.623599][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.822613][ T3945] overlayfs: failed to clone upperpath [ 188.166425][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.174987][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.186903][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.195463][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.203757][ T36] audit: type=1400 audit(1770686163.558:905): avc: denied { read } for pid=3961 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.223839][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.233460][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.239927][ T3964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.250303][ T3964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.276015][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.285439][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.291021][ T3971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.302886][ T3968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.311460][ T3971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.319376][ T3968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.459435][ T36] audit: type=1400 audit(1770686163.808:906): avc: denied { read } for pid=3978 comm="syz.1.1189" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.483185][ T36] audit: type=1400 audit(1770686163.808:907): avc: denied { open } for pid=3978 comm="syz.1.1189" path="/276/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.507784][ T36] audit: type=1400 audit(1770686163.818:908): avc: denied { ioctl } for pid=3978 comm="syz.1.1189" path="/276/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.537430][ T36] audit: type=1400 audit(1770686163.888:909): avc: denied { write } for pid=3982 comm="syz.1.1190" path="socket:[26530]" dev="sockfs" ino=26530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.540656][ T3983] netlink: 'syz.1.1190': attribute type 13 has an invalid length. [ 188.572625][ T3983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.581907][ T3983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.891123][ T3992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.899776][ T3992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.106211][ T3997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1194'. [ 189.288085][ T4019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.297784][ T4019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.310396][ T4019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.325371][ T4019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.510988][ T4022] netlink: 'syz.0.1203': attribute type 12 has an invalid length. [ 189.542015][ T338] usb 4-1: USB disconnect, device number 89 [ 189.601855][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.608289][ T368] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 189.710289][ T36] audit: type=1400 audit(1770686165.068:910): avc: denied { ioctl } for pid=4030 comm="syz.0.1206" path="socket:[26587]" dev="sockfs" ino=26587 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.772880][ T36] audit: type=1400 audit(1770686165.128:911): avc: denied { setattr } for pid=4040 comm="syz.0.1209" name="RAW" dev="sockfs" ino=26596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.860655][ T36] audit: type=1400 audit(1770686165.218:912): avc: denied { setopt } for pid=4050 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.881668][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.890289][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.899001][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.908356][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.000914][ T46] tipc: Subscription rejected, illegal request [ 190.149894][ T4058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.158486][ T4058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.679218][ T4064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.687828][ T4064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.208685][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.217386][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.335486][ T4069] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.1217'. [ 191.345101][ T4070] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.1217'. [ 191.365948][ T4072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.374507][ T4072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.385971][ T4072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.394556][ T4072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.619611][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.619615][ T368] Bluetooth: hci0: command 0x1003 tx timeout [ 191.647098][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 191.647116][ T36] audit: type=1400 audit(1770686166.998:916): avc: denied { create } for pid=4073 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.954419][ T4084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.962990][ T4084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.014132][ T4094] syz.0.1228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 192.212901][ T36] audit: type=1400 audit(1770686167.568:917): avc: denied { link } for pid=4132 comm="syz.2.1247" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.256370][ T36] audit: type=1400 audit(1770686167.598:918): avc: denied { rename } for pid=4132 comm="syz.2.1247" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.568805][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.577447][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.239625][ T45] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 194.401453][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.413141][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 194.422731][ T45] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.431803][ T45] usb 4-1: Manufacturer: syz [ 194.511561][ T45] usb 4-1: config 0 descriptor?? [ 194.833640][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.843016][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.286952][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.298205][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.760179][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.782603][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.876862][ T4272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.890293][ T4272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.006225][ T10] usb 4-1: USB disconnect, device number 90 [ 197.125871][ T36] audit: type=1400 audit(1770686172.478:919): avc: denied { connect } for pid=4281 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.153221][ T36] audit: type=1400 audit(1770686172.508:920): avc: denied { write } for pid=4283 comm="syz.3.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.469868][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 198.249604][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 198.255828][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.263910][ T10] usb 4-1: config 0 has no interface number 0 [ 198.271390][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 198.288906][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.297191][ T10] usb 4-1: Product: syz [ 198.302040][ T10] usb 4-1: Manufacturer: syz [ 198.306664][ T10] usb 4-1: SerialNumber: syz [ 198.319825][ T10] usb 4-1: config 0 descriptor?? [ 199.148260][ T36] audit: type=1400 audit(1770686174.498:921): avc: denied { mount } for pid=4320 comm="syz.0.1323" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 199.382389][ T4336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.391353][ T4336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.492711][ T36] audit: type=1400 audit(1770686174.848:922): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.518355][ T36] audit: type=1400 audit(1770686174.868:923): avc: denied { bind } for pid=4337 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.051991][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.060568][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.122436][ T36] audit: type=1400 audit(1770686175.478:924): avc: denied { read } for pid=4363 comm="syz.0.1340" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 200.144664][ T36] audit: type=1400 audit(1770686175.478:925): avc: denied { open } for pid=4363 comm="syz.0.1340" path="/448/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 200.213558][ T478] usb 4-1: USB disconnect, device number 91 [ 201.122805][ T36] audit: type=1400 audit(1770686175.748:926): avc: denied { write } for pid=4368 comm="syz.3.1342" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 201.292204][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.301582][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.310003][ T4395] rust_binder: BC_FREEZE_NOTIFICATION_DONE 4004630700000000 not found [ 202.318431][ T4395] rust_binder: Write failure EINVAL in pid:942 [ 202.366070][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.381041][ T36] audit: type=1326 audit(1770686177.738:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4385 comm="syz.3.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b9d9af79 code=0x7fc00000 [ 202.381083][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.935525][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.944609][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.052709][ T36] audit: type=1326 audit(1770686178.408:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4385 comm="syz.3.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70b9d9af79 code=0x7fc00000 [ 203.143925][ T4416] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 203.326278][ T36] audit: type=1400 audit(1770686178.678:929): avc: denied { mount } for pid=4427 comm="syz.2.1366" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 203.761030][ T4440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.771326][ T4440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.987070][ T36] audit: type=1400 audit(1770686179.338:930): avc: denied { append } for pid=4443 comm="syz.1.1371" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.034859][ T4444] loop5: detected capacity change from 0 to 7 [ 204.189635][ T4450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.199220][ T4450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.395985][ T4461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.404878][ T4461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.529733][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 204.680800][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.690738][ T10] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.701267][ T10] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.715722][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 204.724906][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.732989][ T10] usb 4-1: Product: syz [ 204.737263][ T10] usb 4-1: Manufacturer: syz [ 204.742035][ T10] usb 4-1: SerialNumber: syz [ 204.750554][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 204.762780][ T36] audit: type=1400 audit(1770686180.118:931): avc: denied { create } for pid=4462 comm="syz.1.1380" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 204.783295][ T36] audit: type=1400 audit(1770686180.118:932): avc: denied { link } for pid=4462 comm="syz.1.1380" name="file1" dev="ramfs" ino=29485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 204.806346][ T36] audit: type=1400 audit(1770686180.118:933): avc: denied { rename } for pid=4462 comm="syz.1.1380" name="file1" dev="overlay" ino=29485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 204.829383][ T36] audit: type=1400 audit(1770686180.118:934): avc: denied { unlink } for pid=4462 comm="syz.1.1380" name="file0" dev="overlay" ino=29485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 204.861663][ T36] audit: type=1400 audit(1770686180.118:935): avc: denied { setattr } for pid=4462 comm="syz.1.1380" name="#15" dev="tmpfs" ino=1737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 204.883865][ T36] audit: type=1400 audit(1770686180.168:936): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 204.954737][ T10] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 205.000150][ T4472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.019365][ T4472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.031434][ T4474] /dev/loop0: Can't lookup blockdev [ 205.153697][ T45] usb 4-1: USB disconnect, device number 92 [ 205.160905][ T45] usblp0: removed [ 205.660407][ T4491] input: syz0 as /devices/virtual/input/input37 [ 206.139748][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 206.285715][ T4518] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55 sclass=netlink_xfrm_socket pid=4518 comm=syz.1.1403 [ 206.348003][ T4522] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 206.376148][ T4524] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1406'. [ 206.740646][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.748748][ T10] usb 4-1: config 0 has no interface number 0 [ 206.756909][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 206.766053][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.777504][ T10] usb 4-1: Product: syz [ 206.781747][ T10] usb 4-1: Manufacturer: syz [ 206.786378][ T10] usb 4-1: SerialNumber: syz [ 206.800033][ T10] usb 4-1: config 0 descriptor?? [ 208.376904][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 208.376923][ T36] audit: type=1400 audit(1770686183.728:941): avc: denied { map } for pid=4662 comm="syz.2.1470" path="/452" dev="tmpfs" ino=2425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.610349][ T36] audit: type=1400 audit(1770686183.968:942): avc: denied { create } for pid=4689 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.864587][ T36] audit: type=1400 audit(1770686184.218:943): avc: denied { write } for pid=4717 comm="syz.2.1496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 208.892363][ T45] usb 4-1: USB disconnect, device number 93 [ 209.000282][ T4732] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.104768][ T4746] overlayfs: failed to clone upperpath [ 209.215340][ T4764] kvm: emulating exchange as write [ 209.244962][ T4773] overlayfs: failed to clone upperpath [ 209.589283][ T36] audit: type=1400 audit(1770686184.938:944): avc: denied { write } for pid=4810 comm="syz.1.1540" path="socket:[31908]" dev="sockfs" ino=31908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.879576][ T36] audit: type=1400 audit(1770686185.228:945): avc: denied { accept } for pid=4833 comm="syz.1.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.357603][ T4918] overlayfs: overlapping lowerdir path [ 211.412129][ T4928] overlayfs: failed to clone upperpath [ 211.448064][ T36] audit: type=1326 audit(1770686186.798:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a6d9af79 code=0x7ffc0000 [ 211.478134][ T36] audit: type=1326 audit(1770686186.828:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a6d9af79 code=0x7ffc0000 [ 211.509628][ T36] audit: type=1326 audit(1770686186.828:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88a6d5b84e code=0x7ffc0000 [ 211.533092][ T36] audit: type=1326 audit(1770686186.828:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a6d9af79 code=0x7ffc0000 [ 211.562961][ T36] audit: type=1326 audit(1770686186.828:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a6d9af79 code=0x7ffc0000 [ 212.019616][ T358] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 212.162294][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.170928][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.180065][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.188608][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.197780][ T358] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 212.206063][ T358] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 212.216289][ T358] usb 4-1: config 0 has no interface number 0 [ 212.223791][ T358] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 212.232912][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.240922][ T358] usb 4-1: Product: syz [ 212.245095][ T358] usb 4-1: Manufacturer: syz [ 212.249740][ T358] usb 4-1: SerialNumber: syz [ 212.255077][ T358] usb 4-1: config 0 descriptor?? [ 212.710396][ T4981] netlink: 'syz.0.1610': attribute type 7 has an invalid length. [ 212.718188][ T4981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'. [ 212.759258][ T358] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 212.766445][ T358] usb 4-1: No valid video chain found. [ 212.775482][ T358] usb 4-1: USB disconnect, device number 94 [ 212.851432][ T4991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 212.851469][ T4991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1390 [ 213.311250][ T5016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1619'. [ 213.329522][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'. [ 213.338543][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 213.538024][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.546651][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.559588][ T358] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 213.717067][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.728100][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.740339][ T358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.753457][ T358] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.762858][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.775148][ T358] usb 4-1: config 0 descriptor?? [ 213.982343][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 213.982359][ T36] audit: type=1326 audit(1770686189.338:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.1622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70b9d9af79 code=0x0 [ 214.090028][ T358] usbhid 4-1:0.0: can't add hid device: -71 [ 214.099234][ T358] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 214.118183][ T358] usb 4-1: USB disconnect, device number 95 [ 214.141206][ T5046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.151797][ T5046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.842478][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.851203][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.930486][ T36] audit: type=1400 audit(1770686190.288:957): avc: denied { append } for pid=5085 comm="syz.1.1643" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 214.944504][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.962081][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.970353][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.978897][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.381955][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.390575][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.559643][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 215.674406][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.683067][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.691855][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.700403][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.708830][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.711644][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.717784][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.730021][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 215.747943][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 215.757161][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.770070][ T10] usb 4-1: config 0 descriptor?? [ 216.042627][ T5137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.051215][ T5137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.177558][ T10] belkin 0003:050D:3201.002D: item fetching failed at offset 2/5 [ 216.185580][ T10] belkin 0003:050D:3201.002D: parse failed [ 216.192470][ T10] belkin 0003:050D:3201.002D: probe with driver belkin failed with error -22 [ 216.378410][ T10] usb 4-1: USB disconnect, device number 96 [ 216.571377][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.580062][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.050153][ T36] audit: type=1401 audit(1770686192.408:958): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 217.074477][ T5166] devpts: called with bogus options [ 218.224520][ T36] audit: type=1400 audit(1770686193.577:959): avc: denied { read } for pid=5210 comm="syz.1.1690" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 218.241887][ T5211] syzkaller0: entered promiscuous mode [ 218.254376][ T5211] syzkaller0: entered allmulticast mode [ 218.279813][ T36] audit: type=1400 audit(1770686193.627:960): avc: denied { read } for pid=5210 comm="syz.1.1690" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 218.372050][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.388966][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.400329][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.409946][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.510201][ T5223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.520760][ T5223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.532919][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.541529][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.809607][ T45] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 218.964377][ T45] usb 4-1: config 9 has an invalid interface number: 62 but max is 1 [ 218.972623][ T45] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 218.984070][ T45] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 218.993100][ T45] usb 4-1: config 9 has no interface number 0 [ 218.999227][ T45] usb 4-1: config 9 interface 62 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 219.010205][ T45] usb 4-1: config 9 interface 62 altsetting 1 endpoint 0x2 has invalid maxpacket 1088, setting to 64 [ 219.021194][ T45] usb 4-1: config 9 interface 62 altsetting 1 has an endpoint descriptor with address 0x15, changing to 0x5 [ 219.032830][ T45] usb 4-1: config 9 interface 62 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 219.043854][ T45] usb 4-1: config 9 interface 62 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 219.054146][ T5236] batadv_slave_1: entered promiscuous mode [ 219.057154][ T45] usb 4-1: config 9 interface 62 has no altsetting 0 [ 219.071526][ T45] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0183, bcdDevice=3b.8e [ 219.077670][ T5236] batadv_slave_1: left promiscuous mode [ 219.081305][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.094285][ T45] usb 4-1: Product: 、 [ 219.098528][ T45] usb 4-1: Manufacturer: у [ 219.103113][ T45] usb 4-1: SerialNumber: 逦臫ょ膲⩓蜞䄫죘뷩뿎粚卞熌嫿६罦ꑏण쐊䏏떾祭丮拘Дᴗ풂젾␿ኙᔕቨ䊝⮨빭㜺튉섃㘮㈱ [ 219.191909][ T5249] syz.2.1704 uses obsolete (PF_INET,SOCK_PACKET) [ 219.335042][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.344037][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.353754][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.362993][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.372048][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.381358][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.390151][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.399339][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.408816][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.417859][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.630141][ T45] ftdi_sio 4-1:9.62: FTDI USB Serial Device converter detected [ 219.640728][ T45] ftdi_sio ttyUSB0: unknown device type: 0x3b8e [ 219.649405][ T45] usb 4-1: USB disconnect, device number 97 [ 219.656852][ T45] ftdi_sio 4-1:9.62: device disconnected [ 219.796921][ T36] audit: type=1400 audit(1770686195.147:961): avc: denied { execute } for pid=5264 comm="syz.2.1710" path="/memory.events.local" dev="ramfs" ino=34776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 219.921851][ T5270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.931129][ T5270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.470743][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.489717][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.642372][ T36] audit: type=1400 audit(1770686195.997:962): avc: denied { ioctl } for pid=5293 comm="syz.3.1721" path="mnt:[4026532462]" dev="nsfs" ino=4026532462 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 220.879593][ T358] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 221.030709][ T358] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.041782][ T358] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.054770][ T358] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.061788][ T358] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 221.070895][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.080065][ T358] usb 4-1: config 0 descriptor?? [ 221.336200][ T36] audit: type=1326 audit(1770686196.687:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.0.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3960d9af79 code=0x7fc00000 [ 221.488868][ T358] pyra 0003:1E7D:2C24.002E: ignoring exceeding usage max [ 221.507903][ T358] pyra 0003:1E7D:2C24.002E: hidraw1: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 221.551629][ T5311] fuse: Bad value for 'fd' [ 221.556840][ T36] audit: type=1326 audit(1770686196.907:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.1726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3960d9af79 code=0x0 [ 221.659044][ T36] audit: type=1400 audit(1770686197.007:965): avc: denied { read } for pid=5310 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.823756][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 221.851061][ T5295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5295 comm=syz.3.1721 [ 221.892526][ T358] pyra 0003:1E7D:2C24.002E: couldn't init struct pyra_device [ 221.903205][ T358] pyra 0003:1E7D:2C24.002E: couldn't install mouse [ 221.911112][ T358] pyra 0003:1E7D:2C24.002E: probe with driver pyra failed with error -71 [ 221.932811][ T358] usb 4-1: USB disconnect, device number 98 [ 222.199909][ T36] audit: type=1326 audit(1770686197.557:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.1.1730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fcc99af79 code=0x0 [ 222.309598][ T358] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 222.394721][ T5326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.403253][ T5326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.459593][ T358] usb 4-1: Using ep0 maxpacket: 8 [ 222.465900][ T358] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 222.474222][ T358] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 222.482359][ T358] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 222.491273][ T358] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 222.502145][ T358] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7E, changing to 0xE [ 222.513585][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 222.523276][ T358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 222.537874][ T358] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 222.546994][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.555061][ T358] usb 4-1: Product: syz [ 222.559233][ T358] usb 4-1: Manufacturer: syz [ 222.563865][ T358] usb 4-1: SerialNumber: syz [ 222.569071][ T358] usb 4-1: config 0 descriptor?? [ 222.576399][ T358] hub 4-1:0.0: bad descriptor, ignoring hub [ 222.582361][ T358] hub 4-1:0.0: probe with driver hub failed with error -5 [ 222.758146][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 222.879656][ T31] usb 4-1: USB disconnect, device number 99 [ 223.015187][ T5332] kvm: pic: non byte write [ 223.559589][ T358] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 223.709587][ T358] usb 4-1: Using ep0 maxpacket: 16 [ 223.715806][ T358] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 223.724079][ T358] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 223.731340][ T358] usb 4-1: config 0 has no interface number 0 [ 223.738688][ T358] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 223.747809][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.755848][ T358] usb 4-1: Product: syz [ 223.760035][ T358] usb 4-1: Manufacturer: syz [ 223.764641][ T358] usb 4-1: SerialNumber: syz [ 223.769908][ T358] usb 4-1: config 0 descriptor?? [ 223.775792][ T358] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 223.782233][ T358] usb 4-1: No valid video chain found. [ 223.849888][ T5341] can: request_module (can-proto-0) failed. [ 223.856368][ T36] audit: type=1400 audit(1770686199.207:967): avc: denied { create } for pid=5340 comm="syz.2.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 223.959396][ T5357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.967971][ T5357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.984374][ T31] usb 4-1: USB disconnect, device number 100 [ 224.036012][ T5357] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.042935][ T5357] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.050080][ T5357] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.739595][ T358] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 224.889594][ T358] usb 4-1: Using ep0 maxpacket: 16 [ 224.896383][ T358] usb 4-1: config 100 has an invalid interface number: 3 but max is 1 [ 224.904624][ T358] usb 4-1: config 100 has an invalid interface number: 33 but max is 1 [ 224.912931][ T358] usb 4-1: config 100 has an invalid interface number: 120 but max is 1 [ 224.921325][ T358] usb 4-1: config 100 has 3 interfaces, different from the descriptor's value: 2 [ 224.930618][ T358] usb 4-1: config 100 has no interface number 0 [ 224.937083][ T358] usb 4-1: config 100 has no interface number 1 [ 224.943426][ T358] usb 4-1: config 100 has no interface number 2 [ 224.949727][ T358] usb 4-1: config 100 interface 3 altsetting 174 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 224.963067][ T358] usb 4-1: too many endpoints for config 100 interface 33 altsetting 114: 32, using maximum allowed: 30 [ 224.974244][ T358] usb 4-1: config 100 interface 33 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 224.985425][ T358] usb 4-1: config 100 interface 33 altsetting 114 has a duplicate endpoint with address 0x6, skipping [ 224.996452][ T358] usb 4-1: config 100 interface 33 altsetting 114 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 225.007649][ T358] usb 4-1: config 100 interface 33 altsetting 114 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 225.018825][ T358] usb 4-1: config 100 interface 33 altsetting 114 has a duplicate endpoint with address 0x7, skipping [ 225.029831][ T358] usb 4-1: config 100 interface 33 altsetting 114 endpoint 0x2 has invalid maxpacket 25092, setting to 64 [ 225.041316][ T358] usb 4-1: config 100 interface 33 altsetting 114 has a duplicate endpoint with address 0x7, skipping [ 225.052483][ T358] usb 4-1: config 100 interface 33 altsetting 114 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 225.069593][ T358] usb 4-1: config 100 interface 33 altsetting 114 bulk endpoint 0x8 has invalid maxpacket 16 [ 225.089114][ T358] usb 4-1: config 100 interface 33 altsetting 114 has 11 endpoint descriptors, different from the interface descriptor's value: 32 [ 225.102641][ T358] usb 4-1: config 100 interface 120 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 225.113803][ T358] usb 4-1: config 100 interface 120 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 225.124889][ T358] usb 4-1: config 100 interface 120 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 225.136148][ T358] usb 4-1: config 100 interface 3 has no altsetting 0 [ 225.144202][ T358] usb 4-1: config 100 interface 33 has no altsetting 0 [ 225.151255][ T358] usb 4-1: config 100 interface 120 has no altsetting 0 [ 225.162866][ T358] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff3, bcdDevice=2b.7d [ 225.172132][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.180420][ T358] usb 4-1: Product: syz [ 225.184620][ T358] usb 4-1: Manufacturer: ᓥ [ 225.189229][ T358] usb 4-1: SerialNumber: syz [ 225.324607][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.333291][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.505113][ T358] usb 4-1: USB disconnect, device number 101 [ 225.854017][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.862594][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.099593][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.099593][ T368] Bluetooth: hci0: command 0x1003 tx timeout [ 226.394290][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 226.403258][ T5405] bridge_slave_1: left allmulticast mode [ 226.408954][ T5405] bridge_slave_1: left promiscuous mode [ 226.414644][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.422318][ T5405] bridge_slave_0: left allmulticast mode [ 226.427957][ T5405] bridge_slave_0: left promiscuous mode [ 226.433721][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.456136][ T5406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.466360][ T5406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.589596][ T358] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 226.720172][ T5411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.728750][ T5411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.739587][ T358] usb 4-1: Using ep0 maxpacket: 16 [ 226.745894][ T358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.756298][ T358] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.766506][ T358] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.775591][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.783917][ T358] usb 4-1: Product: syz [ 226.788217][ T358] usb 4-1: Manufacturer: syz [ 226.792870][ T358] usb 4-1: SerialNumber: syz [ 226.999899][ T358] usb 4-1: 0:2 : does not exist [ 227.004923][ T358] usb 4-1: unit 5: unexpected type 0x0c [ 227.016335][ T358] usb 4-1: USB disconnect, device number 102 [ 227.031076][ T3908] udevd[3908]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.050953][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.059862][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.271980][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.282283][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.582573][ T36] audit: type=1400 audit(1770686202.937:968): avc: denied { map } for pid=5425 comm="syz.3.1768" path="socket:[37302]" dev="sockfs" ino=37302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 227.583003][ T5426] netlink: 'syz.3.1768': attribute type 39 has an invalid length. [ 227.617381][ T36] audit: type=1400 audit(1770686202.967:969): avc: denied { mount } for pid=5425 comm="syz.3.1768" name="/" dev="configfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 227.642132][ T36] audit: type=1400 audit(1770686202.967:970): avc: denied { search } for pid=5425 comm="syz.3.1768" name="/" dev="configfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.664637][ T36] audit: type=1400 audit(1770686202.967:971): avc: denied { read } for pid=5425 comm="syz.3.1768" name="/" dev="configfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.690065][ T5428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.700379][ T5428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.716983][ T5428] SELinux: policydb version 887511281 does not match my version range 15-33 [ 227.726158][ T36] audit: type=1400 audit(1770686202.967:972): avc: denied { open } for pid=5425 comm="syz.3.1768" path="/" dev="configfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.748432][ T5428] SELinux: failed to load policy [ 227.877224][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.890551][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.108747][ T5447] support for the xor transformation has been removed. [ 228.139892][ T5449] SELinux: Context unconfined is not valid (left unmapped). [ 228.143385][ T36] audit: type=1400 audit(1770686203.497:973): avc: denied { relabelfrom } for pid=5448 comm="syz.3.1777" name="TCPv6" dev="sockfs" ino=38090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 228.187339][ T36] audit: type=1400 audit(1770686203.497:974): avc: denied { relabelto } for pid=5448 comm="syz.3.1777" name="TCPv6" dev="sockfs" ino=38090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="unconfined" [ 228.529630][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 228.585517][ T36] audit: type=1400 audit(1770686203.937:975): avc: denied { map } for pid=5482 comm="syz.0.1788" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.608965][ T36] audit: type=1400 audit(1770686203.937:976): avc: denied { execute } for pid=5482 comm="syz.0.1788" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.690761][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.703980][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.719707][ T9] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 228.729215][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.743416][ T9] usb 4-1: config 0 descriptor?? [ 228.752507][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.762228][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.952882][ T5459] netlink: 'syz.3.1780': attribute type 5 has an invalid length. [ 228.960779][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 228.970744][ T5459] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 228.990707][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 228.996759][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 229.008063][ T9] usb 4-1: USB disconnect, device number 103 [ 229.434896][ T5510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.443484][ T5510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.544153][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.552733][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.628815][ T5523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.637950][ T5523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.647913][ T5523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.656621][ T5523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.696541][ T5531] loop1: detected capacity change from 0 to 8 [ 229.720041][ T5531] loop1: detected capacity change from 8 to 7 [ 229.726594][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.735779][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.743767][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.752946][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.761144][ T3908] loop1: unable to read partition table [ 229.767351][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.776547][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.785693][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.794869][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.802881][ T5531] loop1: unable to read partition table [ 229.808686][ T5531] loop_reread_partitions: partition scan of loop1 (#Pn6uqR\o zG-M HID v25691e.4a Device [syz0] on syz0 [ 235.593461][ T5683] fido_id[5683]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.633715][ T36] audit: type=1400 audit(1770686210.987:985): avc: denied { getopt } for pid=5684 comm="syz.1.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.683585][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.695603][ T358] usb 4-1: device descriptor read/8, error -71 [ 235.702127][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.875534][ T5702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.884277][ T5702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.892886][ T5702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5702 comm=syz.0.1869 [ 235.949611][ T358] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 235.970691][ T358] usb 4-1: device descriptor read/8, error -71 [ 236.100692][ T358] usb 4-1: device descriptor read/8, error -71 [ 236.212997][ T358] usb usb4-port1: unable to enumerate USB device [ 236.253781][ T36] audit: type=1400 audit(1770686211.607:986): avc: denied { getopt } for pid=5705 comm="syz.1.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 236.357688][ T36] audit: type=1400 audit(1770686211.707:987): avc: denied { execute } for pid=5707 comm="syz.2.1871" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.464956][ T36] audit: type=1400 audit(1770686211.817:988): avc: denied { map } for pid=5715 comm="syz.3.1872" path="socket:[40040]" dev="sockfs" ino=40040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 236.819592][ T31] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 236.829592][ T5725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.838117][ T5725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.990944][ T31] usb 4-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.004142][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 237.011103][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 237.020515][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.033264][ T31] usb 4-1: config 0 descriptor?? [ 237.380146][ T5730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.388704][ T5730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.446081][ T31] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 237.453335][ T31] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 237.461128][ T31] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 237.473919][ T31] lenovo 0003:17EF:60B5.0030: hidraw1: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 237.644268][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.653034][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.661959][ T31] usb 4-1: USB disconnect, device number 110 [ 238.449609][ T358] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 238.620903][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.632049][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.642206][ T358] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 238.651556][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.660878][ T358] usb 4-1: config 0 descriptor?? [ 239.074507][ T358] lg-g15 0003:046D:C222.0031: collection stack underflow [ 239.089649][ T358] lg-g15 0003:046D:C222.0031: item 0 0 0 12 parsing failed [ 239.097089][ T358] lg-g15 0003:046D:C222.0031: probe with driver lg-g15 failed with error -22 [ 239.172184][ T36] audit: type=1400 audit(1770686214.527:989): avc: denied { ioctl } for pid=5748 comm="syz.0.1885" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 239.197452][ T5750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.206130][ T5750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.274706][ T358] usb 4-1: USB disconnect, device number 111 [ 239.725756][ T5752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.734362][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.742664][ T5752] mmap: syz.0.1886 (5752): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 239.937743][ T5761] overlayfs: failed to clone upperpath [ 240.029590][ T358] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 240.179625][ T358] usb 4-1: Using ep0 maxpacket: 32 [ 240.186147][ T358] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 240.194457][ T358] usb 4-1: config 0 has no interface number 0 [ 240.202080][ T358] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 240.211288][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.219283][ T358] usb 4-1: Product: syz [ 240.223476][ T358] usb 4-1: Manufacturer: syz [ 240.228080][ T358] usb 4-1: SerialNumber: syz [ 240.233311][ T358] usb 4-1: config 0 descriptor?? [ 240.239175][ T358] smsc95xx v2.0.0 [ 240.648221][ T358] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 240.658993][ T358] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 240.988522][ T5808] kvm: pic: non byte write [ 240.994194][ T5808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 241.271554][ T5827] netlink: 'syz.1.1914': attribute type 4 has an invalid length. [ 241.280563][ T36] audit: type=1400 audit(1770686216.637:990): avc: denied { mounton } for pid=5826 comm="syz.1.1914" path="/463/file0" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.504376][ T358] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 241.515194][ T358] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 241.560617][ T36] audit: type=1400 audit(1770686216.917:991): avc: denied { sqpoll } for pid=5835 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 241.591018][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.599489][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.609755][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.619742][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.757983][ T36] audit: type=1400 audit(1770686217.107:992): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 241.828058][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.835188][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.842894][ T5845] bridge_slave_0: entered allmulticast mode [ 241.855995][ T5845] bridge_slave_0: entered promiscuous mode [ 241.862980][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.870185][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.877276][ T5845] bridge_slave_1: entered allmulticast mode [ 241.886696][ T5845] bridge_slave_1: entered promiscuous mode [ 241.957383][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.964602][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.971936][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.978988][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.010436][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.019496][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.032105][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.039276][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.063139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.070341][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.104818][ T5845] veth0_vlan: entered promiscuous mode [ 242.116200][ T5845] veth1_macvtap: entered promiscuous mode [ 242.152693][ T36] audit: type=1400 audit(1770686217.507:993): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.KoRCRv/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 242.180225][ T36] audit: type=1400 audit(1770686217.507:994): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.KoRCRv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 242.228981][ T36] audit: type=1400 audit(1770686217.527:995): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 242.256651][ T36] audit: type=1400 audit(1770686217.537:996): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 242.343328][ T12] veth1_macvtap: left promiscuous mode [ 242.348840][ T12] veth0_vlan: left promiscuous mode [ 242.522417][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.531035][ T478] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 242.539972][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.550131][ T5877] rust_binder: Got transaction with invalid offset. [ 242.550159][ T5877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.556803][ T5877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1578 [ 242.616305][ T36] audit: type=1400 audit(1770686217.967:997): avc: denied { map } for pid=5886 comm="syz.0.1929" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.648605][ T36] audit: type=1400 audit(1770686217.967:998): avc: denied { execute } for pid=5886 comm="syz.0.1929" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.679608][ T478] usb 3-1: device descriptor read/64, error -71 [ 242.732197][ T12] ------------[ cut here ]------------ [ 242.737742][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 242.747820][ T12] Modules linked in: [ 242.751802][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 242.763418][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 242.773541][ T12] Workqueue: netns cleanup_net [ 242.778354][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 242.784410][ T12] Code: e8 41 3c db fc 4b 83 3c 3e 00 75 19 e8 e5 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 d7 70 83 fc 49 83 c7 08 eb c9 e8 cc 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 242.804180][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 242.810373][ T12] RAX: ffffffff85042c44 RBX: ffff888103f811c0 RCX: ffff888102652600 [ 242.818386][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103744000 [ 242.826722][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 242.834779][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 242.842807][ T12] R13: dffffc0000000000 R14: ffff888103744000 R15: 0000000000000000 [ 242.850848][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 242.859838][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.866459][ T12] CR2: 00007f0fccc17dac CR3: 000000012f680000 CR4: 00000000003526b0 [ 242.874507][ T12] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 242.882623][ T12] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 242.890675][ T12] Call Trace: [ 242.893980][ T12] [ 242.896947][ T12] cleanup_net+0x6c0/0xc90 [ 242.901491][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 242.906468][ T12] ? __schedule+0x1357/0x1ea0 [ 242.911237][ T12] ? kick_pool+0xb9/0x550 [ 242.915627][ T12] process_scheduled_works+0x7d4/0x1020 [ 242.921242][ T12] worker_thread+0xc70/0x10b0 [ 242.925963][ T12] kthread+0x2c9/0x370 [ 242.930089][ T12] ? __cfi_worker_thread+0x10/0x10 [ 242.935241][ T12] ? __cfi_kthread+0x10/0x10 [ 242.939886][ T12] ret_from_fork+0x67/0xa0 [ 242.944335][ T12] ? __cfi_kthread+0x10/0x10 [ 242.948972][ T12] ret_from_fork_asm+0x1a/0x30 [ 242.953799][ T12] [ 242.956849][ T12] ---[ end trace 0000000000000000 ]--- [ 242.963115][ T12] ------------[ cut here ]------------ [ 242.968621][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 242.978748][ T12] Modules linked in: [ 242.982808][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 242.995976][ T12] Tainted: [W]=WARN [ 242.999893][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 243.010067][ T12] Workqueue: netns cleanup_net [ 243.014864][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 243.020994][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 82 70 83 fc 49 83 c7 08 eb c5 e8 77 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 70 83 fc 5b 41 5c 41 5e 41 [ 243.040675][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 243.046760][ T12] RAX: ffffffff85042c99 RBX: ffff888103744800 RCX: ffff888102652600 [ 243.054871][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103744810 [ 243.062968][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 243.071003][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 243.079013][ T12] R13: dffffc0000000000 R14: ffff888103744000 R15: 0000000000000010 [ 243.087047][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 243.096036][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.102671][ T12] CR2: 00007f0fccc17dac CR3: 000000012f680000 CR4: 00000000003526b0 [ 243.110709][ T12] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 243.118697][ T12] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 243.126735][ T12] Call Trace: [ 243.130067][ T12] [ 243.133025][ T12] cleanup_net+0x6c0/0xc90 [ 243.137462][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 243.142500][ T12] ? __schedule+0x1357/0x1ea0 [ 243.147205][ T12] ? kick_pool+0xb9/0x550 [ 243.151587][ T12] process_scheduled_works+0x7d4/0x1020 [ 243.157179][ T12] worker_thread+0xc70/0x10b0 [ 243.161925][ T12] kthread+0x2c9/0x370 [ 243.166024][ T12] ? __cfi_worker_thread+0x10/0x10 [ 243.171191][ T12] ? __cfi_kthread+0x10/0x10 [ 243.175810][ T12] ret_from_fork+0x67/0xa0 [ 243.180273][ T12] ? __cfi_kthread+0x10/0x10 [ 243.184885][ T12] ret_from_fork_asm+0x1a/0x30 [ 243.189705][ T12] [ 243.192737][ T12] ---[ end trace 0000000000000000 ]--- [ 243.211110][ T12] ------------[ cut here ]------------ [ 243.216586][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310 [ 243.226082][ T12] Modules linked in: [ 243.230016][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 243.243113][ T12] Tainted: [W]=WARN [ 243.246948][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 243.257051][ T12] Workqueue: netns cleanup_net [ 243.261894][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 243.267461][ T12] Code: 3c 20 00 74 08 48 89 df e8 7f 05 f6 fc 48 8b 3b e8 17 44 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 3a 9e fc <0f> 0b e9 b0 fd ff ff e8 06 3a 9e fc 0f 0b e9 18 fe ff ff e8 fa 39 [ 243.287206][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 243.293340][ T12] RAX: ffffffff84e962fe RBX: ffff888103f811c0 RCX: ffff888102652600 [ 243.301403][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888102652600 [ 243.309409][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d351c7 R09: 1ffffffff0fa6a38 [ 243.317456][ T12] R10: dffffc0000000000 R11: fffffbfff0fa6a39 R12: 1ffffffff0fa6788 [ 243.318708][ T31] usb 4-1: USB disconnect, device number 112 [ 243.325585][ T12] R13: dffffc0000000000 R14: ffff888103f81dc0 R15: dffffc0000000000 [ 243.339700][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 243.348671][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.355317][ T12] CR2: 00007f70bac2cfe0 CR3: 000000013da5c000 CR4: 00000000003526b0 [ 243.363342][ T12] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 243.367817][ T478] usb 3-1: device descriptor read/64, error -71 [ 243.371368][ T12] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 243.371387][ T12] Call Trace: [ 243.371396][ T12] [ 243.371406][ T12] xfrm_net_exit+0x31/0x80 [ 243.396440][ T12] cleanup_net+0x6c0/0xc90 [ 243.400923][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 243.405877][ T12] ? __schedule+0x1357/0x1ea0 [ 243.410603][ T12] ? kick_pool+0xb9/0x550 [ 243.414966][ T12] process_scheduled_works+0x7d4/0x1020 [ 243.420589][ T12] worker_thread+0xc70/0x10b0 [ 243.425307][ T12] kthread+0x2c9/0x370 [ 243.429377][ T12] ? __cfi_worker_thread+0x10/0x10 [ 243.434543][ T12] ? __cfi_kthread+0x10/0x10 [ 243.439169][ T12] ret_from_fork+0x67/0xa0 [ 243.443640][ T12] ? __cfi_kthread+0x10/0x10 [ 243.448261][ T12] ret_from_fork_asm+0x1a/0x30 [ 243.453086][ T12] [ 243.456130][ T12] ---[ end trace 0000000000000000 ]--- [ 243.629622][ T478] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 243.759590][ T478] usb 3-1: device descriptor read/64, error -71 [ 243.999683][ T478] usb 3-1: device descriptor read/64, error -71 [ 244.109879][ T478] usb usb3-port1: attempt power cycle [ 244.449618][ T478] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 244.470871][ T478] usb 3-1: device descriptor read/8, error -71 [ 244.600846][ T478] usb 3-1: device descriptor read/8, error -71 [ 244.839716][ T478] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 244.860731][ T478] usb 3-1: device descriptor read/8, error -71 [ 244.990880][ T478] usb 3-1: device descriptor read/8, error -71 [ 245.099721][ T478] usb usb3-port1: unable to enumerate USB device