last executing test programs: 6.553777334s ago: executing program 1 (id=157): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) r11 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0xc, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000340)={0x2e, 0x16, 0x0, r12, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x3, 0x812, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r14, r15, &(0x7f0000000400)={0x0, 0xc1d6, 0x2, 0x0, 0x109, 0x0, r6}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc51c, 0x10000, 0x1, 0x3bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb98d, 0x4000, 0x2, 0x273, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa873, 0x80000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11d4, 0x2000, 0x2, 0x14}}], 0x4, &(0x7f0000001a40)={0x2e, 0x2b, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, r13, '\x00', {0x1, 0x51a, 0x0, &(0x7f0000000a40)=@buf_max_buf="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"}}, &(0x7f0000001ac0)) r16 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r19 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r16, 0x2) keyctl$reject(0x13, 0x0, 0x9, 0x204, 0xfffffffffffffff9) syz_ublk_setup_queues(r19, r18, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x4000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400006, 0x8, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x2002, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5067, 0x400, 0x3, 0x800001fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x12, 0x0, r19, 0xc0107526, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r17, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, 0x0) 6.229046451s ago: executing program 0 (id=160): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) 5.391861631s ago: executing program 1 (id=162): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000000)={0x3, 0xffffffff, 0x8a, 0x2, 0x0, 0xb16, 0x40, 0x4, 0xa5, 0x6, 0x0, 0x203, 0x8, 0x8001}) 4.849578644s ago: executing program 3 (id=166): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x20000002, 0xffffeffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x6, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40850) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 4.733745787s ago: executing program 3 (id=167): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffff7038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004800) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x942, 0xfa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x7d, 0xc4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) setresuid(0xee00, 0xee00, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x1000) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x20, 0x21, 0x4c, {0x4c, 0xc, "4c604a89d37e7857cac1c5a8d8f435a9175518e58b4cfddad168ee69903fbd57f1c4e0c2861a117696d1bb6908525efc7bea8689d025076bd72d1b280cfba81c8fd91008b3c984d06e4e"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000380)=ANY=[@ANYBLOB="06220a00010076ba9791a82682686487"], &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb6, 0x2, 0x1, {0x22, 0xba9}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x6c63116c5ec520e3, 0x466dbd76fb99e5, 0x2e, "c030772c257741adc16b50e447456db8c6df33cdb653a567d4ecd8ac4b73f6b5803dc6cc1595581bf435aa21d4be"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0x34, "309f0005a094cdfe6ee36723cb6bacaeb7aeb92264ed072230a0d628cf66a20686fc66e51707dbba20af183ac03a1234bd117040"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x8}}) 4.009680214s ago: executing program 2 (id=169): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in=@multicast1, @in=@remote, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x60, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffdfffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x4, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) 4.004494324s ago: executing program 2 (id=170): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x28, 0x5, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) setsockopt$sock_linger(r1, 0x28, 0x3c, 0x0, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000000000)=""/113, 0x71}, {&(0x7f0000002200)=""/4100, 0x1004}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000cc0)=""/246, 0xf6}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f00000004c0)=""/39, 0x27}], 0xa}, 0x72}, {{0x0, 0x0, 0x0}, 0x803}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x1}], 0x8, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x21, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) 3.968019065s ago: executing program 2 (id=171): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) r11 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0xc, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000340)={0x2e, 0x16, 0x0, r12, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x3, 0x812, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r14, r15, &(0x7f0000000400)={0x0, 0xc1d6, 0x2, 0x0, 0x109, 0x0, r6}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc51c, 0x10000, 0x1, 0x3bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb98d, 0x4000, 0x2, 0x273, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa873, 0x80000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11d4, 0x2000, 0x2, 0x14}}], 0x4, &(0x7f0000001a40)={0x2e, 0x2b, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, r13, '\x00', {0x1, 0x51a, 0x0, &(0x7f0000000a40)=@buf_max_buf="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"}}, &(0x7f0000001ac0)) r16 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r19 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r16, 0x2) keyctl$reject(0x13, 0x0, 0x9, 0x204, 0xfffffffffffffff9) syz_ublk_setup_queues(r19, r18, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x4000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400006, 0x8, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x2002, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5067, 0x400, 0x3, 0x800001fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x12, 0x0, r19, 0xc0107526, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r17, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, 0x0) 3.186269064s ago: executing program 0 (id=172): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0x1, 0x70bd29, 0x25cfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3.186035214s ago: executing program 0 (id=173): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "c4a38b10"}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) 3.184833624s ago: executing program 3 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = userfaultfd(0x801) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_clone(0x8800311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000020c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff4000/0x1000)=nil, 0x1000}}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x38, {"b9064d564bb82000000031d20f30b9024d564bb80b10000031d20f30fb48c7c000100400488b00"}}], 0x38}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TIOCCONS(r5, 0x541d) 2.811257323s ago: executing program 2 (id=175): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x20000002, 0xffffeffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x6, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40850) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 2.701508216s ago: executing program 3 (id=176): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000180)={{[0x6, 0xc, 0x2, 0xfffffff8]}, 0x0, 0x3, 0x4, 0x0, &(0x7f00000000c0)=[{{@align=0x1, {0x3, 0x7f, 0x4, 0x5}}, 0xffff0001, 0x0, '$\x00'}, {{@align=0x8, {0x0, 0x6, 0xbf6, 0x4}}, 0x6, 0x0, '.\'/\x00'}, {{@_ha_fsid={[0x1]}, {0x5, 0x8, 0xbb, 0x226}}, 0x0, 0x0, '/dev/net/tun\x00'}, {{@_ha_fsid={[0xe0, 0x4]}, {0x3, 0x6, 0x208, 0x10}}, 0x2, 0x0, '(6-\x00'}]}) r2 = memfd_secret(0x0) r3 = openat$cgroup_pressure(r2, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000200)=0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffffffc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000640)={"e91592ea8e765cb092c56d84aa2bcd1e", r4, r5, {0x1, 0x20000}, {0x40, 0x2}, 0x2, [0x6, 0xffffffffffff8000, 0xd500, 0x8001, 0x0, 0x80000001, 0x100000001, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x0, 0x8001, 0x6, 0x2, 0x8]}) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000740)={@initdev, @multicast2, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r6, 0x4, 0x7, 0xd, 0xffffffab, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8000, 0x10, 0xfffffffb, 0x9}}) ioctl$VT_WAITACTIVE(r1, 0x5607) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x1}, 0x6) r7 = syz_open_dev$evdev(&(0x7f00000008c0), 0x0, 0x34841) ioctl$NILFS_IOCTL_RESIZE(r7, 0x40086e8b, &(0x7f0000000900)=0x54e745) socket$inet6(0xa, 0x2, 0x200000) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000980)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000940)={0xa0, 0x7}}) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f00000009c0)) r9 = creat(&(0x7f0000000a00)='./file0\x00', 0x10) ioctl$USBDEVFS_RESET(r9, 0x5514) write$selinux_context(0xffffffffffffffff, &(0x7f0000000a40)='system_u:object_r:random_device_t:s0\x00', 0x25) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000000a80)={0x2b, 0x6, 0x0, {0x306, 0x6, 0x2, 0x0, '$\x00'}}, 0x2b) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000ac0)=0x2d, &(0x7f0000000b00)=0x4) ioctl$TIOCNOTTY(r2, 0x5422) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) 2.701040876s ago: executing program 3 (id=177): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000380)='syz1\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close(r1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000002c0)='^\x06f,()^{!@\xb5)[\x00\xa5\xa8\x03|\xd6y\x9bT\xf2-\xc8\x12v+A,\xad\xf6u i\xd4\xb7 \x18\xa8z\x9a\xad2E\x928\xee\t`\x1e\x9a\xf2p\xd7\x98Os $\xca*\xb2nK\xf7h$\xdf\x95C\xe7{\xbfG\x18\xa7\x13s\xe2\xe0\x84<\x9dW\xa7\xab\xf5\x8dB\xbf\x1c\x82\x0e\x8fW\xa8\xf6\xda\xfc\"\xb4\xd2\x947\xa1\x8chz2\xb2\tYtS\xda\xe5\x05P^\x11\xc3<\xcb\xa14\xb9\x7f\xf1\xc5uDmK\x00\xab\xed\x06\xb9\x97\x9d\x86 \xedK\xdd\x86\xc46\x05\xffLvrIK-\xdb.\xe5\x03\x12\xad\xd2\x1c\x9c4u\xba~Q\xb0\xb8\x04U/\a\x17\x18-', 0x20001, &(0x7f0000000040)={@_ha_fsid={[0x3]}, {0x7c, 0xf000, 0x7, 0x2}}, 0x933, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000001c0)=""/138, &(0x7f0000000280)=0x8a) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)="00000000007d19643f83c7d0b9c7b038a62ad9941e9a2c0267b95f278d2def44c77fc3011d4936375f5cad58860fb68995ced9f42748", 0x36) 2.693514676s ago: executing program 3 (id=178): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', 0x0, 0xf0ff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000800)=""/4096, 0x1000, 0x40010000, &(0x7f0000001800)=@file={0x0, 'my_sys\x00'}, 0x6e) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 2.564023409s ago: executing program 2 (id=179): r0 = open(&(0x7f0000000380)='./file0\x00', 0xe6242, 0x4ebfac6bbaf7949) fcntl$lock(r0, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c00028005000100000000003c0000802c00018014000300fe80000000000000000000000000000914000400fe8000000000000000000000000000aa0c000280050001000000000008000740000003fc44000d0dec000500fe88000000000000000000000000010108000200e00000010800020064010100080002006401010014000400fc00"/216, @ANYRES16, @ANYBLOB="5bb0cc1944d6e24c864c40c42f6ce311beb17d8ce1e1d44a58ecc603bef44e6e73a83a1d27e7411762e1e2ce59d841f42c44b38df53b0e25702bacb633305e3896071f2d2013175fd6797d736a06cd056c87dbf0315e52c780706da568683bd955f11f2795736a320c1b6224a512baa29b2602d7e43f21f30b41e6dc323cc094b13fa8dcb65931a1bf5ad56fa17a0a80269f3fad07c19ba5d8f698c4cb4ef4596495be93a96a387bfac12afffaab0371166a93d361be98af3a5a25baba8bfb989a547ba24d0b78b8f2f016ada0c860d4458428f20053929f2d8d75d1ad9a8ac0", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0xd8}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) 2.497716901s ago: executing program 2 (id=180): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) 2.365578113s ago: executing program 1 (id=181): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = epoll_create(0x3) ppoll(&(0x7f0000000200)=[{r3, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000000c0)={0x0, 0xd, [0x3, 0x7, 0xaf9, 0x9, 0x91, 0x4]}) 2.342095894s ago: executing program 1 (id=182): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = userfaultfd(0x80801) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="080086dd00052800040000"], 0xfdef) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) sendto$inet6(r0, 0x0, 0x0, 0x2404c880, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @loopback, 0x401}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="a7", 0x1}], 0x1}}], 0x1, 0x4048484) socket$inet6(0xa, 0x800000000000002, 0x0) (async) userfaultfd(0x80801) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="080086dd00052800040000"], 0xfdef) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) (async) sendto$inet6(r0, 0x0, 0x0, 0x2404c880, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @loopback, 0x401}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="a7", 0x1}], 0x1}}], 0x1, 0x4048484) (async) 2.245669496s ago: executing program 1 (id=183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffff7038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004800) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x942, 0xfa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x7d, 0xc4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) setresuid(0xee00, 0xee00, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x20, 0x21, 0x4c, {0x4c, 0xc, "4c604a89d37e7857cac1c5a8d8f435a9175518e58b4cfddad168ee69903fbd57f1c4e0c2861a117696d1bb6908525efc7bea8689d025076bd72d1b280cfba81c8fd91008b3c984d06e4e"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000380)=ANY=[@ANYBLOB="06220a00010076ba9791a82682686487"], &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb6, 0x2, 0x1, {0x22, 0xba9}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x6c63116c5ec520e3, 0x466dbd76fb99e5, 0x2e, "c030772c257741adc16b50e447456db8c6df33cdb653a567d4ecd8ac4b73f6b5803dc6cc1595581bf435aa21d4be"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0x34, "309f0005a094cdfe6ee36723cb6bacaeb7aeb92264ed072230a0d628cf66a20686fc66e51707dbba20af183ac03a1234bd117040"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x8}}) 670.061294ms ago: executing program 1 (id=184): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) r11 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0xc, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000340)={0x2e, 0x16, 0x0, r12, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x3, 0x812, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r14, r15, &(0x7f0000000400)={0x0, 0xc1d6, 0x2, 0x0, 0x109, 0x0, r6}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc51c, 0x10000, 0x1, 0x3bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb98d, 0x4000, 0x2, 0x273, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa873, 0x80000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11d4, 0x2000, 0x2, 0x14}}], 0x4, &(0x7f0000001a40)={0x2e, 0x2b, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, r13, '\x00', {0x1, 0x51a, 0x0, &(0x7f0000000a40)=@buf_max_buf="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"}}, &(0x7f0000001ac0)) r16 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r19 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r16, 0x2) keyctl$reject(0x13, 0x0, 0x9, 0x204, 0xfffffffffffffff9) syz_ublk_setup_queues(r19, r18, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x4000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400006, 0x8, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x2002, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5067, 0x400, 0x3, 0x800001fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x12, 0x0, r19, 0xc0107526, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r17, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, 0x0) 169.854576ms ago: executing program 0 (id=185): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000340)={0x8, 0x0, [{0x284, 0x0, 0x100000000}, {0x48d, 0x0, 0x278}, {0x91f, 0x0, 0x9}, {0x873, 0x0, 0x8}, {0x20f, 0x0, 0x3}, {0xab6, 0x0, 0x3}, {0x48a, 0x0, 0x3ff}, {0x335, 0x0, 0x3}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, 0x0, 0x0) unshare(0x42000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') read$ptp(r7, &(0x7f0000000040)=""/123, 0x7b) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x363, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x5, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x339}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x800003, 0xffffffff}}], 0x1, 0x0, 0x0) 273.59µs ago: executing program 0 (id=186): syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000380)='syz1\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close(r1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000002c0)='^\x06f,()^{!@\xb5)[\x00\xa5\xa8\x03|\xd6y\x9bT\xf2-\xc8\x12v+A,\xad\xf6u i\xd4\xb7 \x18\xa8z\x9a\xad2E\x928\xee\t`\x1e\x9a\xf2p\xd7\x98Os $\xca*\xb2nK\xf7h$\xdf\x95C\xe7{\xbfG\x18\xa7\x13s\xe2\xe0\x84<\x9dW\xa7\xab\xf5\x8dB\xbf\x1c\x82\x0e\x8fW\xa8\xf6\xda\xfc\"\xb4\xd2\x947\xa1\x8chz2\xb2\tYtS\xda\xe5\x05P^\x11\xc3<\xcb\xa14\xb9\x7f\xf1\xc5uDmK\x00\xab\xed\x06\xb9\x97\x9d\x86 \xedK\xdd\x86\xc46\x05\xffLvrIK-\xdb.\xe5\x03\x12\xad\xd2\x1c\x9c4u\xba~Q\xb0\xb8\x04U/\a\x17\x18-', 0x20001, &(0x7f0000000040)={@_ha_fsid={[0x3]}, {0x7c, 0xf000, 0x7, 0x2}}, 0x933, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000001c0)=""/138, &(0x7f0000000280)=0x8a) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)="00000000007d19643f83c7d0b9c7b038a62ad9941e9a2c0267b95f278d2def44c77fc3011d4936375f5cad58860fb68995ced9f42748", 0x36) 0s ago: executing program 0 (id=187): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) unshare(0x28000600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x4b, 0x7, 0x7, {0xb, @sctp_ip4_spec={@multicast1, @private=0xa010101, 0x4e21, 0x4a20}, {0x0, @remote, 0x56bd, 0xf8d, [0xfffffffc]}, @udp_ip4_spec={@private=0xa010100, @private=0xa010102, 0x4e21, 0x4e21, 0xf2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x2, 0x3524, [0xffffffff, 0x4]}, 0xffffffffffffffff, 0xa}}}) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000280)={0x0, 0xf5b8, 0x10, 0x1, 0x215, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b8, 0x2, 0x3, 0xf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b4f, 0x4000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f38, 0x1, 0x3, 0x221, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5df, 0x200, 0x2, 0x2bd, 0x0, r2}}], 0x4, &(0x7f0000001dc0)={0x2e, 0xc, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff9}, 0x0, r7, '\x00', {0x1, 0x362, 0x0, 0x0}}, &(0x7f0000001e40)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 28.686612][ T36] audit: type=1400 audit(1785465707.270:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.690753][ T287] cgroup: Unknown subsys name 'net' [ 28.709308][ T36] audit: type=1400 audit(1785465707.270:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.736942][ T36] audit: type=1400 audit(1785465707.300:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.737306][ T287] cgroup: Unknown subsys name 'devices' [ 28.864639][ T287] cgroup: Unknown subsys name 'hugetlb' [ 28.870541][ T287] cgroup: Unknown subsys name 'rlimit' [ 28.965792][ T36] audit: type=1400 audit(1785465707.550:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.989613][ T36] audit: type=1400 audit(1785465707.550:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.014749][ T36] audit: type=1400 audit(1785465707.550:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.045869][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.054850][ T36] audit: type=1400 audit(1785465707.640:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.080861][ T36] audit: type=1400 audit(1785465707.640:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.107885][ T36] audit: type=1400 audit(1785465707.700:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.134625][ T36] audit: type=1400 audit(1785465707.700:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.135926][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.450290][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.457706][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.465563][ T294] bridge_slave_0: entered allmulticast mode [ 30.472120][ T294] bridge_slave_0: entered promiscuous mode [ 30.480186][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.487548][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.494715][ T294] bridge_slave_1: entered allmulticast mode [ 30.501002][ T294] bridge_slave_1: entered promiscuous mode [ 30.595298][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.602660][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.609894][ T297] bridge_slave_0: entered allmulticast mode [ 30.616702][ T297] bridge_slave_0: entered promiscuous mode [ 30.624739][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.631955][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.639139][ T297] bridge_slave_1: entered allmulticast mode [ 30.645760][ T297] bridge_slave_1: entered promiscuous mode [ 30.687522][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.695193][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.702748][ T298] bridge_slave_0: entered allmulticast mode [ 30.709157][ T298] bridge_slave_0: entered promiscuous mode [ 30.715996][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.723103][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.730384][ T298] bridge_slave_1: entered allmulticast mode [ 30.736892][ T298] bridge_slave_1: entered promiscuous mode [ 30.770047][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.777181][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.784473][ T295] bridge_slave_0: entered allmulticast mode [ 30.791036][ T295] bridge_slave_0: entered promiscuous mode [ 30.798224][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.805427][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.812828][ T295] bridge_slave_1: entered allmulticast mode [ 30.819189][ T295] bridge_slave_1: entered promiscuous mode [ 30.921047][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.928161][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.936125][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.943417][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.987123][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.994248][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.001754][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.008845][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.033899][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.041015][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.048538][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.055695][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.065075][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.072181][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.079517][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.086868][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.104597][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.112276][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.121617][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.129374][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.137783][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.145067][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.152458][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.159874][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.170181][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.177305][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.199149][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.206282][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.234396][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.241766][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.250448][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.257529][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.275788][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.283138][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.314748][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.323317][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.333142][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.340460][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.349111][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.356336][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.382293][ T294] veth0_vlan: entered promiscuous mode [ 31.412816][ T294] veth1_macvtap: entered promiscuous mode [ 31.429980][ T297] veth0_vlan: entered promiscuous mode [ 31.436739][ T295] veth0_vlan: entered promiscuous mode [ 31.448257][ T298] veth0_vlan: entered promiscuous mode [ 31.467307][ T297] veth1_macvtap: entered promiscuous mode [ 31.490901][ T298] veth1_macvtap: entered promiscuous mode [ 31.503737][ T295] veth1_macvtap: entered promiscuous mode [ 31.535994][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.852052][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.872667][ T322] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.882447][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.932009][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.002342][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 32.009245][ T10] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 32.018292][ T10] usb 2-1: config 0 has no interface number 0 [ 32.024523][ T10] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 32.033726][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.042120][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 32.047409][ T322] usb 3-1: Using ep0 maxpacket: 32 [ 32.054106][ T10] usb 2-1: config 0 descriptor?? [ 32.062240][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.073728][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.082227][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 32.085457][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.100009][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.109869][ T322] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 32.119175][ T67] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 32.121484][ T330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.128515][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.145757][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.150328][ T330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.164039][ T67] usb 1-1: config 0 descriptor?? [ 32.171341][ T322] usb 3-1: config 0 descriptor?? [ 32.182642][ T67] hub 1-1:0.0: USB hub found [ 32.187841][ T322] hub 3-1:0.0: USB hub found [ 32.197888][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.210023][ T312] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 32.217789][ T312] usb 4-1: can't read configurations, error -71 [ 32.380634][ T67] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 32.388745][ T322] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 32.398555][ T322] usbhid 3-1:0.0: can't add hid device: -71 [ 32.405091][ T322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.442645][ T322] usb 3-1: USB disconnect, device number 2 [ 32.724923][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.783588][ T320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.792777][ T320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.806048][ T67] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 32.823766][ T67] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 32.863340][ T67] usb 2-1: USB disconnect, device number 2 [ 33.142140][ T322] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.162185][ T46] usb 1-1: USB disconnect, device number 2 [ 33.292039][ T322] usb 3-1: Using ep0 maxpacket: 16 [ 33.299357][ T322] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 33.308518][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.317462][ T322] usb 3-1: config 0 descriptor?? [ 33.332247][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.399864][ T346] kvm: kvm [345]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 33.481958][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 33.492804][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.504362][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.514234][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.525796][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.536321][ T312] usb 4-1: config 0 descriptor?? [ 33.542710][ T312] hub 4-1:0.0: USB hub found [ 33.736566][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 33.736586][ T36] audit: type=1400 audit(1785465712.320:130): avc: denied { sqpoll } for pid=339 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.765795][ T312] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 33.774239][ T322] hid (null): bogus close delimiter [ 33.781376][ T322] uclogic 0003:5543:0042.0002: unknown main item tag 0x6 [ 33.802032][ T322] uclogic 0003:5543:0042.0002: bogus close delimiter [ 33.808963][ T322] uclogic 0003:5543:0042.0002: item 0 0 2 10 parsing failed [ 33.816864][ T322] uclogic 0003:5543:0042.0002: parse failed [ 33.823040][ T322] uclogic 0003:5543:0042.0002: probe with driver uclogic failed with error -22 [ 33.942149][ T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.969565][ T36] audit: type=1400 audit(1785465712.550:131): avc: denied { create } for pid=339 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.984834][ T332] usb 3-1: USB disconnect, device number 3 [ 34.032070][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.091951][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 34.098798][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.109903][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.120046][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.129223][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.138073][ T46] usb 1-1: config 0 descriptor?? [ 34.144285][ T46] hub 1-1:0.0: USB hub found [ 34.167277][ T344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.175915][ T344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.182097][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 34.190353][ T312] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 34.199941][ T312] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 34.211859][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 34.220157][ T31] usb 2-1: config 0 has no interface number 0 [ 34.228025][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 34.240001][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 34.250194][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.258789][ T31] usb 2-1: Product: syz [ 34.263310][ T31] usb 2-1: Manufacturer: syz [ 34.268003][ T31] usb 2-1: SerialNumber: syz [ 34.275679][ T31] usb 2-1: config 0 descriptor?? [ 34.281041][ T361] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 34.441943][ T322] usb 4-1: USB disconnect, device number 4 [ 34.474455][ T46] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 34.487164][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 34.490084][ T361] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 34.494228][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 34.522471][ T46] usb 1-1: USB disconnect, device number 3 [ 34.710644][ T36] audit: type=1326 audit(1785465713.290:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.1.16" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac6ab9e019 code=0x0 [ 34.711285][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.746108][ T31] asix 2-1:0.188: probe with driver asix failed with error -71 [ 34.755756][ T31] usb 2-1: USB disconnect, device number 3 [ 34.951995][ T322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.989775][ T36] audit: type=1400 audit(1785465713.570:133): avc: denied { read } for pid=373 comm="syz.0.19" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.011423][ T36] audit: type=1400 audit(1785465713.570:134): avc: denied { open } for pid=373 comm="syz.0.19" path="net:[4026532402]" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.095414][ T36] audit: type=1400 audit(1785465713.680:135): avc: denied { write } for pid=380 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.105997][ T381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.115290][ T36] audit: type=1400 audit(1785465713.680:136): avc: denied { nlmsg_write } for pid=380 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.115333][ T322] usb 3-1: Using ep0 maxpacket: 8 [ 35.121761][ T36] audit: type=1400 audit(1785465713.680:137): avc: denied { read } for pid=380 comm="syz.0.21" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.121793][ T36] audit: type=1400 audit(1785465713.680:138): avc: denied { open } for pid=380 comm="syz.0.21" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.180149][ T322] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 35.199123][ T36] audit: type=1400 audit(1785465713.680:139): avc: denied { ioctl } for pid=380 comm="syz.0.21" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.224923][ T322] usb 3-1: config 0 has no interface number 0 [ 35.241995][ T322] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 35.251188][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.270884][ T322] usb 3-1: config 0 descriptor?? [ 35.348543][ T392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 35.502010][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.532144][ T322] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.611993][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.652038][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 35.658741][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.670187][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.680005][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.689506][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.692068][ T322] usb 1-1: Using ep0 maxpacket: 32 [ 35.701804][ T31] usb 4-1: config 0 descriptor?? [ 35.709221][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.711582][ T31] hub 4-1:0.0: USB hub found [ 35.720749][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.735124][ T322] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.744271][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.753457][ T322] usb 1-1: config 0 descriptor?? [ 35.760004][ T322] hub 1-1:0.0: USB hub found [ 35.762689][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 35.771470][ T46] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 35.781168][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.790522][ T46] usb 2-1: config 0 descriptor?? [ 35.911471][ T31] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 35.960723][ T322] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 36.202392][ T46] hid (null): bogus close delimiter [ 36.211108][ T46] uclogic 0003:5543:0042.0004: unknown main item tag 0x6 [ 36.218667][ T46] uclogic 0003:5543:0042.0004: bogus close delimiter [ 36.225908][ T46] uclogic 0003:5543:0042.0004: item 0 0 2 10 parsing failed [ 36.233829][ T46] uclogic 0003:5543:0042.0004: parse failed [ 36.240138][ T46] uclogic 0003:5543:0042.0004: probe with driver uclogic failed with error -22 [ 36.312862][ T383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.322386][ T383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.333291][ T31] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 36.342123][ T31] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 36.362365][ T385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.371714][ T385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.384803][ T322] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 36.395713][ T322] hid-generic 0003:046D:C31C.0006: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 36.416531][ T67] usb 2-1: USB disconnect, device number 4 [ 36.444098][ T31] usb 3-1: USB disconnect, device number 4 [ 36.662875][ T31] usb 4-1: USB disconnect, device number 5 [ 36.742434][ T322] usb 1-1: USB disconnect, device number 4 [ 37.273826][ T417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=417 comm=syz.3.33 [ 37.632067][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.781996][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 37.787665][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.797533][ T31] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 37.805997][ T31] usb 1-1: config 0 has no interface number 0 [ 37.812155][ T31] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 37.822046][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.831147][ T31] usb 1-1: config 0 descriptor?? [ 37.941978][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 37.950213][ T46] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 37.959761][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.972428][ T46] usb 3-1: config 0 descriptor?? [ 38.039804][ T427] usb 1-1: USB disconnect, device number 5 [ 38.232035][ T322] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.352026][ T67] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.383284][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.392921][ T46] hid (null): bogus close delimiter [ 38.395242][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.409768][ T322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.412900][ T46] uclogic 0003:5543:0042.0007: unknown main item tag 0x6 [ 38.430414][ T322] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.439743][ T46] uclogic 0003:5543:0042.0007: bogus close delimiter [ 38.441772][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.452014][ T46] uclogic 0003:5543:0042.0007: item 0 0 2 10 parsing failed [ 38.462581][ T46] uclogic 0003:5543:0042.0007: parse failed [ 38.465747][ T322] usb 2-1: config 0 descriptor?? [ 38.468639][ T46] uclogic 0003:5543:0042.0007: probe with driver uclogic failed with error -22 [ 38.521963][ T67] usb 4-1: Using ep0 maxpacket: 32 [ 38.528179][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.539235][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.549105][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.558226][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.567364][ T67] usb 4-1: config 0 descriptor?? [ 38.575983][ T67] hub 4-1:0.0: USB hub found [ 38.609018][ T46] usb 3-1: USB disconnect, device number 5 [ 38.776694][ T67] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 38.882853][ T322] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 38.892444][ T322] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 39.177749][ T438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.187338][ T438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.197044][ T67] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 39.206053][ T67] hid-generic 0003:046D:C31C.0009: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 39.371972][ T322] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.502048][ T46] usb 4-1: USB disconnect, device number 6 [ 39.522131][ T322] usb 3-1: Using ep0 maxpacket: 32 [ 39.529301][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.540340][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.550188][ T322] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.559338][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.568388][ T322] usb 3-1: config 0 descriptor?? [ 39.575963][ T322] hub 3-1:0.0: USB hub found [ 39.776128][ T322] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 40.114216][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 40.114235][ T36] audit: type=1400 audit(1785465718.700:157): avc: denied { ioctl } for pid=446 comm="syz.3.44" path="socket:[4644]" dev="sockfs" ino=4644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.144866][ T36] audit: type=1400 audit(1785465718.700:158): avc: denied { read } for pid=446 comm="syz.3.44" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.175001][ T36] audit: type=1400 audit(1785465718.700:159): avc: denied { open } for pid=446 comm="syz.3.44" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.198651][ T36] audit: type=1400 audit(1785465718.700:160): avc: denied { ioctl } for pid=446 comm="syz.3.44" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.206783][ T444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.223470][ C0] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 40.228149][ T67] usb 2-1: USB disconnect, device number 5 [ 40.237841][ T444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.261417][ T322] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 40.271027][ T322] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 40.632097][ T322] usb 3-1: USB disconnect, device number 6 [ 41.067991][ T36] audit: type=1400 audit(1785465719.650:161): avc: denied { write } for pid=460 comm="syz.3.48" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.088809][ T36] audit: type=1400 audit(1785465719.650:162): avc: denied { create } for pid=460 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.108152][ T36] audit: type=1400 audit(1785465719.650:163): avc: denied { bind } for pid=460 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.139021][ T36] audit: type=1400 audit(1785465719.650:164): avc: denied { create } for pid=460 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.166445][ T36] audit: type=1400 audit(1785465719.650:165): avc: denied { write } for pid=460 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.186232][ T36] audit: type=1400 audit(1785465719.700:166): avc: denied { ioctl } for pid=460 comm="syz.3.48" path="socket:[4667]" dev="sockfs" ino=4667 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.461996][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.469829][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.502048][ T332] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 41.622018][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 41.627314][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 41.633931][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.644981][ T31] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 41.654130][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.662297][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.672675][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.682276][ T31] usb 3-1: config 0 descriptor?? [ 41.687429][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.695744][ T332] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 41.705434][ T46] usb 4-1: config 0 descriptor?? [ 41.710658][ T332] usb 2-1: config 0 has no interface number 0 [ 41.716964][ T332] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 41.729002][ T46] hub 4-1:0.0: USB hub found [ 41.734867][ T332] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 41.744216][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.752306][ T332] usb 2-1: Product: syz [ 41.756504][ T332] usb 2-1: Manufacturer: syz [ 41.761171][ T332] usb 2-1: SerialNumber: syz [ 41.767034][ T332] usb 2-1: config 0 descriptor?? [ 41.772405][ T474] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 41.782603][ T332] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1a:c1:bc:73:52:15 [ 41.933110][ T46] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 41.982510][ T9] usb 2-1: USB disconnect, device number 6 [ 41.991857][ T9] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 42.098755][ T31] hid (null): bogus close delimiter [ 42.113704][ T31] uclogic 0003:5543:0042.000B: unknown main item tag 0x6 [ 42.131148][ T31] uclogic 0003:5543:0042.000B: bogus close delimiter [ 42.146706][ T31] uclogic 0003:5543:0042.000B: item 0 0 2 10 parsing failed [ 42.165844][ T31] uclogic 0003:5543:0042.000B: parse failed [ 42.172446][ T31] uclogic 0003:5543:0042.000B: probe with driver uclogic failed with error -22 [ 42.313441][ T31] usb 3-1: USB disconnect, device number 7 [ 42.341006][ T470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.349764][ T470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.360540][ T46] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 42.369497][ T46] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 42.406509][ T518] capability: warning: `syz.0.58' uses deprecated v2 capabilities in a way that may be insecure [ 42.555041][ T531] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.835575][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.993166][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.004444][ T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 43.016709][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.025955][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.034035][ T46] usb 2-1: Product: syz [ 43.038297][ T46] usb 2-1: Manufacturer: syz [ 43.042953][ T46] usb 2-1: SerialNumber: syz [ 43.049891][ T46] cdc_mbim 2-1:1.0: skipping garbage [ 43.071981][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.221982][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 43.228257][ T31] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 43.236544][ T31] usb 3-1: config 0 has no interface number 0 [ 43.242868][ T31] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 43.252201][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.257541][ T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.263390][ T31] usb 3-1: config 0 descriptor?? [ 43.272188][ T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.282645][ T535] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 43.402621][ T9] usb 4-1: USB disconnect, device number 7 [ 43.494489][ T31] usb 3-1: USB disconnect, device number 8 [ 43.691675][ T46] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 43.698207][ T46] cdc_mbim 2-1:1.0: bind() failure [ 43.704331][ T46] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 43.711229][ T46] cdc_ncm 2-1:1.1: bind() failure [ 43.717556][ T46] usb 2-1: USB disconnect, device number 7 [ 44.024311][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.040386][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.117238][ T561] fuse: Bad value for 'fd' [ 44.123904][ T560] tun0: tun_chr_ioctl cmd 1074025675 [ 44.129241][ T560] tun0: persist enabled [ 44.133867][ T560] tun0: tun_chr_ioctl cmd 1074025675 [ 44.139191][ T560] tun0: persist enabled [ 44.312355][ T322] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 44.442006][ T326] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.449948][ T322] usb 4-1: device descriptor read/64, error -71 [ 44.512018][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.601955][ T326] usb 2-1: Using ep0 maxpacket: 16 [ 44.608796][ T326] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 44.618366][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.627141][ T326] usb 2-1: config 0 descriptor?? [ 44.661976][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 44.668764][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.677363][ T9] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 44.685603][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 44.694665][ T322] usb 4-1: device descriptor read/64, error -71 [ 44.701073][ T9] usb 3-1: config 4 has no interface number 0 [ 44.708746][ T9] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 44.717848][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.725904][ T9] usb 3-1: Product: syz [ 44.730119][ T9] usb 3-1: Manufacturer: syz [ 44.734857][ T9] usb 3-1: SerialNumber: syz [ 44.931977][ T322] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 44.946280][ T9] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 44.952961][ T9] uvcvideo 3-1:4.147: Entity type for entity Output 251 was not initialized! [ 44.963495][ T9] usb 3-1: Failed to create links for entity 251 [ 44.969988][ T9] usb 3-1: Failed to register entities (-22). [ 44.978394][ T9] usb 3-1: USB disconnect, device number 9 [ 45.036057][ T326] hid (null): bogus close delimiter [ 45.043343][ T326] uclogic 0003:5543:0042.000D: unknown main item tag 0x6 [ 45.051677][ T326] uclogic 0003:5543:0042.000D: bogus close delimiter [ 45.058956][ T326] uclogic 0003:5543:0042.000D: item 0 0 2 10 parsing failed [ 45.066602][ T322] usb 4-1: device descriptor read/64, error -71 [ 45.074061][ T326] uclogic 0003:5543:0042.000D: parse failed [ 45.080217][ T326] uclogic 0003:5543:0042.000D: probe with driver uclogic failed with error -22 [ 45.243376][ T31] usb 2-1: USB disconnect, device number 8 [ 45.321965][ T322] usb 4-1: device descriptor read/64, error -71 [ 45.432087][ T322] usb usb4-port1: attempt power cycle [ 45.701999][ T326] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.773836][ T322] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 45.802950][ T322] usb 4-1: device descriptor read/8, error -71 [ 45.852005][ T326] usb 3-1: Using ep0 maxpacket: 32 [ 45.858437][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.870117][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.879944][ T326] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.889120][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.898506][ T326] usb 3-1: config 0 descriptor?? [ 45.905343][ T326] hub 3-1:0.0: USB hub found [ 45.933166][ T322] usb 4-1: device descriptor read/8, error -71 [ 46.105291][ T326] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 46.171948][ T322] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 46.193103][ T322] usb 4-1: device descriptor read/8, error -71 [ 46.281674][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 46.281710][ T36] audit: type=1400 audit(1785465724.860:206): avc: denied { read write } for pid=572 comm="syz.1.76" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.311411][ T36] audit: type=1400 audit(1785465724.860:207): avc: denied { open } for pid=572 comm="syz.1.76" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.335488][ T322] usb 4-1: device descriptor read/8, error -71 [ 46.442124][ T322] usb usb4-port1: unable to enumerate USB device [ 46.512030][ T569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.520968][ T569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.530700][ T326] hid-generic 0003:046D:C31C.000E: unknown main item tag 0x0 [ 46.539581][ T326] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 47.166432][ T36] audit: type=1400 audit(1785465725.750:208): avc: denied { create } for pid=588 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 47.442014][ T332] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.562521][ T326] usb 3-1: USB disconnect, device number 10 [ 47.591975][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 47.598465][ T332] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 47.607876][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.616837][ T332] usb 4-1: config 0 descriptor?? [ 48.027959][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 48.034019][ T332] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 48.043770][ T332] usb 4-1: USB disconnect, device number 12 [ 48.086766][ T36] audit: type=1400 audit(1785465726.670:209): avc: denied { node_bind } for pid=598 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.117554][ T36] audit: type=1400 audit(1785465726.700:210): avc: denied { connect } for pid=600 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.130095][ T601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 48.147612][ T36] audit: type=1400 audit(1785465726.700:211): avc: denied { write } for pid=600 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.183916][ T36] audit: type=1400 audit(1785465726.770:212): avc: denied { mount } for pid=600 comm="syz.2.86" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.220993][ T36] audit: type=1400 audit(1785465726.800:213): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.296595][ T36] audit: type=1400 audit(1785465726.880:214): avc: denied { setattr } for pid=617 comm="syz.2.92" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 48.336794][ T36] audit: type=1400 audit(1785465726.920:215): avc: denied { mount } for pid=620 comm="syz.1.93" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 48.544971][ T632] tc_dump_action: action bad kind [ 48.570106][ T635] netlink: 228 bytes leftover after parsing attributes in process `syz.3.98'. [ 48.632938][ T332] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.802042][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 48.809093][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.820490][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.830443][ T332] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.839559][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.852060][ T332] usb 3-1: config 0 descriptor?? [ 48.858847][ T332] hub 3-1:0.0: USB hub found [ 49.058836][ T332] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 49.462924][ T332] hid-generic 0003:046D:C31C.000F: unknown main item tag 0x0 [ 49.481342][ T332] hid-generic 0003:046D:C31C.000F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 49.725087][ T659] fuse: Unknown parameter '0x000000000000000500000000000000000007' [ 49.982024][ T332] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 50.132008][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 50.138603][ T332] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 50.148069][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.157021][ T332] usb 4-1: config 0 descriptor?? [ 50.281822][ T670] process 'syz.1.108' launched './file0' with NULL argv: empty string added [ 50.492872][ T322] usb 3-1: USB disconnect, device number 11 [ 50.541994][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.568983][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 50.576399][ T332] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 50.586809][ T332] usb 4-1: USB disconnect, device number 13 [ 50.672077][ T46] usb 2-1: device descriptor read/64, error -71 [ 50.911957][ T46] usb 2-1: device descriptor read/64, error -71 [ 51.058623][ T689] capability: warning: `syz.2.116' uses 32-bit capabilities (legacy support in use) [ 51.094364][ T693] netlink: 'syz.2.117': attribute type 49 has an invalid length. [ 51.151992][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.292083][ T46] usb 2-1: device descriptor read/64, error -71 [ 51.372015][ T322] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 51.522014][ T322] usb 4-1: Using ep0 maxpacket: 32 [ 51.528519][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.539685][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.549739][ T322] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.552129][ T46] usb 2-1: device descriptor read/64, error -71 [ 51.559268][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.574612][ T322] usb 4-1: config 0 descriptor?? [ 51.581161][ T322] hub 4-1:0.0: USB hub found [ 51.672102][ T46] usb usb2-port1: attempt power cycle [ 51.782256][ T322] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 51.921704][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 51.921728][ T36] audit: type=1400 audit(1785465730.500:228): avc: denied { write } for pid=707 comm="syz.2.123" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.952136][ T36] audit: type=1400 audit(1785465730.500:229): avc: denied { open } for pid=707 comm="syz.2.123" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 52.011973][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 52.033090][ T46] usb 2-1: device descriptor read/8, error -71 [ 52.113222][ T36] audit: type=1400 audit(1785465730.700:230): avc: denied { unmount } for pid=713 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.148646][ T716] fuse: Unknown parameter 'gro]00000000000000000000' [ 52.163458][ T46] usb 2-1: device descriptor read/8, error -71 [ 52.192399][ T322] usbhid 4-1:0.0: can't add hid device: -71 [ 52.198416][ T322] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.222351][ T322] usb 4-1: USB disconnect, device number 14 [ 52.411984][ T566] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.411994][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.453399][ T46] usb 2-1: device descriptor read/8, error -71 [ 52.562009][ T566] usb 3-1: Using ep0 maxpacket: 16 [ 52.568442][ T566] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 52.577584][ T566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.584141][ T46] usb 2-1: device descriptor read/8, error -71 [ 52.588906][ T566] usb 3-1: config 0 descriptor?? [ 52.702183][ T46] usb usb2-port1: unable to enumerate USB device [ 53.007808][ T566] usbhid 3-1:0.0: can't add hid device: -71 [ 53.013910][ T566] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 53.023588][ T566] usb 3-1: USB disconnect, device number 12 [ 53.357321][ T36] audit: type=1400 audit(1785465731.940:231): avc: denied { map } for pid=728 comm="syz.1.131" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.363691][ T729] SELinux: failed to load policy [ 53.381173][ T36] audit: type=1400 audit(1785465731.950:232): avc: denied { load_policy } for pid=728 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.464562][ T36] audit: type=1400 audit(1785465732.050:233): avc: denied { create } for pid=730 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.487008][ T36] audit: type=1400 audit(1785465732.050:234): avc: denied { setopt } for pid=730 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.519986][ T36] audit: type=1400 audit(1785465732.100:235): avc: denied { read } for pid=734 comm="syz.1.133" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.812072][ T326] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 53.962023][ T326] usb 2-1: Using ep0 maxpacket: 32 [ 53.962029][ T46] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.976432][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.988057][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.998052][ T326] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.007146][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.016728][ T326] usb 2-1: config 0 descriptor?? [ 54.024181][ T326] hub 2-1:0.0: USB hub found [ 54.069104][ T36] audit: type=1400 audit(1785465732.650:236): avc: denied { map } for pid=746 comm="syz.0.138" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.077484][ T747] Zero length message leads to an empty skb [ 54.099275][ T46] usb 3-1: device descriptor read/64, error -71 [ 54.224036][ T326] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 54.341968][ T46] usb 3-1: device descriptor read/64, error -71 [ 54.581990][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 54.627122][ T326] usbhid 2-1:0.0: can't add hid device: -71 [ 54.633196][ T326] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 54.662388][ T326] usb 2-1: USB disconnect, device number 13 [ 54.712063][ T46] usb 3-1: device descriptor read/64, error -71 [ 54.952032][ T46] usb 3-1: device descriptor read/64, error -71 [ 55.062197][ T46] usb usb3-port1: attempt power cycle [ 55.340732][ T36] audit: type=1400 audit(1785465733.920:237): avc: denied { accept } for pid=762 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 55.412015][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 55.443111][ T46] usb 3-1: device descriptor read/8, error -71 [ 55.573095][ T46] usb 3-1: device descriptor read/8, error -71 [ 55.802019][ T326] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 55.812334][ T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.833106][ T46] usb 3-1: device descriptor read/8, error -71 [ 55.927277][ T524] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.952078][ T326] usb 2-1: Using ep0 maxpacket: 8 [ 55.958633][ T326] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 55.967040][ T326] usb 2-1: config 0 has no interface number 0 [ 55.973342][ T326] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 55.982860][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.984480][ T46] usb 3-1: device descriptor read/8, error -71 [ 55.997994][ T326] usb 2-1: config 0 descriptor?? [ 56.102141][ T46] usb usb3-port1: unable to enumerate USB device [ 56.206218][ T326] usb 2-1: USB disconnect, device number 14 [ 56.742082][ T785] lo: entered promiscuous mode [ 56.759845][ T787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'. [ 56.800848][ T782] lo: left promiscuous mode [ 57.132006][ T326] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 57.292059][ T326] usb 3-1: Using ep0 maxpacket: 32 [ 57.298376][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.309919][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.319715][ T326] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 57.328805][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.337865][ T326] usb 3-1: config 0 descriptor?? [ 57.345224][ T326] hub 3-1:0.0: USB hub found [ 57.361985][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.511953][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 57.518247][ T46] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 57.527043][ T46] usb 2-1: config 0 has no interface number 0 [ 57.533246][ T46] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 57.542386][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.551422][ T46] usb 2-1: config 0 descriptor?? [ 57.556540][ T326] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 57.759855][ T46] usb 2-1: USB disconnect, device number 15 [ 57.958253][ T326] usbhid 3-1:0.0: can't add hid device: -71 [ 57.964409][ T326] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 57.992590][ T326] usb 3-1: USB disconnect, device number 17 [ 58.001956][ T779] Bluetooth: hci0: command 0x1003 tx timeout [ 58.003953][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.024145][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 58.024164][ T36] audit: type=1400 audit(1785465736.610:240): avc: denied { unlink } for pid=812 comm="syz.3.161" name="#1" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.052898][ T36] audit: type=1400 audit(1785465736.610:241): avc: denied { mount } for pid=812 comm="syz.3.161" name="/" dev="overlay" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.522044][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 58.563642][ T36] audit: type=1400 audit(1785465737.150:242): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.602101][ T36] audit: type=1400 audit(1785465737.190:243): avc: denied { create } for pid=818 comm="syz.3.163" name=E8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.624365][ T36] audit: type=1400 audit(1785465737.210:244): avc: denied { unlink } for pid=295 comm="syz-executor" name=E8 dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.646687][ T822] usb usb9: usbfs: process 822 (syz.3.164) did not claim interface 12 before use [ 58.658640][ T36] audit: type=1400 audit(1785465737.250:245): avc: denied { mmap_zero } for pid=821 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 58.678770][ T46] usb 2-1: device descriptor read/64, error -71 [ 58.688877][ T36] audit: type=1400 audit(1785465737.250:246): avc: denied { map } for pid=821 comm="syz.3.164" path="socket:[7890]" dev="sockfs" ino=7890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 58.742649][ T36] audit: type=1326 audit(1785465737.330:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=824 comm="syz.2.165" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd9959e019 code=0x0 [ 58.952025][ T46] usb 2-1: device descriptor read/64, error -71 [ 59.182035][ T566] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 59.191967][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.331973][ T566] usb 4-1: Using ep0 maxpacket: 16 [ 59.332003][ T46] usb 2-1: device descriptor read/64, error -71 [ 59.339459][ T566] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 59.353047][ T566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.365066][ T566] usb 4-1: config 0 descriptor?? [ 59.582069][ T46] usb 2-1: device descriptor read/64, error -71 [ 59.676247][ T36] audit: type=1400 audit(1785465738.260:248): avc: denied { setopt } for pid=841 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.696288][ T46] usb usb2-port1: attempt power cycle [ 59.772311][ T566] hid (null): bogus close delimiter [ 59.778958][ T566] uclogic 0003:5543:0042.0010: unknown main item tag 0x6 [ 59.786395][ T566] uclogic 0003:5543:0042.0010: bogus close delimiter [ 59.793196][ T566] uclogic 0003:5543:0042.0010: item 0 0 2 10 parsing failed [ 59.801705][ T566] uclogic 0003:5543:0042.0010: parse failed [ 59.809896][ T566] uclogic 0003:5543:0042.0010: probe with driver uclogic failed with error -22 [ 59.952105][ T326] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 59.974545][ T566] usb 4-1: USB disconnect, device number 15 [ 60.041987][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 60.063014][ T46] usb 2-1: device descriptor read/8, error -71 [ 60.101999][ T326] usb 3-1: Using ep0 maxpacket: 8 [ 60.108677][ T326] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 60.116940][ T326] usb 3-1: config 0 has no interface number 0 [ 60.123113][ T326] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 60.132204][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.140962][ T326] usb 3-1: config 0 descriptor?? [ 60.193137][ T46] usb 2-1: device descriptor read/8, error -71 [ 60.349210][ T311] usb 3-1: USB disconnect, device number 18 [ 60.432135][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 60.462250][ T46] usb 2-1: device descriptor read/8, error -71 [ 60.593071][ T46] usb 2-1: device descriptor read/8, error -71 [ 60.702111][ T46] usb usb2-port1: unable to enumerate USB device [ 60.993286][ T863] ======================================================= [ 60.993286][ T863] WARNING: The mand mount option has been deprecated and [ 60.993286][ T863] and is ignored by this kernel. Remove the mand [ 60.993286][ T863] option from the mount to silence this warning. [ 60.993286][ T863] ======================================================= [ 60.993289][ T36] audit: type=1400 audit(1785465739.580:249): avc: denied { remount } for pid=862 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.115996][ T867] netlink: 180 bytes leftover after parsing attributes in process `syz.2.179'. [ 61.334133][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 61.372032][ T326] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 61.491984][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 61.498715][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.509460][ T46] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 61.518624][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.522098][ T326] usb 3-1: device descriptor read/64, error -71 [ 61.526670][ T46] usb 4-1: Product: syz [ 61.537480][ T46] usb 4-1: Manufacturer: syz [ 61.542216][ T46] usb 4-1: SerialNumber: syz [ 61.702074][ T332] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 61.771983][ T326] usb 3-1: device descriptor read/64, error -71 [ 61.851972][ T332] usb 2-1: Using ep0 maxpacket: 16 [ 61.858336][ T332] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 61.867636][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.876506][ T332] usb 2-1: config 0 descriptor?? [ 62.011982][ T326] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 62.142009][ T326] usb 3-1: device descriptor read/64, error -71 [ 62.283662][ T332] hid (null): bogus close delimiter [ 62.290842][ T332] uclogic 0003:5543:0042.0011: unknown main item tag 0x6 [ 62.298027][ T332] uclogic 0003:5543:0042.0011: bogus close delimiter [ 62.305105][ T332] uclogic 0003:5543:0042.0011: item 0 0 2 10 parsing failed [ 62.312764][ T332] uclogic 0003:5543:0042.0011: parse failed [ 62.318770][ T332] uclogic 0003:5543:0042.0011: probe with driver uclogic failed with error -22 [ 62.391984][ T326] usb 3-1: device descriptor read/64, error -71 [ 62.485531][ T332] usb 2-1: USB disconnect, device number 20 [ 62.502196][ T326] usb usb3-port1: attempt power cycle [ 62.842064][ T326] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 62.863254][ T326] usb 3-1: device descriptor read/8, error -71 [ 62.993046][ T326] usb 3-1: device descriptor read/8, error -71 [ 63.231968][ T326] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 63.253127][ T326] usb 3-1: device descriptor read/8, error -71 [ 63.261950][ T311] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 63.383046][ T326] usb 3-1: device descriptor read/8, error -71 [ 63.411953][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 63.418335][ T311] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 63.426663][ T311] usb 2-1: config 0 has no interface number 0 [ 63.432814][ T311] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 63.442029][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.450883][ T311] usb 2-1: config 0 descriptor?? [ 63.492051][ T326] usb usb3-port1: unable to enumerate USB device [ 63.513899][ T36] audit: type=1400 audit(1785465742.100:250): avc: denied { bind } for pid=883 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.533162][ T36] audit: type=1400 audit(1785465742.120:251): avc: denied { listen } for pid=883 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.571028][ T36] audit: type=1400 audit(1785465742.150:252): avc: denied { write } for pid=883 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.648558][ T36] audit: type=1400 audit(1785465742.230:253): avc: denied { cmd } for pid=887 comm="iou-wrk-888" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 63.677884][ T311] usb 2-1: USB disconnect, device number 21 [ 63.701627][ T12] ------------[ cut here ]------------ [ 63.707274][ T12] WARNING: CPU: 1 PID: 12 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 63.717843][ T12] Modules linked in: [ 63.721808][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 63.733564][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.744277][ T12] Workqueue: iou_exit io_ring_exit_work [ 63.749933][ T12] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 63.756379][ T12] Code: 5d e9 43 2d 52 02 cc e8 1d 90 33 fe 0f 0b eb e3 e8 14 90 33 fe 0f 0b eb da e8 0b 90 33 fe 0f 0b e9 4d fe ff ff e8 ff 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 63.776485][ T12] RSP: 0018:ffffc900000c7990 EFLAGS: 00010293 [ 63.782853][ T12] RAX: ffffffff8353e1c1 RBX: 1ffff110267bf4f5 RCX: ffff888102650000 [ 63.791142][ T12] RDX: 0000000000000000 RSI: 00000000000000a8 RDI: 0000000000000104 [ 63.799573][ T12] RBP: ffffc900000c79e0 R08: 0000000000000003 R09: 0000000000000004 [ 63.807743][ T12] R10: 0000000000000000 R11: ffffffff8353d1a0 R12: ffff888133cb2600 [ 63.815909][ T12] R13: ffff888133dfa780 R14: ffff888120f9d8a8 R15: ffff888120f9d8b8 [ 63.824021][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 63.833167][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.839834][ T12] CR2: 000000000000002c CR3: 000000011f88e000 CR4: 00000000003526b0 [ 63.848924][ T12] Call Trace: [ 63.852302][ T12] [ 63.855390][ T12] ublk_ch_uring_cmd+0x6f/0xa0 [ 63.860495][ T12] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 63.866617][ T12] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 63.872612][ T12] ? io_uring_cancel_generic+0x6eb/0x6eb [ 63.878298][ T12] io_ring_exit_work+0x23d/0x83b [ 63.883725][ T12] ? finish_task_switch+0x139/0x770 [ 63.889143][ T12] ? __cfi_io_ring_exit_work+0x10/0x10 [ 63.894981][ T12] ? kick_pool+0xb9/0x540 [ 63.899590][ T12] process_scheduled_works+0x7f7/0x1060 [ 63.905242][ T12] worker_thread+0xc99/0x13f0 [ 63.909982][ T12] kthread+0x2c7/0x360 [ 63.914136][ T12] ? __cfi_worker_thread+0x10/0x10 [ 63.919306][ T12] ? __cfi_kthread+0x10/0x10 [ 63.924086][ T12] ret_from_fork+0x67/0xa0 [ 63.928616][ T12] ? __cfi_kthread+0x10/0x10 [ 63.933300][ T12] ret_from_fork_asm+0x1a/0x30 [ 63.938203][ T12] [ 63.941297][ T12] ---[ end trace 0000000000000000 ]--- [ 64.007417][ T46] usb 4-1: Fast Track Pro config OK [ 64.017043][ T46] usb 4-1: MIDIStreaming interface descriptor not found [ 64.029800][ T46] usb 4-1: USB disconnect, device number 16 [ 64.056813][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.0/sound/card0/controlC0/../uevent} for writing: No such file or directory