last executing test programs: 5.778488972s ago: executing program 1 (id=548): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x6, "1c33267f"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x9, "9b09"}, @local=@item_012={0x1, 0x2, 0x0, '0'}]}}, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x2, &(0x7f0000000100)="8102") r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.669317922s ago: executing program 0 (id=566): keyctl$set_reqkey_keyring(0xe, 0x1) 3.669197442s ago: executing program 0 (id=567): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8402, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='.\x02\x00', 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.562754725s ago: executing program 0 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x4, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) 2.770049594s ago: executing program 1 (id=578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x40400) read$hidraw(r1, 0x0, 0x60) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000000)='\"', 0xfdef) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000002c0)="b9") 2.5336474s ago: executing program 3 (id=582): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) cachestat(r0, &(0x7f0000000040)={0x1f7, 0x10000}, &(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x2, 0x80000002, 0x3, 0x6, 0x5, 0x1000000000002, 0x800, 0x38000000000000, 0x6, 0x0, 0x8c, 0xd01, 0x0, 0x4, 0x6b, 0x774, 0x6, 0x2, 0x9, 0x1, 0x9014, 0x11, 0x2}) r1 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4}) 2.52296361s ago: executing program 3 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4040011}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000080)=""/118, 0x76}], 0x3}, 0x2}], 0x1, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, &(0x7f0000000240)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000080)="400f23280f019c990e000000b91a0200000f32c344240000600000c744240200800000c7442406000000000f011c246566262e440f23b126673e660f382943b0c4c3914984fb499e00007fc744240000000000c744240278581667c7442406000000000f011c2467440fc7580066b804008ee8", 0x73}], 0x1, 0x45f5cb4379c34ee0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.418558872s ago: executing program 3 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x61}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8b97) 2.365667924s ago: executing program 3 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2.352456484s ago: executing program 3 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x15a) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x10002, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) execveat(r1, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x100) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0xff06, 0x0) 2.298453655s ago: executing program 3 (id=587): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb"], 0x23c}}, 0x4080) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3d, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200007, 0x801, 0x4, 0x7}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="020000"], 0x4, 0x3) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x2, 0xa3020000) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xb0, 0x7f, "", [{{0x9, 0x4, 0x0, 0xa1, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc, 0x0, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x89, 0xb, 0x6}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x10, 0x0, 0x40}, 0x18d, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2809}}, {0x57, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000640)={0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x20, 0x17, 0x71, "636058667add2e96127a8a4b81f953f0a7d4d260ce120adc4b69e7a134430c3d72132b77efa43bac2fe7823eddc925b2c357c10af0c76f226476542effda4da3c10706bd8422e772c468db8dcbba414b782a745e4d0c58ecc1b4b1b6de7db1922ac8e2865e986c6607785c64c235827173"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x33}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x0, 0x60, {0x5e, "c5fb71adf67c11788bcc4ce575ed7a759ff699ab93e9b45e0575c5bda3ee44d9f4bd7c7240d34cc4b1a92221d3e69c4eb5388ecae6e83b09cb1cdbdeae7daa5d51bc84055bac61953ae049944149df5d792b72a12e8be16745a31bef04f1"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0xe3}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x59}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000440)="66b8d5008ec866b8f3000f00d80f20e30f0134d70f01c20f01d966b8ab000f00d8360fea23660f38826e30c4c10d7539", 0x30}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.229064867s ago: executing program 1 (id=588): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x70b5) 2.198092158s ago: executing program 1 (id=589): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8402, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='.\x02\x00', 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.195804158s ago: executing program 1 (id=590): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000005002539f2"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x4000000000, 0x1, 0x17f, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x40000002, 0x0, 0xf, 0x40, 0x5, 0x0, 0x8000000bdb], 0x54000, 0x43102}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2014cb, 0x0, 0x100000a, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x9000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xeeee0000, 0x2000, 0xd, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0x9}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.166982298s ago: executing program 0 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (fail_nth: 1) 2.141040309s ago: executing program 1 (id=592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)=0x1024) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x28) syz_usb_connect$hid(0x0, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086d0425c1e7000000000109022400010000f035090400ff01030001000921810003012228000905810340"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x100000000}}], [], 0x6b}}) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f00000000c0)={0x7033, 0x1, [{0x1, 0x1}]}) sendmsg$sock(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="23f6", 0x5dc}], 0x2}, 0x20000810) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002020000402505a1a44000010203010902600002010188010904000001020d000009240600018471075705240003000d240f010100000007000c000206241ac100040905810310004204080904010000020d8f000904010102020d00000905820200040640bd090503020804010306"], &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2b, 0x58, 0x7, 0x40, 0x2}, 0x57, &(0x7f0000000100)={0x5, 0xf, 0x57, 0x3, [@generic={0x3f, 0x10, 0x4, "1e4586dd4705ad2f0f61e01eb92414cbdaf30b97d35f297bef3c9aebd486ee0b2d6019dbfba7db34590c51a4ba8d9a7386398a81b1ac3d3017e77083"}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0xc3, 0xf, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x5, 0x7ff}]}, 0x1, [{0xd1, &(0x7f0000000180)=@string={0xd1, 0x3, "b95f80bab7e98f5a3c9dd61cf00002cbd4188d066b05f0ecc20e7e74cb392385a9e830029d0dd8e120940712fc10c37014daff46c77ade8c7d719b8507799448cbb3bc2b5f14d88551f1137e59aac62f804bd237dd437acc758344f316d7ed16af5a8e9d3aa60c31c3a2ab26344333388dbf5b3a7e3ecbdadfe0b137f87cd413a086b2d032bc27c50f75f09150f173a19b15e48c274f77d152b0c8028d70516484027cfdce575b69bb11d8b406c95d2231c53ec39bb7ca1c21c21b70e0e3a946fee0a9a95503bec03284d6640da6ad"}}]}) 1.66701534s ago: executing program 0 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) 1.594724123s ago: executing program 0 (id=596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x40400) read$hidraw(r1, 0x0, 0x60) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000000)='\"', 0xfdef) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000002c0)="b9") 1.549731083s ago: executing program 2 (id=598): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8402, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='.\x02\x00', 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.549480763s ago: executing program 2 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x4, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) 220.948905ms ago: executing program 2 (id=600): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000005002539f2"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2014cb, 0x0, 0x100000a, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x9000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xeeee0000, 0x2000, 0xd, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0x9}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 85.728608ms ago: executing program 2 (id=601): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) init_module(&(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46a3050906020000000000000002003e000c0000009e020000000000004000000000000000ea00000000000000030000000f0038000100126f938853cbc222e89c0a004000fcff010000000d0000000000000000000000040000000000000003000000000000007f0b000000000000010000000000"], 0x78, 0x0) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x40087705, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) syz_clone3(&(0x7f0000002680)={0x1080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 118.87µs ago: executing program 2 (id=602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r1, 0x301, 0xffff7ffc, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000180)={0x2, 0x2, 0xd98, 0x13, "48e4ed7da8a5793d14be0e92e080922245a750555f268709d9ce00"}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000240)='pagemap\x00') ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae03, 0xbc) 0s ago: executing program 2 (id=603): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12100) kernel console output (not intermixed with test programs): ysadm_t tclass=bluetooth_socket permissive=1 [ 30.988612][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.988810][ T342] Bluetooth: hci0: command 0x1003 tx timeout [ 31.093191][ T36] audit: type=1400 audit(1786446719.970:134): avc: denied { sqpoll } for pid=363 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.337874][ T36] audit: type=1400 audit(1786446720.210:135): avc: denied { ioctl } for pid=369 comm="syz.1.18" path="socket:[4308]" dev="sockfs" ino=4308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.362950][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.518480][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 31.524809][ T65] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 31.533052][ T65] usb 1-1: config 0 has no interface number 0 [ 31.539219][ T65] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 31.549358][ T65] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 31.560950][ T65] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 31.570175][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.578217][ T65] usb 1-1: Product: syz [ 31.582415][ T65] usb 1-1: Manufacturer: syz [ 31.587017][ T65] usb 1-1: SerialNumber: syz [ 31.592325][ T65] usb 1-1: config 0 descriptor?? [ 31.597572][ T368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.604827][ T368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.760870][ T374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 31.812716][ T368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.820038][ T368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.953201][ T385] input: syz1 as /devices/virtual/input/input4 [ 31.989080][ T310] usb 3-1: USB disconnect, device number 3 [ 31.989183][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.027846][ T65] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 32.149643][ T9] usb 4-1: config 255 has an invalid interface number: 4 but max is 0 [ 32.157896][ T9] usb 4-1: config 255 has no interface number 0 [ 32.164337][ T9] usb 4-1: config 255 interface 4 has no altsetting 0 [ 32.172666][ T9] usb 4-1: New USB device found, idVendor=0482, idProduct=0203, bcdDevice=5c.d2 [ 32.181959][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.190730][ T9] usb 4-1: Product: syz [ 32.195010][ T9] usb 4-1: Manufacturer: syz [ 32.199663][ T9] usb 4-1: SerialNumber: syz [ 32.378494][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.408805][ T9] usb 4-1: USB disconnect, device number 3 [ 32.528554][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 32.534815][ T310] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.543096][ T310] usb 3-1: config 0 has no interface number 0 [ 32.550731][ T310] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.559808][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.567787][ T310] usb 3-1: Product: syz [ 32.571979][ T310] usb 3-1: Manufacturer: syz [ 32.576585][ T310] usb 3-1: SerialNumber: syz [ 32.581993][ T310] usb 3-1: config 0 descriptor?? [ 32.587814][ T310] smsc95xx v2.0.0 [ 32.591535][ T314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.728498][ T314] usb 2-1: device descriptor read/64, error -71 [ 32.830200][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.838914][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.968497][ T314] usb 2-1: device descriptor read/64, error -71 [ 32.991390][ T396] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.25'. [ 33.001879][ T396] futex_wake_op: syz.2.25 tries to shift op by 144; fix this program [ 33.010745][ T310] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 33.021503][ T310] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.158494][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.208480][ T314] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.216489][ T310] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 33.227441][ T310] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 33.237398][ T310] usb 3-1: USB disconnect, device number 4 [ 33.308522][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 33.315020][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.326067][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.335870][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 33.344938][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.353730][ T45] usb 4-1: config 0 descriptor?? [ 33.358759][ T314] usb 2-1: device descriptor read/64, error -71 [ 33.449799][ T65] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 33.460076][ T65] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 33.471787][ T65] asix 1-1:0.34: probe with driver asix failed with error -71 [ 33.480312][ T65] usb 1-1: USB disconnect, device number 3 [ 33.598508][ T314] usb 2-1: device descriptor read/64, error -71 [ 33.708598][ T314] usb usb2-port1: attempt power cycle [ 33.767562][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.774425][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.781374][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.788174][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.795226][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.802120][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.808934][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.815702][ T45] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 33.823122][ T45] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 33.968850][ T45] usb 4-1: USB disconnect, device number 4 [ 34.052917][ T415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 34.058558][ T314] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.089742][ T314] usb 2-1: device descriptor read/8, error -71 [ 34.219571][ T314] usb 2-1: device descriptor read/8, error -71 [ 34.348515][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.458566][ T314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.479607][ T314] usb 2-1: device descriptor read/8, error -71 [ 34.509574][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.520664][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.530554][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.543624][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.552792][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.563274][ T65] usb 1-1: config 0 descriptor?? [ 34.619531][ T314] usb 2-1: device descriptor read/8, error -71 [ 34.728767][ T314] usb usb2-port1: unable to enumerate USB device [ 34.888533][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.948495][ T411] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.975152][ T65] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 34.984033][ T65] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 35.038532][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 35.044911][ T45] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 35.054864][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 35.064062][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.072091][ T45] usb 3-1: Product: syz [ 35.076267][ T45] usb 3-1: Manufacturer: syz [ 35.081060][ T45] usb 3-1: SerialNumber: syz [ 35.087448][ T45] r8152-cfgselector 3-1: Unknown version 0x0000 [ 35.093757][ T45] r8152-cfgselector 3-1: config 0 descriptor?? [ 35.099987][ T411] usb 4-1: Using ep0 maxpacket: 8 [ 35.106605][ T411] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 35.114642][ T411] usb 4-1: config 0 has no interface number 0 [ 35.120756][ T411] usb 4-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.131823][ T411] usb 4-1: config 0 interface 1 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.141748][ T411] usb 4-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.154816][ T411] usb 4-1: config 0 interface 1 has no altsetting 0 [ 35.161463][ T411] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 35.170543][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.182527][ T411] usb 4-1: config 0 descriptor?? [ 35.191633][ T314] usb 1-1: USB disconnect, device number 4 [ 35.306385][ T45] r8152-cfgselector 3-1: Needed 1 retries to read version [ 35.313805][ T45] r8152-cfgselector 3-1: Unknown version 0x0000 [ 35.320233][ T45] r8152-cfgselector 3-1: bad CDC descriptors [ 35.511066][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 35.511086][ T36] audit: type=1400 audit(1786446724.390:164): avc: denied { create } for pid=427 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.598411][ T411] uclogic 0003:28BD:1903.0005: interface is invalid, ignoring [ 35.703705][ T411] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 35.758501][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 35.800492][ T65] usb 4-1: USB disconnect, device number 5 [ 35.908489][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 35.914673][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 35.922941][ T9] usb 2-1: config 0 has no interface number 0 [ 35.929157][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 35.939487][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 35.950829][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 35.959918][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.967999][ T9] usb 2-1: Product: syz [ 35.972368][ T9] usb 2-1: Manufacturer: syz [ 35.976967][ T9] usb 2-1: SerialNumber: syz [ 35.982321][ T9] usb 2-1: config 0 descriptor?? [ 35.987566][ T496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.994808][ T496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.068497][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.202834][ T496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.210073][ T496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.219473][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.230452][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.240220][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.253261][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.262336][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.271292][ T10] usb 1-1: config 0 descriptor?? [ 36.324203][ T505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.44'. [ 36.338500][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.417917][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 36.498474][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 36.504825][ T65] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 36.513128][ T65] usb 3-1: config 0 has no interface number 0 [ 36.519997][ T65] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 36.530074][ T65] usb 3-1: config 0 interface 196 has no altsetting 0 [ 36.538255][ T65] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 36.547366][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.555394][ T65] usb 3-1: Product: syz [ 36.559578][ T65] usb 3-1: Manufacturer: syz [ 36.564200][ T65] usb 3-1: SerialNumber: syz [ 36.569931][ T65] usb 3-1: config 0 descriptor?? [ 36.575182][ T503] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.658495][ T335] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.679425][ T10] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 36.692667][ T10] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 36.799791][ T65] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 36.807296][ T65] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 36.816503][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.833810][ T65] usb 3-1: USB disconnect, device number 6 [ 36.843083][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.852941][ T335] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.865871][ T335] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.875228][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.880962][ T411] usb 1-1: USB disconnect, device number 5 [ 36.884197][ T335] usb 4-1: config 0 descriptor?? [ 36.894527][ T513] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -19 [ 36.919007][ T36] audit: type=1400 audit(1786446725.800:165): avc: denied { mount } for pid=514 comm="syz.2.48" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.919822][ T515] Zero length message leads to an empty skb [ 37.014345][ T36] audit: type=1400 audit(1786446725.890:166): avc: denied { create } for pid=516 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.033777][ T36] audit: type=1400 audit(1786446725.890:167): avc: denied { bind } for pid=516 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.053334][ T36] audit: type=1400 audit(1786446725.890:168): avc: denied { setopt } for pid=516 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.081406][ T36] audit: type=1400 audit(1786446725.959:169): avc: denied { setopt } for pid=522 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.100683][ T36] audit: type=1400 audit(1786446725.959:170): avc: denied { connect } for pid=522 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.120302][ T36] audit: type=1400 audit(1786446725.959:171): avc: denied { create } for pid=522 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 37.140438][ T36] audit: type=1400 audit(1786446725.959:172): avc: denied { ioctl } for pid=522 comm="syz.2.52" path="socket:[4997]" dev="sockfs" ino=4997 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 37.165927][ T36] audit: type=1400 audit(1786446726.009:173): avc: denied { mount } for pid=524 comm="syz.2.53" name="/" dev="ramfs" ino=5614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.253716][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.262319][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.311735][ T335] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 37.320874][ T335] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 37.418742][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.568741][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 37.575093][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 37.583428][ T10] usb 3-1: config 0 has no interface number 0 [ 37.589568][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 37.599597][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 37.610904][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 37.619987][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.627990][ T10] usb 3-1: Product: syz [ 37.632282][ T10] usb 3-1: Manufacturer: syz [ 37.636922][ T10] usb 3-1: SerialNumber: syz [ 37.642594][ T10] usb 3-1: config 0 descriptor?? [ 37.648486][ T527] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 37.655780][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.655852][ T527] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 37.798858][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 37.805137][ T45] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.818249][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.825032][ T45] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 37.834118][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.842928][ T45] usb 1-1: config 0 descriptor?? [ 37.872082][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.881716][ T527] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 37.889737][ T527] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 37.902546][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 37.915879][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 37.924737][ T9] usb 2-1: USB disconnect, device number 10 [ 38.101757][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 38.250843][ T530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.259450][ T530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.270400][ T45] ortek 0003:1223:3F07.0008: unknown main item tag 0x4 [ 38.277481][ T45] ortek 0003:1223:3F07.0008: unknown main item tag 0x5 [ 38.284441][ T45] ortek 0003:1223:3F07.0008: unknown main item tag 0x2 [ 38.291842][ T45] ortek 0003:1223:3F07.0008: unexpected long global item [ 38.299160][ T45] ortek 0003:1223:3F07.0008: probe with driver ortek failed with error -22 [ 38.471075][ T314] usb 1-1: USB disconnect, device number 6 [ 38.619424][ C1] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 38.646681][ T536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 38.745273][ T546] netlink: 'syz.1.62': attribute type 28 has an invalid length. [ 38.910106][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.918702][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.001285][ T409] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 39.150731][ T409] usb 2-1: config 0 interface 0 has no altsetting 0 [ 39.157578][ T409] usb 2-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 39.166768][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.175455][ T409] usb 2-1: config 0 descriptor?? [ 39.383285][ T409] usbhid 2-1:0.0: can't add hid device: -71 [ 39.389273][ T409] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.398245][ T409] usb 2-1: USB disconnect, device number 11 [ 39.439929][ T314] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.569749][ T314] usb 1-1: device descriptor read/64, error -71 [ 39.659821][ T45] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 39.667904][ T45] usb 4-1: device reset changed ep0 maxpacket size! [ 39.674784][ T9] usb 4-1: USB disconnect, device number 6 [ 39.734573][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 39.744838][ T10] asix 3-1:0.34: probe with driver asix failed with error -71 [ 39.753523][ T10] usb 3-1: USB disconnect, device number 7 [ 39.809869][ T314] usb 1-1: device descriptor read/64, error -71 [ 39.809869][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.959965][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 39.966463][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.976128][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 146, changing to 7 [ 39.988786][ T9] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 39.997964][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.006001][ T9] usb 4-1: Product: syz [ 40.010501][ T9] usb 4-1: Manufacturer: syz [ 40.015103][ T9] usb 4-1: SerialNumber: syz [ 40.080008][ T314] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.140035][ T65] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 40.210080][ T314] usb 1-1: device descriptor read/64, error -71 [ 40.225974][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.234475][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 40.245250][ T9] usb 4-1: USB disconnect, device number 7 [ 40.255989][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.290111][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 40.296399][ T65] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.304732][ T65] usb 2-1: config 0 has no interface number 0 [ 40.315394][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.327282][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.335619][ T65] usb 2-1: Product: syz [ 40.341509][ T65] usb 2-1: Manufacturer: syz [ 40.346133][ T65] usb 2-1: SerialNumber: syz [ 40.355642][ T65] usb 2-1: config 0 descriptor?? [ 40.364067][ T65] smsc95xx v2.0.0 [ 40.490189][ T314] usb 1-1: device descriptor read/64, error -71 [ 40.610386][ T314] usb usb1-port1: attempt power cycle [ 40.663316][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 40.663335][ T36] audit: type=1400 audit(1786446729.548:183): avc: denied { read } for pid=576 comm="syz.2.76" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.692402][ T36] audit: type=1400 audit(1786446729.548:184): avc: denied { open } for pid=576 comm="syz.2.76" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.715541][ T36] audit: type=1400 audit(1786446729.548:185): avc: denied { ioctl } for pid=576 comm="syz.2.76" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.768862][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 40.779944][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.909100][ T36] audit: type=1400 audit(1786446729.788:186): avc: denied { write } for pid=587 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.980579][ T314] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.001498][ T314] usb 1-1: device descriptor read/8, error -71 [ 41.131890][ T314] usb 1-1: device descriptor read/8, error -71 [ 41.260609][ T45] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 41.370688][ T314] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.391818][ T314] usb 1-1: device descriptor read/8, error -71 [ 41.411823][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 41.418500][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 41.427576][ T564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=968532509 (15496520144 ns) > initial count (240 ns). Using initial count to start timer. [ 41.444487][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.453350][ T45] usb 3-1: config 0 descriptor?? [ 41.521784][ T314] usb 1-1: device descriptor read/8, error -71 [ 41.603193][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 41.614126][ T65] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 41.623296][ T65] usb 2-1: USB disconnect, device number 12 [ 41.632369][ T314] usb usb1-port1: unable to enumerate USB device [ 41.666808][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 41.672871][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 41.681528][ T45] usb 3-1: USB disconnect, device number 8 [ 41.753055][ T36] audit: type=1400 audit(1786446730.637:187): avc: denied { read write } for pid=596 comm="syz.3.84" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.777423][ T36] audit: type=1400 audit(1786446730.637:188): avc: denied { open } for pid=596 comm="syz.3.84" path="/21/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.801911][ T36] audit: type=1400 audit(1786446730.637:189): avc: denied { ioctl } for pid=596 comm="syz.3.84" path="/21/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.834409][ T601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 42.091049][ T409] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.181201][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 42.241086][ T409] usb 4-1: Using ep0 maxpacket: 8 [ 42.247664][ T409] usb 4-1: config index 0 descriptor too short (expected 62244, got 36) [ 42.256489][ T409] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 42.267232][ T409] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 42.276342][ T409] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 42.289561][ T409] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.296294][ T409] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 42.305547][ T409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.314317][ T409] usb 4-1: config 0 descriptor?? [ 42.320580][ T409] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 42.331776][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 42.344560][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 42.353695][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.362068][ T45] usb 2-1: Product: syz [ 42.366268][ T45] usb 2-1: Manufacturer: syz [ 42.367901][ T619] FAULT_INJECTION: forcing a failure. [ 42.367901][ T619] name failslab, interval 1, probability 0, space 0, times 1 [ 42.370875][ T45] usb 2-1: SerialNumber: syz [ 42.388267][ T619] CPU: 0 UID: 0 PID: 619 Comm: syz.2.94 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 42.388287][ T619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.388294][ T619] Call Trace: [ 42.388298][ T619] [ 42.388304][ T619] __dump_stack+0x21/0x30 [ 42.388334][ T619] dump_stack_lvl+0x140/0x1c0 [ 42.388358][ T619] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.388382][ T619] ? selinux_file_permission+0x318/0xb60 [ 42.388401][ T619] dump_stack+0x19/0x20 [ 42.388415][ T619] should_fail_ex+0x3c2/0x510 [ 42.388428][ T619] should_failslab+0xac/0x100 [ 42.388442][ T619] __kmalloc_cache_noprof+0x41/0x470 [ 42.388454][ T619] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 42.388473][ T619] io_ring_ctx_alloc+0x61/0x1dc0 [ 42.388498][ T619] ? __cfi_vfs_write+0x10/0x10 [ 42.388518][ T619] io_uring_create+0x2e0/0x13f0 [ 42.388536][ T619] ? __kasan_check_write+0x18/0x20 [ 42.388552][ T619] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 42.388567][ T619] ? __kasan_check_write+0x18/0x20 [ 42.388577][ T619] ? __x64_sys_io_uring_setup+0x80/0x80 [ 42.388592][ T619] ? __kasan_check_read+0x15/0x20 [ 42.388603][ T619] __x64_sys_io_uring_setup+0x5f/0x80 [ 42.388626][ T619] x64_sys_call+0x22c0/0x2ee0 [ 42.388643][ T619] do_syscall_64+0x57/0xf0 [ 42.388665][ T619] ? clear_bhb_loop+0x50/0xa0 [ 42.388691][ T619] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.388707][ T619] RIP: 0033:0x7f874af9e0d9 [ 42.388719][ T619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.388728][ T619] RSP: 002b:00007f874be4bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 42.388743][ T619] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f874af9e0d9 [ 42.388751][ T619] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 42.388763][ T619] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 42.388775][ T619] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 42.388789][ T619] R13: 0000200000000b10 R14: 00007f874be4bfd8 R15: 0000000000000000 [ 42.388804][ T619] [ 42.391163][ T314] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 42.424940][ T621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=621 comm=syz.2.95 [ 42.602729][ T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.635035][ T314] usb 1-1: config 0 has no interfaces? [ 42.642539][ T314] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.651730][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.660318][ T314] usb 1-1: config 0 descriptor?? [ 42.673779][ T623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 42.721331][ T409] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.871389][ T409] usb 3-1: Using ep0 maxpacket: 8 [ 42.878034][ T409] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 42.887313][ T409] usb 3-1: config 0 has no interface number 1 [ 42.893466][ T409] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 42.904472][ T409] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 42.916339][ T409] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 42.927665][ T409] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 42.937863][ T409] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.950933][ T409] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 42.962439][ T409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 42.973580][ T409] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 42.985104][ T409] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 42.994223][ T409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.002299][ T409] usb 3-1: Product: syz [ 43.006564][ T409] usb 3-1: Manufacturer: syz [ 43.011184][ T409] usb 3-1: SerialNumber: syz [ 43.016685][ T409] usb 3-1: config 0 descriptor?? [ 43.021979][ T622] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 43.068931][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.077504][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.087279][ T10] usb 1-1: USB disconnect, device number 11 [ 43.233220][ T36] audit: type=1400 audit(1786446732.116:190): avc: denied { bind } for pid=603 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.237615][ T409] usb 3-1: USB disconnect, device number 9 [ 43.257170][ T36] audit: type=1400 audit(1786446732.136:191): avc: denied { map } for pid=603 comm="syz.3.87" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.770281][ T36] audit: type=1400 audit(1786446732.646:192): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.071999][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 44.101999][ T409] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.223202][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.234265][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 44.247093][ T10] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 44.253513][ T409] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.256191][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.257319][ T10] usb 3-1: config 0 descriptor?? [ 44.267252][ T409] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.287091][ T409] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.296160][ T409] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 44.309108][ T409] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 44.318273][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.326475][ T409] usb 1-1: Product: syz [ 44.330647][ T409] usb 1-1: Manufacturer: syz [ 44.335286][ T409] usb 1-1: SerialNumber: syz [ 44.545575][ T409] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 44.553492][ T409] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 44.560752][ T409] usb 1-1: 1:1 : unsupported format bits 0x7b6c0006 [ 44.567423][ T409] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 44.577552][ T409] usb 1-1: unit 2 not found! [ 44.582221][ T409] usb 1-1: unit 236 not found! [ 44.590571][ T409] usb 1-1: USB disconnect, device number 12 [ 44.603859][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.675755][ T10] hid-led 0003:1294:1320.0009: unknown main item tag 0xd [ 44.682958][ T10] hid-led 0003:1294:1320.0009: unknown main item tag 0xe [ 44.690837][ T10] hid-led 0003:1294:1320.0009: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 44.704642][ T10] hid-led 0003:1294:1320.0009: Riso Kagaku Webmail Notifier initialized [ 44.878521][ T10] usb 3-1: USB disconnect, device number 10 [ 44.886489][ T65] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 44.895261][ T65] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 44.903919][ T409] usb 4-1: USB disconnect, device number 8 [ 44.904066][ T65] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 45.049852][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 45.081885][ T45] usb 2-1: USB disconnect, device number 13 [ 45.088946][ T651] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1280 sclass=netlink_xfrm_socket pid=651 comm=syz.0.105 [ 45.119144][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.149560][ T651] syzkaller1: entered promiscuous mode [ 45.166162][ T651] syzkaller1: entered allmulticast mode [ 45.621258][ T693] usb usb8: usbfs: process 693 (syz.2.121) did not claim interface 0 before use [ 45.732825][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.819938][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 45.819957][ T36] audit: type=1400 audit(1786446734.695:205): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 45.858128][ T704] kvm: kvm [703]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 45.866703][ T704] kvm: kvm [703]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 45.888276][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 45.914124][ T45] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 45.929032][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.937704][ T45] usb 1-1: Product: syz [ 45.942206][ T45] usb 1-1: Manufacturer: syz [ 45.952719][ T45] usb 1-1: SerialNumber: syz [ 46.117072][ T36] audit: type=1400 audit(1786446734.995:206): avc: denied { create } for pid=718 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.136737][ T36] audit: type=1400 audit(1786446734.995:207): avc: denied { connect } for pid=718 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.197829][ T36] audit: type=1400 audit(1786446734.995:208): avc: denied { block_suspend } for pid=718 comm="syz.3.133" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.223165][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.303122][ T36] audit: type=1400 audit(1786446735.115:209): avc: denied { getopt } for pid=721 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.403167][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 46.414159][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 46.429922][ T36] audit: type=1400 audit(1786446735.305:210): avc: denied { relabelfrom } for pid=730 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.449681][ T36] audit: type=1400 audit(1786446735.305:211): avc: denied { relabelto } for pid=730 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.453163][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 46.471664][ T36] audit: type=1400 audit(1786446735.305:212): avc: denied { bind } for pid=732 comm="syz.3.138" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.485791][ T733] capability: warning: `syz.3.138' uses deprecated v2 capabilities in a way that may be insecure [ 46.502570][ T36] audit: type=1400 audit(1786446735.305:213): avc: denied { name_bind } for pid=732 comm="syz.3.138" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.512798][ T10] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 46.533296][ T36] audit: type=1400 audit(1786446735.305:214): avc: denied { node_bind } for pid=732 comm="syz.3.138" saddr=fc01:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.542824][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.574574][ T10] usb 3-1: config 0 descriptor?? [ 46.703318][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.854504][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.864684][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.879344][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.888598][ T335] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 46.896156][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.904475][ T9] usb 2-1: Product: syz [ 46.908872][ T9] usb 2-1: Manufacturer: syz [ 46.914341][ T9] usb 2-1: SerialNumber: syz [ 46.921077][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 47.065846][ T335] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 47.079464][ T335] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 47.088221][ T335] usb 4-1: config 0 has no interface number 0 [ 47.100613][ T335] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 47.116116][ T10] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x4 [ 47.123605][ T335] usb 4-1: config 0 interface 200 has no altsetting 0 [ 47.140851][ T10] hid-generic 0003:0DFC:0101.000A: ignoring exceeding usage max [ 47.173095][ T335] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 47.190568][ T10] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x4 [ 47.198323][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.207048][ T335] usb 4-1: Product: syz [ 47.211444][ T10] hid-generic 0003:0DFC:0101.000A: hidraw0: USB HID vd.01 Device [HID 0dfc:0101] on usb-dummy_hcd.2-1/input0 [ 47.223110][ T335] usb 4-1: Manufacturer: syz [ 47.227801][ T335] usb 4-1: SerialNumber: syz [ 47.233738][ T335] usb 4-1: config 0 descriptor?? [ 47.256716][ T9] cdc_mbim 2-1:1.0: bind() failure [ 47.275939][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 47.283171][ T9] cdc_ncm 2-1:1.1: bind() failure [ 47.362951][ T9] usb 2-1: USB disconnect, device number 14 [ 47.404058][ T764] overlayfs: conflicting options: userxattr,redirect_dir=on [ 47.448020][ T335] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input7 [ 47.474962][ T335] usb 4-1: USB disconnect, device number 9 [ 48.088573][ T771] rust_binder: 770:771 no such ref 2 [ 48.254098][ T335] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 48.416615][ T335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.425072][ T335] usb 2-1: config 1 has an invalid interface descriptor of length 5, skipping [ 48.433961][ T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.444412][ T335] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.462315][ T335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.471506][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.479610][ T335] usb 2-1: Product: syz [ 48.483801][ T335] usb 2-1: Manufacturer: syz [ 48.488571][ T335] usb 2-1: SerialNumber: syz [ 48.567512][ T779] syzkaller1: left promiscuous mode [ 48.572953][ T779] syzkaller1: left allmulticast mode [ 48.597911][ T779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.617054][ T778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.625704][ T779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.637333][ T778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.806434][ T335] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 48.813890][ T335] cdc_ncm 2-1:1.0: bind() failure [ 48.825990][ T335] usb 2-1: USB disconnect, device number 15 [ 48.981036][ T786] netlink: 72 bytes leftover after parsing attributes in process `syz.3.154'. [ 48.997845][ T9] usb 3-1: USB disconnect, device number 11 [ 49.055739][ T789] tipc: Failed to remove unknown binding: 66,0,0/0:2860647004/2860647006 [ 49.079472][ T789] tipc: Failed to remove unknown binding: 66,0,0/0:2860647004/2860647005 [ 49.092147][ T789] tipc: Failed to remove unknown binding: 66,0,0/0:2860647004/2860647006 [ 49.101042][ T789] tipc: Failed to remove unknown binding: 66,0,0/0:2860647004/2860647005 [ 49.139893][ T793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 49.171378][ T795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.184961][ T795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.326652][ T797] fuse: Bad value for 'rootmode' [ 49.333187][ T797] overlayfs: missing 'lowerdir' [ 49.348874][ T335] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.494749][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 49.504814][ T335] usb 4-1: Using ep0 maxpacket: 32 [ 49.511056][ T335] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 49.522434][ T335] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 49.535294][ T335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 49.541913][ T335] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 49.551002][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.560052][ T335] usb 4-1: config 0 descriptor?? [ 49.655850][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.666110][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.678401][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.688427][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.696490][ T9] usb 3-1: Product: syz [ 49.700813][ T9] usb 3-1: Manufacturer: syz [ 49.705507][ T9] usb 3-1: SerialNumber: syz [ 49.737447][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.746087][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.915897][ T9] usb 3-1: 0:2 : does not exist [ 49.922933][ T9] usb 3-1: unit 9 not found! [ 49.930596][ T9] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 49.942628][ T9] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 49.952870][ T9] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 49.962919][ T9] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 49.975129][ T9] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 49.984817][ T9] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 49.994618][ T9] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 50.005371][ T9] usb 3-1: USB disconnect, device number 12 [ 50.014249][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.176598][ T335] usb 4-1: string descriptor 0 read error: -71 [ 50.196120][ T335] uclogic 0003:5543:004D.000B: failed retrieving string descriptor #200: -71 [ 50.205800][ T335] uclogic 0003:5543:004D.000B: failed retrieving pen parameters: -71 [ 50.215365][ T335] uclogic 0003:5543:004D.000B: failed probing pen v2 parameters: -71 [ 50.223492][ T335] uclogic 0003:5543:004D.000B: failed probing parameters: -71 [ 50.234176][ T335] uclogic 0003:5543:004D.000B: probe with driver uclogic failed with error -71 [ 50.248193][ T335] usb 4-1: USB disconnect, device number 10 [ 50.533517][ T847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.542176][ T847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.755361][ T310] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 50.906451][ T310] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 50.914715][ T310] usb 3-1: config 0 has no interface number 0 [ 50.920937][ T310] usb 3-1: config 0 interface 41 has no altsetting 0 [ 50.932929][ T310] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 50.942086][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.950137][ T310] usb 3-1: Product: syz [ 50.954339][ T310] usb 3-1: Manufacturer: syz [ 50.958981][ T310] usb 3-1: SerialNumber: syz [ 50.964200][ T310] usb 3-1: config 0 descriptor?? [ 51.000272][ T45] usb 1-1: MIDIStreaming interface descriptor not found [ 51.007336][ T45] usb 1-1: too many endpoints [ 51.015449][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 51.104319][ T855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 51.113340][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 51.122687][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 51.131760][ T855] netlink: 128 bytes leftover after parsing attributes in process `syz.1.181'. [ 51.163761][ T859] fuse: Unknown parameter '1844674407370955161501777777777777777777777' [ 51.173638][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.175017][ T845] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.185722][ T9] usb 4-1: config 1 has an invalid interface number: 182 but max is 0 [ 51.201441][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 51.201456][ T36] audit: type=1400 audit(1786446740.062:241): avc: denied { write } for pid=844 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.226993][ T9] usb 4-1: config 1 has no interface number 0 [ 51.233124][ T9] usb 4-1: config 1 interface 182 has no altsetting 0 [ 51.242838][ T9] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=8a.38 [ 51.252080][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.260224][ T9] usb 4-1: Product: syz [ 51.264449][ T9] usb 4-1: Manufacturer: syz [ 51.269146][ T9] usb 4-1: SerialNumber: syz [ 51.284425][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.296934][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.309434][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.322159][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.335121][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.347564][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.360988][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.373427][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.385941][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.398590][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=862 comm=syz.1.184 [ 51.478823][ T9] usb 4-1: MBOX3: Invalid descriptor size=18. [ 51.489807][ T9] usb 4-1: USB disconnect, device number 11 [ 51.800360][ T310] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 51.811616][ T845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.821382][ T845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.831901][ T310] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 51.843237][ T310] usb 3-1: USB disconnect, device number 13 [ 52.023979][ T36] audit: type=1400 audit(1786446740.892:242): avc: denied { getopt } for pid=866 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.024580][ T867] overlayfs: failed to resolve './file2': -2 [ 52.387858][ T872] netlink: 44 bytes leftover after parsing attributes in process `syz.2.188'. [ 52.397025][ T872] netlink: 43 bytes leftover after parsing attributes in process `syz.2.188'. [ 52.406032][ T872] netlink: 'syz.2.188': attribute type 6 has an invalid length. [ 52.413989][ T872] netlink: 'syz.2.188': attribute type 5 has an invalid length. [ 52.421721][ T872] netlink: 43 bytes leftover after parsing attributes in process `syz.2.188'. [ 52.886417][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 53.037604][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.050914][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.060843][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.074664][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.084083][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.093071][ T9] usb 3-1: config 0 descriptor?? [ 53.224467][ T36] audit: type=1400 audit(1786446742.091:243): avc: denied { create } for pid=894 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 53.248853][ T895] rust_binder: Write failure EFAULT in pid:144 [ 53.249591][ T36] audit: type=1400 audit(1786446742.121:244): avc: denied { getopt } for pid=894 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.312083][ T901] SELinux: policydb version -966204110 does not match my version range 15-33 [ 53.321062][ T36] audit: type=1400 audit(1786446742.181:245): avc: denied { load_policy } for pid=900 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.341132][ T901] SELinux: failed to load policy [ 53.354014][ T36] audit: type=1400 audit(1786446742.221:246): avc: denied { ioctl } for pid=900 comm="syz.3.202" path="pid:[4026532459]" dev="nsfs" ino=4026532459 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.519331][ T9] plantronics 0003:047F:FFFF.000C: unknown global tag 0xe [ 53.528674][ T9] plantronics 0003:047F:FFFF.000C: item 0 2 1 14 parsing failed [ 53.536536][ T9] plantronics 0003:047F:FFFF.000C: parse failed [ 53.543135][ T9] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 53.587020][ T36] audit: type=1400 audit(1786446742.461:247): avc: denied { write } for pid=906 comm="syz.0.205" name="dynamic_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 53.623709][ T909] 9pnet_fd: Insufficient options for proto=fd [ 53.629912][ T310] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 53.800723][ T310] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.816210][ T310] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.829661][ T310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 53.836747][ T310] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 53.846507][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.860258][ T310] usb 4-1: config 0 descriptor?? [ 54.067981][ T903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.072285][ T36] audit: type=1400 audit(1786446742.941:248): avc: denied { nlmsg_read } for pid=880 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 54.076582][ T903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.099607][ T36] audit: type=1400 audit(1786446742.971:249): avc: denied { ioctl } for pid=880 comm="syz.2.192" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.314329][ T924] overlayfs: failed to clone upperpath [ 54.333183][ T310] input: HID 17ef:6062 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6062.000D/input/input8 [ 54.354397][ T310] lenovo 0003:17EF:6062.000D: input,hidraw0: USB HID v80.00 Joystick [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 54.379349][ T928] netlink: 'syz.1.213': attribute type 4 has an invalid length. [ 54.389899][ T928] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 54.397862][ T928] netlink: 3613 bytes leftover after parsing attributes in process `syz.1.213'. [ 54.413664][ T931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.422343][ T931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.431774][ T931] device-mapper: ioctl: Invalid data size in the ioctl structure: 4218159104 [ 54.472737][ T36] audit: type=1400 audit(1786446743.341:250): avc: denied { wake_alarm } for pid=938 comm="syz.1.218" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.532106][ T310] usb 4-1: USB disconnect, device number 12 [ 54.996555][ T947] kvm: kvm [946]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 55.005681][ T947] kvm: kvm [946]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 55.017219][ T947] kvm: kvm [946]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 55.029217][ T947] kvm: kvm [946]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 55.038387][ T947] kvm: kvm [946]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 55.111735][ T953] FAULT_INJECTION: forcing a failure. [ 55.111735][ T953] name failslab, interval 1, probability 0, space 0, times 0 [ 55.124487][ T953] CPU: 0 UID: 0 PID: 953 Comm: syz.0.223 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 55.124567][ T953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.124579][ T953] Call Trace: [ 55.124585][ T953] [ 55.124593][ T953] __dump_stack+0x21/0x30 [ 55.124625][ T953] dump_stack_lvl+0x140/0x1c0 [ 55.124650][ T953] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.124675][ T953] ? selinux_file_permission+0x318/0xb60 [ 55.124696][ T953] dump_stack+0x19/0x20 [ 55.124720][ T953] should_fail_ex+0x3c2/0x510 [ 55.124742][ T953] should_failslab+0xac/0x100 [ 55.124766][ T953] __kmalloc_cache_noprof+0x41/0x470 [ 55.124787][ T953] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 55.124807][ T953] io_ring_ctx_alloc+0x61/0x1dc0 [ 55.124826][ T953] ? __cfi_vfs_write+0x10/0x10 [ 55.124846][ T953] io_uring_create+0x2e0/0x13f0 [ 55.124865][ T953] ? __kasan_check_write+0x18/0x20 [ 55.124884][ T953] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 55.124909][ T953] ? __kasan_check_write+0x18/0x20 [ 55.124928][ T953] ? __x64_sys_io_uring_setup+0x80/0x80 [ 55.124955][ T953] ? __kasan_check_read+0x15/0x20 [ 55.124974][ T953] __x64_sys_io_uring_setup+0x5f/0x80 [ 55.124999][ T953] x64_sys_call+0x22c0/0x2ee0 [ 55.125016][ T953] do_syscall_64+0x57/0xf0 [ 55.125038][ T953] ? clear_bhb_loop+0x50/0xa0 [ 55.125064][ T953] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.125089][ T953] RIP: 0033:0x7fa874d9e0d9 [ 55.125105][ T953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.125122][ T953] RSP: 002b:00007fa8737e2ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 55.125145][ T953] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fa874d9e0d9 [ 55.125159][ T953] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 55.125172][ T953] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 55.125185][ T953] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 55.125199][ T953] R13: 0000200000000b10 R14: 00007fa8737e2fd8 R15: 0000000000000000 [ 55.125229][ T953] [ 55.436575][ T969] Invalid ELF header type: 2 != 1 [ 55.722802][ T9] usb 3-1: USB disconnect, device number 14 [ 55.781425][ T997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.790793][ T997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.799832][ T997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.810192][ T997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.937999][ T335] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 56.109331][ T335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.119755][ T335] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 56.135693][ T335] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 56.144917][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.153446][ T335] usb 4-1: Product: syz [ 56.157902][ T335] usb 4-1: Manufacturer: syz [ 56.158658][ T1027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.251'. [ 56.162556][ T335] usb 4-1: SerialNumber: syz [ 56.178501][ T335] usb-storage 4-1:1.0: USB Mass Storage device detected [ 56.186378][ T335] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 56.195042][ T335] scsi host1: usb-storage 4-1:1.0 [ 56.278178][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 56.380824][ T1032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.382222][ T992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 56.390169][ T1032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.402037][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 56.402054][ T36] audit: type=1400 audit(1786446745.270:264): avc: denied { write } for pid=991 comm="syz.3.237" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.420523][ T992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.443850][ T992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.448234][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 56.457532][ T10] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 56.467211][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 56.474969][ T10] usb 3-1: can't read configurations, error -61 [ 56.486593][ T310] usb 4-1: USB disconnect, device number 13 [ 56.608315][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 56.765925][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 56.781742][ T10] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 56.811909][ T1042] netlink: 164 bytes leftover after parsing attributes in process `syz.1.256'. [ 56.867094][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 56.877096][ T10] usb 3-1: can't read configurations, error -61 [ 56.885066][ T10] usb usb3-port1: attempt power cycle [ 56.930216][ T1055] bridge0: entered allmulticast mode [ 56.937382][ T1055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 56.946263][ T1055] bridge_slave_1: left allmulticast mode [ 56.951941][ T1055] bridge_slave_1: left promiscuous mode [ 56.957597][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.965358][ T1055] bridge_slave_0: left allmulticast mode [ 56.971117][ T1055] bridge_slave_0: left promiscuous mode [ 56.976715][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.985447][ T1055] bridge0 (unregistering): left allmulticast mode [ 57.027894][ T36] audit: type=1400 audit(1786446745.890:265): avc: denied { getopt } for pid=1058 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.128618][ T1071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.268'. [ 57.137584][ T1071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.268'. [ 57.163382][ T1071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.268'. [ 57.169867][ T1073] selinux_netlink_send: 1400 callbacks suppressed [ 57.169889][ T1073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1073 comm=syz.3.269 [ 57.188638][ T1071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.268'. [ 57.208653][ T1071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.268'. [ 57.239616][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 57.261995][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 57.271365][ T10] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 57.290419][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 57.298410][ T10] usb 3-1: can't read configurations, error -61 [ 57.438710][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 57.438710][ T310] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 57.469083][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 57.474726][ T10] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 57.483979][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 57.491692][ T10] usb 3-1: can't read configurations, error -61 [ 57.498236][ T10] usb usb3-port1: unable to enumerate USB device [ 57.598781][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 57.605240][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.615436][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.625768][ T310] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.634874][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.642961][ T310] usb 4-1: Product: syz [ 57.647171][ T310] usb 4-1: Manufacturer: syz [ 57.651789][ T310] usb 4-1: SerialNumber: syz [ 57.859871][ T310] usb 4-1: 0:2 : does not exist [ 57.866582][ T310] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 57.877803][ T310] usb 4-1: USB disconnect, device number 14 [ 58.629280][ T310] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 58.759502][ T310] usb 4-1: device descriptor read/64, error -71 [ 58.999468][ T310] usb 4-1: device descriptor read/64, error -71 [ 59.142871][ T1117] FAULT_INJECTION: forcing a failure. [ 59.142871][ T1117] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.156193][ T1117] CPU: 1 UID: 0 PID: 1117 Comm: syz.2.287 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 59.156224][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.156236][ T1117] Call Trace: [ 59.156241][ T1117] [ 59.156249][ T1117] __dump_stack+0x21/0x30 [ 59.156278][ T1117] dump_stack_lvl+0x140/0x1c0 [ 59.156302][ T1117] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.156326][ T1117] ? __seccomp_filter+0x897/0x1b70 [ 59.156349][ T1117] dump_stack+0x19/0x20 [ 59.156371][ T1117] should_fail_ex+0x3c2/0x510 [ 59.156392][ T1117] should_fail+0xf/0x20 [ 59.156409][ T1117] should_fail_usercopy+0x1e/0x30 [ 59.156429][ T1117] _copy_from_user+0x20/0xa0 [ 59.156453][ T1117] __se_sys_io_uring_setup+0x170/0x2b0 [ 59.156486][ T1117] ? __x64_sys_io_uring_setup+0x80/0x80 [ 59.156511][ T1117] ? __secure_computing+0xee/0x2b0 [ 59.156532][ T1117] __x64_sys_io_uring_setup+0x5f/0x80 [ 59.156555][ T1117] x64_sys_call+0x22c0/0x2ee0 [ 59.156572][ T1117] do_syscall_64+0x57/0xf0 [ 59.156592][ T1117] ? clear_bhb_loop+0x50/0xa0 [ 59.156616][ T1117] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.156638][ T1117] RIP: 0033:0x7f874af9e0d9 [ 59.156654][ T1117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.156669][ T1117] RSP: 002b:00007f874be4bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 59.156690][ T1117] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007f874af9e0d9 [ 59.156704][ T1117] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 00000000000003c9 [ 59.156717][ T1117] RBP: 0000200000000500 R08: 0000000000000000 R09: 0000000000000000 [ 59.156729][ T1117] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 59.156742][ T1117] R13: 0000200000000590 R14: 00007f874be4bfd8 R15: 0000000000000000 [ 59.156757][ T1117] [ 59.399701][ T310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 59.539733][ T310] usb 4-1: device descriptor read/64, error -71 [ 59.686921][ T1141] netlink: 'syz.0.297': attribute type 4 has an invalid length. [ 59.694840][ T1141] __nla_validate_parse: 28 callbacks suppressed [ 59.694859][ T1141] netlink: 17 bytes leftover after parsing attributes in process `syz.0.297'. [ 59.789894][ T310] usb 4-1: device descriptor read/64, error -71 [ 59.900012][ T310] usb usb4-port1: attempt power cycle [ 60.250092][ T310] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 60.271280][ T310] usb 4-1: device descriptor read/8, error -71 [ 60.401249][ T310] usb 4-1: device descriptor read/8, error -71 [ 60.407510][ T36] audit: type=1400 audit(1786446749.278:266): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.416308][ T1162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1562 sclass=netlink_route_socket pid=1162 comm=syz.2.306 [ 60.452111][ T36] audit: type=1400 audit(1786446749.278:267): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=1994 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.476574][ T36] audit: type=1400 audit(1786446749.278:268): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1994 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.518437][ T36] audit: type=1400 audit(1786446749.278:269): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1994 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.545016][ T36] audit: type=1400 audit(1786446749.388:270): avc: denied { read } for pid=1165 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.583005][ T36] audit: type=1400 audit(1786446749.388:271): avc: denied { open } for pid=1165 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.610564][ T36] audit: type=1400 audit(1786446749.388:272): avc: denied { getattr } for pid=1165 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.629053][ T1171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.649869][ T1171] rust_binder: 1170:1171 got transaction to invalid handle 1 [ 60.657349][ T36] audit: type=1400 audit(1786446749.458:273): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.683627][ T310] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 60.691264][ T1171] rust_binder: 1170:1171 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 60.712050][ T310] usb 4-1: device descriptor read/8, error -71 [ 60.724135][ T335] rust_binder: 1170: undelivered TRANSACTION_ERROR: 29201 [ 60.851557][ T310] usb 4-1: device descriptor read/8, error -71 [ 60.964173][ T1204] netlink: 308 bytes leftover after parsing attributes in process `syz.1.313'. [ 60.975250][ T310] usb usb4-port1: unable to enumerate USB device [ 60.983269][ T1204] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 61.070709][ T1210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.081547][ T1210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.407547][ T1225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 61.590757][ T411] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 61.603058][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 61.603077][ T36] audit: type=1400 audit(1786446750.477:286): avc: denied { mount } for pid=1228 comm="syz.1.324" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 61.632534][ T1229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 61.741850][ T411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.752037][ T411] usb 3-1: config 0 has no interfaces? [ 61.757706][ T411] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.766821][ T411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.775486][ T411] usb 3-1: config 0 descriptor?? [ 61.830930][ T335] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 61.841859][ T1240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.850396][ T1240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.960987][ T335] usb 4-1: device descriptor read/64, error -71 [ 62.183904][ T1223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.192595][ T1223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.202055][ T335] usb 4-1: device descriptor read/64, error -71 [ 62.203202][ T310] usb 3-1: USB disconnect, device number 19 [ 62.441191][ T335] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 62.571229][ T335] usb 4-1: device descriptor read/64, error -71 [ 62.769992][ T1260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1260 comm=syz.1.338 [ 62.811376][ T335] usb 4-1: device descriptor read/64, error -71 [ 62.926344][ T36] audit: type=1400 audit(1786446751.797:287): avc: denied { setopt } for pid=1269 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.946867][ T335] usb usb4-port1: attempt power cycle [ 62.961770][ T1272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.344'. [ 63.111545][ T310] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 63.262946][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.273207][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.284225][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.294014][ T310] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 63.301601][ T335] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 63.303112][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.321721][ T310] usb 3-1: config 0 descriptor?? [ 63.329518][ T335] usb 4-1: device descriptor read/8, error -71 [ 63.369647][ T1282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1282 comm=syz.1.348 [ 63.394833][ T36] audit: type=1400 audit(1786446752.266:288): avc: denied { create } for pid=1283 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.462757][ T335] usb 4-1: device descriptor read/8, error -71 [ 63.701807][ T335] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 63.722895][ T335] usb 4-1: device descriptor read/8, error -71 [ 63.841986][ T310] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf3 found [ 63.849757][ T310] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf4 found [ 63.863120][ T335] usb 4-1: device descriptor read/8, error -71 [ 63.897706][ T1299] SELinux: failed to load policy [ 63.930372][ T1301] FAULT_INJECTION: forcing a failure. [ 63.930372][ T1301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.943629][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: syz.0.355 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 63.943667][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.943680][ T1301] Call Trace: [ 63.943688][ T1301] [ 63.943695][ T1301] __dump_stack+0x21/0x30 [ 63.943729][ T1301] dump_stack_lvl+0x140/0x1c0 [ 63.943756][ T1301] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.943783][ T1301] ? check_stack_object+0x138/0x150 [ 63.943806][ T1301] dump_stack+0x19/0x20 [ 63.943838][ T1301] should_fail_ex+0x3c2/0x510 [ 63.943862][ T1301] should_fail+0xf/0x20 [ 63.943882][ T1301] should_fail_usercopy+0x1e/0x30 [ 63.943906][ T1301] _copy_to_user+0x24/0xa0 [ 63.943933][ T1301] simple_read_from_buffer+0xed/0x160 [ 63.943961][ T1301] proc_fail_nth_read+0x1aa/0x220 [ 63.943990][ T1301] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 63.944019][ T1301] ? bpf_lsm_file_permission+0xd/0x20 [ 63.944046][ T1301] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 63.944074][ T1301] vfs_read+0x288/0xc70 [ 63.944095][ T1301] ? __cfi_vfs_read+0x10/0x10 [ 63.944114][ T1301] ? __kasan_check_write+0x18/0x20 [ 63.944134][ T1301] ? mutex_lock+0x97/0x1d0 [ 63.944161][ T1301] ? __cfi_mutex_lock+0x10/0x10 [ 63.944191][ T1301] ksys_read+0x145/0x260 [ 63.944211][ T1301] ? __cfi_ksys_read+0x10/0x10 [ 63.944231][ T1301] ? fdget+0x188/0x1e0 [ 63.944254][ T1301] ? __kasan_check_read+0x15/0x20 [ 63.944274][ T1301] __x64_sys_read+0x7f/0x90 [ 63.944295][ T1301] x64_sys_call+0x2638/0x2ee0 [ 63.944313][ T1301] do_syscall_64+0x57/0xf0 [ 63.944335][ T1301] ? clear_bhb_loop+0x50/0xa0 [ 63.944362][ T1301] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.944388][ T1301] RIP: 0033:0x7fa874d5e90e [ 63.944406][ T1301] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.944423][ T1301] RSP: 002b:00007fa8737e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.944446][ T1301] RAX: ffffffffffffffda RBX: 00007fa8737e36c0 RCX: 00007fa874d5e90e [ 63.944462][ T1301] RDX: 000000000000000f RSI: 00007fa8737e30a0 RDI: 0000000000000003 [ 63.944476][ T1301] RBP: 00007fa8737e3090 R08: 0000000000000000 R09: 0000000000000000 [ 63.944489][ T1301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.944502][ T1301] R13: 00007fa875026038 R14: 00007fa875025fa0 R15: 00007fffa4263968 [ 63.944520][ T1301] [ 64.198362][ T1295] kvm: kvm [1265]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 64.207248][ T1295] kvm: kvm [1265]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 64.235123][ T335] usb usb4-port1: unable to enumerate USB device [ 64.245602][ T9] usb 3-1: USB disconnect, device number 20 [ 64.255726][ T36] audit: type=1400 audit(1786446753.126:289): avc: denied { bind } for pid=1302 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.304101][ T1303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.312715][ T1303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.042497][ T411] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 65.193867][ T411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.204946][ T411] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.214723][ T411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.224023][ T411] usb 3-1: config 0 descriptor?? [ 65.244181][ T36] audit: type=1400 audit(1786446754.115:290): avc: denied { search } for pid=1332 comm="syz.3.368" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 65.287360][ T1333] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.303524][ T36] audit: type=1400 audit(1786446754.175:291): avc: denied { create } for pid=1332 comm="syz.3.368" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.324998][ T1333] kvm: pic: level sensitive irq not supported [ 65.325111][ T1333] kvm: pic: non byte read [ 65.335952][ T1333] kvm: pic: level sensitive irq not supported [ 65.336096][ T1333] kvm: pic: non byte read [ 65.426249][ T36] audit: type=1400 audit(1786446754.295:292): avc: denied { write } for pid=1349 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.460034][ T36] audit: type=1400 audit(1786446754.325:293): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.649795][ T411] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 65.659376][ T411] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input9 [ 65.727444][ T411] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 65.822935][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 65.905740][ T36] audit: type=1400 audit(1786446754.775:294): avc: denied { shutdown } for pid=1317 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.927501][ T1366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1366 comm=syz.2.362 [ 65.952358][ T335] usb 3-1: USB disconnect, device number 21 [ 65.972926][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 65.981736][ T36] audit: type=1400 audit(1786446754.845:295): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 66.003301][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 66.012950][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 66.022098][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.033834][ T9] usb 4-1: Product: syz [ 66.038380][ T9] usb 4-1: Manufacturer: syz [ 66.043098][ T9] usb 4-1: SerialNumber: syz [ 66.067219][ T1376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 66.160929][ T1384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1384 comm=syz.1.388 [ 66.254629][ T1364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.263304][ T1364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.272369][ T9] usb 4-1: Fast Track Pro config OK [ 66.278725][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 66.288105][ T9] usb 4-1: USB disconnect, device number 23 [ 66.353151][ T335] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 66.503204][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 66.509584][ T335] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.520761][ T335] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.530765][ T335] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 66.543778][ T335] usb 3-1: config 0 interface 0 has no altsetting 0 [ 66.550500][ T335] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 66.559602][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.568183][ T335] usb 3-1: config 0 descriptor?? [ 66.976652][ T36] audit: type=1400 audit(1786446755.845:296): avc: denied { execute } for pid=1369 comm="syz.2.381" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 67.123963][ T335] hid (null): report_id 34376 is invalid [ 67.129707][ T335] hid (null): invalid report_size 29285 [ 67.139271][ T335] hid (null): invalid report_size 29285 [ 67.254568][ T335] hid (null): report_id 34376 is invalid [ 67.260302][ T335] hid (null): report_id 0 is invalid [ 67.265696][ T335] hid (null): global environment stack underflow [ 67.272185][ T335] hid (null): unknown global tag 0xc [ 67.277714][ T335] hid (null): unknown global tag 0xe [ 67.284543][ T335] hid (null): unknown global tag 0xc [ 67.289920][ T335] hid (null): unknown global tag 0xc [ 67.301482][ T335] usb 3-1: USB disconnect, device number 22 [ 67.382636][ T1406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61795 sclass=netlink_route_socket pid=1406 comm=syz.0.395 [ 67.483607][ T1410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1410 comm=syz.1.397 [ 67.508890][ T1412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1412 comm=syz.1.398 [ 67.713865][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 67.784353][ T1425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 67.875518][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 67.884663][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.054109][ T314] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 68.094621][ T1437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1437 comm=syz.1.407 [ 68.107630][ T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 68.181677][ T1442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.191259][ T1442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.194208][ T314] usb 3-1: device descriptor read/64, error -71 [ 68.206079][ T1442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1442 comm=syz.0.408 [ 68.294884][ T1458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 68.308247][ T310] usb 4-1: USB disconnect, device number 24 [ 68.444237][ T314] usb 3-1: device descriptor read/64, error -71 [ 68.623943][ T36] audit: type=1400 audit(1786446757.484:297): avc: denied { load_policy } for pid=1472 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.635118][ T1473] SELinux: failed to load policy [ 68.663466][ T1475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.672732][ T1475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.704489][ T314] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 68.834371][ T314] usb 3-1: device descriptor read/64, error -71 [ 68.842146][ T1480] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 69.074545][ T314] usb 3-1: device descriptor read/64, error -71 [ 69.094501][ T335] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 69.128573][ T1458] 9pnet_fd: p9_fd_create_tcp (1458): problem connecting socket to 127.0.0.1 [ 69.184660][ T314] usb usb3-port1: attempt power cycle [ 69.251011][ T1494] SELinux: failed to load policy [ 69.254587][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 69.262883][ T335] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 69.277118][ T335] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 69.286485][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.288082][ T1497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.294498][ T335] usb 4-1: Product: syz [ 69.294516][ T335] usb 4-1: Manufacturer: syz [ 69.303919][ T1497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.312491][ T335] usb 4-1: SerialNumber: syz [ 69.327235][ T335] r8152-cfgselector 4-1: Unknown version 0x0000 [ 69.333490][ T335] r8152-cfgselector 4-1: config 0 descriptor?? [ 69.524739][ T314] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 69.545749][ T314] usb 3-1: device descriptor read/8, error -71 [ 69.575164][ T36] audit: type=1400 audit(1786446758.443:298): avc: denied { ioctl } for pid=1478 comm="syz.3.424" path="socket:[16587]" dev="sockfs" ino=16587 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.604588][ T335] r8152-cfgselector 4-1: Unknown version 0x0000 [ 69.611351][ T335] r8152-cfgselector 4-1: bad CDC descriptors [ 69.620197][ T335] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 69.675822][ T314] usb 3-1: device descriptor read/8, error -71 [ 69.849570][ T1508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.433'. [ 69.870151][ T1511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.878671][ T1511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.903636][ T36] audit: type=1400 audit(1786446758.763:299): avc: denied { ioctl } for pid=1512 comm="syz.0.435" path="socket:[16621]" dev="sockfs" ino=16621 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.928261][ T314] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 69.943175][ T1515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.952116][ T1515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.956056][ T314] usb 3-1: device descriptor read/8, error -71 [ 69.962282][ T1515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.978061][ T1515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.096075][ T314] usb 3-1: device descriptor read/8, error -71 [ 70.205439][ T314] usb usb3-port1: unable to enumerate USB device [ 70.375175][ T335] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 70.510567][ T1524] SELinux: failed to load policy [ 70.527660][ T1526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.535216][ T335] usb 4-1: Using ep0 maxpacket: 8 [ 70.536651][ T1526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.542610][ T335] usb 4-1: config 248 has an invalid interface number: 115 but max is 2 [ 70.558499][ T335] usb 4-1: config 248 has an invalid interface number: 241 but max is 2 [ 70.567167][ T335] usb 4-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 70.577452][ T335] usb 4-1: config 248 has 2 interfaces, different from the descriptor's value: 3 [ 70.586603][ T335] usb 4-1: config 248 has no interface number 0 [ 70.592854][ T335] usb 4-1: config 248 has no interface number 1 [ 70.599181][ T335] usb 4-1: config 248 interface 115 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 70.610511][ T335] usb 4-1: config 248 interface 115 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 1023 [ 70.620963][ T335] usb 4-1: config 248 interface 241 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 70.631834][ T335] usb 4-1: config 248 interface 241 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 70.645136][ T335] usb 4-1: config 248 interface 115 has no altsetting 0 [ 70.652141][ T335] usb 4-1: config 248 interface 241 has no altsetting 0 [ 70.660418][ T335] usb 4-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=5f.a1 [ 70.669488][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.677506][ T335] usb 4-1: Product: syz [ 70.681753][ T335] usb 4-1: Manufacturer: syz [ 70.687092][ T335] usb 4-1: SerialNumber: syz [ 70.692751][ T1520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.849926][ T1528] SELinux: failed to load policy [ 70.883261][ T1532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1532 comm=syz.1.443 [ 70.903563][ T335] usb-storage 4-1:248.115: USB Mass Storage device detected [ 70.922495][ T36] audit: type=1400 audit(1786446759.783:300): avc: denied { search } for pid=1535 comm="syz.1.445" name="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.944820][ T36] audit: type=1400 audit(1786446759.793:301): avc: denied { read } for pid=1535 comm="syz.1.445" name="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.945433][ T335] usb-storage 4-1:248.115: Quirks match for vid 4971 pid 8017: 4000000 [ 70.967028][ T36] audit: type=1400 audit(1786446759.793:302): avc: denied { open } for pid=1535 comm="syz.1.445" path="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.990638][ T1541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=60 sclass=netlink_audit_socket pid=1541 comm=syz.1.446 [ 71.009808][ T1541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=1541 comm=syz.1.446 [ 71.050100][ T335] usb-storage 4-1:248.241: USB Mass Storage device detected [ 71.064653][ T335] usb-storage 4-1:248.241: Quirks match for vid 4971 pid 8017: 4000000 [ 71.081363][ T1546] SELinux: failed to load policy [ 71.110877][ T335] usb 4-1: USB disconnect, device number 26 [ 71.112773][ T36] audit: type=1400 audit(1786446759.972:303): avc: denied { read write } for pid=1550 comm="syz.2.450" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 71.141175][ T36] audit: type=1400 audit(1786446759.972:304): avc: denied { open } for pid=1550 comm="syz.2.450" path="/85/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 71.166028][ T36] audit: type=1400 audit(1786446759.982:305): avc: denied { sqpoll } for pid=1550 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.241203][ T1561] SELinux: failed to load policy [ 71.399425][ T1569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'. [ 71.431274][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.439944][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.465851][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 71.616954][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.624620][ T1575] SELinux: failed to load policy [ 71.628054][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.642977][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.651889][ T9] usb 3-1: config 0 descriptor?? [ 71.709998][ T1580] capability: warning: `syz.1.460' uses 32-bit capabilities (legacy support in use) [ 71.782268][ T1590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1590 comm=syz.3.465 [ 71.812503][ T477] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.071996][ T9] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 72.077288][ T1611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.089338][ T1611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.098353][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input10 [ 72.196189][ T9] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 72.322837][ T1614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1614 comm=syz.2.452 [ 72.536424][ T314] usb 3-1: USB disconnect, device number 27 [ 72.659526][ T1618] incfs: Error accessing: ./file0. [ 72.664809][ T1618] incfs: mount failed -20 [ 72.741757][ T1625] SELinux: failed to load policy [ 72.898660][ T1633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.907379][ T1633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.918895][ T1633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1633 comm=syz.0.482 [ 72.944884][ T1635] Invalid ELF header type: 2 != 1 [ 72.962398][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.970929][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.976440][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 73.137928][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 73.147055][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.358085][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 73.569832][ T9] usb 3-1: USB disconnect, device number 28 [ 73.638660][ T1651] process 'syz.0.488' launched './file0' with NULL argv: empty string added [ 73.647651][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 73.647669][ T36] audit: type=1400 audit(1786446762.511:323): avc: denied { execute_no_trans } for pid=1649 comm="syz.0.488" path="/117/file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.814019][ T1657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1657 comm=syz.1.491 [ 73.865812][ T1665] netlink: 'syz.1.495': attribute type 13 has an invalid length. [ 73.883283][ T36] audit: type=1400 audit(1786446762.741:324): avc: denied { watch watch_reads } for pid=1666 comm="syz.1.496" path="/193" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.906632][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.906888][ T342] Bluetooth: hci0: command 0x1003 tx timeout [ 73.965365][ T1671] SELinux: failed to load policy [ 73.973270][ T1677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1677 comm=syz.1.500 [ 74.050020][ T36] audit: type=1400 audit(1786446762.911:325): avc: denied { write } for pid=1685 comm="syz.1.504" name="file2" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.077019][ T36] audit: type=1400 audit(1786446762.911:326): avc: denied { open } for pid=1685 comm="syz.1.504" path="/199/file2" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.113331][ T36] audit: type=1400 audit(1786446762.911:327): avc: denied { cmd } for pid=1685 comm="syz.1.504" path="/199/file2" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 74.205347][ T36] audit: type=1400 audit(1786446763.061:328): avc: denied { associate } for pid=1697 comm="syz.3.509" name="blkio.bfq.time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.258522][ T1709] 9pnet: Could not find request transport: rdma [ 74.265419][ T36] audit: type=1400 audit(1786446763.121:329): avc: denied { create } for pid=1707 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.284961][ T36] audit: type=1400 audit(1786446763.121:330): avc: denied { connect } for pid=1707 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.329526][ T477] tipc: Subscription rejected, illegal request [ 74.336662][ T1709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=1709 comm=syz.1.514 [ 74.477294][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 74.507265][ T335] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 74.539530][ T1723] netlink: 'syz.0.519': attribute type 25 has an invalid length. [ 74.560956][ T36] audit: type=1400 audit(1786446763.421:331): avc: denied { listen } for pid=1724 comm="syz.0.520" path="/120/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 74.583011][ T36] audit: type=1400 audit(1786446763.421:332): avc: denied { ioctl } for pid=1724 comm="syz.0.520" path="socket:[17529]" dev="sockfs" ino=17529 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.628296][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.646441][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.655648][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.664691][ T335] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 74.674345][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.682787][ T9] usb 3-1: config 0 descriptor?? [ 74.682907][ T1727] FAULT_INJECTION: forcing a failure. [ 74.682907][ T1727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.701544][ T1727] CPU: 1 UID: 0 PID: 1727 Comm: syz.0.521 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 74.701574][ T1727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.701585][ T1727] Call Trace: [ 74.701590][ T1727] [ 74.701598][ T1727] __dump_stack+0x21/0x30 [ 74.701629][ T1727] dump_stack_lvl+0x140/0x1c0 [ 74.701653][ T1727] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.701679][ T1727] ? check_stack_object+0x138/0x150 [ 74.701700][ T1727] dump_stack+0x19/0x20 [ 74.701724][ T1727] should_fail_ex+0x3c2/0x510 [ 74.701744][ T1727] should_fail+0xf/0x20 [ 74.701764][ T1727] should_fail_usercopy+0x1e/0x30 [ 74.701785][ T1727] _copy_to_user+0x24/0xa0 [ 74.701811][ T1727] simple_read_from_buffer+0xed/0x160 [ 74.701847][ T1727] proc_fail_nth_read+0x1aa/0x220 [ 74.701868][ T1727] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 74.701883][ T1727] ? bpf_lsm_file_permission+0xd/0x20 [ 74.701897][ T1727] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 74.701918][ T1727] vfs_read+0x288/0xc70 [ 74.701937][ T1727] ? __cfi_vfs_read+0x10/0x10 [ 74.701956][ T1727] ? __kasan_check_write+0x18/0x20 [ 74.701975][ T1727] ? mutex_lock+0x97/0x1d0 [ 74.702001][ T1727] ? __cfi_mutex_lock+0x10/0x10 [ 74.702020][ T1727] ksys_read+0x145/0x260 [ 74.702031][ T1727] ? xfd_validate_state+0x68/0x140 [ 74.702046][ T1727] ? __cfi_ksys_read+0x10/0x10 [ 74.702058][ T1727] ? __kasan_check_write+0x18/0x20 [ 74.702072][ T1727] ? fpregs_restore_userregs+0x11c/0x260 [ 74.702094][ T1727] __x64_sys_read+0x7f/0x90 [ 74.702113][ T1727] x64_sys_call+0x2638/0x2ee0 [ 74.702131][ T1727] do_syscall_64+0x57/0xf0 [ 74.702152][ T1727] ? clear_bhb_loop+0x50/0xa0 [ 74.702170][ T1727] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.702185][ T1727] RIP: 0033:0x7fa874d5e90e [ 74.702196][ T1727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.702207][ T1727] RSP: 002b:00007fa8737e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.702225][ T1727] RAX: ffffffffffffffda RBX: 00007fa8737e36c0 RCX: 00007fa874d5e90e [ 74.702240][ T1727] RDX: 000000000000000f RSI: 00007fa8737e30a0 RDI: 0000000000000006 [ 74.702252][ T1727] RBP: 00007fa8737e3090 R08: 0000000000000000 R09: 0000000000000000 [ 74.702265][ T1727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.702277][ T1727] R13: 00007fa875026038 R14: 00007fa875025fa0 R15: 00007fffa4263968 [ 74.702294][ T1727] [ 74.905327][ T335] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 75.025574][ T1729] SELinux: failed to load policy [ 75.095792][ T9] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 75.107830][ T335] usb 4-1: USB disconnect, device number 27 [ 75.121742][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0012/input/input11 [ 75.221143][ T9] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 75.353475][ T1746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1746 comm=syz.2.510 [ 75.368561][ T335] usb 3-1: USB disconnect, device number 29 [ 75.443259][ T1753] SELinux: failed to load policy [ 75.747837][ T335] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 75.764364][ T1780] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 75.774811][ T1780] SELinux: failed to load policy [ 75.831404][ T1782] cgroup: fork rejected by pids controller in /syz0 [ 75.857887][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 75.908124][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 75.937219][ T335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.953638][ T335] usb 3-1: config 2 has an invalid interface number: 171 but max is 0 [ 75.962070][ T335] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 75.971144][ T335] usb 3-1: config 2 has no interface number 1 [ 75.980229][ T335] usb 3-1: too many endpoints for config 2 interface 0 altsetting 51: 64, using maximum allowed: 30 [ 75.991126][ T335] usb 3-1: config 2 interface 0 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 76.004287][ T335] usb 3-1: config 2 interface 171 has no altsetting 0 [ 76.011193][ T335] usb 3-1: config 2 interface 0 has no altsetting 0 [ 76.021192][ T335] usb 3-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=d2.c0 [ 76.030415][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.038494][ T335] usb 3-1: Product: syz [ 76.042744][ T335] usb 3-1: Manufacturer: syz [ 76.047367][ T335] usb 3-1: SerialNumber: syz [ 76.052765][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.063943][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.074980][ T411] usb 1-1: USB disconnect, device number 13 [ 76.076028][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.092638][ T9] usb 4-1: config 0 descriptor?? [ 76.293044][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.305762][ T1790] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.315975][ T1790] bridge_slave_0: entered allmulticast mode [ 76.327202][ T1790] bridge_slave_0: entered promiscuous mode [ 76.333910][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.356274][ T1790] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.363377][ T1790] bridge_slave_1: entered allmulticast mode [ 76.376802][ T1790] bridge_slave_1: entered promiscuous mode [ 76.462704][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.470099][ T1790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.477503][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.484605][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.520618][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.528039][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.536658][ T9] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 76.561752][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.568901][ T459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.577003][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0013/input/input12 [ 76.590037][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.597116][ T459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.641095][ T1790] veth0_vlan: entered promiscuous mode [ 76.655536][ T9] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 76.670974][ T1790] veth1_macvtap: entered promiscuous mode [ 76.797798][ T1804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1804 comm=syz.3.537 [ 76.857195][ T409] usb 4-1: USB disconnect, device number 28 [ 76.914087][ T335] usb 3-1: bad CDC descriptors [ 76.919517][ T335] ftdi_sio 3-1:2.171: FTDI USB Serial Device converter detected [ 76.927448][ T335] ftdi_sio ttyUSB0: unknown device type: 0xd2c0 [ 76.942363][ T1811] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 76.948612][ T335] ftdi_sio 3-1:2.0: FTDI USB Serial Device converter detected [ 76.952371][ T1811] SELinux: failed to load policy [ 76.965106][ T335] ftdi_sio ttyUSB1: unknown device type: 0xd2c0 [ 76.979092][ T335] usb 3-1: USB disconnect, device number 30 [ 76.992783][ T335] ftdi_sio 3-1:2.171: device disconnected [ 77.002553][ T335] ftdi_sio 3-1:2.0: device disconnected [ 77.258658][ T409] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 77.308625][ T411] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 77.408721][ T409] usb 4-1: Using ep0 maxpacket: 16 [ 77.415058][ T409] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 77.426148][ T409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.437084][ T409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.446929][ T409] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 77.460018][ T409] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 77.469090][ T409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.477631][ T409] usb 4-1: config 0 descriptor?? [ 77.483904][ T411] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 77.493339][ T411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.530598][ T1822] program syz.2.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.704574][ T411] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 77.888895][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 77.906135][ T314] usb 1-1: USB disconnect, device number 14 [ 78.006765][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 78.050151][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.061169][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.070437][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.079304][ T9] usb 3-1: config 0 descriptor?? [ 78.270393][ T409] usbhid 4-1:0.0: can't add hid device: -71 [ 78.276479][ T409] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 78.285351][ T409] usb 4-1: USB disconnect, device number 29 [ 78.438286][ T1834] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.447957][ T1834] SELinux: failed to load policy [ 78.493315][ T9] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 78.502888][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input13 [ 78.576657][ T9] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 78.754094][ T1851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1851 comm=syz.2.559 [ 78.785660][ T9] usb 3-1: USB disconnect, device number 31 [ 78.821101][ T1855] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.830878][ T1855] SELinux: failed to load policy [ 79.039457][ T409] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 79.191728][ T409] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 79.199541][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 79.201149][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.359623][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 79.366663][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 79.380725][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 79.389878][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.398078][ T9] usb 3-1: Product: syz [ 79.402331][ T9] usb 3-1: Manufacturer: 努忚쪩蜘琘ꄈ䧗荴뵰ⴧ亍恰ⶺ뚖霙䩄욒튙䍹遒祗㻿‴㐐基嶠냂왛ྮ្⸥麖今ꗌ廝赍앣핢㕯띨!ꮦ秽쀋鄝爞濌呤ⵦ捛ꯁ뾷退䔠⟕䘧赸燶ী帠䪜哙쾌袧蠳᫆泽繳ꊫ孠ㆩ᭭젂切৕鬴큅옉Յ䱨粉딞᳈艫޵奣魟喦ㅫ夀鷊顨ꩥ됞 [ 79.422152][ T409] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 79.451465][ T9] usb 3-1: SerialNumber: syz [ 79.552205][ T1882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1882 comm=syz.1.578 [ 79.577494][ T1884] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 79.587186][ T1884] SELinux: failed to load policy [ 79.604290][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 79.604310][ T36] audit: type=1400 audit(1786446768.468:340): avc: denied { write } for pid=1885 comm="syz.3.580" name="unix" dev="proc" ino=4026532505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.644015][ T314] usb 1-1: USB disconnect, device number 15 [ 79.867546][ T9] usb 3-1: 1:1: invalid format type 0x5d53 is detected, processed as PCM [ 79.877215][ T9] usb 3-1: 1:1 : sample bitwidth 127 in over sample bytes 7 [ 79.885845][ T9] usb 3-1: 1:1 : unsupported sample bitwidth 127 in 7 bytes [ 79.894218][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 79.904433][ T9] usb 3-1: unit 1 not found! [ 79.919189][ T9] usb 3-1: USB disconnect, device number 32 [ 79.930579][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.008375][ T36] audit: type=1326 audit(1786446768.868:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa06e59e0d9 code=0x0 [ 80.060204][ T36] audit: type=1326 audit(1786446768.928:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.085555][ T36] audit: type=1326 audit(1786446768.928:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.099739][ T1907] futex_wake_op: syz.3.587 tries to shift op by 32; fix this program [ 80.117361][ T36] audit: type=1326 audit(1786446768.928:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.149997][ T36] audit: type=1326 audit(1786446768.928:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.175540][ T36] audit: type=1326 audit(1786446768.928:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.200883][ T36] audit: type=1326 audit(1786446768.928:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.230240][ T36] audit: type=1326 audit(1786446768.928:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.240193][ T1918] FAULT_INJECTION: forcing a failure. [ 80.240193][ T1918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.255677][ T36] audit: type=1326 audit(1786446768.928:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.3.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06e59e0d9 code=0x7ffc0000 [ 80.268526][ T1918] CPU: 0 UID: 0 PID: 1918 Comm: syz.0.591 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 80.268552][ T1918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.268563][ T1918] Call Trace: [ 80.268570][ T1918] [ 80.268577][ T1918] __dump_stack+0x21/0x30 [ 80.268606][ T1918] dump_stack_lvl+0x140/0x1c0 [ 80.268629][ T1918] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.268653][ T1918] ? __kasan_check_write+0x18/0x20 [ 80.268672][ T1918] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 80.268692][ T1918] dump_stack+0x19/0x20 [ 80.268723][ T1918] should_fail_ex+0x3c2/0x510 [ 80.268744][ T1918] should_fail+0xf/0x20 [ 80.268762][ T1918] should_fail_usercopy+0x1e/0x30 [ 80.268782][ T1918] _copy_from_user+0x20/0xa0 [ 80.268804][ T1918] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 80.268822][ T1918] ? avc_has_perm+0x155/0x240 [ 80.268842][ T1918] ? __cfi_avc_has_perm+0x10/0x10 [ 80.268861][ T1918] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 80.268880][ T1918] ? selinux_file_open+0x46c/0x630 [ 80.268898][ T1918] ? __cfi_selinux_file_open+0x10/0x10 [ 80.268918][ T1918] ? is_bpf_text_address+0x17b/0x1a0 [ 80.268944][ T1918] ? kernel_text_address+0xa9/0xe0 [ 80.268967][ T1918] ? __kernel_text_address+0x11/0x40 [ 80.268989][ T1918] ? __asan_set_shadow_00+0x12/0x20 [ 80.269012][ T1918] ? do_vfs_ioctl+0x182d/0x2010 [ 80.269033][ T1918] ? arch_stack_walk+0x10a/0x170 [ 80.269051][ T1918] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 80.269073][ T1918] ? _parse_integer_limit+0x195/0x1e0 [ 80.269092][ T1918] ? _parse_integer+0x2e/0x40 [ 80.269109][ T1918] ? kstrtoull+0x13b/0x1e0 [ 80.269127][ T1918] ? kstrtouint+0x78/0xf0 [ 80.269145][ T1918] ? ioctl_has_perm+0x1bc/0x500 [ 80.269163][ T1918] ? __asan_memcpy+0x5a/0x80 [ 80.269180][ T1918] ? ioctl_has_perm+0x408/0x500 [ 80.269196][ T1918] ? has_cap_mac_admin+0xd0/0xd0 [ 80.269213][ T1918] ? __kasan_check_write+0x18/0x20 [ 80.269230][ T1918] ? mutex_lock_killable+0x97/0x1d0 [ 80.269255][ T1918] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.269278][ T1918] ? proc_fail_nth_write+0x184/0x220 [ 80.269302][ T1918] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 80.269327][ T1918] kvm_vcpu_ioctl+0x7da/0x1000 [ 80.269345][ T1918] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.269363][ T1918] ? __cfi_vfs_write+0x10/0x10 [ 80.269381][ T1918] ? __kasan_check_write+0x18/0x20 [ 80.269397][ T1918] ? mutex_unlock+0x90/0x240 [ 80.269420][ T1918] ? __cfi_mutex_unlock+0x10/0x10 [ 80.269445][ T1918] ? bpf_lsm_file_ioctl+0xd/0x20 [ 80.269466][ T1918] ? security_file_ioctl+0x3e/0x110 [ 80.269491][ T1918] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.269507][ T1918] __se_sys_ioctl+0x135/0x1b0 [ 80.269528][ T1918] __x64_sys_ioctl+0x7f/0xa0 [ 80.269548][ T1918] x64_sys_call+0x1878/0x2ee0 [ 80.269564][ T1918] do_syscall_64+0x57/0xf0 [ 80.269584][ T1918] ? clear_bhb_loop+0x50/0xa0 [ 80.269607][ T1918] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.269630][ T1918] RIP: 0033:0x7f64a779e0d9 [ 80.269646][ T1918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.269660][ T1918] RSP: 002b:00007f64a85cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.269681][ T1918] RAX: ffffffffffffffda RBX: 00007f64a7a26090 RCX: 00007f64a779e0d9 [ 80.269695][ T1918] RDX: 00002000000002c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 80.269716][ T1918] RBP: 00007f64a85cb090 R08: 0000000000000000 R09: 0000000000000000 [ 80.269727][ T1918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.269738][ T1918] R13: 00007f64a7a26128 R14: 00007f64a7a26090 R15: 00007ffdff7a0238 [ 80.269753][ T1918] [ 80.360115][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 80.808617][ T9] usb 4-1: config 1 interface 0 altsetting 161 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.821810][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 80.830026][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 80.839450][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.847801][ T9] usb 4-1: Product: ఁ [ 80.852368][ T9] usb 4-1: Manufacturer: ⠉ [ 80.856982][ T9] usb 4-1: SerialNumber: syz [ 81.000490][ T411] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 81.030456][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd syzkaller syzkaller login: [ 81.151801][ T411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.162807][ T411] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.171955][ T411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.180724][ T411] usb 1-1: config 0 descriptor?? [ 81.181976][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 81.198003][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.409255][ T10] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 81.589013][ T411] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 81.599190][ T411] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0015/input/input14 [ 81.615289][ T737] usb 3-1: USB disconnect, device number 33 [ 81.685361][ T411] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 81.843422][ T1942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1942 comm=syz.0.596 [ 82.057251][ T10] usb 1-1: USB disconnect, device number 16 [ 82.267991][ T1948] Invalid ELF header type: 2 != 1 [ 82.322190][ T1954] ------------[ cut here ]------------ [ 82.327732][ T1954] WARNING: CPU: 1 PID: 1954 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 82.337292][ T1954] Modules linked in: [ 82.342273][ T1954] CPU: 1 UID: 0 PID: 1954 Comm: syz.2.603 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 82.353954][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.364066][ T1954] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.370102][ T1954] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 14 d9 0b 06 00 0f 85 c2 00 00 00 c6 05 07 d9 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 82.389821][ T1954] RSP: 0018:ffffc9000eb87560 EFLAGS: 00010246 [ 82.396037][ T1954] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 82.404073][ T1954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000eb87618 [ 82.412312][ T1954] RBP: ffffc9000eb876a0 R08: ffffc9000eb87617 R09: 0000000000000000 [ 82.420314][ T1954] R10: ffffc9000eb87600 R11: fffff52001d70ec3 R12: ffffc9000eb875a0 [ 82.428376][ T1954] R13: dffffc0000000000 R14: 1ffff92001d70eb0 R15: 0000000000000000 [ 82.436412][ T1954] FS: 00007f874be4c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 82.445426][ T1954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.452096][ T1954] CR2: 0000200000012000 CR3: 000000010ffea000 CR4: 00000000003526b0 [ 82.460109][ T1954] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.468144][ T1954] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 82.476172][ T1954] Call Trace: [ 82.479465][ T1954] [ 82.482444][ T1954] ? vfs_write+0x3c1/0xfd0 [ 82.486892][ T1954] ? ksys_write+0x145/0x260 [ 82.491453][ T1954] ? x64_sys_call+0x271c/0x2ee0 [ 82.496326][ T1954] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.502139][ T1954] ? hashtab_init+0xd6/0x1f0 [ 82.506756][ T1954] ___kmalloc_large_node+0x81/0x220 [ 82.512004][ T1954] ? hashtab_init+0xd6/0x1f0 [ 82.516634][ T1954] __kmalloc_large_node_noprof+0x1e/0xd0 [ 82.522349][ T1954] ? hashtab_init+0xd6/0x1f0 [ 82.526978][ T1954] __kmalloc_noprof+0x326/0x510 [ 82.531883][ T1954] ? kasan_save_alloc_info+0x3a/0x50 [ 82.537262][ T1954] hashtab_init+0xd6/0x1f0 [ 82.541741][ T1954] ? common_read+0x175/0x490 [ 82.546361][ T1954] symtab_init+0x44/0x70 [ 82.550636][ T1954] common_read+0x1e7/0x490 [ 82.555111][ T1954] ? hashtab_init+0xd6/0x1f0 [ 82.559727][ T1954] ? __cfi_common_read+0x10/0x10 [ 82.564736][ T1954] ? hashtab_init+0x100/0x1f0 [ 82.569455][ T1954] policydb_read+0xa83/0x2860 [ 82.574205][ T1954] ? __kasan_kmalloc+0x96/0xb0 [ 82.579004][ T1954] ? __cfi_policydb_read+0x10/0x10 [ 82.584181][ T1954] ? security_load_policy+0x130/0x12d0 [ 82.589714][ T1954] security_load_policy+0x16a/0x12d0 [ 82.595063][ T1954] ? irqentry_exit+0x4a/0x60 [ 82.599677][ T1954] ? __kasan_check_write+0x18/0x20 [ 82.604875][ T1954] ? mutex_lock+0x97/0x1d0 [ 82.609315][ T1954] ? __cfi_security_load_policy+0x10/0x10 [ 82.615110][ T1954] ? rep_movs_alternative+0x4a/0xa0 [ 82.620344][ T1954] sel_write_load+0x258/0x600 [ 82.625155][ T1954] ? __cfi_sel_write_load+0x10/0x10 [ 82.630551][ T1954] ? bpf_lsm_file_permission+0xd/0x20 [ 82.635989][ T1954] ? __cfi_sel_write_load+0x10/0x10 [ 82.641242][ T1954] vfs_write+0x3c1/0xfd0 [ 82.645603][ T1954] ? __cfi_vfs_write+0x10/0x10 [ 82.650398][ T1954] ? __kasan_check_write+0x18/0x20 [ 82.655592][ T1954] ? mutex_lock+0x97/0x1d0 [ 82.660090][ T1954] ? __cfi_mutex_lock+0x10/0x10 [ 82.665021][ T1954] ksys_write+0x145/0x260 [ 82.669373][ T1954] ? __cfi_ksys_write+0x10/0x10 [ 82.674459][ T1954] ? __kasan_check_write+0x18/0x20 [ 82.679591][ T1954] ? fpregs_restore_userregs+0x11c/0x260 [ 82.685257][ T1954] __x64_sys_write+0x7f/0x90 [ 82.689886][ T1954] x64_sys_call+0x271c/0x2ee0 [ 82.694738][ T1954] do_syscall_64+0x57/0xf0 [ 82.699181][ T1954] ? clear_bhb_loop+0x50/0xa0 [ 82.703910][ T1954] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.709833][ T1954] RIP: 0033:0x7f874af9e0d9 [ 82.714319][ T1954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.733969][ T1954] RSP: 002b:00007f874be4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.742442][ T1954] RAX: ffffffffffffffda RBX: 00007f874b225fa0 RCX: 00007f874af9e0d9 [ 82.750427][ T1954] RDX: 0000000000012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 82.758447][ T1954] RBP: 00007f874b035024 R08: 0000000000000000 R09: 0000000000000000 [ 82.766464][ T1954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.774617][ T1954] R13: 00007f874b226038 R14: 00007f874b225fa0 R15: 00007fff170546d8 [ 82.782634][ T1954] [ 82.785671][ T1954] ---[ end trace 0000000000000000 ]--- [ 82.802471][ T1954] SELinux: failed to load policy [ 82.872047][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 161 proto 1 vid 0x0525 pid 0xA4A8 [ 82.906577][ T475] bridge_slave_1: left allmulticast mode [ 82.917125][ T475] bridge_slave_1: left promiscuous mode [ 82.923889][ T9] usb 4-1: USB disconnect, device number 30 [ 82.928787][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.937816][ T475] bridge_slave_0: left allmulticast mode [ 82.941610][ T9] usblp0: removed [ 82.961429][ T475] bridge_slave_0: left promiscuous mode [ 82.967553][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.043139][ T475] veth1_macvtap: left promiscuous mode [ 83.048664][ T475] veth0_vlan: left promiscuous mode [ 83.302775][ T475] bridge_slave_1: left allmulticast mode [ 83.308438][ T475] bridge_slave_1: left promiscuous mode [ 83.314088][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.321501][ T475] bridge_slave_0: left allmulticast mode [ 83.327306][ T475] bridge_slave_0: left promiscuous mode [ 83.332934][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.444375][ T475] veth1_macvtap: left promiscuous mode [ 83.449907][ T475] veth0_vlan: left promiscuous mode [ 83.455512][ T475] veth1_macvtap: left promiscuous mode [ 83.460997][ T475] veth0_vlan: left promiscuous mode [ 83.823236][ T475] bridge_slave_1: left allmulticast mode [ 83.828904][ T475] bridge_slave_1: left promiscuous mode [ 83.834568][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.842148][ T475] bridge_slave_0: left allmulticast mode [ 83.847783][ T475] bridge_slave_0: left promiscuous mode [ 83.853612][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.943865][ T475] veth1_macvtap: left promiscuous mode [ 83.949382][ T475] veth0_vlan: left promiscuous mode