last executing test programs: 57.858649464s ago: executing program 0 (id=478): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 57.836597275s ago: executing program 0 (id=479): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xa373ec61c2e4d660}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x800, 0x20100) 53.678664538s ago: executing program 0 (id=542): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 53.678103918s ago: executing program 0 (id=543): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 53.625694849s ago: executing program 0 (id=544): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/fscaps', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000)="46cac791", 0x4, 0x7, 0x0, 0x0, r0}]) 53.613420039s ago: executing program 0 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x54, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14bf}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20880) 53.592828059s ago: executing program 32 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x54, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14bf}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20880) 5.948272835s ago: executing program 3 (id=1036): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 5.894705786s ago: executing program 3 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ba2b517a71f810e4af9ed3aa7b0e0000"], 0x48) pwrite64(0xffffffffffffffff, &(0x7f0000001f40)="c934d8bd4cdf922148b302e246c4539341563306157f4b3f58e023d35f1ba36603d1bd7163297379a6d20bd4424b659a702a3f2795a106548ab851a9d4e91dc465b70e0ca34eda3df0274a5af10b7c369f2dc755a67ff8daa9c0e0c73010e20f79f50f9e00", 0x65, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fchdir(0xffffffffffffffff) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x3e9, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x1, r1, 0xa, 0x1, 0x2, 0xff, 0x0, 0x4}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') write$binfmt_register(0xffffffffffffffff, &(0x7f0000000600)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94W\x03\xce^=\xff\x15\n\x86\x9d\xaeqa\x7f\xdbg\xcf\x1f\xa8?\xbc\xab\xc8\xd0\x8e\xdb\xf9}\xa1!\b\xad\xff>i\x8d\xb1\x92\n\xe4\xac%\xd2\x8b\xc5\xd0\x81\b\xd0\x7f]2\xee\xfd_0a*\x02|\xa4\xf89\x1fo\xe1:w\xae\x01Wr\x9aw:\xf1\'\xacJq\x10\xc4\xf1\xb5k\x94IY\x18\xca\x01_#-\x92\xe1e\x10D\x9bs\x97\xfd\xd0Rzk\xdd\x14\xeb\xf7G\xc2JU\xee\x04p>\x1d\xc4\x17\xf1k ^\xe6\xe3\xe9\xfd\xb0T\xb07,j\x10%\xda\b\x9c \x93\xbe\xb9?\x82Ku\fw\xef Dn\xc3|A\nx\xab\x1e\r\xe3\xf2\x1eP\x1d\xe1%D\xb3\xf1\x90a\xec\xb1`\xc1\x1eP%@\x9c\x99\x96N\xc1\x14\v,_sv\xb1\x17\x8cg\x1f\xa2z{y%z\xc7j\x05\xdb\xe0\xd5)2\xc7\xbf\xf2U\xc5\x89\x18\xactedE\x87\xcf\xfa\xef5\x91`\b\xc9H\x9b+\x05J\xde\x1d\x11\x92\xbd\xcd=\x0e\xd9\xd3+*\xb6\xa3\x8d\x8d\xed\xc9]\xfc\xeb\x9cy\xcb\bA\xb9\xa8X\xbf\xa1\x80i$ o\x86\x18\x0f0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000100d01002000128009000100766c616e00000000100002800c000200200000001f00008e6c962fb9303a51b03eaefad5cc75"], 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x80) 3.759043404s ago: executing program 5 (id=1053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x6, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0x8}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3.729160465s ago: executing program 4 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffe21}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) 3.599355207s ago: executing program 4 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) 3.554288537s ago: executing program 4 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004500)={0x2020}, 0x2028) 3.519599808s ago: executing program 5 (id=1057): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x1a}, 0x28) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000198004000400000007fd17e5ffff0800040000000f00000000", 0x39}], 0x1) close(0x3) 2.986743588s ago: executing program 2 (id=1058): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.978497098s ago: executing program 5 (id=1059): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) 2.893908609s ago: executing program 5 (id=1061): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.886155709s ago: executing program 5 (id=1062): r0 = creat(0x0, 0x3) open$dir(0x0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) ioctl(0xffffffffffffffff, 0x40104d05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) 2.667120283s ago: executing program 4 (id=1063): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 1.382989906s ago: executing program 2 (id=1064): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x2}, 0x1c) 1.202757049s ago: executing program 3 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffe21}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) 1.202508639s ago: executing program 1 (id=1066): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) 1.185756869s ago: executing program 1 (id=1067): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a124300040018000000fac8388827", 0x29, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0xd, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.14926697s ago: executing program 4 (id=1068): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x8001af85, &(0x7f0000000380)) 1.062812381s ago: executing program 2 (id=1069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 1.062649221s ago: executing program 1 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='su', 0x2) 1.062338231s ago: executing program 2 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x6, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0x8}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.058252961s ago: executing program 3 (id=1072): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f80013240306020603040703000001"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffff450000090000000024a746df28b7cd334e00000111009078e00000019bace2387c98a21674bdb53e7ed98bec8d7e5158a33dc0fcde5cb7e294916cae68f64126e73d9e334f9ab97742774593060e355e3c160fc462917b03310d4e175e43a8278f04a5b4af6a5054f03f2a597ba21961e752c038bf75065ac23f6cf59c2040da7d4972e80f92c460fef93f7e4b5c6abedc"], 0x0) syz_clone3(&(0x7f00000019c0)={0x4000000, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340), {0x22}, &(0x7f0000000380)=""/147, 0x93, &(0x7f0000000680)=""/4096, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r6}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) 1.030216172s ago: executing program 1 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004500)={0x2020}, 0x2028) 856.213735ms ago: executing program 2 (id=1074): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000}) 616.551369ms ago: executing program 2 (id=1075): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c9, 0xa3d4, 0x9dff, 0xe, "3d52e3ff00"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0x7, 0x8, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x80000) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xa) 546.29443ms ago: executing program 4 (id=1076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7faff0700000a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1c0e9524d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b6247dab3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c66c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc6eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb40000000000000006f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b8dd9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x8ce}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r4, 0x10, 0x460e, 0x3) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001200)={&(0x7f0000000340)={0x50, 0x0, 0x1000002, {0x7, 0x2d, 0x5, 0x1240c004, 0x7ff, 0x4, 0x80000006, 0x6, 0x0, 0x0, 0x100, 0xfff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r3, &(0x7f0000000280)) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) 166.077177ms ago: executing program 1 (id=1077): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r6}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 1 (id=1078): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') kernel console output (not intermixed with test programs): ppressed [ 110.756342][ T30] audit: type=1400 audit(1786550014.344:370): avc: denied { read } for pid=2109 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.782454][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.790524][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.798981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.813023][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.822605][ T60] usb 4-1: USB disconnect, device number 10 [ 110.835105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.851481][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.864292][ T2166] device veth0_vlan entered promiscuous mode [ 110.871290][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.879791][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.887274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.902800][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.912245][ T2166] device veth1_macvtap entered promiscuous mode [ 110.923016][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.935656][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.951026][ T30] audit: type=1400 audit(1786550014.544:371): avc: denied { mount } for pid=2166 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.973823][ T30] audit: type=1400 audit(1786550014.544:372): avc: denied { mounton } for pid=2166 comm="syz-executor" path="/root/syzkaller.VOco8j/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 111.009793][ T373] device bridge_slave_1 left promiscuous mode [ 111.016140][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.023930][ T373] device bridge_slave_0 left promiscuous mode [ 111.030182][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.038225][ T373] device veth1_macvtap left promiscuous mode [ 111.044318][ T373] device veth0_vlan left promiscuous mode [ 111.133704][ T30] audit: type=1400 audit(1786550014.724:373): avc: denied { read } for pid=2178 comm="syz.2.549" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.168757][ T30] audit: type=1400 audit(1786550014.754:374): avc: denied { mount } for pid=2180 comm="syz.2.550" name="/" dev="ramfs" ino=24231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 111.339070][ T307] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 111.347900][ T30] audit: type=1400 audit(1786550014.934:375): avc: denied { relabelfrom } for pid=2186 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.372724][ T30] audit: type=1400 audit(1786550014.934:376): avc: denied { relabelto } for pid=2186 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.443915][ T30] audit: type=1400 audit(1786550015.034:377): avc: denied { watch watch_reads } for pid=2188 comm="syz.3.554" path="/104" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.549104][ T628] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 111.759145][ T307] usb 6-1: config 1 interface 0 has no altsetting 0 [ 111.789090][ T26] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 111.909150][ T628] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 111.920205][ T628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.931282][ T628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.941071][ T628] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 111.952175][ T307] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 111.963384][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.971585][ T307] usb 6-1: Product: syz [ 111.975846][ T307] usb 6-1: Manufacturer: syz [ 111.980573][ T307] usb 6-1: SerialNumber: syz [ 112.029137][ T628] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 112.039509][ T2195] ip_tunnel: non-ECT from 10.1.1.2 with TOS=0x23 [ 112.044872][ T628] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 112.054252][ T628] usb 2-1: Manufacturer: syz [ 112.068011][ T628] usb 2-1: config 0 descriptor?? [ 112.169186][ T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.177330][ T26] usb 4-1: config 0 has no interface number 0 [ 112.183627][ T26] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 112.194818][ T26] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 112.205932][ T26] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.223166][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.238582][ T675] usb 5-1: USB disconnect, device number 14 [ 112.245268][ T26] usb 4-1: config 0 descriptor?? [ 112.279136][ T2193] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 112.480090][ T307] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 112.510884][ T30] audit: type=1400 audit(1786550016.104:378): avc: denied { read write } for pid=2192 comm="syz.3.556" name="lp0" dev="devtmpfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 112.512081][ T326] usb 4-1: USB disconnect, device number 11 [ 112.534918][ T30] audit: type=1400 audit(1786550016.104:379): avc: denied { open } for pid=2192 comm="syz.3.556" path="/dev/usb/lp0" dev="devtmpfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 112.551845][ T628] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 112.582617][ T628] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 112.591295][ T628] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 112.739093][ T675] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 113.084641][ T2220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 113.104010][ T675] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.114719][ T675] usb 5-1: config 1 interface 0 has no altsetting 0 [ 113.279188][ T675] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 113.288356][ T675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.296425][ T675] usb 5-1: Product: syz [ 113.300995][ T675] usb 5-1: Manufacturer: syz [ 113.305599][ T675] usb 5-1: SerialNumber: syz [ 113.389085][ T326] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.560282][ T2211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 113.572355][ T2211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.563'. [ 113.620617][ T675] usb 5-1: USB disconnect, device number 15 [ 113.639183][ T326] usb 3-1: Using ep0 maxpacket: 8 [ 113.999154][ T326] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 114.008264][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.016614][ T326] usb 3-1: Product: syz [ 114.020856][ T326] usb 3-1: Manufacturer: syz [ 114.025472][ T326] usb 3-1: SerialNumber: syz [ 114.129063][ C0] usblp0: nonzero write bulk status received: -71 [ 114.140134][ T675] usb 6-1: USB disconnect, device number 2 [ 114.151271][ T2174] usblp0: removed [ 114.162680][ T2236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.572'. [ 114.211035][ T307] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 114.219395][ T307] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 114.389180][ T326] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 114.439207][ T326] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 114.465643][ T326] usb 3-1: USB disconnect, device number 8 [ 114.565951][ T2253] kvm [2252]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x100000000 [ 114.649093][ T20] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 114.658592][ T2262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 114.673808][ T2262] netlink: 44 bytes leftover after parsing attributes in process `syz.4.581'. [ 114.689691][ T60] usb 2-1: USB disconnect, device number 15 [ 114.779243][ T389] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 114.999102][ T675] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 115.069150][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.139081][ T307] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.139281][ T389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.157710][ T389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 115.169075][ T389] usb 6-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 115.178147][ T389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.187515][ T389] usb 6-1: config 0 descriptor?? [ 115.209291][ T2258] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.409379][ T675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.420437][ T307] usb 3-1: Using ep0 maxpacket: 8 [ 115.425613][ T675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.435691][ T675] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.448815][ T675] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.458072][ T675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.467321][ T675] usb 5-1: config 0 descriptor?? [ 115.559177][ T307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.569572][ T307] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 115.580562][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.672307][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.679521][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.686542][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.693611][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.700666][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.707722][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.714774][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.721824][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.728832][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.735875][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.742916][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x4 [ 115.750132][ T20] usb 4-1: config 8 has an invalid interface number: 59 but max is 3 [ 115.758252][ T20] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 115.768760][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.769402][ T307] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 115.776741][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.791949][ T20] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 115.795993][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 115.801251][ T20] usb 4-1: config 8 has no interface number 0 [ 115.815307][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.822465][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.825660][ T307] usb 3-1: Product: syz [ 115.829888][ T20] usb 4-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping [ 115.843258][ T307] usb 3-1: Manufacturer: syz [ 115.844841][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.849547][ T307] usb 3-1: SerialNumber: syz [ 115.856475][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.867758][ T20] usb 4-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 115.878789][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.883426][ T2258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.580'. [ 115.886331][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.901925][ T20] usb 4-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 115.902498][ T307] usb 3-1: config 0 descriptor?? [ 115.913005][ T20] usb 4-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 115.931718][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.938801][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.942283][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 115.946604][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.960484][ T20] usb 4-1: config 8 interface 59 has no altsetting 0 [ 115.967356][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.970101][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 115.975191][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 115.983901][ T307] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 115.998823][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.006434][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.010970][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x2 [ 116.029103][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.034235][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.036744][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.044466][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.058722][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.061398][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.066487][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.080472][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.080639][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.095280][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.096467][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.109219][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.110694][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.124530][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.124652][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.139110][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.139814][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.148544][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.157072][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x4 [ 116.168259][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.168411][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.183359][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.190567][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.197653][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.200240][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.205244][ T20] usb 4-1: string descriptor 0 read error: -22 [ 116.221173][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.228192][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.230185][ T675] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.236087][ T20] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 116.251943][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.258991][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.260363][ T675] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 116.268354][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.286616][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.293986][ T675] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 116.294387][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.313834][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.322197][ T675] usb 5-1: USB disconnect, device number 16 [ 116.329805][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.336944][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.344207][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.352234][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.360807][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.374077][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.389132][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.396912][ T2284] fido_id[2284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 116.411861][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.418863][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.430341][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.439460][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.447901][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.455540][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.463225][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.471994][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.479218][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.487194][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.494620][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.501824][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.508812][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.516087][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.536386][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.545831][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.556522][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.563767][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.571088][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.578150][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.585194][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.592508][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.599561][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.606576][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.608706][ T2285] fuse: root generation should be zero [ 116.613629][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.626112][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.633180][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.640206][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.647279][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.654339][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.661363][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.668347][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.675371][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.682409][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.689429][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.696414][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.703430][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.710435][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.717404][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.724430][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.731739][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.747740][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.767057][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 116.767072][ T30] audit: type=1400 audit(1786550020.354:385): avc: denied { listen } for pid=2287 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.792188][ T675] usb 4-1: USB disconnect, device number 12 [ 116.796832][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.813964][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.825196][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.838567][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.846793][ T30] audit: type=1400 audit(1786550020.434:386): avc: denied { create } for pid=2291 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.876271][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.893459][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.909137][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.916219][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.933381][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.949100][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.966242][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.979142][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.986178][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 116.996281][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.010399][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.017458][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.024503][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.031545][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.038527][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.045608][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.052753][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.059809][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.066823][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.073898][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.080899][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.087939][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.094967][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.102013][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.109007][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.116095][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.123115][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.130152][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.137140][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.144179][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.151265][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.158330][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.165384][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.172492][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.179521][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.186602][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.193648][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.200701][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.207715][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.214850][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.221923][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.228989][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.236024][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.243084][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.250113][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.257178][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.264220][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.271280][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.278293][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.285372][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.292398][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.299462][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.306475][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.313548][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.320549][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.327594][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.334624][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.349126][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.366294][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.376391][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.384495][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.391587][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.398637][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.405709][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.412774][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.419989][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.426991][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.434102][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.441173][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.448210][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.456978][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.465357][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.477846][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.484970][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.492083][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.499143][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.506186][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.513254][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.520320][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.527861][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.547133][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.561987][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.576738][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.591434][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.605070][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.619904][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.634604][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.645588][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.652965][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.660099][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.667168][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.674696][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.681918][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.689382][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.706757][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.714904][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.722131][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.729341][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.736914][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.744172][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.760720][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.771418][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.778480][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.785586][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.793068][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.800191][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.807543][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.814748][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.821871][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.830668][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.837728][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.845024][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.852291][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.859485][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.866537][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.873813][ T389] waltop 0003:172F:0502.0011: unknown main item tag 0x0 [ 117.882391][ T389] waltop 0003:172F:0502.0011: hidraw0: USB HID v7f.fd Device [HID 172f:0502] on usb-dummy_hcd.5-1/input0 [ 117.896660][ T20] usb 3-1: USB disconnect, device number 9 [ 117.922498][ T389] usb 6-1: USB disconnect, device number 3 [ 118.001485][ T2312] fido_id[2312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 118.046726][ T2321] kvm: pic: single mode not supported [ 118.047624][ T2321] kvm: pic: level sensitive irq not supported [ 118.056341][ T2321] kvm: pic: single mode not supported [ 118.074929][ T2321] kvm: pic: level sensitive irq not supported [ 118.082763][ T2321] kvm: pic: single mode not supported [ 118.088873][ T2321] kvm: pic: level sensitive irq not supported [ 118.095695][ T2321] kvm: pic: single mode not supported [ 118.102192][ T2321] kvm: pic: single mode not supported [ 118.107880][ T2321] kvm: pic: single mode not supported [ 118.115281][ T2321] kvm: pic: single mode not supported [ 118.127611][ T2321] kvm: pic: single mode not supported [ 118.133410][ T2321] kvm: pic: single mode not supported [ 118.139416][ T2321] kvm: pic: single mode not supported [ 118.157689][ T2321] kvm: pic: level sensitive irq not supported [ 118.179125][ T30] audit: type=1400 audit(1786550021.764:387): avc: denied { mounton } for pid=2326 comm="syz.1.608" path="/147/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 118.654188][ T2374] input: syz0 as /devices/virtual/input/input8 [ 118.661979][ T30] audit: type=1400 audit(1786550022.254:388): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1184 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.662015][ T30] audit: type=1400 audit(1786550022.254:389): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1184 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.662042][ T30] audit: type=1400 audit(1786550022.254:390): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1184 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.689287][ T675] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 118.719357][ T389] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.804656][ T30] audit: type=1400 audit(1786550022.394:391): avc: denied { mounton } for pid=2378 comm="syz.2.630" path="/149/file0" dev="tmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.830246][ T30] audit: type=1400 audit(1786550022.394:392): avc: denied { ioctl } for pid=2378 comm="syz.2.630" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 118.884778][ T2386] device syzkaller0 entered promiscuous mode [ 118.979496][ T675] usb 4-1: Using ep0 maxpacket: 8 [ 119.009136][ T389] usb 6-1: Using ep0 maxpacket: 32 [ 119.095318][ T30] audit: type=1400 audit(1786550022.684:393): avc: denied { append } for pid=2404 comm="syz.4.642" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.129307][ T389] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.141352][ T389] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.152761][ T389] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.163488][ T389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.174970][ T389] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.179613][ T675] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.192918][ T389] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.206439][ T389] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.215816][ T389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.229946][ T389] usb 6-1: config 0 descriptor?? [ 119.479125][ T675] usb 4-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 119.488452][ T675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.492603][ T389] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.497705][ T675] usb 4-1: Product: syz [ 119.511742][ T675] usb 4-1: Manufacturer: syz [ 119.516667][ T675] usb 4-1: SerialNumber: syz [ 119.579065][ T307] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 119.699288][ T389] usb 6-1: USB disconnect, device number 4 [ 119.707707][ T389] usblp0: removed [ 119.795596][ T2362] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.802903][ T2362] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.824930][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 119.969180][ T307] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 119.975383][ T2432] ip_tables: iptables: counters copy to user failed while replacing table [ 119.980481][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.999864][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.009937][ T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 120.023189][ T675] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.030428][ T307] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 120.039651][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.048749][ T307] usb 5-1: config 0 descriptor?? [ 120.059400][ T675] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.089718][ T30] audit: type=1400 audit(1786550023.684:394): avc: denied { bind } for pid=2438 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.106234][ T675] usb 4-1: USB disconnect, device number 13 [ 120.127296][ T2441] binder: 2440:2441 ioctl c0306201 200000000440 returned -22 [ 120.179176][ T2445] pit: kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 120.224030][ T2449] netlink: 104 bytes leftover after parsing attributes in process `syz.1.661'. [ 120.339614][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.355388][ T26] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 120.393192][ T2463] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 120.427517][ T2362] syz.3.622 (2362) used greatest stack depth: 20584 bytes left [ 120.435708][ T2467] binder: 2466:2467 ioctl c0306201 200000000440 returned -22 [ 120.456622][ T2457] kvm [2456]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800 [ 120.532333][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.539200][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.545941][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.553149][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.560367][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.567180][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.574485][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.581508][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.588252][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.595328][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.602323][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 120.607641][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.614655][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.621709][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.628475][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.635532][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.642666][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.649741][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.656481][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.663625][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.670603][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.677414][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.684587][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.689170][ T389] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 120.691962][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.705807][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.712929][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.719953][ T26] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.732240][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.739275][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.745978][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.753051][ T26] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 120.762476][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.769453][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.776236][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.784649][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.792083][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.803593][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.810723][ T26] usb 3-1: config 0 descriptor?? [ 120.815866][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.819143][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 120.823269][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.837273][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.844432][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.853098][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.860049][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.866852][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.873924][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.880969][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.887715][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.894787][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.901721][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.908521][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.915539][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.922579][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.929527][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.936324][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.943329][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.950314][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.957055][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.959160][ T389] usb 6-1: Using ep0 maxpacket: 32 [ 120.964807][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.976063][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.983053][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.990327][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 120.997221][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.004662][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.011673][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.018692][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.025744][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.032887][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.039876][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.046813][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.056253][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.063610][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.070689][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.077637][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.084751][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.089487][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 121.093011][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.111697][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.120365][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.127096][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.134243][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.141242][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.148093][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.155076][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 121.161340][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 121.168716][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.185893][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.193256][ T26] usb 3-1: USB disconnect, device number 10 [ 121.200708][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.207451][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.215073][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.224819][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.231933][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.239275][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.246036][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.259979][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.267813][ T389] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 121.277068][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.297087][ T389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.299964][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.314490][ T389] usb 6-1: Product: syz [ 121.318741][ T389] usb 6-1: Manufacturer: syz [ 121.327904][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.336005][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.339914][ T389] usb 6-1: SerialNumber: syz [ 121.343474][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.355593][ T389] usb 6-1: config 0 descriptor?? [ 121.367233][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.377151][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.384088][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.389500][ T20] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.393094][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.407591][ T20] usb 4-1: config 1 interface 0 has no altsetting 0 [ 121.414372][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.421791][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.428594][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.431499][ T389] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG [ 121.435441][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.449536][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.456506][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.463695][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.471954][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.478774][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.488378][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.496510][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.503887][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.510746][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.517706][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.524762][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.533765][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.540606][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.542741][ T2488] tipc: Failed to remove unknown binding: 66,0,0/0:102181608/102181610 [ 121.547502][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.557093][ T2488] tipc: Failed to remove unknown binding: 66,0,0/0:102181608/102181609 [ 121.562656][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.574238][ T2488] tipc: Failed to remove unknown binding: 66,0,0/0:102181608/102181610 [ 121.577805][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.586506][ T2488] tipc: Failed to remove unknown binding: 66,0,0/0:102181608/102181609 [ 121.592757][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.613222][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.620585][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.628247][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.636628][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.639321][ T389] usb 6-1: USB disconnect, device number 5 [ 121.643420][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.655943][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.662770][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.669751][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.678868][ T2492] binder: 2491:2492 ioctl c0306201 200000000440 returned -22 [ 121.686480][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.693540][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.705242][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.713293][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.720383][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.727154][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.733936][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.742838][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.751405][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.758574][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.765763][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.773791][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.780947][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.787879][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.794922][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.802862][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.809387][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.809863][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.821478][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.826503][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.834239][ T20] usb 4-1: Product: 㐊 [ 121.840610][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.844987][ T20] usb 4-1: SerialNumber: 穠燀ὦ១䮶鼅䷑堧ଇᒒ֏怴жꯡ규ꔵ嬝袿ૐ槾檎⢵Ⱈ뭀ᬐ◣ꨲ憎ㄈಝ䱨ﯛ棉쟐彊첔え䌤뵐鰎쎿ꫭ粆ﲪ홄䆏읃覠㹢놶얙錽➒ㇰ峑蛽䋱잚䢕糉ఉ层꼕駡쿙뇉흙⌭浙ᏹ꟠釺壣硇岗螩殙ꪫ▄쵃흿뼽㾜싳⒇꯿힠Ụ饫䕌 [ 121.851005][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.851044][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.895759][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.902643][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.909391][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.909484][ T2471] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 121.916133][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.929947][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.936674][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.943437][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.950214][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.956908][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.963644][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.970368][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.977057][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.983788][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.990537][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 121.997252][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 122.004001][ T307] kye 0003:0458:5013.0013: unknown main item tag 0x0 [ 122.013428][ T307] kye 0003:0458:5013.0013: hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 122.024619][ T307] kye 0003:0458:5013.0013: tablet-enabling feature report not found [ 122.032701][ T307] kye 0003:0458:5013.0013: tablet enabling failed [ 122.043770][ T307] usb 5-1: USB disconnect, device number 17 [ 122.062323][ T2500] fido_id[2500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 122.151167][ T2471] kvm: vcpu 0: requested 242 ns lapic timer period limited to 200000 ns [ 122.159928][ T2471] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 122.168373][ T2471] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 122.269200][ T20] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 122.277476][ T20] usb 4-1: USB disconnect, device number 14 [ 122.359110][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.399212][ T307] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 122.639188][ T307] usb 5-1: Using ep0 maxpacket: 32 [ 122.719229][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.734105][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.756998][ T2522] raw_sendmsg: syz.3.693 forgot to set AF_INET. Fix it! [ 122.778285][ T2524] binder: 2523:2524 ioctl c0306201 200000000440 returned -22 [ 122.799259][ T307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.866506][ T2530] fuse: blksize only supported for fuseblk [ 122.879296][ T307] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 122.887603][ T307] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 122.899169][ T26] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 122.908259][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.918254][ T307] usb 5-1: config 14 has no interface number 0 [ 122.924785][ T26] usb 3-1: Product: syz [ 122.929537][ T307] usb 5-1: config 14 has no interface number 1 [ 122.936191][ T26] usb 3-1: Manufacturer: syz [ 122.946538][ T307] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 122.957609][ T26] usb 3-1: SerialNumber: syz [ 122.968986][ T307] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 122.980733][ T307] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 122.992400][ T307] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.016535][ T307] usb 5-1: config 14 interface 57 has no altsetting 0 [ 123.024609][ T2536] netlink: 80 bytes leftover after parsing attributes in process `syz.3.700'. [ 123.025203][ T307] usb 5-1: config 14 interface 228 has no altsetting 0 [ 123.106155][ T2540] netlink: 'syz.3.702': attribute type 3 has an invalid length. [ 123.199200][ T307] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 123.211895][ T2498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'. [ 123.221635][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.249133][ T307] usb 5-1: Product: syz [ 123.255982][ T307] usb 5-1: Manufacturer: syz [ 123.264848][ T307] usb 5-1: SerialNumber: syz [ 123.301938][ T26] usb 3-1: unit 4 not found! [ 123.311009][ T26] usb 3-1: USB disconnect, device number 11 [ 123.460278][ T2549] binder: 2548:2549 ioctl c0306201 200000000440 returned -22 [ 123.495552][ T30] audit: type=1400 audit(1786550027.084:395): avc: denied { create } for pid=2550 comm="syz.5.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.519623][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 123.969272][ T2562] usb usb8: usbfs: process 2562 (syz.2.710) did not claim interface 0 before use [ 124.243587][ T2579] binder: 2578:2579 ioctl c0306201 200000000440 returned -22 [ 124.266659][ T2581] device syzkaller0 entered promiscuous mode [ 124.277015][ T2581] tipc: Started in network mode [ 124.282007][ T2581] tipc: Node identity ee56ebbc63cb, cluster identity 4 [ 124.288970][ T2581] tipc: Enabled bearer , priority 0 [ 124.296999][ T2580] tipc: Resetting bearer [ 124.304112][ T2580] tipc: Disabling bearer [ 124.354122][ T2583] netlink: 104 bytes leftover after parsing attributes in process `syz.5.719'. [ 124.528373][ T2601] pic_ioport_write: 58 callbacks suppressed [ 124.528391][ T2601] kvm: pic: single mode not supported [ 124.536320][ T2601] kvm: pic: level sensitive irq not supported [ 124.542206][ T2601] kvm: pic: level sensitive irq not supported [ 124.549595][ T2601] kvm: pic: single mode not supported [ 124.555699][ T2601] kvm: pic: level sensitive irq not supported [ 124.593333][ T2607] netem: change failed [ 124.934433][ T2616] binder: 2615:2616 ioctl c0306201 200000000440 returned -22 [ 125.016888][ T2618] tipc: Enabling of bearer rejected, failed to enable media [ 125.319096][ T26] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 125.379091][ T389] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 125.574776][ T30] audit: type=1400 audit(1786550029.164:396): avc: denied { accept } for pid=2625 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.616738][ T2630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 125.626534][ T2630] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.635314][ T2630] device bridge_slave_0 left promiscuous mode [ 125.641595][ T2630] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.739185][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.749289][ T26] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 125.751972][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.758811][ T26] usb 4-1: config 0 has no interface number 0 [ 125.771716][ T389] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.777086][ T26] usb 4-1: config 0 interface 251 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 125.784098][ T60] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.802022][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.811436][ T389] usb 2-1: config 0 descriptor?? [ 125.921874][ T20] usb 5-1: USB disconnect, device number 18 [ 125.979141][ T26] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 125.991353][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.000073][ T26] usb 4-1: Product: syz [ 126.004372][ T2642] binder: 2641:2642 ioctl c0306201 200000000440 returned -22 [ 126.004394][ T26] usb 4-1: Manufacturer: syz [ 126.016656][ T26] usb 4-1: SerialNumber: syz [ 126.023929][ T26] usb 4-1: config 0 descriptor?? [ 126.069637][ T26] asix: probe of 4-1:0.251 failed with error -22 [ 126.165577][ T2644] kvm [2643]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 126.379154][ T60] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.389895][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.397928][ T60] usb 3-1: Product: syz [ 126.402875][ T60] usb 3-1: Manufacturer: syz [ 126.407519][ T60] usb 3-1: SerialNumber: syz [ 126.539184][ T389] usb 2-1: language id specifier not provided by device, defaulting to English [ 126.778807][ T30] audit: type=1400 audit(1786550030.364:397): avc: denied { search } for pid=2664 comm="syz.4.748" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.805101][ T30] audit: type=1400 audit(1786550030.394:398): avc: denied { create } for pid=2664 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 126.849148][ T389] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71 [ 126.859008][ T389] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 126.866851][ T389] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 126.885437][ T389] usb 2-1: USB disconnect, device number 16 [ 126.973319][ T2659] smpboot: CPU 1 is now offline [ 126.993103][ T2658] x86: Booting SMP configuration: [ 126.998231][ T2658] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 127.004777][ T0] kvm-clock: cpu 1, msr 70c5041, secondary cpu clock [ 127.005939][ T22] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 127.074362][ T2681] netem: change failed [ 127.116204][ T2683] device syzkaller0 entered promiscuous mode [ 127.125348][ T2683] tipc: Started in network mode [ 127.130559][ T2683] tipc: Node identity 62e911f4f715, cluster identity 4711 [ 127.137925][ T2683] tipc: Enabled bearer , priority 0 [ 127.148793][ T2682] tipc: Resetting bearer [ 127.156235][ T2682] tipc: Disabling bearer [ 127.749159][ T389] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 128.047421][ T30] audit: type=1400 audit(1786550031.634:399): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.075514][ T60] usb 4-1: USB disconnect, device number 15 [ 128.101148][ T2714] device syzkaller0 entered promiscuous mode [ 128.118244][ T2714] tipc: Started in network mode [ 128.123230][ T2714] tipc: Node identity f6ce351c1b46, cluster identity 4711 [ 128.136016][ T2714] tipc: Enabled bearer , priority 0 [ 128.149075][ T2713] tipc: Resetting bearer [ 128.156163][ T2713] tipc: Disabling bearer [ 128.279361][ T389] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 128.288425][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.296711][ T389] usb 2-1: Product: syz [ 128.300930][ T389] usb 2-1: Manufacturer: syz [ 128.305567][ T389] usb 2-1: SerialNumber: syz [ 128.409181][ T20] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 128.522441][ T389] usb 3-1: USB disconnect, device number 12 [ 128.613220][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.649762][ T20] usb 6-1: Using ep0 maxpacket: 32 [ 128.771383][ T2743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=2743 comm=syz.4.776 [ 129.046119][ T2752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 130.090310][ T2740] syz.3.774 (2740) used greatest stack depth: 19880 bytes left [ 130.169128][ T20] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 130.177374][ T20] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 130.209166][ T20] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 130.229073][ T20] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 130.249067][ T20] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 130.279209][ T20] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.364312][ T30] audit: type=1400 audit(1786550033.954:400): avc: denied { setopt } for pid=2774 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.441609][ T20] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 130.453815][ T20] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 130.470338][ T20] usb 6-1: Product: syz [ 130.474575][ T20] usb 6-1: Manufacturer: syz [ 130.479720][ T20] usb 6-1: SerialNumber: syz [ 130.490222][ T389] usb 2-1: USB disconnect, device number 17 [ 130.506074][ T20] usb 6-1: config 0 descriptor?? [ 130.739082][ T625] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 130.751230][ T389] usb 6-1: USB disconnect, device number 6 [ 130.979072][ T625] usb 4-1: Using ep0 maxpacket: 32 [ 131.099116][ T625] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 131.107580][ T625] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 131.116251][ T625] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 131.125289][ T625] usb 4-1: config 1 has no interface number 0 [ 131.131502][ T625] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 54, changing to 9 [ 131.142524][ T625] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24580, setting to 1024 [ 131.153814][ T625] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 131.166772][ T625] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 131.175847][ T625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.383232][ T30] audit: type=1400 audit(1786550035.974:401): avc: denied { write } for pid=2830 comm="syz.4.806" name="functions" dev="configfs" ino=17782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.415148][ T30] audit: type=1400 audit(1786550035.974:402): avc: denied { add_name } for pid=2830 comm="syz.4.806" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.461342][ T30] audit: type=1400 audit(1786550036.054:403): avc: denied { create } for pid=2839 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.926047][ T30] audit: type=1400 audit(1786550036.514:404): avc: denied { sys_admin } for pid=2851 comm="syz.2.812" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 132.967098][ T30] audit: type=1400 audit(1786550036.554:405): avc: denied { read } for pid=2851 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.096316][ T389] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 133.108428][ T389] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.472072][ T345] usb 4-1: USB disconnect, device number 16 [ 133.583088][ T625] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 133.989124][ T625] usb 6-1: config index 0 descriptor too short (expected 69, got 51) [ 134.001881][ T625] usb 6-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x2F, skipping [ 134.081392][ T345] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 134.159179][ T675] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 134.261374][ T2884] bridge0: port 3(erspan0) entered blocking state [ 134.267890][ T2884] bridge0: port 3(erspan0) entered disabled state [ 134.277462][ T2884] device erspan0 entered promiscuous mode [ 134.283910][ T2884] bridge0: port 3(erspan0) entered blocking state [ 134.290379][ T2884] bridge0: port 3(erspan0) entered forwarding state [ 134.326258][ T2884] device erspan0 left promiscuous mode [ 134.332336][ T2884] bridge0: port 3(erspan0) entered disabled state [ 134.362862][ T625] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 134.390512][ T625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.433804][ T625] usb 6-1: Product: syz [ 134.456592][ T625] usb 6-1: Manufacturer: syz [ 134.483230][ T625] usb 6-1: SerialNumber: syz [ 134.489301][ T675] usb 3-1: Using ep0 maxpacket: 32 [ 134.669214][ T675] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.897281][ T345] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.906594][ T675] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 134.914869][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.923434][ T675] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 134.933441][ T345] usb 4-1: Product: syz [ 134.937926][ T345] usb 4-1: Manufacturer: syz [ 134.942990][ T675] usb 3-1: config 14 has no interface number 0 [ 134.949356][ T345] usb 4-1: SerialNumber: syz [ 134.954019][ T675] usb 3-1: config 14 has no interface number 1 [ 134.960499][ T625] usb 6-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8201 device_setup=1 to enable and report any issues to g@b4.vu [ 134.960529][ T2892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 134.980674][ T675] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 134.998506][ T675] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 135.010648][ T625] usb 6-1: USB disconnect, device number 7 [ 135.018662][ T675] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 135.032737][ T675] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.046151][ T675] usb 3-1: config 14 interface 57 has no altsetting 0 [ 135.053057][ T675] usb 3-1: config 14 interface 228 has no altsetting 0 [ 135.081121][ T2896] device syzkaller0 entered promiscuous mode [ 135.090098][ T2896] tipc: Enabled bearer , priority 0 [ 135.097264][ T2895] tipc: Resetting bearer [ 135.104209][ T2895] tipc: Disabling bearer [ 135.259478][ T675] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 135.268787][ T675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.277297][ T675] usb 3-1: Product: syz [ 135.281802][ T675] usb 3-1: Manufacturer: syz [ 135.286535][ T675] usb 3-1: SerialNumber: syz [ 135.993747][ T2926] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.026430][ T2926] overlayfs: failed to look up (tracing) for ino (-66) [ 136.730598][ T2916] usb 4-1: USB disconnect, device number 17 [ 137.109099][ T26] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 137.147916][ T30] audit: type=1400 audit(1786550040.734:406): avc: denied { write } for pid=2945 comm="syz.3.847" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 137.170039][ T30] audit: type=1400 audit(1786550040.734:407): avc: denied { open } for pid=2945 comm="syz.3.847" path="/159/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 137.349099][ T326] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 137.469101][ T26] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.477803][ T26] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.488196][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.497340][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 137.508490][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 137.639127][ T26] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.648304][ T26] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.656360][ T26] usb 5-1: Product: syz [ 137.660618][ T26] usb 5-1: Manufacturer: syz [ 137.699697][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 137.705030][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 137.711502][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 137.879751][ T326] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 137.894164][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.902389][ T326] usb 2-1: Product: syz [ 137.906807][ T326] usb 2-1: Manufacturer: syz [ 137.911511][ T326] usb 2-1: SerialNumber: syz [ 137.917493][ T326] usb 2-1: config 0 descriptor?? [ 137.928954][ T20] usb 3-1: USB disconnect, device number 13 [ 137.981370][ T2961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 138.219142][ T30] audit: type=1400 audit(1786550041.724:408): avc: denied { mount } for pid=2956 comm="syz.3.851" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 138.372391][ T30] audit: type=1400 audit(1786550041.734:409): avc: denied { search } for pid=2956 comm="syz.3.851" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 138.429083][ T30] audit: type=1400 audit(1786550041.734:410): avc: denied { read } for pid=2956 comm="syz.3.851" name="trace_pipe" dev="tracefs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 138.451976][ T30] audit: type=1400 audit(1786550041.734:411): avc: denied { open } for pid=2956 comm="syz.3.851" path="/161/mnt_trace/trace_pipe" dev="tracefs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 138.519518][ T30] audit: type=1400 audit(1786550042.114:412): avc: denied { execmem } for pid=2972 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 138.859094][ T30] audit: type=1400 audit(1786550042.444:413): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 138.891227][ T2984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.859'. [ 139.219087][ T20] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 139.381050][ T26] usb 2-1: USB disconnect, device number 18 [ 139.395998][ T2995] input: syz1 as /devices/virtual/input/input9 [ 139.605454][ T20] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.614526][ T20] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.625250][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.634527][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.645590][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.777323][ T345] usb 5-1: USB disconnect, device number 19 [ 139.818839][ T30] audit: type=1400 audit(1786550043.404:414): avc: denied { create } for pid=3003 comm="syz.2.867" name="#21" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.843872][ T30] audit: type=1400 audit(1786550043.414:415): avc: denied { link } for pid=3003 comm="syz.2.867" name="#21" dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.859424][ T20] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.875802][ T20] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.883921][ T20] usb 4-1: Product: syz [ 139.888187][ T20] usb 4-1: Manufacturer: syz [ 139.907241][ T3008] device syzkaller0 entered promiscuous mode [ 139.916144][ T3008] tipc: Enabled bearer , priority 0 [ 139.926034][ T3007] tipc: Resetting bearer [ 139.930899][ T20] cdc_wdm 4-1:1.0: skipping garbage [ 139.937780][ T20] cdc_wdm 4-1:1.0: skipping garbage [ 139.945642][ T3007] tipc: Disabling bearer [ 139.951883][ T20] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 140.256170][ T3019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 140.940641][ T3021] bridge0: port 3(erspan0) entered blocking state [ 140.947144][ T3021] bridge0: port 3(erspan0) entered disabled state [ 140.974538][ T3021] device erspan0 entered promiscuous mode [ 140.985018][ T3021] bridge0: port 3(erspan0) entered blocking state [ 140.991537][ T3021] bridge0: port 3(erspan0) entered forwarding state [ 141.532647][ T3021] device erspan0 left promiscuous mode [ 141.540121][ T3021] bridge0: port 3(erspan0) entered disabled state [ 141.734560][ T3031] binder: 3030:3031 ioctl 4018620d 0 returned -22 [ 141.743199][ T3031] binder: 3030:3031 ioctl c0306201 200000000440 returned -22 [ 142.733176][ T3057] device syzkaller0 entered promiscuous mode [ 142.873390][ T3066] binder: 3064:3066 ioctl 4018620d 0 returned -22 [ 142.886268][ T3066] binder: 3064:3066 ioctl c0306201 200000000440 returned -22 [ 143.140572][ T3085] device syzkaller0 entered promiscuous mode [ 143.227232][ T3088] bridge0: port 3(erspan0) entered blocking state [ 143.233915][ T3088] bridge0: port 3(erspan0) entered disabled state [ 143.242591][ T3088] device erspan0 entered promiscuous mode [ 143.249082][ T3088] bridge0: port 3(erspan0) entered blocking state [ 143.255524][ T3088] bridge0: port 3(erspan0) entered forwarding state [ 143.544156][ T3096] binder: 3095:3096 ioctl 4018620d 0 returned -22 [ 143.551671][ T3096] binder: 3095:3096 ioctl c0306201 200000000440 returned -22 [ 143.586386][ T3098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 143.639498][ T20] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.739078][ T345] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 143.879069][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 143.928432][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 143.928447][ T30] audit: type=1400 audit(1786550047.514:418): avc: denied { create } for pid=3102 comm="syz.1.907" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 143.953271][ T389] usb 4-1: USB disconnect, device number 18 [ 144.009538][ T345] usb 6-1: Using ep0 maxpacket: 16 [ 144.039154][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.159540][ T20] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 144.167870][ T20] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 144.177229][ T20] usb 3-1: config 14 has no interface number 0 [ 144.183464][ T20] usb 3-1: config 14 has no interface number 1 [ 144.189205][ T345] usb 6-1: config index 0 descriptor too short (expected 20, got 18) [ 144.189786][ T20] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 144.208641][ T20] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 144.219499][ T20] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 144.458065][ T20] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.471307][ T20] usb 3-1: config 14 interface 57 has no altsetting 0 [ 144.478106][ T20] usb 3-1: config 14 interface 228 has no altsetting 0 [ 144.501745][ T3123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 144.511137][ T675] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 144.518863][ T345] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8c.00 [ 144.528040][ T345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.536355][ T345] usb 6-1: Product: syz [ 144.541086][ T345] usb 6-1: Manufacturer: syz [ 144.545741][ T345] usb 6-1: SerialNumber: syz [ 144.570501][ T3125] binder: 3124:3125 ioctl c0306201 200000000440 returned -22 [ 144.649120][ T20] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 144.658220][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.666416][ T20] usb 3-1: Product: syz [ 144.670644][ T20] usb 3-1: Manufacturer: syz [ 144.675258][ T20] usb 3-1: SerialNumber: syz [ 144.801131][ T345] usb 6-1: USB disconnect, device number 8 [ 144.849122][ T26] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 144.879108][ T675] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 144.888236][ T675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.897205][ T675] usb 2-1: config 0 descriptor?? [ 145.068126][ T30] audit: type=1400 audit(1786550048.654:419): avc: denied { create } for pid=3128 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.209298][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.220513][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.230375][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.243556][ T26] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.252685][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.264027][ T26] usb 5-1: config 0 descriptor?? [ 145.753600][ T26] plantronics 0003:047F:FFFF.0016: unbalanced collection at end of report description [ 145.764041][ T26] plantronics 0003:047F:FFFF.0016: parse failed [ 145.770523][ T26] plantronics: probe of 0003:047F:FFFF.0016 failed with error -22 [ 145.957578][ T20] usb 5-1: USB disconnect, device number 20 [ 146.273570][ T675] usb 2-1: USB disconnect, device number 19 [ 146.280238][ T30] audit: type=1400 audit(1786550049.874:420): avc: denied { map } for pid=3143 comm="syz.5.920" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 146.345898][ T3156] binder: 3155:3156 ioctl c0306201 200000000440 returned -22 [ 146.375753][ T3159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.927'. [ 146.493105][ T3168] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 146.512233][ T3168] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 146.520744][ T3168] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 146.529341][ T3168] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 146.537642][ T3168] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 146.546163][ T3168] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 146.554584][ T3168] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 146.659205][ T345] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 147.079137][ T345] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.139110][ T675] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 147.316128][ T2916] usb 3-1: USB disconnect, device number 14 [ 147.389165][ T675] usb 5-1: Using ep0 maxpacket: 32 [ 147.449108][ T26] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 147.509220][ T675] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.520278][ T675] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.529454][ T675] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 147.540612][ T675] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 147.554287][ T675] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.564278][ T675] usb 5-1: config 1 interface 1 has no altsetting 0 [ 147.729490][ T675] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 147.738760][ T675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.746903][ T675] usb 5-1: Product: syz [ 147.751218][ T675] usb 5-1: Manufacturer: syz [ 147.755907][ T675] usb 5-1: SerialNumber: syz [ 147.760790][ T345] usb 6-1: config 8 has an invalid interface number: 59 but max is 3 [ 147.771768][ T345] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 147.782054][ T345] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 147.791092][ T345] usb 6-1: config 8 has no interface number 0 [ 147.797326][ T345] usb 6-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping [ 147.808088][ T345] usb 6-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 147.819484][ T345] usb 6-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 147.830172][ T345] usb 6-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 147.843350][ T345] usb 6-1: config 8 interface 59 has no altsetting 0 [ 147.979286][ T26] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.988598][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.996798][ T26] usb 2-1: Product: syz [ 148.001104][ T26] usb 2-1: Manufacturer: syz [ 148.005791][ T26] usb 2-1: SerialNumber: syz [ 148.014224][ T26] usb 2-1: config 0 descriptor?? [ 148.062591][ T675] usb 5-1: selecting invalid altsetting 0 [ 148.089162][ T345] usb 6-1: string descriptor 0 read error: -22 [ 148.096114][ T675] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 148.102802][ T345] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 148.112366][ T345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.129212][ T675] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 148.182339][ T675] usb 5-1: USB disconnect, device number 21 [ 148.244457][ T3191] binder: 3190:3191 ioctl c0306201 200000000440 returned -22 [ 148.290621][ T3195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.940'. [ 148.585193][ T675] usb 6-1: USB disconnect, device number 9 [ 148.821549][ T30] audit: type=1400 audit(1786550052.384:421): avc: denied { connect } for pid=3223 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.878705][ T3226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 148.909551][ T3228] netlink: 44 bytes leftover after parsing attributes in process `syz.4.952'. [ 149.584726][ T345] usb 2-1: USB disconnect, device number 20 [ 149.947279][ T389] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 149.971210][ T3265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.964'. [ 150.097824][ T30] audit: type=1400 audit(1786550053.684:422): avc: denied { write } for pid=3266 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.118107][ T30] audit: type=1400 audit(1786550053.684:423): avc: denied { nlmsg_write } for pid=3266 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.429084][ T60] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 150.479119][ T389] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.488287][ T389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.496355][ T389] usb 5-1: Product: syz [ 150.500572][ T389] usb 5-1: Manufacturer: syz [ 150.505196][ T389] usb 5-1: SerialNumber: syz [ 150.562382][ T3280] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 150.572439][ T30] audit: type=1400 audit(1786550054.164:424): avc: denied { relabelto } for pid=3279 comm="syz.2.970" name="210" dev="tmpfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 150.598631][ T30] audit: type=1400 audit(1786550054.164:425): avc: denied { associate } for pid=3279 comm="syz.2.970" name="210" dev="tmpfs" ino=1156 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 150.626040][ T30] audit: type=1400 audit(1786550054.164:426): avc: denied { write } for pid=3279 comm="syz.2.970" name="210" dev="tmpfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 150.652006][ T30] audit: type=1400 audit(1786550054.164:427): avc: denied { add_name } for pid=3279 comm="syz.2.970" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 150.697849][ T30] audit: type=1400 audit(1786550054.164:428): avc: denied { create } for pid=3279 comm="syz.2.970" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 150.739771][ T30] audit: type=1400 audit(1786550054.164:429): avc: denied { associate } for pid=3279 comm="syz.2.970" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.782453][ T30] audit: type=1400 audit(1786550054.334:430): avc: denied { ioctl } for pid=3275 comm="syz.1.968" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.826462][ T30] audit: type=1400 audit(1786550054.414:431): avc: denied { module_request } for pid=3283 comm="syz.3.972" kmod="nfnetlink-subsys-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 150.860278][ T3286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3286 comm=syz.3.973 [ 150.873278][ T3286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 150.899125][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.912728][ T3290] netlink: 44 bytes leftover after parsing attributes in process `syz.3.975'. [ 150.932753][ T3292] binder: 3291:3292 ioctl c0306201 0 returned -14 [ 150.939780][ T3292] binder: 3291:3292 ioctl c0306201 200000000440 returned -22 [ 151.409104][ T389] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 151.589151][ T60] usb 2-1: config 8 has an invalid interface number: 59 but max is 3 [ 151.597492][ T60] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 151.607742][ T60] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 151.616653][ T60] usb 2-1: config 8 has no interface number 0 [ 151.622926][ T60] usb 2-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping [ 151.633705][ T60] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 151.644590][ T60] usb 2-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 151.655218][ T60] usb 2-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 151.668285][ T60] usb 2-1: config 8 interface 59 has no altsetting 0 [ 151.769337][ T389] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.779497][ T389] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.823529][ T675] usb 5-1: USB disconnect, device number 22 [ 151.909146][ T60] usb 2-1: string descriptor 0 read error: -22 [ 151.915428][ T60] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 151.924550][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.939172][ T389] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 151.948266][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.956551][ T389] usb 4-1: Product: syz [ 151.960807][ T389] usb 4-1: Manufacturer: syz [ 151.965430][ T389] usb 4-1: SerialNumber: syz [ 152.210573][ T3304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.979'. [ 152.248504][ T326] usb 2-1: USB disconnect, device number 21 [ 152.269809][ T389] usb 4-1: unit 4 not found! [ 152.278494][ T389] usb 4-1: USB disconnect, device number 19 [ 152.479804][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.574811][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.582054][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.648626][ T3322] netlink: 44 bytes leftover after parsing attributes in process `syz.4.986'. [ 152.670079][ T3324] binder: 3323:3324 ioctl c0306201 200000000440 returned -22 [ 152.949090][ T389] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 153.327226][ T3343] bridge0: port 1(erspan0) entered blocking state [ 153.333781][ T3343] bridge0: port 1(erspan0) entered disabled state [ 153.342337][ T3343] device erspan0 entered promiscuous mode [ 153.348524][ T3343] bridge0: port 1(erspan0) entered blocking state [ 153.355003][ T3343] bridge0: port 1(erspan0) entered listening state [ 153.370754][ T3343] device erspan0 left promiscuous mode [ 153.376691][ T3343] bridge0: port 1(erspan0) entered disabled state [ 153.432617][ T389] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.559110][ T389] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 153.571486][ T389] usb 5-1: config 4 has no interface number 0 [ 153.577671][ T389] usb 5-1: config 4 interface 138 has no altsetting 0 [ 153.585601][ T3349] netlink: 44 bytes leftover after parsing attributes in process `syz.3.997'. [ 153.605177][ T3351] binder: 3350:3351 ioctl c0306201 200000000440 returned -22 [ 153.899096][ T675] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 153.906710][ T345] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.239111][ T389] usb 5-1: string descriptor 0 read error: -22 [ 154.245374][ T389] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 154.254636][ T389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.336912][ T345] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.347229][ T345] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.395020][ T675] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.529148][ T345] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 154.538520][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.546788][ T345] usb 3-1: Product: syz [ 154.551231][ T345] usb 3-1: Manufacturer: syz [ 154.555852][ T345] usb 3-1: SerialNumber: syz [ 154.800807][ T3356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 154.859815][ T345] usb 3-1: unit 4 not found! [ 154.869485][ T345] usb 3-1: USB disconnect, device number 15 [ 155.020478][ T3382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1010'. [ 155.030518][ T3382] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1010'. [ 155.064837][ T3386] binder: 3385:3386 ioctl c0306201 200000000440 returned -22 [ 155.084139][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.099981][ T675] usb 4-1: config 8 has an invalid interface number: 59 but max is 3 [ 155.108298][ T675] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 155.118885][ T675] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 155.133138][ T675] usb 4-1: config 8 has no interface number 0 [ 155.139600][ T675] usb 4-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping [ 155.150422][ T675] usb 4-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 155.161452][ T675] usb 4-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 155.172756][ T675] usb 4-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 155.186282][ T675] usb 4-1: config 8 interface 59 has no altsetting 0 [ 155.409638][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 155.409694][ T30] audit: type=1400 audit(1786550058.964:439): avc: denied { module_load } for pid=3391 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 155.529213][ T675] usb 4-1: string descriptor 0 read error: -22 [ 155.547810][ T675] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 155.597966][ T675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.796702][ T3411] bridge0: port 3(erspan0) entered blocking state [ 155.803279][ T3411] bridge0: port 3(erspan0) entered disabled state [ 155.812069][ T3411] device erspan0 entered promiscuous mode [ 155.818240][ T3411] bridge0: port 3(erspan0) entered blocking state [ 155.824723][ T3411] bridge0: port 3(erspan0) entered forwarding state [ 155.837677][ T3411] device erspan0 left promiscuous mode [ 155.843680][ T3411] bridge0: port 3(erspan0) entered disabled state [ 155.993555][ T60] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 156.001844][ T675] usb 5-1: USB disconnect, device number 23 [ 156.080575][ T325] usb 4-1: USB disconnect, device number 20 [ 156.218723][ T30] audit: type=1400 audit(1786550059.804:440): avc: denied { accept } for pid=3416 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.329109][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 156.469186][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.480899][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.491558][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.505213][ T60] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.514429][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.535747][ T60] usb 2-1: config 0 descriptor?? [ 157.203246][ T3429] kvm [3428]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 157.212442][ T3429] kvm [3428]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 157.483465][ T60] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 157.491132][ T60] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 157.498401][ T60] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 157.505431][ T3429] kvm [3428]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x500000000 [ 157.512760][ T60] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 157.517202][ T3429] kvm [3428]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 157.522641][ T60] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 157.543290][ T3429] kvm [3428]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x500000000 [ 157.552907][ T60] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 157.563373][ T60] microsoft 0003:045E:07DA.0017: implement() called with n (56) > 32! (kworker/0:2) [ 157.609254][ T60] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 157.617687][ T60] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 157.639258][ T60] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 157.650759][ T60] microsoft 0003:045E:07DA.0017: no inputs found [ 157.657210][ T60] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 157.825824][ T325] usb 2-1: USB disconnect, device number 22 [ 157.997539][ T30] audit: type=1400 audit(1786550061.584:441): avc: denied { map } for pid=3442 comm="syz.4.1033" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 158.021561][ T30] audit: type=1400 audit(1786550061.584:442): avc: denied { call } for pid=3442 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.040881][ T30] audit: type=1400 audit(1786550061.584:443): avc: denied { transfer } for pid=3442 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.087690][ T30] audit: type=1400 audit(1786550061.674:444): avc: denied { read write } for pid=3445 comm="syz.3.1034" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 158.112377][ T30] audit: type=1400 audit(1786550061.674:445): avc: denied { open } for pid=3445 comm="syz.3.1034" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 158.251342][ T302] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 158.330044][ T3457] bridge0: port 3(erspan0) entered blocking state [ 158.336604][ T3457] bridge0: port 3(erspan0) entered disabled state [ 158.345525][ T3457] device erspan0 entered promiscuous mode [ 158.361852][ T3457] device erspan0 left promiscuous mode [ 158.367847][ T3457] bridge0: port 3(erspan0) entered disabled state [ 158.659149][ T302] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 158.669213][ T302] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 158.829087][ T325] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 158.841190][ T302] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 158.850473][ T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.858547][ T302] usb 3-1: Product: syz [ 158.862889][ T302] usb 3-1: Manufacturer: syz [ 158.863636][ T3466] device syzkaller0 entered promiscuous mode [ 158.867604][ T302] usb 3-1: SerialNumber: syz [ 158.878993][ T3466] tipc: Enabled bearer , priority 0 [ 158.886896][ T302] usb 3-1: config 0 descriptor?? [ 158.892097][ T3465] tipc: Resetting bearer [ 158.898784][ T3465] tipc: Disabling bearer [ 158.909129][ T3441] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.909140][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 158.923755][ T3441] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.964169][ T3470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 158.973910][ T3470] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1043'. [ 159.061508][ T3476] IPv6: sit2: Disabled Multicast RS [ 159.069188][ T325] usb 2-1: Using ep0 maxpacket: 32 [ 159.169062][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 159.189111][ T325] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.198957][ T325] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 159.209049][ T325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 159.289139][ T60] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 159.369271][ T325] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 159.378423][ T325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.386501][ T302] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 159.394150][ T325] usb 2-1: Product: syz [ 159.398478][ T325] usb 2-1: Manufacturer: syz [ 159.403181][ T325] usb 2-1: SerialNumber: syz [ 159.408702][ T325] usb 2-1: config 0 descriptor?? [ 159.479131][ T60] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 159.488285][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.496336][ T60] usb 6-1: Product: syz [ 159.500751][ T60] usb 6-1: Manufacturer: syz [ 159.505367][ T60] usb 6-1: SerialNumber: syz [ 159.759140][ T302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.770152][ T302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 159.781336][ T302] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 159.790445][ T302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.799506][ T302] usb 4-1: config 0 descriptor?? [ 159.819126][ T3478] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 159.879172][ T60] usb 6-1: BAAD GENERIC IO: no channels? [ 159.885028][ T60] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 159.898664][ T60] usb 6-1: USB disconnect, device number 10 [ 160.282074][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.299091][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.326624][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.356356][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.375541][ T3498] device syzkaller0 entered promiscuous mode [ 160.387135][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.397411][ T3500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 160.407654][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.415994][ T3498] tipc: Started in network mode [ 160.421390][ T3498] tipc: Node identity 96febf806bb2, cluster identity 4711 [ 160.428926][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.436638][ T3498] tipc: Enabled bearer , priority 0 [ 160.443533][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.450973][ T3500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1054'. [ 160.461061][ T3497] tipc: Resetting bearer [ 160.469267][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.488080][ T3497] tipc: Disabling bearer [ 160.507064][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.530172][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x4 [ 160.551053][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.562364][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.577561][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.596165][ T3506] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1057'. [ 160.605370][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.612872][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.876431][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.895227][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 160.915595][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.075597][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.118231][ T326] usb 2-1: USB disconnect, device number 23 [ 161.138175][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.147072][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.155786][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.165670][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.173715][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.180957][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x2 [ 161.188021][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.195332][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.202732][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.210464][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.218236][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.225589][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.232861][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.240201][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.247276][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.254655][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x4 [ 161.262365][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.270224][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.277310][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.284675][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.291939][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.299373][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.306457][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.313784][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.320900][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.328061][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.338230][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.345292][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.352413][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.359680][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.366715][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.373773][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.380881][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.387866][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.398878][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.414795][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.422103][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.429351][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.436713][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.443903][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.496092][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.503198][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.510238][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.519294][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.526403][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.533505][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.540874][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.547876][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.555033][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.562082][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.569852][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.576872][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.584160][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.591295][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.598433][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.605697][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.612869][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.619884][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.627017][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.634169][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.641333][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.648331][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.655501][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.663200][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.670523][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.677532][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.684889][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.692076][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.699397][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.706480][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.713841][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.721012][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.728143][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.735374][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.742670][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.749885][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.757024][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.764376][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.771670][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.778823][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.786197][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.793515][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.800832][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.807836][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.815231][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.822438][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.829754][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.836842][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.844222][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.851443][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.858581][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.865810][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.873180][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.880440][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.887577][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.894817][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.902087][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.909262][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.916479][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.923712][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.930989][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.937990][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.945344][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.952543][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.959843][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.966833][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.974172][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.981344][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.988496][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 161.995750][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.003083][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.010818][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.018389][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.025751][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.033073][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.040261][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.047415][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.054688][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.062006][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.069518][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.076671][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.083931][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.091770][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.098855][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.106262][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.113777][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.121122][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.128182][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.135604][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.143224][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.150543][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.157602][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.164959][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.172296][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.179600][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.186669][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.194035][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.201257][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.208567][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.215851][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.223154][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.230367][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.237575][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.244868][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.252195][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.259423][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.266658][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.273938][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.281263][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.288308][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.295722][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.302941][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.310243][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.317310][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.324662][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.331943][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.339317][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.346383][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.353884][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.361106][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.368316][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.375595][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.382923][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.390257][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.397478][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.404759][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.412054][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.419256][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.426407][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.433672][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.440992][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.448085][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.455497][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.462734][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.469988][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.477278][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.484570][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.491764][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.498892][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.506152][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.513389][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.520541][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.527651][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.529046][ C0] sched: RT throttling activated [ 162.539745][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.546721][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.553821][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.560835][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.568027][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.575096][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.582120][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.589155][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.596427][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.599266][ T60] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 162.603619][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.618110][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.625285][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.632412][ T302] waltop 0003:172F:0502.0018: unknown main item tag 0x0 [ 162.642211][ T302] waltop 0003:172F:0502.0018: hidraw0: USB HID v7f.fd Device [HID 172f:0502] on usb-dummy_hcd.3-1/input0 [ 162.661353][ T302] usb 4-1: USB disconnect, device number 21 [ 162.670377][ T3189] usb 3-1: USB disconnect, device number 16 [ 162.824153][ T30] audit: type=1400 audit(1786550066.414:446): avc: denied { setopt } for pid=3533 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.884507][ T3538] netem: change failed [ 162.900767][ T3536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1065'. [ 162.917687][ T30] audit: type=1400 audit(1786550066.504:447): avc: denied { name_bind } for pid=3533 comm="syz.2.1064" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 162.947399][ T3536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1065'. [ 162.970206][ T3532] fido_id[3532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 163.039202][ T60] usb 6-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 163.056655][ T3547] device syzkaller0 entered promiscuous mode [ 163.075615][ T3547] tipc: Enabled bearer , priority 0 [ 163.084359][ T3546] tipc: Resetting bearer [ 163.091704][ T3546] tipc: Disabling bearer [ 163.509191][ T60] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 163.527453][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.535851][ T60] usb 6-1: Product: syz [ 163.540601][ T326] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 163.548296][ T60] usb 6-1: Manufacturer: syz [ 163.553187][ T60] usb 6-1: SerialNumber: syz [ 163.820368][ T60] usb 6-1: USB disconnect, device number 11 [ 163.923526][ T326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.934221][ T326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.099205][ T326] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 164.108390][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.117394][ T326] usb 4-1: Product: syz [ 164.121792][ T326] usb 4-1: Manufacturer: syz [ 164.126421][ T326] usb 4-1: SerialNumber: syz [ 164.258717][ T3576] ================================================================== [ 164.266862][ T3576] BUG: KASAN: use-after-free in kobject_get+0x113/0x120 [ 164.273851][ T3576] Read of size 1 at addr ffff88810faf983c by task syz.1.1078/3576 [ 164.281681][ T3576] [ 164.284021][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Not tainted syzkaller #0 [ 164.291407][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.301560][ T3576] Call Trace: [ 164.304878][ T3576] [ 164.307833][ T3576] __dump_stack+0x21/0x30 [ 164.312278][ T3576] dump_stack_lvl+0x110/0x170 [ 164.316975][ T3576] ? show_regs_print_info+0x20/0x20 [ 164.322199][ T3576] ? load_image+0x3f0/0x3f0 [ 164.326729][ T3576] print_address_description+0x7f/0x2c0 [ 164.332292][ T3576] ? kobject_get+0x113/0x120 [ 164.336905][ T3576] kasan_report+0x10f/0x150 [ 164.341524][ T3576] ? kobject_get+0x113/0x120 [ 164.346232][ T3576] __asan_report_load1_noabort+0x14/0x20 [ 164.351880][ T3576] kobject_get+0x113/0x120 [ 164.356321][ T3576] device_add+0x2f0/0xe90 [ 164.360669][ T3576] device_create+0x26c/0x300 [ 164.365368][ T3576] ? root_device_unregister+0x80/0x80 [ 164.370771][ T3576] create_function_device+0x60/0x70 [ 164.375999][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 164.380978][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 164.386655][ T3576] function_make+0x118/0x350 [ 164.391587][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 164.398211][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 164.404851][ T3576] ? __kmalloc+0x13d/0x2c0 [ 164.409398][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 164.414279][ T3576] configfs_mkdir+0x50a/0x9c0 [ 164.418985][ T3576] vfs_mkdir+0x38b/0x590 [ 164.423250][ T3576] do_mkdirat+0x174/0x4d0 [ 164.427695][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 164.432485][ T3576] x64_sys_call+0x37e/0x9a0 [ 164.437006][ T3576] do_syscall_64+0x4c/0xa0 [ 164.441445][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 164.446229][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 164.450926][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.457900][ T3576] RIP: 0033:0x7f6eb47750d9 [ 164.462864][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.482527][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 164.490959][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 164.498951][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 164.507218][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 164.515208][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.523197][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 164.531294][ T3576] [ 164.534324][ T3576] [ 164.536746][ T3576] Allocated by task 101: [ 164.540996][ T3576] __kasan_slab_alloc+0xb7/0xe0 [ 164.545868][ T3576] slab_post_alloc_hook+0x4f/0x2b0 [ 164.550991][ T3576] kmem_cache_alloc+0xf7/0x260 [ 164.555776][ T3576] getname_flags+0xba/0x510 [ 164.560313][ T3576] user_path_at_empty+0x2f/0x1c0 [ 164.565267][ T3576] do_readlinkat+0xd9/0x490 [ 164.569791][ T3576] __x64_sys_readlink+0x7f/0x90 [ 164.574764][ T3576] x64_sys_call+0x93c/0x9a0 [ 164.579283][ T3576] do_syscall_64+0x4c/0xa0 [ 164.583713][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.589631][ T3576] [ 164.591965][ T3576] Freed by task 101: [ 164.595959][ T3576] kasan_set_track+0x4a/0x70 [ 164.600575][ T3576] kasan_set_free_info+0x23/0x40 [ 164.605526][ T3576] ____kasan_slab_free+0x125/0x160 [ 164.610654][ T3576] __kasan_slab_free+0x11/0x20 [ 164.615437][ T3576] slab_free_freelist_hook+0xc2/0x190 [ 164.620835][ T3576] kmem_cache_free+0x100/0x320 [ 164.625616][ T3576] user_path_at_empty+0x162/0x1c0 [ 164.630741][ T3576] do_readlinkat+0xd9/0x490 [ 164.635284][ T3576] __x64_sys_readlink+0x7f/0x90 [ 164.640161][ T3576] x64_sys_call+0x93c/0x9a0 [ 164.644687][ T3576] do_syscall_64+0x4c/0xa0 [ 164.649114][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.655027][ T3576] [ 164.657378][ T3576] The buggy address belongs to the object at ffff88810faf9100 [ 164.657378][ T3576] which belongs to the cache names_cache of size 4096 [ 164.671531][ T3576] The buggy address is located 1852 bytes inside of [ 164.671531][ T3576] 4096-byte region [ffff88810faf9100, ffff88810fafa100) [ 164.685019][ T3576] The buggy address belongs to the page: [ 164.690697][ T3576] page:ffffea00043ebe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10faf8 [ 164.700952][ T3576] head:ffffea00043ebe00 order:3 compound_mapcount:0 compound_pincount:0 [ 164.709286][ T3576] flags: 0x4000000000010200(slab|head|zone=1) [ 164.715388][ T3576] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881001c4c00 [ 164.723994][ T3576] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 164.732588][ T3576] page dumped because: kasan: bad access detected [ 164.739011][ T3576] page_owner tracks the page as allocated [ 164.744737][ T3576] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 101, ts 152663400527, free_ts 151971914721 [ 164.765328][ T3576] post_alloc_hook+0x192/0x1b0 [ 164.770118][ T3576] prep_new_page+0x1c/0x110 [ 164.774650][ T3576] get_page_from_freelist+0x2c3a/0x2cd0 [ 164.780218][ T3576] __alloc_pages+0x1a2/0x460 [ 164.784825][ T3576] new_slab+0xa0/0x4d0 [ 164.788903][ T3576] ___slab_alloc+0x3ac/0x840 [ 164.793507][ T3576] __slab_alloc+0x49/0x90 [ 164.797943][ T3576] kmem_cache_alloc+0x138/0x260 [ 164.802892][ T3576] getname_flags+0xba/0x510 [ 164.807499][ T3576] user_path_at_empty+0x2f/0x1c0 [ 164.812482][ T3576] do_readlinkat+0xd9/0x490 [ 164.817007][ T3576] __x64_sys_readlink+0x7f/0x90 [ 164.821871][ T3576] x64_sys_call+0x93c/0x9a0 [ 164.826413][ T3576] do_syscall_64+0x4c/0xa0 [ 164.830846][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.836759][ T3576] page last free stack trace: [ 164.841612][ T3576] free_unref_page_prepare+0x5fa/0x600 [ 164.847148][ T3576] free_unref_page+0xae/0x540 [ 164.851845][ T3576] __free_pages+0x6c/0x100 [ 164.856274][ T3576] __free_slab+0xe5/0x1e0 [ 164.860897][ T3576] discard_slab+0x29/0x40 [ 164.865245][ T3576] __slab_free+0x211/0x290 [ 164.869686][ T3576] ___cache_free+0x104/0x120 [ 164.874298][ T3576] qlink_free+0x4d/0x90 [ 164.878478][ T3576] qlist_free_all+0x5f/0xb0 [ 164.882994][ T3576] kasan_quarantine_reduce+0x14a/0x170 [ 164.888494][ T3576] __kasan_slab_alloc+0x2f/0xe0 [ 164.893365][ T3576] slab_post_alloc_hook+0x4f/0x2b0 [ 164.898496][ T3576] __kmalloc+0x120/0x2c0 [ 164.902755][ T3576] kernfs_fop_read_iter+0x15c/0x460 [ 164.908016][ T3576] vfs_read+0x6c0/0xc20 [ 164.912201][ T3576] ksys_read+0x14a/0x260 [ 164.916479][ T3576] [ 164.918825][ T3576] Memory state around the buggy address: [ 164.924561][ T3576] ffff88810faf9700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.932636][ T3576] ffff88810faf9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.940811][ T3576] >ffff88810faf9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.948968][ T3576] ^ [ 164.954886][ T3576] ffff88810faf9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.962960][ T3576] ffff88810faf9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.971031][ T3576] ================================================================== [ 164.979189][ T3576] Disabling lock debugging due to kernel taint [ 164.985659][ T3576] ------------[ cut here ]------------ [ 164.991524][ T3576] kobject: '(null)' (ffff88810faf9800): is not initialized, yet kobject_get() is being called. [ 165.002375][ T3576] WARNING: CPU: 1 PID: 3576 at lib/kobject.c:666 kobject_get+0x7c/0x120 [ 165.010843][ T3576] Modules linked in: [ 165.014805][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Tainted: G B syzkaller #0 [ 165.023749][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.033883][ T3576] RIP: 0010:kobject_get+0x7c/0x120 [ 165.039089][ T3576] Code: f9 fe 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 26 44 39 ff 48 8b 33 48 c7 c7 a0 c5 64 85 48 89 da e8 04 bc 3a 02 <0f> 0b eb 0c e8 9b d4 f9 fe eb 4c e8 94 d4 f9 fe 4c 8d 73 38 4c 89 [ 165.058810][ T3576] RSP: 0018:ffffc90001997a18 EFLAGS: 00010246 [ 165.065060][ T3576] RAX: 51d186c32c4b2800 RBX: ffff88810faf9800 RCX: 0000000000080000 [ 165.073127][ T3576] RDX: ffffc90003f56000 RSI: 000000000007ffff RDI: 0000000000080000 [ 165.081292][ T3576] RBP: ffffc90001997a30 R08: ffffc90001997487 R09: 1ffff92000332e90 [ 165.089363][ T3576] R10: dffffc0000000000 R11: fffff52000332e91 R12: 1ffff110217c680e [ 165.097398][ T3576] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 165.105445][ T3576] FS: 00007f6eb318c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 165.114627][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.121328][ T3576] CR2: 00007f6eb318bff8 CR3: 000000013b5cf000 CR4: 00000000003506a0 [ 165.129458][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.137485][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.145539][ T3576] Call Trace: [ 165.148887][ T3576] [ 165.151883][ T3576] device_add+0x2f0/0xe90 [ 165.156268][ T3576] device_create+0x26c/0x300 [ 165.160977][ T3576] ? root_device_unregister+0x80/0x80 [ 165.166419][ T3576] create_function_device+0x60/0x70 [ 165.171698][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 165.176693][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 165.182320][ T3576] function_make+0x118/0x350 [ 165.186970][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 165.193381][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 165.200077][ T3576] ? __kmalloc+0x13d/0x2c0 [ 165.204556][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 165.209478][ T3576] configfs_mkdir+0x50a/0x9c0 [ 165.214206][ T3576] vfs_mkdir+0x38b/0x590 [ 165.218683][ T3576] do_mkdirat+0x174/0x4d0 [ 165.223120][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 165.228026][ T3576] x64_sys_call+0x37e/0x9a0 [ 165.232627][ T3576] do_syscall_64+0x4c/0xa0 [ 165.237094][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 165.241843][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 165.246574][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.252542][ T3576] RIP: 0033:0x7f6eb47750d9 [ 165.257008][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.276697][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 165.285248][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 165.293294][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 165.301419][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 165.309491][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.317518][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 165.325573][ T3576] [ 165.328640][ T3576] ---[ end trace 655a69332c4c1f75 ]--- [ 165.334187][ T3576] ------------[ cut here ]------------ [ 165.339701][ T3576] refcount_t: addition on 0; use-after-free. [ 165.346222][ T3576] WARNING: CPU: 1 PID: 3576 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 165.355681][ T3576] Modules linked in: [ 165.359650][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Tainted: G B W syzkaller #0 [ 165.368816][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.378978][ T3576] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 165.385484][ T3576] Code: 04 01 48 c7 c7 c0 4a 63 85 e8 58 67 5a 02 0f 0b eb df e8 ef 7f 19 ff c6 05 ab f4 95 04 01 48 c7 c7 00 4a 63 85 e8 3c 67 5a 02 <0f> 0b eb c3 e8 d3 7f 19 ff c6 05 90 f4 95 04 01 48 c7 c7 60 4a 63 [ 165.405432][ T3576] RSP: 0018:ffffc900019979f8 EFLAGS: 00010246 [ 165.411593][ T3576] RAX: 51d186c32c4b2800 RBX: 0000000000000002 RCX: 0000000000080000 [ 165.419631][ T3576] RDX: ffffc90003f56000 RSI: 000000000007ffff RDI: 0000000000080000 [ 165.427676][ T3576] RBP: ffffc90001997a08 R08: ffffc90001997467 R09: 1ffff92000332e8c [ 165.435772][ T3576] R10: dffffc0000000000 R11: fffff52000332e8d R12: 1ffff110217c680e [ 165.443851][ T3576] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 165.451974][ T3576] FS: 00007f6eb318c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 165.461062][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.467707][ T3576] CR2: 00007f6eb318bff8 CR3: 000000013b5cf000 CR4: 00000000003506a0 [ 165.475854][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.484340][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.492435][ T3576] Call Trace: [ 165.495773][ T3576] [ 165.498761][ T3576] kobject_get+0xfb/0x120 [ 165.503207][ T3576] device_add+0x2f0/0xe90 [ 165.507605][ T3576] device_create+0x26c/0x300 [ 165.512278][ T3576] ? root_device_unregister+0x80/0x80 [ 165.517726][ T3576] create_function_device+0x60/0x70 [ 165.522997][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 165.528021][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 165.533797][ T3576] function_make+0x118/0x350 [ 165.538551][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 165.545041][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 165.551724][ T3576] ? __kmalloc+0x13d/0x2c0 [ 165.556194][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 165.561115][ T3576] configfs_mkdir+0x50a/0x9c0 [ 165.565840][ T3576] vfs_mkdir+0x38b/0x590 [ 165.570249][ T3576] do_mkdirat+0x174/0x4d0 [ 165.574649][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 165.579487][ T3576] x64_sys_call+0x37e/0x9a0 [ 165.584051][ T3576] do_syscall_64+0x4c/0xa0 [ 165.588514][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 165.593262][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 165.597994][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.603954][ T3576] RIP: 0033:0x7f6eb47750d9 [ 165.608425][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.628162][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 165.636691][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 165.644738][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 165.652781][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 165.660841][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.668867][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 165.676925][ T3576] [ 165.680023][ T3576] ---[ end trace 655a69332c4c1f76 ]--- [ 165.685595][ T3576] ------------[ cut here ]------------ [ 165.691201][ T3576] kobject: '(null)' (ffff88810faf9800): is not initialized, yet kobject_get() is being called. [ 165.702113][ T3576] WARNING: CPU: 1 PID: 3576 at lib/kobject.c:666 kobject_add_internal+0x12e/0xde0 [ 165.711402][ T3576] Modules linked in: [ 165.715360][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Tainted: G B W syzkaller #0 [ 165.724189][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.734305][ T3576] RIP: 0010:kobject_add_internal+0x12e/0xde0 [ 165.740385][ T3576] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 a5 2b 39 ff 49 8b 34 24 48 c7 c7 a0 c5 64 85 4c 89 e2 e8 82 a3 3a 02 <0f> 0b e9 04 01 00 00 e8 16 bc f9 fe b8 fe ff ff ff e9 b0 09 00 00 [ 165.760069][ T3576] RSP: 0018:ffffc90001997898 EFLAGS: 00010246 [ 165.766214][ T3576] RAX: 51d186c32c4b2800 RBX: ffff88810bd68500 RCX: 0000000000080000 [ 165.774253][ T3576] RDX: ffffc90003f56000 RSI: 000000000007ffff RDI: 0000000000080000 [ 165.782297][ T3576] RBP: ffffc900019978f0 R08: ffffc90001997307 R09: 1ffff92000332e60 [ 165.790371][ T3576] R10: dffffc0000000000 R11: fffff52000332e61 R12: ffff88810faf9800 [ 165.798487][ T3576] R13: ffff88810bd68518 R14: 0000000000000000 R15: 1ffff110217ad0a0 [ 165.806544][ T3576] FS: 00007f6eb318c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 165.815538][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.822187][ T3576] CR2: 00007f6eb318bff8 CR3: 000000013b5cf000 CR4: 00000000003506a0 [ 165.830243][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.838273][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.846327][ T3576] Call Trace: [ 165.849679][ T3576] [ 165.852663][ T3576] ? kobject_set_name_vargs+0xca/0x110 [ 165.858204][ T3576] kobject_add+0x165/0x230 [ 165.862722][ T3576] ? kobject_init+0x1d0/0x1d0 [ 165.867477][ T3576] ? kobject_init+0x83/0x1d0 [ 165.872137][ T3576] get_device_parent+0x3a6/0x410 [ 165.877137][ T3576] device_add+0x308/0xe90 [ 165.881532][ T3576] device_create+0x26c/0x300 [ 165.886190][ T3576] ? root_device_unregister+0x80/0x80 [ 165.891650][ T3576] create_function_device+0x60/0x70 [ 165.896904][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 165.901914][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 165.907616][ T3576] function_make+0x118/0x350 [ 165.912275][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 165.918691][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 165.925371][ T3576] ? __kmalloc+0x13d/0x2c0 [ 165.929852][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 165.934782][ T3576] configfs_mkdir+0x50a/0x9c0 [ 165.939563][ T3576] vfs_mkdir+0x38b/0x590 [ 165.943883][ T3576] do_mkdirat+0x174/0x4d0 [ 165.948291][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 165.953130][ T3576] x64_sys_call+0x37e/0x9a0 [ 165.957691][ T3576] do_syscall_64+0x4c/0xa0 [ 165.962187][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 165.966918][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 165.971668][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.977617][ T3576] RIP: 0033:0x7f6eb47750d9 [ 165.982122][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.001892][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 166.010453][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 166.018510][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 166.026573][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 166.034626][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.042689][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 166.050768][ T3576] [ 166.053836][ T3576] ---[ end trace 655a69332c4c1f77 ]--- [ 166.059355][ T3576] ------------[ cut here ]------------ [ 166.064857][ T3576] refcount_t: saturated; leaking memory. [ 166.071247][ T3576] WARNING: CPU: 1 PID: 3576 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 166.080764][ T3576] Modules linked in: [ 166.084744][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Tainted: G B W syzkaller #0 [ 166.093623][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.103781][ T3576] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 166.110024][ T3576] Code: 04 01 48 c7 c7 a0 49 63 85 e8 04 67 5a 02 0f 0b eb 8b e8 9b 7f 19 ff c6 05 56 f4 95 04 01 48 c7 c7 a0 49 63 85 e8 e8 66 5a 02 <0f> 0b e9 6c ff ff ff e8 7c 7f 19 ff c6 05 3b f4 95 04 01 48 c7 c7 [ 166.129720][ T3576] RSP: 0018:ffffc90001997878 EFLAGS: 00010246 [ 166.135868][ T3576] RAX: 51d186c32c4b2800 RBX: 0000000000000001 RCX: 0000000000080000 [ 166.143935][ T3576] RDX: ffffc90003f56000 RSI: 000000000007ffff RDI: 0000000000080000 [ 166.151971][ T3576] RBP: ffffc90001997888 R08: ffffc900019972e7 R09: 1ffff92000332e5c [ 166.160054][ T3576] R10: dffffc0000000000 R11: fffff52000332e5d R12: 00000000c0000000 [ 166.168077][ T3576] R13: ffff88810bd68518 R14: 0000000000000001 R15: ffff88810faf9838 [ 166.176124][ T3576] FS: 00007f6eb318c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 166.185125][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.191780][ T3576] CR2: 00007f6eb318bff8 CR3: 000000013b5cf000 CR4: 00000000003506a0 [ 166.199844][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.207862][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.215903][ T3576] Call Trace: [ 166.219256][ T3576] [ 166.222232][ T3576] kobject_add_internal+0xc44/0xde0 [ 166.227484][ T3576] ? kobject_set_name_vargs+0xca/0x110 [ 166.233014][ T3576] kobject_add+0x165/0x230 [ 166.237506][ T3576] ? kobject_init+0x1d0/0x1d0 [ 166.242249][ T3576] ? kobject_init+0x83/0x1d0 [ 166.246888][ T3576] get_device_parent+0x3a6/0x410 [ 166.251898][ T3576] device_add+0x308/0xe90 [ 166.256287][ T3576] device_create+0x26c/0x300 [ 166.260947][ T3576] ? root_device_unregister+0x80/0x80 [ 166.266386][ T3576] create_function_device+0x60/0x70 [ 166.271678][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 166.276687][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 166.282320][ T3576] function_make+0x118/0x350 [ 166.286963][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 166.293389][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 166.300084][ T3576] ? __kmalloc+0x13d/0x2c0 [ 166.304553][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 166.309471][ T3576] configfs_mkdir+0x50a/0x9c0 [ 166.314216][ T3576] vfs_mkdir+0x38b/0x590 [ 166.318525][ T3576] do_mkdirat+0x174/0x4d0 [ 166.322924][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 166.327745][ T3576] x64_sys_call+0x37e/0x9a0 [ 166.332317][ T3576] do_syscall_64+0x4c/0xa0 [ 166.336795][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 166.341554][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 166.346280][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.352239][ T3576] RIP: 0033:0x7f6eb47750d9 [ 166.356706][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.376385][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 166.384925][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 166.393045][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 166.401126][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 166.409213][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.417266][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 166.425338][ T3576] [ 166.428432][ T3576] ---[ end trace 655a69332c4c1f78 ]--- [ 166.433969][ T3576] ------------[ cut here ]------------ [ 166.439492][ T3576] kobject: '(null)' (ffff88810faf9800): is not initialized, yet kobject_put() is being called. [ 166.450385][ T3576] WARNING: CPU: 1 PID: 3576 at lib/kobject.c:760 kobject_put+0x8a/0x270 [ 166.458785][ T3576] Modules linked in: [ 166.462775][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Tainted: G B W syzkaller #0 [ 166.471696][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.481828][ T3576] RIP: 0010:kobject_put+0x8a/0x270 [ 166.487007][ T3576] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 f8 42 39 ff 48 8b 33 48 c7 c7 20 c6 64 85 48 89 da e8 d6 ba 3a 02 <0f> 0b eb 0f e8 6d d3 f9 fe e9 7c 01 00 00 e8 63 d3 f9 fe 4c 8d 7b [ 166.507014][ T3576] RSP: 0018:ffffc90001997860 EFLAGS: 00010246 [ 166.513336][ T3576] RAX: 51d186c32c4b2800 RBX: ffff88810faf9800 RCX: 0000000000080000 [ 166.521412][ T3576] RDX: ffffc90003f56000 RSI: 000000000007ffff RDI: 0000000000080000 [ 166.540763][ T30] audit: type=1400 audit(1786550070.134:448): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.569785][ T326] usb 4-1: unit 4 not found! [ 166.573648][ T3576] RBP: ffffc90001997888 R08: ffffc900019972c7 R09: 1ffff92000332e58 [ 166.582627][ T3576] R10: dffffc0000000000 R11: fffff52000332e59 R12: ffff88810faf9800 [ 166.590793][ T3576] R13: ffff88810faf983c R14: 1ffff11021f5f307 R15: 0000000000000000 [ 166.599040][ T3576] FS: 00007f6eb318c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 166.608032][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.614930][ T3576] CR2: 00007fa5ca7d3d58 CR3: 000000013b5cf000 CR4: 00000000003506a0 [ 166.623085][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.631283][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.639638][ T3576] Call Trace: [ 166.643056][ T3576] [ 166.646230][ T3576] kobject_add_internal+0xb52/0xde0 [ 166.651812][ T3576] kobject_add+0x165/0x230 [ 166.656448][ T3576] ? kobject_init+0x1d0/0x1d0 [ 166.661501][ T3576] ? kobject_init+0x83/0x1d0 [ 166.666351][ T3576] get_device_parent+0x3a6/0x410 [ 166.671563][ T3576] device_add+0x308/0xe90 [ 166.676194][ T3576] device_create+0x26c/0x300 [ 166.681142][ T3576] ? root_device_unregister+0x80/0x80 [ 166.687205][ T3576] create_function_device+0x60/0x70 [ 166.692479][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 166.697731][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 166.703422][ T3576] function_make+0x118/0x350 [ 166.708327][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 166.715024][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 166.721857][ T3576] ? __kmalloc+0x13d/0x2c0 [ 166.726593][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 166.731643][ T3576] configfs_mkdir+0x50a/0x9c0 [ 166.736451][ T3576] vfs_mkdir+0x38b/0x590 [ 166.741157][ T3576] do_mkdirat+0x174/0x4d0 [ 166.745729][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 166.750632][ T3576] x64_sys_call+0x37e/0x9a0 [ 166.755465][ T3576] do_syscall_64+0x4c/0xa0 [ 166.760192][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 166.765157][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 166.769999][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.776223][ T3576] RIP: 0033:0x7f6eb47750d9 [ 166.781032][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.800779][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 166.809545][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 166.817735][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 166.825931][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 166.834114][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.842236][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 166.850673][ T3576] [ 166.853774][ T3576] ---[ end trace 655a69332c4c1f79 ]--- [ 166.859675][ T3576] ------------[ cut here ]------------ [ 166.865217][ T3576] refcount_t: underflow; use-after-free. [ 166.873997][ T3576] WARNING: CPU: 1 PID: 3576 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 166.883495][ T3576] Modules linked in: [ 166.887768][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Tainted: G B W syzkaller #0 [ 166.896885][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.907326][ T3576] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 166.913754][ T3576] Code: 04 01 48 c7 c7 00 4a 63 85 e8 3c 67 5a 02 0f 0b eb c3 e8 d3 7f 19 ff c6 05 90 f4 95 04 01 48 c7 c7 60 4a 63 85 e8 20 67 5a 02 <0f> 0b eb a7 e8 b7 7f 19 ff c6 05 71 f4 95 04 01 48 c7 c7 a0 49 63 [ 166.933744][ T3576] RSP: 0018:ffffc90001997840 EFLAGS: 00010246 [ 166.940051][ T3576] RAX: 51d186c32c4b2800 RBX: 0000000000000003 RCX: 0000000000080000 [ 166.948143][ T3576] RDX: ffffc90003f56000 RSI: 000000000007ffff RDI: 0000000000080000 [ 166.956535][ T3576] RBP: ffffc90001997850 R08: ffffc900019972a7 R09: 1ffff92000332e54 [ 166.964892][ T3576] R10: dffffc0000000000 R11: fffff52000332e55 R12: 00000000c0000000 [ 166.973003][ T3576] R13: ffff88810faf983c R14: 0000000000000003 R15: ffff88810faf9838 [ 166.981114][ T3576] FS: 00007f6eb318c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 166.990230][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.997244][ T3576] CR2: 00007fa5ca7d3d58 CR3: 000000013b5cf000 CR4: 00000000003506a0 [ 167.005523][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.013796][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.022000][ T3576] Call Trace: [ 167.025590][ T3576] [ 167.028940][ T3576] kobject_put+0x231/0x270 [ 167.033547][ T3576] kobject_add_internal+0xb52/0xde0 [ 167.039107][ T3576] kobject_add+0x165/0x230 [ 167.043707][ T3576] ? kobject_init+0x1d0/0x1d0 [ 167.048604][ T3576] ? kobject_init+0x83/0x1d0 [ 167.053346][ T3576] get_device_parent+0x3a6/0x410 [ 167.058558][ T3576] device_add+0x308/0xe90 [ 167.063132][ T3576] device_create+0x26c/0x300 [ 167.067854][ T3576] ? root_device_unregister+0x80/0x80 [ 167.073542][ T3576] create_function_device+0x60/0x70 [ 167.079046][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 167.084307][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 167.090019][ T3576] function_make+0x118/0x350 [ 167.094750][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 167.101367][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 167.108090][ T3576] ? __kmalloc+0x13d/0x2c0 [ 167.112683][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 167.117662][ T3576] configfs_mkdir+0x50a/0x9c0 [ 167.122718][ T3576] vfs_mkdir+0x38b/0x590 [ 167.127303][ T3576] do_mkdirat+0x174/0x4d0 [ 167.132053][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 167.137004][ T3576] x64_sys_call+0x37e/0x9a0 [ 167.141689][ T3576] do_syscall_64+0x4c/0xa0 [ 167.146423][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 167.151487][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 167.156445][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.162577][ T3576] RIP: 0033:0x7f6eb47750d9 [ 167.167271][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.187267][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 167.196022][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 167.204285][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 167.212520][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 167.220811][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.228957][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 167.237229][ T3576] [ 167.240566][ T3576] ---[ end trace 655a69332c4c1f7a ]--- [ 167.246386][ T3576] kobject_add_internal failed for android_usb (error: -2 parent: (null)) [ 167.255585][ T3576] ------------[ cut here ]------------ [ 167.261183][ T3576] kobject: '(null)' (ffff88810faf9800): is not initialized, yet kobject_put() is being called. [ 167.274092][ T3576] WARNING: CPU: 1 PID: 3576 at lib/kobject.c:760 kobject_put+0x8a/0x270 [ 167.282732][ T3576] Modules linked in: [ 167.287025][ T3576] CPU: 1 PID: 3576 Comm: syz.1.1078 Tainted: G B W syzkaller #0 [ 167.296214][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.306628][ T3576] RIP: 0010:kobject_put+0x8a/0x270 [ 167.311912][ T3576] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 f8 42 39 ff 48 8b 33 48 c7 c7 20 c6 64 85 48 89 da e8 d6 ba 3a 02 <0f> 0b eb 0f e8 6d d3 f9 fe e9 7c 01 00 00 e8 63 d3 f9 fe 4c 8d 7b [ 167.331808][ T3576] RSP: 0018:ffffc90001997a08 EFLAGS: 00010246 [ 167.338199][ T3576] RAX: 51d186c32c4b2800 RBX: ffff88810faf9800 RCX: 0000000000080000 [ 167.346575][ T3576] RDX: ffffc90003f56000 RSI: 000000000007ffff RDI: 0000000000080000 [ 167.354837][ T3576] RBP: ffffc90001997a30 R08: ffffc90001997467 R09: 1ffff92000332e8c [ 167.363195][ T3576] R10: dffffc0000000000 R11: fffff52000332e8d R12: ffff88810be34068 [ 167.371370][ T3576] R13: ffff88810faf983c R14: 1ffff11021f5f307 R15: 0000000000000000 [ 167.379719][ T3576] FS: 00007f6eb318c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 167.389101][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.395983][ T3576] CR2: 00007fa5ca7d3d58 CR3: 000000013b5cf000 CR4: 00000000003506a0 [ 167.404106][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.412401][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.420780][ T3576] Call Trace: [ 167.424504][ T3576] [ 167.427886][ T3576] device_add+0x985/0xe90 [ 167.432659][ T3576] device_create+0x26c/0x300 [ 167.437586][ T3576] ? root_device_unregister+0x80/0x80 [ 167.443288][ T3576] create_function_device+0x60/0x70 [ 167.448743][ T3576] f_midi_alloc_inst+0x1a8/0x380 [ 167.454024][ T3576] usb_get_function_instance+0xe2/0x2f0 [ 167.459919][ T3576] function_make+0x118/0x350 [ 167.464849][ T3576] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 167.471363][ T3576] ? wait_for_completion_killable_timeout+0x10/0x10 [ 167.478337][ T3576] ? __kmalloc+0x13d/0x2c0 [ 167.483154][ T3576] ? configfs_mkdir+0x444/0x9c0 [ 167.488175][ T3576] configfs_mkdir+0x50a/0x9c0 [ 167.493284][ T3576] vfs_mkdir+0x38b/0x590 [ 167.497629][ T3576] do_mkdirat+0x174/0x4d0 [ 167.502162][ T3576] __x64_sys_mkdirat+0x89/0xa0 [ 167.508375][ T3576] x64_sys_call+0x37e/0x9a0 [ 167.513097][ T3576] do_syscall_64+0x4c/0xa0 [ 167.517750][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 167.522865][ T3576] ? clear_bhb_loop+0x50/0xa0 [ 167.527875][ T3576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.533929][ T3576] RIP: 0033:0x7f6eb47750d9 [ 167.538439][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.563385][ T326] usb 4-1: USB disconnect, device number 22 [ 167.574080][ T3576] RSP: 002b:00007f6eb318c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 167.582596][ T3576] RAX: ffffffffffffffda RBX: 00007f6eb49fd180 RCX: 00007f6eb47750d9 [ 167.590622][ T3576] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 167.598620][ T3576] RBP: 00007f6eb480c024 R08: 0000000000000000 R09: 0000000000000000 [ 167.606640][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.614741][ T3576] R13: 00007f6eb49fd218 R14: 00007f6eb49fd180 R15: 00007ffe9e735838 [ 167.622761][ T3576] [ 167.625803][ T3576] ---[ end trace 655a69332c4c1f7b ]--- [ 167.879722][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory