last executing test programs: 3.263472955s ago: executing program 3 (id=84): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) 3.183072662s ago: executing program 3 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0xa0003, 0x0, [0xa, 0x2, 0x3, 0x80000000, 0x5, 0x7f, 0xd04, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.08224497s ago: executing program 3 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00', @ANYRES16, @ANYBLOB="010000000000000000000000000008000100", @ANYBLOB="080002000000000008000200010080"], 0x2c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x2, 0x4, 0x7}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.009391766s ago: executing program 3 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 2.95475981s ago: executing program 3 (id=97): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.95440423s ago: executing program 3 (id=98): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x3) 1.310705604s ago: executing program 0 (id=122): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000240)) 1.310624173s ago: executing program 0 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4044804) 1.310533813s ago: executing program 0 (id=124): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 1.310380294s ago: executing program 0 (id=125): r0 = fsopen(&(0x7f0000000080)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\\\\+\x00', 0x0, r0) 1.302239254s ago: executing program 0 (id=126): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000780)=@keyring={'key_or_keyring:', r0}) 1.293153525s ago: executing program 0 (id=127): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000000900"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x2, 0x80000202, 0xfff}) 942.839463ms ago: executing program 2 (id=128): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 909.488286ms ago: executing program 2 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00', @ANYRES16, @ANYBLOB="010000000000000000000000000008000100", @ANYBLOB="080002000000000008000200010080"], 0x2c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x2, 0x4, 0x7}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 838.150752ms ago: executing program 2 (id=130): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) 722.846031ms ago: executing program 2 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) 708.949852ms ago: executing program 2 (id=132): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x200000000000000, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x0, 0x6, 0x3}) 454.659003ms ago: executing program 1 (id=135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000380)="0f0866b9800000c00f326635002000000f30650ff3030f01c50f20c06635020000000f22c036660f3882a714db660fe8bf00000f29c10f01c3baa000b0edee", 0x3f}], 0x1, 0xc8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) 439.007394ms ago: executing program 2 (id=136): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 334.198212ms ago: executing program 1 (id=137): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x7f, &(0x7f0000000180)={0x19, 0x2, 0xfffffffe}) 262.834768ms ago: executing program 1 (id=138): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) 262.637748ms ago: executing program 1 (id=139): pipe2$9p(0x0, 0x80000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, 0x0, 0x298) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x101}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 255.318099ms ago: executing program 1 (id=140): futex(0x0, 0xa, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TIOCSETD(r1, 0x5423, 0x0) 0s ago: executing program 1 (id=141): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x44, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x26, @string={0x26, 0x3, "433d60d7829db8baea11cca763e62be06a65ef8731539f471230138cca07678a10e03f79"}}, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 19.700635][ T36] audit: type=1400 audit(1755048112.100:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.701869][ T281] cgroup: Unknown subsys name 'net' [ 19.723309][ T36] audit: type=1400 audit(1755048112.100:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.750660][ T36] audit: type=1400 audit(1755048112.120:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.750805][ T281] cgroup: Unknown subsys name 'devices' [ 19.932351][ T281] cgroup: Unknown subsys name 'hugetlb' [ 19.937941][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.070160][ T36] audit: type=1400 audit(1755048112.460:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.093347][ T36] audit: type=1400 audit(1755048112.460:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.118200][ T36] audit: type=1400 audit(1755048112.470:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.119334][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.150178][ T36] audit: type=1400 audit(1755048112.540:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.174812][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.176057][ T36] audit: type=1400 audit(1755048112.540:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.209781][ T36] audit: type=1400 audit(1755048112.570:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.235738][ T36] audit: type=1400 audit(1755048112.570:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.504363][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.511782][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.518845][ T289] bridge_slave_0: entered allmulticast mode [ 21.525215][ T289] bridge_slave_0: entered promiscuous mode [ 21.536451][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.543561][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.550653][ T289] bridge_slave_1: entered allmulticast mode [ 21.556808][ T289] bridge_slave_1: entered promiscuous mode [ 21.580060][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.587161][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.594278][ T290] bridge_slave_0: entered allmulticast mode [ 21.600489][ T290] bridge_slave_0: entered promiscuous mode [ 21.607796][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.614961][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.622267][ T290] bridge_slave_1: entered allmulticast mode [ 21.628555][ T290] bridge_slave_1: entered promiscuous mode [ 21.646175][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.653276][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.660419][ T291] bridge_slave_0: entered allmulticast mode [ 21.666623][ T291] bridge_slave_0: entered promiscuous mode [ 21.681905][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.688953][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.696078][ T291] bridge_slave_1: entered allmulticast mode [ 21.702305][ T291] bridge_slave_1: entered promiscuous mode [ 21.748447][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.755672][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.762975][ T288] bridge_slave_0: entered allmulticast mode [ 21.769128][ T288] bridge_slave_0: entered promiscuous mode [ 21.775573][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.782630][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.789684][ T288] bridge_slave_1: entered allmulticast mode [ 21.796000][ T288] bridge_slave_1: entered promiscuous mode [ 21.913678][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.920742][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.928122][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.935176][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.946008][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.953055][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.960334][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.967348][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.977114][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.984171][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.991479][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.998549][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.009226][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.016285][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.023666][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.030705][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.071352][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.078667][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.086174][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.093473][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.101050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.108222][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.115517][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.122802][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.136516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.143578][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.161458][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.168492][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.176373][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.183418][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.191355][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.198481][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.206594][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.213644][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.221241][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.228257][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.263399][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.270461][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.289341][ T290] veth0_vlan: entered promiscuous mode [ 22.296671][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.303719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.327360][ T291] veth0_vlan: entered promiscuous mode [ 22.346344][ T289] veth0_vlan: entered promiscuous mode [ 22.358572][ T291] veth1_macvtap: entered promiscuous mode [ 22.372666][ T290] veth1_macvtap: entered promiscuous mode [ 22.384587][ T288] veth0_vlan: entered promiscuous mode [ 22.397965][ T289] veth1_macvtap: entered promiscuous mode [ 22.419586][ T288] veth1_macvtap: entered promiscuous mode [ 22.430901][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.555865][ T347] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.612946][ T347] kvm: pic: level sensitive irq not supported [ 22.613095][ T347] kvm: pic: single mode not supported [ 22.620048][ T347] kvm: pic: single mode not supported [ 22.629788][ T347] kvm: pic: level sensitive irq not supported [ 22.639050][ T347] kvm: pic: non byte write [ 22.647866][ T353] SELinux: failed to load policy [ 22.662720][ T347] kvm: pic: non byte write [ 22.667651][ T347] kvm: pic: non byte write [ 22.677834][ T347] kvm: pic: non byte write [ 22.684097][ T347] kvm: pic: single mode not supported [ 22.730819][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.790719][ T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.890838][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 22.897406][ T10] usb 4-1: config 2 has an invalid interface number: 226 but max is 0 [ 22.905750][ T10] usb 4-1: config 2 has no interface number 0 [ 22.912038][ T10] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 22.923409][ T10] usb 4-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice= 5.2b [ 22.932861][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.941008][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.941123][ T10] usb 4-1: Product: syz [ 22.952882][ T10] usb 4-1: Manufacturer: syz [ 22.957619][ T10] usb 4-1: SerialNumber: syz [ 22.965834][ T63] usb 1-1: config 0 has no interfaces? [ 22.972757][ T63] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 22.985651][ T10] rtl8150 4-1:2.226: couldn't find required endpoints [ 22.992673][ T10] rtl8150 4-1:2.226: probe with driver rtl8150 failed with error -5 [ 23.001310][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.011142][ T63] usb 1-1: config 0 descriptor?? [ 23.100427][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 23.106909][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.117080][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.127001][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 23.140057][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 23.146714][ T31] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 23.156263][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.165393][ T31] usb 3-1: config 0 descriptor?? [ 23.198213][ T330] usb 4-1: USB disconnect, device number 2 [ 23.210395][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.221042][ T341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.229550][ T341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.249856][ T367] usb 1-1: USB disconnect, device number 2 [ 23.361523][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.376471][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 23.385566][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 23.393767][ T45] usb 2-1: Product: syz [ 23.397946][ T45] usb 2-1: Manufacturer: syz [ 23.402942][ T45] usb 2-1: SerialNumber: syz [ 23.576702][ T31] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 23.584649][ T31] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 23.592829][ T31] hid-thrustmaster 0003:044F:B65D.0001: item fetching failed at offset 2/5 [ 23.601621][ T31] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 23.609782][ T31] hid-thrustmaster 0003:044F:B65D.0001: probe with driver hid-thrustmaster failed with error -22 [ 23.622660][ T45] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 23.680406][ T63] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.787779][ T45] usb 3-1: USB disconnect, device number 2 [ 23.830487][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 23.836662][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.860670][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.871207][ T63] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 23.880259][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.893840][ T63] usb 1-1: Product: syz [ 23.898254][ T63] usb 1-1: Manufacturer: syz [ 23.903128][ T63] usb 1-1: SerialNumber: syz [ 24.311146][ T63] usb 1-1: 0:2 : does not exist [ 24.560368][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.750363][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 24.756674][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 24.765185][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 24.775666][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 24.785628][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 24.795758][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 24.809133][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 24.818255][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.900363][ T345] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.914034][ T63] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 24.923500][ T63] usb 1-1: USB disconnect, device number 3 [ 25.051498][ T345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.062521][ T345] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 25.072598][ T345] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 25.083933][ T345] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.093075][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.101390][ T345] usb 4-1: Product: syz [ 25.105560][ T345] usb 4-1: Manufacturer: syz [ 25.110189][ T345] usb 4-1: SerialNumber: syz [ 25.444831][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 25.444848][ T36] audit: type=1400 audit(1755048117.840:121): avc: denied { ioctl } for pid=382 comm="syz.0.18" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.718166][ T345] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 25.730830][ T345] cdc_ncm 4-1:1.0: bind() failure [ 25.736984][ T345] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 25.760369][ T345] cdc_ncm 4-1:1.1: bind() failure [ 25.766457][ T345] usb 4-1: USB disconnect, device number 3 [ 26.270448][ T36] audit: type=1400 audit(1755048118.660:122): avc: denied { create } for pid=389 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.305347][ T36] audit: type=1400 audit(1755048118.700:123): avc: denied { connect } for pid=389 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.353590][ T36] audit: type=1400 audit(1755048118.750:124): avc: denied { name_bind } for pid=393 comm="syz.3.22" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 26.375280][ T36] audit: type=1400 audit(1755048118.750:125): avc: denied { node_bind } for pid=393 comm="syz.3.22" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.271525][ T36] audit: type=1400 audit(1755048119.670:126): avc: denied { name_bind } for pid=403 comm="syz.3.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.293191][ T36] audit: type=1400 audit(1755048119.670:127): avc: denied { mounton } for pid=405 comm="syz.3.27" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 27.333587][ T345] usb 3-1: USB disconnect, device number 3 [ 27.355045][ T36] audit: type=1400 audit(1755048119.750:128): avc: denied { create } for pid=407 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.379185][ T36] audit: type=1400 audit(1755048119.750:129): avc: denied { write } for pid=407 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.396891][ T412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 27.399704][ T36] audit: type=1400 audit(1755048119.780:130): avc: denied { set_context_mgr } for pid=409 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.401640][ T412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 27.800977][ T345] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.863800][ T429] kvm: emulating exchange as write [ 27.991491][ T345] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.011427][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.030357][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.038443][ T345] usb 3-1: Product: syz [ 28.045288][ T345] usb 3-1: Manufacturer: syz [ 28.050051][ T345] usb 3-1: SerialNumber: syz [ 28.630355][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.781376][ T45] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 28.790516][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.799214][ T45] usb 4-1: config 0 descriptor?? [ 29.271899][ T345] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 29.278379][ T345] cdc_ncm 3-1:1.0: dwNtbInMaxSize=255 is too small. Using 2048 [ 29.286011][ T345] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 29.472191][ T345] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 29.480281][ T345] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 29.493691][ T345] usb 3-1: USB disconnect, device number 4 [ 29.500072][ T345] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 29.986508][ T470] netlink: 92 bytes leftover after parsing attributes in process `syz.2.44'. [ 30.493386][ T330] usb 2-1: USB disconnect, device number 2 [ 30.525595][ T330] usblp0: removed [ 30.890343][ T330] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.033398][ T487] kvm: kvm [486]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 31.040358][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 31.042086][ T487] kvm: kvm [486]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 31.048194][ T330] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 31.064004][ T330] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 31.071327][ T330] usb 2-1: config 0 has no interface number 0 [ 31.078933][ T330] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 31.088244][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.096266][ T330] usb 2-1: Product: syz [ 31.100527][ T330] usb 2-1: Manufacturer: syz [ 31.105185][ T330] usb 2-1: SerialNumber: syz [ 31.110829][ T330] usb 2-1: config 0 descriptor?? [ 31.116681][ T330] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 31.123142][ T330] usb 2-1: No valid video chain found. [ 31.201610][ T492] mmap: syz.2.54 (492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.254684][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 31.254700][ T36] audit: type=1400 audit(1755048123.650:152): avc: denied { mount } for pid=498 comm="syz.0.57" name="/" dev="ramfs" ino=5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 31.260460][ T499] process 'syz.0.57' launched './file0' with NULL argv: empty string added [ 31.262683][ T36] audit: type=1400 audit(1755048123.660:153): avc: denied { execute } for pid=498 comm="syz.0.57" name="file0" dev="ramfs" ino=4377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 31.313166][ T36] audit: type=1400 audit(1755048123.680:154): avc: denied { execute_no_trans } for pid=498 comm="syz.0.57" path="/file0" dev="ramfs" ino=4377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 31.343014][ T330] usb 2-1: USB disconnect, device number 3 [ 31.350599][ T36] audit: type=1400 audit(1755048123.740:155): avc: denied { map } for pid=502 comm="syz.2.59" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.404083][ T45] usb 4-1: USB disconnect, device number 4 [ 31.431283][ T511] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 31.451476][ T511] kvm: Disabled LAPIC found during irq injection [ 31.521606][ T36] audit: type=1400 audit(1755048123.920:156): avc: denied { read } for pid=516 comm="syz.3.65" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.555222][ T36] audit: type=1400 audit(1755048123.940:157): avc: denied { read } for pid=518 comm="syz.3.66" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.578533][ T36] audit: type=1400 audit(1755048123.950:158): avc: denied { open } for pid=518 comm="syz.3.66" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.602475][ T36] audit: type=1400 audit(1755048123.950:159): avc: denied { ioctl } for pid=518 comm="syz.3.66" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.651150][ T36] audit: type=1400 audit(1755048124.050:160): avc: denied { setopt } for pid=527 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.670699][ T36] audit: type=1400 audit(1755048124.070:161): avc: denied { write } for pid=527 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.705363][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.870346][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 31.876911][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.886876][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 31.900758][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.920140][ T31] usb 1-1: config 0 descriptor?? [ 31.997027][ T535] capability: warning: `syz.1.73' uses deprecated v2 capabilities in a way that may be insecure [ 32.330885][ T31] wacom 0003:056A:0317.0002: item fetching failed at offset 0/2 [ 32.340558][ T31] wacom 0003:056A:0317.0002: parse failed [ 32.349862][ T31] wacom 0003:056A:0317.0002: probe with driver wacom failed with error -22 [ 32.530562][ T31] usb 1-1: USB disconnect, device number 4 [ 32.585601][ T559] SELinux: failed to load policy [ 32.632595][ T564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.196949][ T635] netlink: 44 bytes leftover after parsing attributes in process `syz.2.117'. [ 33.460357][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.510413][ T63] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.611567][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.622504][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.632268][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.645167][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.654247][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.662828][ T31] usb 3-1: config 0 descriptor?? [ 33.670518][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 33.676904][ T63] usb 1-1: config 2 has an invalid interface number: 226 but max is 0 [ 33.685559][ T63] usb 1-1: config 2 has no interface number 0 [ 33.691851][ T63] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 33.701920][ T63] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 33.711806][ T63] usb 1-1: config 2 interface 226 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 33.723119][ T63] usb 1-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice= 5.2b [ 33.732332][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.740391][ T63] usb 1-1: Product: syz [ 33.744550][ T63] usb 1-1: Manufacturer: syz [ 33.749119][ T63] usb 1-1: SerialNumber: syz [ 33.756169][ T63] rtl8150 1-1:2.226: couldn't find required endpoints [ 33.763039][ T63] rtl8150 1-1:2.226: probe with driver rtl8150 failed with error -5 [ 33.957403][ T63] usb 1-1: USB disconnect, device number 5 [ 34.070822][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.078251][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.085683][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.093108][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.100532][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.107914][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.115315][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.123318][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.130857][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.138296][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.145880][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.153337][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.160749][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.168155][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.175610][ T31] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 34.183160][ T31] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 34.192590][ T31] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 34.330791][ T31] usb 3-1: USB disconnect, device number 5 [ 34.770364][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.921744][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.932827][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.942616][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.955589][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.964775][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.973650][ T31] usb 1-1: config 0 descriptor?? [ 35.386995][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.405069][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.413823][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.421305][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.428807][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.436315][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.443898][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.451374][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.459259][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.466720][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.474820][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.482272][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.495458][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 35.504846][ T31] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 35.523260][ T31] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 35.640869][ T31] usb 1-1: USB disconnect, device number 6 [ 35.957490][ T678] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 35.970189][ T678] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 35.978596][ T678] CPU: 0 UID: 0 PID: 678 Comm: syz.2.136 Not tainted 6.12.38-syzkaller-g2b955c7a0f73 #0 b45819abec46ddf88869a165aa8765f6075b6315 [ 35.991862][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.001942][ T678] RIP: 0010:fuse_file_release+0x29e/0x400 [ 36.007682][ T678] Code: 00 74 12 48 89 df e8 81 f9 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f8 a0 ff 48 ba 00 00 00 00 00 fc [ 36.027285][ T678] RSP: 0018:ffffc9000de17d00 EFLAGS: 00010202 [ 36.033367][ T678] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811ee89300 [ 36.041335][ T678] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811bb5d178 [ 36.049494][ T678] RBP: ffffc9000de17d48 R08: 0000000000000003 R09: 0000000000000004 [ 36.057474][ T678] R10: dffffc0000000000 R11: fffff52001bc2f70 R12: 0000000000008002 [ 36.060368][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.065445][ T678] R13: ffff88811abf7180 R14: ffff88811bb5d100 R15: 00000000000000c8 [ 36.065464][ T678] FS: 000055556b67d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.065479][ T678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.065492][ T678] CR2: 000000110c34d122 CR3: 000000011eb5e000 CR4: 00000000003526b0 [ 36.104331][ T678] Call Trace: [ 36.107601][ T678] [ 36.110519][ T678] ? call_rcu+0x14/0x20 [ 36.114670][ T678] fuse_release+0x13e/0x1b0 [ 36.119188][ T678] ? __cfi_fuse_release+0x10/0x10 [ 36.124221][ T678] __fput+0x1fe/0xa00 [ 36.128199][ T678] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.133734][ T678] ____fput+0x20/0x30 [ 36.137702][ T678] task_work_run+0x1e0/0x250 [ 36.142305][ T678] ? __cfi_task_work_run+0x10/0x10 [ 36.147406][ T678] ? __kasan_check_write+0x18/0x20 [ 36.152595][ T678] ? fpregs_restore_userregs+0x11d/0x260 [ 36.158226][ T678] resume_user_mode_work+0x36/0x50 [ 36.163345][ T678] syscall_exit_to_user_mode+0x64/0xb0 [ 36.168793][ T678] do_syscall_64+0x64/0xf0 [ 36.173227][ T678] ? clear_bhb_loop+0x50/0xa0 [ 36.177895][ T678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.183786][ T678] RIP: 0033:0x7effdcd8ebe9 [ 36.188379][ T678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.208053][ T678] RSP: 002b:00007fff92341068 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.216453][ T678] RAX: 0000000000000000 RBX: 00007effdcfb7da0 RCX: 00007effdcd8ebe9 [ 36.224409][ T678] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.232363][ T678] RBP: 00007effdcfb7da0 R08: 000000000000012c R09: 0000000d9234135f [ 36.240347][ T678] R10: 00000000003ffcb0 R11: 0000000000000246 R12: 0000000000008d76 [ 36.248403][ T678] R13: 00007fff92341160 R14: ffffffffffffffff R15: 00007fff92341180 [ 36.256361][ T678] [ 36.259365][ T678] Modules linked in: [ 36.264313][ T678] ---[ end trace 0000000000000000 ]--- [ 36.271233][ T678] RIP: 0010:fuse_file_release+0x29e/0x400 [ 36.271682][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 36.271694][ T36] audit: type=1400 audit(1755048128.670:209): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.277223][ T678] Code: 00 74 12 48 89 df e8 81 f9 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f8 a0 ff 48 ba 00 00 00 00 00 fc [ 36.291239][ T36] audit: type=1400 audit(1755048128.690:210): avc: denied { mount } for pid=693 comm="syz.3.142" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.311094][ T678] RSP: 0018:ffffc9000de17d00 EFLAGS: 00010202 [ 36.326235][ T36] audit: type=1400 audit(1755048128.720:211): avc: denied { watch watch_reads } for pid=693 comm="syz.3.142" path="/31/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 36.349990][ T678] [ 36.353540][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 36.381609][ T678] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811ee89300 [ 36.393537][ T36] audit: type=1400 audit(1755048128.790:212): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.394276][ T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 36.420624][ T678] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811bb5d178 [ 36.424416][ T31] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 36.430415][ T678] RBP: ffffc9000de17d48 R08: 0000000000000003 R09: 0000000000000004 [ 36.440358][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.448223][ T678] R10: dffffc0000000000 R11: fffff52001bc2f70 R12: 0000000000008002 [ 36.458682][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.465065][ T678] R13: ffff88811abf7180 R14: ffff88811bb5d100 R15: 00000000000000c8 [ 36.474250][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.482120][ T678] FS: 000055556b67d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.490190][ T31] usb 2-1: Product: syz [ 36.499022][ T678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.503285][ T31] usb 2-1: Manufacturer: syz [ 36.509770][ T678] CR2: 000000110c34d122 CR3: 000000011eb5e000 CR4: 00000000003526b0 [ 36.514453][ T31] usb 2-1: SerialNumber: syz [ 36.522350][ T678] Kernel panic - not syncing: Fatal exception [ 36.527101][ T678] Kernel Offset: disabled