last executing test programs: 4.314074292s ago: executing program 2 (id=1283): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000440)}, {0x0}, {0x0}, {0x0}], 0x4, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xb01f000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x5, 0x59, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) 3.21870189s ago: executing program 0 (id=1290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3ec, 0x800, 0x70bd28, 0x25dfdbfb, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20001001}, 0x24000000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000002240)={'veth1_macvtap\x00', 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.171152171s ago: executing program 0 (id=1291): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) (async, rerun: 32) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) (rerun: 32) 3.132502811s ago: executing program 2 (id=1292): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40208e9, &(0x7f00000020c0)=ANY=[@ANYBLOB="73746174bb502a365b6f8517c55eac6fc7133d1e2a5ffd99b7e844837daea9bee6ead352960c66111f1bb0a56b3b2d7b92ad8936c6db71896893f99484919967f36a368945d6c4b76649dc83c02f3c92979596283aafb7b38f525791ac2d1f8c1db614bb47a66611a4b03b60370883ce1b0e89baddc8297eecf0ac8d19002c2613554584e93391d3b073ae24a522d552359f243158703767ec9dec4a3200"/168]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r0) gettid() r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/wake_lock', 0x101000, 0x15d) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) write$FUSE_BMAP(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 2.629483339s ago: executing program 0 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r1, &(0x7f00000013c0)=""/4089, 0xff9) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.286502054s ago: executing program 2 (id=1299): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) (async) move_mount(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x200) 2.230645665s ago: executing program 2 (id=1300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3ec, 0x800, 0x70bd28, 0x25dfdbfb, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20001001}, 0x24000000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.198370246s ago: executing program 2 (id=1301): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x32, @multicast1, 0x4e20, 0x2, 'sh\x00', 0x1e, 0x6, 0x4d}, {@loopback, 0x4e20, 0x12001, 0x62, 0x1, 0x6}}, 0x44) ioprio_set$pid(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}]}, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000000), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r8, 0x125f, 0x0) 2.050511358s ago: executing program 2 (id=1302): sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x30, 0x0, 0x701, 0x0, 0x0, {{}, {@val={0x7, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) syz_usb_ep_write(r0, 0x7a, 0xf1, &(0x7f00000000c0)="f89fe2be2ac57378f0c66ca2cc065c83c11d2f63be1d1a098e934743baae8cd9fcd11ac3a3b29f90f4fe8b8e95f965bcd74382481424f13d26952454102059690168e3befca48364fef763516045ea6accb694c6b46f3209c2adf06d28216ab15a39703e84274cef8d1e2727e0ce8e347db1da1253cde78732255bfb5eb2be2618c62f05fd3c86f29bbd101642975a37ea8d9ca4dc769bdae5a4514d940f37a6c20d6ed57c4b05b01776c91f09493169a9e2ecc3d93f1bd90651911d56636b5e6fb1f08caf65ec30c657a180cc485230a9a853ab4fc5c2f37ab98c6715449f6f11c79515cab1ee6d9c3eb5b4a0de28aa34") r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1.941724s ago: executing program 3 (id=1303): timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='9\x00\x00\x00', 0x4}], 0x1) splice(r0, 0x0, r2, 0x0, 0x80000000, 0xf) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 1.881370381s ago: executing program 3 (id=1304): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5a1880, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/igmp\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000240)=""/71, 0x47}], 0x2, 0x1, 0xe3d0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600002000000a00004000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006003200000000000000000000000000fe880000000000000000000000000001ac141432000000000000000000000000040003"], 0xc0}}, 0x8000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r4, 0x10001, 0x0) read$FUSE(r2, &(0x7f00000004c0)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000dd6000/0x3000)=nil, 0x3000, 0x1000001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) recvmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) write$FUSE_INIT(r2, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.87958248s ago: executing program 3 (id=1305): futex_waitv(&(0x7f0000007500)=[{0x3, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000007ec0), 0x3173a4e940640801) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x30, 0x12, 0x0, {0x3, @ether_spec={@local, @remote, 0x1ff}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x4e23, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x37) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg\x00', 0x0}) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=@polexpire={0x108, 0x1b, 0x2, 0x70bd2c, 0x25dfdbfe, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0, 0x4e21, 0x893, 0x4e20, 0x565, 0x2, 0xa0, 0x20, 0x11, r7, r8}, {0x3, 0x6, 0x1fb2fae4, 0x5, 0x0, 0x4, 0x3, 0x1}, {0x5, 0x0, 0x9}, 0x6, 0x6e6bb8, 0x2, 0x0, 0x2, 0x3}, 0x5c}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @offload={0xc, 0x1c, {r9, 0x2}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd26, 0x70bd2a, 0x70bd29, 0x70bd2b, 0xff, [0x8, 0x1f3, 0x5]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10044000}, 0x40000) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000540)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.810704792s ago: executing program 1 (id=1307): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) prctl$PR_MCE_KILL_GET(0x22) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x2) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/4126) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x3}) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/242, 0xf2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000004c0)=0x8) 1.810186802s ago: executing program 1 (id=1308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) (async) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r2, r2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7}) write$tcp_congestion(r3, 0x0, 0xee00) (async) write$tcp_congestion(r3, 0x0, 0xee00) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @local}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @local}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000100)=0x800004, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.799251792s ago: executing program 1 (id=1309): mkdir(0x0, 0x9) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) chdir(0x0) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r6 = dup(r5) (async) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r0, 0x0, 0x80000000) 1.770649422s ago: executing program 1 (id=1310): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r2, 0x80045440, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17a, 0x0, 0x100000000}]}) socket$inet6(0xa, 0x1, 0x0) futex_waitv(&(0x7f0000002040)=[{0x9b9, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000002c00)={0x0, 0x989680}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.715967863s ago: executing program 3 (id=1311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r2, 0x99b33000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0xa, 0x0, [{0xb24, 0x0, 0x5}, {0x9d7}, {0x210, 0x0, 0x9}, {0xc0000080, 0x0, 0x3}, {0x180, 0x0, 0x5}, {0x810, 0x0, 0x5}, {0x2d9, 0x0, 0x1}, {0xa7c, 0x0, 0x9}, {0xa43, 0x0, 0x6}, {0x9a8, 0x0, 0xed}]}) 1.714615093s ago: executing program 0 (id=1312): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r1, &(0x7f0000000080)="1c0000001a007f0214f9f4070009040803000000000000000002000008", 0x1d) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) open(&(0x7f0000000000)='./file0\x00', 0x81, 0x40) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4ea0, @remote}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000400)=0x3ff, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="01ae8bff281fae25246d8cda681be8ee456e923e9029caaf64b6762bd15a9a7b6ba235f2952def9001db2ac365b168d6c670566cae300d7c857709e3bbc02ce766c8015d3379bd0ffd986bb18d006e70038bd08ff4f5a82494bb97a447725fde3a95e9780d97f6f414464e6fe6099010a8da982e9cfe85ef6bd196514332bad7be15d4b74d5ee437612c8ffd54c869ec24f8cf5b62ba3dd8c7689170e2"]) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x2040, 0xa440bbc8e621c4f7}, 0x18) close_range(r8, 0xffffffffffffffff, 0x0) 1.646742464s ago: executing program 0 (id=1313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b0000", 0xc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1000, 0xfffffffc}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.644944354s ago: executing program 0 (id=1314): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000200)='./bus\x00') (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) (async) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.644552314s ago: executing program 1 (id=1315): stat(0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000040008b404a1bc0000000000010902240001000000000904000801030000000921040002012203000905810300"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f0000004580)='.\x00', &(0x7f00000045c0), 0x1000000, &(0x7f00000003c0)=ANY=[]) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) setns(0xffffffffffffffff, 0x24020000) lseek(0xffffffffffffffff, 0x14, 0x1) 1.635175614s ago: executing program 3 (id=1316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="266140ec", @ANYRES16=r2, @ANYBLOB="0100feffffff2000000005000000180001801400020073797a5f74756e000000000000000000240003801c0003800c00018008000100000000000c0001800800010000000000040001"], 0x50}, 0x1, 0x0, 0x0, 0xd4}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x5, 0x0, 0x8, 0x8, 0xa9, 0x7e, 0x1, 0xfc, 0x6, 0x0, 0x0, 0x8, 0x1}, {0x4, 0x7, 0xff, 0x9, 0xd1, 0x0, 0x7e, 0x0, 0x1, 0xd6, 0x3, 0x2, 0xe}, {0x9, 0x1, 0x4, 0xf8, 0x2, 0x2d, 0x4, 0x3d, 0x7, 0xe, 0x73, 0x7, 0x6}], 0x4}) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) setgroups(0x1, &(0x7f00000001c0)=[r8]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 1.517562306s ago: executing program 3 (id=1317): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000001840), &(0x7f00000018c0)=0x6e) fadvise64(r0, 0x1, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_usb_connect(0x1, 0xd85, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xdd, 0xb3, 0xfc, 0x40, 0xd46, 0x2021, 0xe71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd73, 0x4, 0xff, 0x9, 0x68, 0x3, [{{0x9, 0x4, 0x82, 0xe, 0x1, 0xfe, 0x5a, 0x54, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x6, 0xeb, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0xe, 0x5, '1', "2a1548"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x8001, 0x0, "96a965f67af5292fd2"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0xc, 0x7, "da", '\fC.'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfc, 0x2, 0xff, 0x40, "8c"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x39, 0x3, 0x1, [@generic={0x57, 0x7, "20585d2718205b0ae62f11ab14e2d7b0426396d4c9cec0edb3e71b2e0b4910194c7cc3dcedd706d99b91a83e48f49515519f6ea15cc34b532eac8b8c39f910af9a0b8a31bbd4aafd8159b6ee48a545f32d8143b0e9"}]}}]}}, {{0x9, 0x4, 0xc8, 0x6, 0x4, 0x82, 0xa9, 0xb8, 0x1, [@generic={0xfb, 0x22, "d5a28da5258e67b347108fea5ad74065df44572dbd1734dc4df23fa217e72cfcbe0ed9571b7049b0c2ff021629c0fe1065b38fac04153e47902864399267318353b6b80dc3c8929f4703891fac04dec4e838e3726bfc0fb3d2c55d57217af74515a2ec519cfac2d1bd7c770bcb705ae1391d5d8b07f466af0c6f75ed14062edd775546588a51f934805bb93c593e6c1648a26d8152ba5b55336dc6a518737f2b1a8d3ec7200b2099652afa7f00bf8f78ca8877295584fad6393c958b78a8519693f53f551e8584a117dbb5da26901ffaefcf56f5279d97d228cea427398070526863bf9bda73b56f0f127db7157c0d76abe2b4f83acf49da50"}, @hid_hid={0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x78c}}], [{{0x9, 0x5, 0x6, 0x1, 0x200, 0xa5, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x7, 0x0, 0xff, [@generic={0xa8, 0xb, "f4c0643f0f0ed3e8b92fd9e5426c7d8137c3927816c34d4bf4d2f78d52aafba3eff6346bd0c6c38181e98fdedf2157212cc89eccc41abac54378063f5c172bef697b23410a315f5c97a34661779be5a58747edbe3868562aba1be321f379df5efd0c43ac350bf5e8690160f2e6c81f4f7eca6d03960af67a341b090b4e9ead18e9f87e449260ead146f95e564ab22fd9bc27b4c2a5fa58f4facb12962832d9c2fcab1e22c0c5"}, @generic={0xf2, 0x11, "e7f14d3336450330f3587188609a116bb48f81c752b2a74bc6047d901cd0123e270d06f4b96938f8017794242b14c8300c8ab7c049e45d9ce1528c2515e0ec9d2f2fc08aaf09ef597d15e237650d258f97b0b324555bf235b2b06df3f63283ae846e7c5aa0a8963ccbeb1c957ccb25e48465ae3381a0526edfbd94a595f69068d4bca1ff5be7fa7dcbd8c0c979b84218b3be52b01c5484d2dd8358e2c00ac87cc42fcd2d635b257c9c5b6b4b750cbfcebd5f9ccd5c90aa8a0451ed8bd86098ff4550b9df46610ac113e94e180dd068d4dc257d5c41c249ee954873689c64c58af7ec84ff4120b114b3a52d9b2dcb1cf0"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x7}, @generic={0xc8, 0xe, "9245af7bb722089c72639c4fb8ea743978a77d595d1c28d3d2742d04343d92804688972e6c2c9956d6b19c6775b208f0367c4ad78296ec2d7e89b2a05bf9bbda75cd5a2782ac8ce161a45e9ca8710e3d86cc9c58589e995f37e58cffa3d82db11bebf8a448783db2cd828fc5a843bd969802055751c41de573e58317ea5fc80e64e13e0b15ace1a7d81e3179d785345fb8b9f0316d736af964568a4531b8793d50f4232e467354f7d5f924e4192a0a94a23446ed4a1628cd4295d2def7ecf1bff509ed1b2805"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x0, 0x10, 0x80, [@generic={0xee, 0xa, "24b6700631a49521abb38fd28412034652e564f3625bafe65d357bd38394e51feddafe037b3d2ec04a83f26db85cfaa5039da41334ce311b031780c8cc403f9b5c706b424334b6502df226fe53e37d168e1ef0e284b0811c85c6df85ef11123b6d646f6af695add929f753e6de357b6cbbaf354a8dc056c190969bd7cb0ab7136c093a3bd2ac4288a6141e0559a8a4a695e1edc6588cb461411d9bfa561de9250fee60bf1806946707e29458461127ac5b33b8ce341390da04b035e481eb0710569dfda2ff28a4cf98e133b5699fb9daa993df504333a2d54593f4a5035e4b973904a47e48b90a70add7bb87"}]}}]}}, {{0x9, 0x4, 0xdd, 0xfb, 0xa, 0xe5, 0x91, 0x82, 0x6, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "be80bc73"}, {0x5, 0x24, 0x0, 0x480}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xa, 0x100, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0xa3}, @ncm={0x6, 0x24, 0x1a, 0xd, 0xf}]}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0x10, 0x2, [@generic={0xb6, 0x4, "330281246777ada1de15586203b04e8c59f6b51a724dcfe1c56ab6822eed66e1f428dcc8e61d72ea64681004d03ef5a5ec4fc2d200196e22fcebcfa1c01d57ae861869112f0e4a4e6e9c24acf779e2e0ea632d193f8841f4e94339b7e2ba99bb98ba846b8d6b2f7463e71a70808fdf3e07b8e99ba3701d0c4aafb5442e47fd98402be1559b8566f22a07d9291b49aa60486986bd54cfb65254afd9b9869206b8cf2ef91078fc3f6d5f2d44f721c777f9f9c41a84"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x1, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x31, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0x6, 0x1f, 0x3ff, 0x3, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x101}, @generic={0xf5, 0x30, "8c35bf33e747505559c3c718b13847cf226e324f7549f0e24744c14ffcc50f3bb2252793fbe878438a95dd2c17312b4f085de9d5ddde8507846d0afdc6848d255ef712405898c007818c51bcd699e7adf5ebe132ed3a709e620ca15200efa344af30fe321d14f79cc342292ffe9b5efd43478645231542330963aa83a195139eb3ba9697cd126aec668581fd947a0bbb0c5e0644049f05f538c21e33219390efab179f8f0da15225bad9798b118fcc1e8f68b92e66b82f5ecae6932104c3d8f2092e6a789bc94249982479467d20ade0f8851e920616fb75e5ec7198a4f6896bce769d4395e46bce7478bb6d1f92bc4e0a97c1"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x7, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xc}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4, 0x0, 0x9, [@generic={0x77, 0x22, "8363f6ef18b47c554b3520b2d25570f42143fcee21c01592b0c0dc2064d8a57aed85f4f409f078d0c663d6beb42fbfde7125cce03866b3463b484a1442728f83dd64402489a5e91176cc9dedc7ce0341f7167bf0aaba543850e92ae57492f00cfcd4cdfe06b0be5ea081c1d4e6cdde168907666ca9"}, @generic={0x67, 0x23, "fae23b924a7e5f6677429540fc73333d09c2773d0ae60dc0250c1b96b2205165b8194857dc072ec815a73b3927c50a4cddc7cb70596d25002839458b949cc4b1e0ae56f334a9debdee24f7f7b645ffca42d1a53af207ddfc615166230b24c0749eb184374a"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x8, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x2}, @generic={0xf4, 0x2, "8fff8e96271bc3de683c39ca3f7596d69f89e3dcc3bbc6ea6857751692ca78669853722b476c61636bc59193a2af9603f2fce4d90e5cdab81dfc7dfb772bd1379620d056c4de466d72300aa802be4d44c57005e5fffc2b80a329aed3493dce1557adbb713f0650d47d88c311fbe32b549a26eed3a08f89a7f74c934223a095a26d2caf6cfd1ee75dd23ff0e748c9cfca177021eb6dd46dc37e27fe7ab34bd557b22b2d6b0f150f239273c5511029bbcfa84e2d34bb6c6f7c3ba00275a7cf86d0eb1c459230b89b32c0849c6950a29e7239793caf12ba310785e746331251167af399fb3144869e8c60dc17d38519511a16ad"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xf7, 0x0, 0x8, [@generic={0xc8, 0x22, "8535ab136b9cfe78d6c4f6de0c47f9fca4ff257ee32462e0de95618a1ced6bcbd05853837a0ee9eee5b7b6c45255ce2f9fd6a63fbd938e28ebae57faf876d0b2633b617b208278c92223027aa0c5c37122f860dc9062198586192a991f4bf51c6a91f8072eac2271b0c94162f4f11598a50598a107e87b7389bf87e2be9f79faf2b55cd8f0af45e94a909ffe3e0002f7dcd32f28413ead6aa53ecc9e2510a7a15f8e83f9eb07e750252e03e558efacf976558afcc60e913e81a62251d55fda8894a261889a44"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xce, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xaf60}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x2, 0x4, 0x9, [@generic={0xd2, 0x5, "1f50690e649d56dbad0aa1382c5827965a59207bade6911f919490cc789b465ff80f9fc1ace55663808a5b8b50d6f2222c92ec1f6d9cc467b7577fd5578a9bd15cb875a2c5253b034def50c301169c7e134cab20e05838837ec06765e66781f36e932e0f01a4e33efc2d7780fddefb8b7b7c80fceb88106416f876dd16460ae6eb12a4c055f2b9f97f36a06da21d3fe9ae27e0efd3d1bed37ec2e666e25270e30d7454e1d59f71c4d8e84692c62b00c3cb4ef598dd6d1089c0975b4ebb306fdb64864c77e54715ab7dc68302b00db661"}]}}]}}, {{0x9, 0x4, 0xc, 0x2, 0x8, 0x44, 0xa0, 0xe0, 0xe, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "70b8"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xb85, 0x4, 0xc, 0xdd}, {0x6, 0x24, 0x1a, 0x4, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, @hid_hid={0x9, 0x21, 0x3, 0xd3, 0x1, {0x22, 0x3d1}}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x2, 0x0, 0x6, [@generic={0x52, 0x21, "d259d19984bf41702b66187b0a33edc6f603bfa92ba6fffa031bd8ce0935e1fbc9e106eafabc90b63089a169a7af1e25d85c8d4015100296aa950bd3058181896fe444f32c579bdbe62249e3ce91253b"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x3, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x9, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x82, 0x3ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x40, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xb, 0x6, 0x8, [@generic={0x45, 0xe, "27f413657bfa185e4447a05121239c2f874cb8d42850d4c9bcf32914d425f24e2b550485c77aa8e9acf8609dc5ae74652766e2095c526316e004ea310ba975ae4faf6d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x80, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8000}, @generic={0x12, 0x9, "1c8dd4ce2c1cb2971f5f6cc6e4c50290"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x6, 0x3, 0x6, [@generic={0xfd, 0x21, "3b775f12308fece4e66cd8d3a071611cef18b7636e8d3906332295a93758d4507b3703cace7e9009974820acd9bea054181f28a1b65ab393df7435b2177099ec664069d2bf9d4dded7a6ba6e707767018e589c6c3fb1ddf2f31c4330650fbb8bb3a9a9a5b379cf4bca8dd18aa5120dd3b0b29303d59256f8a5b98769801e84d8ecfcf9d6cf18020b749f8f1349d1f3ffb76495ba8300002bf1a8016a01bbc60b914695cca4e7c05802851e4ce9163a10e281187fe6bf44b76e5326e6c8dc337f706831f9bd0355e9fc93432d3be31b01df46c003066ff8e34e5698453a01d8038fd695cbe008ad21a3ca627d2db0de18d490dc8c6d0d31bc7e26c4"}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7a, 0x4, 0x5, 0x20, 0x8}, 0xae, &(0x7f0000000e80)={0x5, 0xf, 0xae, 0x3, [@ptm_cap={0x3}, @generic={0x96, 0x10, 0x4, "c81ba5e2728d02f481ceee497367aeefe2c92149ffe618c3fcf887356126d9f46d35e5daf0f5d1b6fd0df11064db9dbd0a2e73e8a90fd572dbc735a90337ff4cd8fee32ac161acb07e544477261751fe5c9692aaf42198f0b10f7f6764dfcb78c4e0536341d1adeb9b0c653cbae1f60374a009c3a05cf8a9aaea6d1b0a61976965b3fee5c3cda157a4aac570cf1c914a00c55c"}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x3ff, 0xf, 0x73d1, [0xff3f0f]}]}, 0x2, [{0xb2, &(0x7f0000000f40)=@string={0xb2, 0x3, "32cb9acf9d2a403e161f2c28a7b6488e55907ba82bae3d9581b0836fc2016dec4c21d97555986863fd5e481a0a8ccb61f1d7b1a4cf65b4a6588b35a159d82ac0d379de7ecfad07b6d8b9b9355d15764e19894882a63b19fd859f080ed25d6c4867a56b3b9b380b30c9bbaf317c1b4ec82bd8b6a68c91c29ef614c4201741aab790ea109ca9756a51af90096718110dc0014b0a29a1d3467f840113fb579818e56486a97c44ecd45171e69dbbb7be1dce"}}, {0xc8, &(0x7f0000001000)=@string={0xc8, 0x3, "bbaba39e4a3621762982b26cc9f3606202d0d1bc3a1af204187071dd415b90304c2dc8a87c7ba9efad79c8d8ee120e63b5e777ad8a371c0d68df8f9d56a504bf3af5c68f257c265772a386245a927150351b87471ea6510f8795ecf8c335d10ac8807897d65c592d00ab451f24207083554c5107f8fedd334edad5fdc8d98ee6a611178e27433bfc1709e720e462881256d7e85d5e2060a1df9fbebb42b0279b7c14f2a896e4d49bafc04e5432a1558af857f6c6f03c277d931a734c9e618ee3bc71b030ba04"}}]}) syz_usb_control_io(r1, &(0x7f0000001340)={0x2c, &(0x7f0000001140)={0x20, 0x23, 0xb9, {0xb9, 0x6, "0f61b412667fccdabdf375516a728c01ef4e73339af5b9400f7cc33c513bfe20ec67fcf4822190d8f02c95e326e4c265f160c155cde93e6cdee56c044bfbb476bba0a9c9bec74ff7f5adc5f2542bcb018380d550a8ba1f7183af6f99566817b554e934a9cff187af6c7987d4a533e1067b83e9f135c00ab7be20b894307c20d01de272a2b5a49336ad52c68ef051cbc3c900428c06f381d3e1c7fb8a3f0a43c76493048b8a9f16fef87db83b39ef2dace16918fb1bc8cf"}}, &(0x7f0000001200)={0x0, 0x3, 0x30, @string={0x30, 0x3, "eca3825f12d33280d43242b99d0ab261738a8cf4ae91a2f086dd80c4c6bc5208c7c20d7c52f84fa4e5ad49803835"}}, &(0x7f0000001240)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x68, 0x5, 0x4, 0x1, 0xfe}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9f6c, 0x0, 0xf7bd, [0xff30, 0x3fc0, 0xff00f0, 0x3f00, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x83, 0x2, 0x200, 0xf00, 0x367, [0x3f00, 0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x1, 0xfd5d}]}}, &(0x7f00000012c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x1, 0x2, "2551d008", "8a9b8a66"}}, &(0x7f0000001300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x2, 0x5, 0x0, 0x9, 0x7f}}}, &(0x7f0000001780)={0x84, &(0x7f0000001380)={0x0, 0x7, 0x2b, "e9550abd3775194849205d747d3c786c8e29f56538b3e07ab07a6c3f32dfbf56aa65bacf2e126c70b772ef"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0xa5}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001480)={0x20, 0x0, 0x4, {0x400, 0x4}}, &(0x7f00000014c0)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001540)={0x40, 0xb, 0x2, "b9c0"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000015c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001600)={0x40, 0x17, 0x6, @random="1f71950f9aab"}, &(0x7f0000001640)={0x40, 0x19, 0x2, "7ec9"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001700)={0x40, 0x1e, 0x1}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x5}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 0s ago: executing program 1 (id=1318): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x90040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$inet6(0xa, 0x4, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) ioctl$KVM_GET_IRQCHIP(r2, 0x40046721, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x77, &(0x7f00000000c0)="27833780ac0231bd4e82d997", 0xc) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000080, 0x0, 0x400}]}) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40106726, &(0x7f00000000c0)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0) kernel console output (not intermixed with test programs): ][ T410] ======================================================= [ 26.524331][ T406] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.534120][ T406] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.543988][ T406] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.558819][ T406] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 26.568255][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.576415][ T406] usb 4-1: Product: syz [ 26.582083][ T406] usb 4-1: Manufacturer: syz [ 26.586940][ T406] usb 4-1: SerialNumber: syz [ 26.594125][ T406] hub 4-1:1.0: bad descriptor, ignoring hub [ 26.600059][ T406] hub 4-1:1.0: probe with driver hub failed with error -5 [ 26.663036][ T45] usb 2-1: device descriptor read/64, error -71 [ 26.696049][ T425] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 26.773063][ T45] usb usb2-port1: attempt power cycle [ 26.808490][ T406] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.882967][ T378] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.003239][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.022990][ T378] usb 1-1: device descriptor read/64, error -71 [ 27.113019][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.134295][ T45] usb 2-1: device descriptor read/8, error -71 [ 27.154076][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.166130][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.175964][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.188882][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 27.197945][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.206751][ T9] usb 3-1: config 0 descriptor?? [ 27.264074][ T45] usb 2-1: device descriptor read/8, error -71 [ 27.272960][ T378] usb 1-1: device descriptor read/64, error -71 [ 27.274976][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 27.502967][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.513043][ T378] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.524127][ T45] usb 2-1: device descriptor read/8, error -71 [ 27.643148][ T378] usb 1-1: device descriptor read/64, error -71 [ 27.654088][ T45] usb 2-1: device descriptor read/8, error -71 [ 27.763075][ T45] usb usb2-port1: unable to enumerate USB device [ 27.814407][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 27.814426][ T36] audit: type=1400 audit(1751015223.040:164): avc: denied { getopt } for pid=436 comm="syz.2.42" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.840948][ T9] usb 3-1: string descriptor 0 read error: -71 [ 27.842966][ T36] audit: type=1400 audit(1751015223.040:165): avc: denied { read write } for pid=436 comm="syz.2.42" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.847416][ T9] uclogic 0003:5543:0047.0001: failed retrieving string descriptor #200: -71 [ 27.870254][ T36] audit: type=1400 audit(1751015223.040:166): avc: denied { open } for pid=436 comm="syz.2.42" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.879030][ T9] uclogic 0003:5543:0047.0001: failed retrieving pen parameters: -71 [ 27.902402][ T378] usb 1-1: device descriptor read/64, error -71 [ 27.912120][ T63] usb 4-1: USB disconnect, device number 2 [ 27.922596][ T63] usblp0: removed [ 27.927987][ T9] uclogic 0003:5543:0047.0001: failed probing pen v2 parameters: -71 [ 27.936137][ T9] uclogic 0003:5543:0047.0001: failed probing parameters: -71 [ 27.943825][ T9] uclogic 0003:5543:0047.0001: probe with driver uclogic failed with error -71 [ 27.955310][ T9] usb 3-1: USB disconnect, device number 2 [ 28.023056][ T378] usb usb1-port1: attempt power cycle [ 28.363255][ T378] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.384062][ T378] usb 1-1: device descriptor read/8, error -71 [ 28.390559][ T36] audit: type=1400 audit(1751015223.610:167): avc: denied { write } for pid=448 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.475197][ T453] rust_binder: Error while translating object. [ 28.475252][ T453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.481542][ T453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:25 [ 28.513953][ T378] usb 1-1: device descriptor read/8, error -71 [ 28.669495][ T36] audit: type=1400 audit(1751015223.890:168): avc: denied { setopt } for pid=456 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.712950][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.752959][ T441] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.773049][ T378] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.794061][ T378] usb 1-1: device descriptor read/8, error -71 [ 28.843127][ T9] usb 2-1: device descriptor read/64, error -71 [ 28.912948][ T441] usb 3-1: Using ep0 maxpacket: 8 [ 28.919212][ T441] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.930724][ T441] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.940939][ T441] usb 3-1: config 0 interface 0 has no altsetting 0 [ 28.947941][ T441] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 28.957278][ T378] usb 1-1: device descriptor read/8, error -71 [ 28.963658][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.983336][ T441] usb 3-1: config 0 descriptor?? [ 29.073095][ T378] usb usb1-port1: unable to enumerate USB device [ 29.093046][ T9] usb 2-1: device descriptor read/64, error -71 [ 29.193782][ T455] 9pnet: Could not find request transport: xen [ 29.200005][ T455] 9pnet: Unknown protocol version 9p200O#0.L [ 29.333004][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.410266][ T441] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 29.417500][ T441] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 29.424619][ T441] cypress 0003:04B4:BCA1.0002: item fetching failed at offset 2/3 [ 29.433462][ T441] cypress 0003:04B4:BCA1.0002: parse failed [ 29.439639][ T441] cypress 0003:04B4:BCA1.0002: probe with driver cypress failed with error -22 [ 29.458887][ T36] audit: type=1400 audit(1751015224.680:169): avc: denied { write } for pid=463 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.478868][ T9] usb 2-1: device descriptor read/64, error -71 [ 29.483054][ T36] audit: type=1400 audit(1751015224.680:170): avc: denied { nlmsg_write } for pid=463 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.505634][ T36] audit: type=1400 audit(1751015224.700:171): avc: denied { read write } for pid=463 comm="syz.3.50" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.528773][ T36] audit: type=1400 audit(1751015224.700:172): avc: denied { open } for pid=463 comm="syz.3.50" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.608705][ T467] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 29.609292][ T468] sock: sock_set_timeout: `syz.0.51' (pid 468) tries to set negative timeout [ 29.628424][ T465] usb 3-1: USB disconnect, device number 3 [ 29.644344][ T472] netlink: 104 bytes leftover after parsing attributes in process `syz.0.52'. [ 29.660684][ T36] audit: type=1400 audit(1751015224.880:173): avc: denied { map } for pid=471 comm="syz.0.52" path="socket:[3697]" dev="sockfs" ino=3697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.743012][ T63] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.750580][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.190531][ T475] __vm_enough_memory: pid: 475, comm: syz.2.53, bytes: 70373039144960 not enough memory for the allocation [ 30.302475][ T9] usb usb2-port1: attempt power cycle [ 30.326111][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.342063][ T63] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.360424][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.389766][ T63] usb 4-1: config 0 descriptor?? [ 30.556432][ T480] kvm: kvm [478]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 30.607823][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 30.623050][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.631731][ T63] usb 4-1: USB disconnect, device number 3 [ 30.642946][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.674623][ T9] usb 2-1: device descriptor read/8, error -71 [ 30.780238][ T499] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 30.804073][ T9] usb 2-1: device descriptor read/8, error -71 [ 30.811795][ T501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.61'. [ 31.042952][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 31.063991][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.083243][ T441] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.093068][ T378] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.194007][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.232930][ T441] usb 3-1: Using ep0 maxpacket: 8 [ 31.239022][ T441] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.250276][ T378] usb 4-1: Using ep0 maxpacket: 16 [ 31.255465][ T441] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.265277][ T441] usb 3-1: config 0 interface 0 has no altsetting 0 [ 31.271989][ T441] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 31.281088][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.289538][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.300649][ T378] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 31.309964][ T441] usb 3-1: config 0 descriptor?? [ 31.313142][ T9] usb usb2-port1: unable to enumerate USB device [ 31.315070][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.331060][ T378] usb 4-1: config 0 descriptor?? [ 31.530178][ T503] 9pnet: Could not find request transport: xen [ 31.536535][ T503] 9pnet: Unknown protocol version 9p200O#0.L [ 31.649900][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 31.659577][ T520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=520 comm=syz.0.68 [ 31.748238][ T441] cypress 0003:04B4:BCA1.0003: unknown main item tag 0x0 [ 31.755910][ T441] cypress 0003:04B4:BCA1.0003: unknown main item tag 0x0 [ 31.763089][ T441] cypress 0003:04B4:BCA1.0003: item fetching failed at offset 2/3 [ 31.777953][ T441] cypress 0003:04B4:BCA1.0003: parse failed [ 31.784268][ T441] cypress 0003:04B4:BCA1.0003: probe with driver cypress failed with error -22 [ 31.849764][ T527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.957500][ T441] usb 3-1: USB disconnect, device number 4 [ 32.047349][ T504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 32.102990][ T63] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.227465][ T530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.227502][ T530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 32.262954][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 32.278385][ T63] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 32.286614][ T63] usb 1-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 32.297024][ T63] usb 1-1: config 0 has no interface number 0 [ 32.304754][ T63] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 32.313852][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.321924][ T63] usb 1-1: Product: syz [ 32.326140][ T63] usb 1-1: Manufacturer: syz [ 32.330829][ T63] usb 1-1: SerialNumber: syz [ 32.336552][ T63] usb 1-1: config 0 descriptor?? [ 32.492937][ T441] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 32.545227][ T9] usb 1-1: USB disconnect, device number 6 [ 32.642960][ T441] usb 2-1: Using ep0 maxpacket: 32 [ 32.649552][ T441] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.658303][ T441] usb 2-1: config 1 interface 0 altsetting 25 bulk endpoint 0x82 has invalid maxpacket 32 [ 32.668354][ T441] usb 2-1: config 1 interface 0 altsetting 25 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 32.681396][ T441] usb 2-1: config 1 interface 0 has no altsetting 0 [ 32.689538][ T441] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.698659][ T441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.706686][ T441] usb 2-1: Product: syz [ 32.710858][ T441] usb 2-1: Manufacturer: syz [ 32.715493][ T441] usb 2-1: SerialNumber: syz [ 32.721120][ T532] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 32.732949][ T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.882952][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 32.889239][ T63] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 32.901124][ T63] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 32.910273][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.918312][ T63] usb 3-1: Product: syz [ 32.922504][ T63] usb 3-1: Manufacturer: syz [ 32.927210][ T63] usb 3-1: SerialNumber: syz [ 32.932674][ T63] usb 3-1: config 0 descriptor?? [ 32.940269][ T63] usb 3-1: bad CDC descriptors [ 32.945391][ T63] usb 3-1: unsupported MDLM descriptors [ 33.071526][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 33.071542][ T36] audit: type=1400 audit(1751015228.290:203): avc: denied { create } for pid=535 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 33.112169][ T36] audit: type=1400 audit(1751015228.330:204): avc: denied { read } for pid=537 comm="syz.0.76" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 33.114698][ T538] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.134996][ T36] audit: type=1400 audit(1751015228.330:205): avc: denied { open } for pid=537 comm="syz.0.76" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 33.141925][ T538] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.164736][ T36] audit: type=1400 audit(1751015228.330:206): avc: denied { ioctl } for pid=537 comm="syz.0.76" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 33.228002][ T36] audit: type=1400 audit(1751015228.430:207): avc: denied { setopt } for pid=537 comm="syz.0.76" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.269386][ T378] usbhid 4-1:0.0: can't add hid device: -71 [ 33.278385][ T36] audit: type=1400 audit(1751015228.500:208): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.302499][ T378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.315362][ T378] usb 4-1: USB disconnect, device number 4 [ 33.343854][ T36] audit: type=1400 audit(1751015228.560:209): avc: denied { view } for pid=531 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 33.396759][ T36] audit: type=1400 audit(1751015228.620:210): avc: denied { create } for pid=531 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.416927][ T36] audit: type=1400 audit(1751015228.630:211): avc: denied { setopt } for pid=531 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.475580][ T36] audit: type=1400 audit(1751015228.700:212): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.713655][ T556] input: syz1 as /devices/virtual/input/input5 [ 34.432955][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.432978][ T378] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.592938][ T378] usb 1-1: Using ep0 maxpacket: 16 [ 34.592951][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.594156][ T378] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 34.614150][ T378] usb 1-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 34.625494][ T378] usb 1-1: config 0 has no interface number 0 [ 34.633576][ T378] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 34.643009][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.651164][ T378] usb 1-1: Product: syz [ 34.655880][ T378] usb 1-1: Manufacturer: syz [ 34.660536][ T378] usb 1-1: SerialNumber: syz [ 34.672023][ T378] usb 1-1: config 0 descriptor?? [ 34.842983][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.880919][ T378] usb 1-1: USB disconnect, device number 7 [ 35.102968][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.243010][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.259136][ T441] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 35.283049][ T441] usb 2-1: USB disconnect, device number 10 [ 35.300624][ T568] netlink: 168 bytes leftover after parsing attributes in process `syz.1.85'. [ 35.411298][ T573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.411334][ T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 35.442589][ T378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 35.467844][ T378] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.483212][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.496751][ T465] usb 3-1: USB disconnect, device number 5 [ 35.529894][ T583] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 35.529924][ T583] rust_binder: Error while translating object. [ 35.534429][ T576] fido_id[576]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.540171][ T583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.549424][ T581] rust_binder: Error while translating object. [ 35.570046][ T581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.573030][ T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 35.578552][ T581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 35.596975][ T9] usb usb4-port1: attempt power cycle [ 35.740924][ T599] FAT-fs (rnullb0): bogus number of reserved sectors [ 35.747698][ T599] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 35.754903][ T600] FAT-fs (rnullb0): bogus number of reserved sectors [ 35.761695][ T600] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 35.830322][ T611] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 35.838812][ T611] rust_binder: Write failure EINVAL in pid:117 [ 35.853809][ T63] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 35.859298][ T614] SELinux: security_context_str_to_sid (unconbined_u) failed with errno=-22 [ 35.952968][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.974027][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.004060][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.015289][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.025124][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.038095][ T63] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.047411][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.060709][ T63] usb 2-1: config 0 descriptor?? [ 36.103914][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.342954][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.364001][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.473304][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.480745][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.488212][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.495652][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.503126][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.510569][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.518087][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.525547][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.533138][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.540613][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.548073][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.554309][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.561703][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.569141][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.576579][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.583999][ T63] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.591572][ T63] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 36.600713][ T63] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 36.663053][ T9] usb usb4-port1: unable to enumerate USB device [ 36.733551][ T9] usb 2-1: USB disconnect, device number 11 [ 36.961627][ T642] rust_binder: Write failure EINVAL in pid:109 [ 36.979292][ T646] binder: Unknown parameter 'f' [ 36.992416][ T645] tipc: Failed to remove unknown binding: 66,1,1/0:1633106181/1633106183 [ 37.007840][ T645] tipc: Failed to remove unknown binding: 66,1,1/0:1633106181/1633106183 [ 37.278661][ T441] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 37.444351][ T441] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.455512][ T441] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 37.466660][ T441] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.473484][ T441] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 37.482765][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.493777][ T441] usb 3-1: config 0 descriptor?? [ 37.501870][ T648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.572969][ T378] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 37.723197][ T378] usb 2-1: Using ep0 maxpacket: 8 [ 37.729296][ T378] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.740419][ T378] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.750215][ T378] usb 2-1: config 0 interface 0 has no altsetting 0 [ 37.756886][ T378] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 37.765989][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.775218][ T378] usb 2-1: config 0 descriptor?? [ 37.827242][ T658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 37.912747][ T441] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 37.921091][ T441] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 37.928660][ T441] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x6 [ 37.936854][ T441] holtek_mouse 0003:04D9:A067.0006: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 37.981661][ T652] 9pnet: Could not find request transport: xen [ 37.987948][ T652] 9pnet: Unknown protocol version 9p200O#0.L [ 38.112430][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.121015][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.129468][ T9] usb 3-1: USB disconnect, device number 6 [ 38.152943][ T63] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.196435][ T378] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 38.203568][ T378] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 38.210616][ T378] cypress 0003:04B4:BCA1.0007: item fetching failed at offset 2/3 [ 38.218624][ T378] cypress 0003:04B4:BCA1.0007: parse failed [ 38.224590][ T378] cypress 0003:04B4:BCA1.0007: probe with driver cypress failed with error -22 [ 38.282948][ T63] usb 1-1: device descriptor read/64, error -71 [ 38.400393][ T9] usb 2-1: USB disconnect, device number 12 [ 38.523085][ T63] usb 1-1: device descriptor read/64, error -71 [ 38.595630][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 38.595648][ T36] audit: type=1400 audit(1751015233.820:232): avc: denied { write } for pid=670 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.595737][ T46] tipc: Subscription rejected, illegal request [ 38.601883][ T36] audit: type=1400 audit(1751015233.820:233): avc: denied { read } for pid=670 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.674930][ T675] tipc: Can't bind to reserved service type 2 [ 38.681080][ T36] audit: type=1400 audit(1751015233.900:234): avc: denied { create } for pid=676 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 38.713393][ T36] audit: type=1400 audit(1751015233.900:235): avc: denied { ioctl } for pid=676 comm="syz.2.123" path="socket:[6684]" dev="sockfs" ino=6684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.737894][ T36] audit: type=1400 audit(1751015233.900:236): avc: denied { mount } for pid=678 comm="syz.2.124" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 38.759394][ T36] audit: type=1400 audit(1751015233.900:237): avc: denied { setopt } for pid=678 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.778689][ T63] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.786238][ T36] audit: type=1400 audit(1751015233.940:238): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 38.787351][ T681] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 38.813110][ T681] rust_binder: Write failure EINVAL in pid:143 [ 38.826686][ T36] audit: type=1400 audit(1751015234.050:239): avc: denied { bind } for pid=685 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.852128][ T36] audit: type=1400 audit(1751015234.050:240): avc: denied { name_bind } for pid=685 comm="syz.2.126" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 38.872568][ T36] audit: type=1400 audit(1751015234.050:241): avc: denied { node_bind } for pid=685 comm="syz.2.126" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 38.953000][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.967819][ T63] usb 1-1: device descriptor read/64, error -71 [ 38.981340][ T691] netlink: 'syz.1.128': attribute type 64 has an invalid length. [ 38.982516][ T694] rust_binder: Write failure EFAULT in pid:153 [ 38.990197][ T691] netlink: 5 bytes leftover after parsing attributes in process `syz.1.128'. [ 39.114035][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.124998][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.134791][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.147833][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.157045][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.166640][ T9] usb 4-1: config 0 descriptor?? [ 39.222934][ T63] usb 1-1: device descriptor read/64, error -71 [ 39.242958][ T441] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.334507][ T63] usb usb1-port1: attempt power cycle [ 39.392949][ T441] usb 3-1: Using ep0 maxpacket: 16 [ 39.399336][ T441] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 39.407660][ T441] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.417921][ T441] usb 3-1: config 0 has no interface number 0 [ 39.425627][ T441] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 39.434740][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.442748][ T441] usb 3-1: Product: syz [ 39.446960][ T441] usb 3-1: Manufacturer: syz [ 39.451588][ T441] usb 3-1: SerialNumber: syz [ 39.457056][ T441] usb 3-1: config 0 descriptor?? [ 39.574121][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 39.583582][ T9] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 39.592850][ T9] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 39.663131][ T696] process 'syz.2.130' launched './file0' with NULL argv: empty string added [ 39.673022][ T63] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 39.682851][ T441] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 39.689346][ T441] usb 3-1: No valid video chain found. [ 39.694120][ T63] usb 1-1: device descriptor read/8, error -71 [ 39.695814][ T441] usb 3-1: USB disconnect, device number 7 [ 39.833943][ T63] usb 1-1: device descriptor read/8, error -71 [ 40.072944][ T63] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 40.094332][ T63] usb 1-1: device descriptor read/8, error -71 [ 40.227398][ T63] usb 1-1: device descriptor read/8, error -71 [ 40.343094][ T63] usb usb1-port1: unable to enumerate USB device [ 40.441232][ T63] usb 4-1: USB disconnect, device number 9 [ 40.582985][ T406] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 40.734014][ T406] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 40.742510][ T406] usb 2-1: config 220 has an invalid descriptor of length 72, skipping remainder of the config [ 40.759049][ T406] usb 2-1: config 220 has no interface number 2 [ 40.765536][ T406] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 40.778755][ T406] usb 2-1: config 220 interface 0 has no altsetting 0 [ 40.785576][ T406] usb 2-1: config 220 interface 76 has no altsetting 0 [ 40.792468][ T406] usb 2-1: config 220 interface 1 has no altsetting 0 [ 40.801017][ T406] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 40.810103][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.818124][ T406] usb 2-1: Product: syz [ 40.822283][ T406] usb 2-1: Manufacturer: syz [ 40.826906][ T406] usb 2-1: SerialNumber: syz [ 40.992966][ T63] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.041329][ T723] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 41.043621][ T406] usb 2-1: selecting invalid altsetting 0 [ 41.057366][ T406] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 41.063787][ T406] usb 2-1: No valid video chain found. [ 41.071711][ T406] usb 2-1: USB disconnect, device number 13 [ 41.132988][ T63] usb 3-1: device descriptor read/64, error -71 [ 41.272960][ T441] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 41.372985][ T63] usb 3-1: device descriptor read/64, error -71 [ 41.426614][ T441] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.435220][ T441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 41.445446][ T441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 41.455570][ T441] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.470762][ T441] usb 1-1: string descriptor 0 read error: -22 [ 41.478649][ T441] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.488078][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.497640][ T736] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 41.505163][ T736] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 41.513488][ T441] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 41.562607][ T746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 41.612953][ T63] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.694003][ T748] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 41.694031][ T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 41.702730][ T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:60 [ 41.721170][ T441] usb 1-1: USB disconnect, device number 12 [ 41.742941][ T63] usb 3-1: device descriptor read/64, error -71 [ 41.982933][ T63] usb 3-1: device descriptor read/64, error -71 [ 42.093043][ T63] usb usb3-port1: attempt power cycle [ 42.432941][ T63] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.454033][ T63] usb 3-1: device descriptor read/8, error -71 [ 42.583956][ T63] usb 3-1: device descriptor read/8, error -71 [ 42.822951][ T63] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 42.844870][ T63] usb 3-1: device descriptor read/8, error -71 [ 42.977323][ T63] usb 3-1: device descriptor read/8, error -71 [ 43.042941][ T378] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 43.098281][ T63] usb usb3-port1: unable to enumerate USB device [ 43.203297][ T378] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.214740][ T378] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 43.233268][ T378] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.242557][ T378] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 43.252367][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.256237][ T781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:68 [ 43.263491][ T378] usb 4-1: config 0 descriptor?? [ 43.293203][ T769] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 43.519839][ T378] usbhid 4-1:0.0: can't add hid device: -71 [ 43.537226][ T378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.550640][ T378] usb 4-1: USB disconnect, device number 10 [ 43.892948][ T378] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 44.052957][ T378] usb 4-1: Using ep0 maxpacket: 16 [ 44.059284][ T378] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 44.068035][ T378] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.078150][ T378] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.088444][ T378] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.097559][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.105579][ T378] usb 4-1: Product: syz [ 44.109754][ T378] usb 4-1: Manufacturer: syz [ 44.114388][ T378] usb 4-1: SerialNumber: syz [ 44.169628][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 44.169647][ T36] audit: type=1400 audit(1751015239.390:260): avc: denied { map } for pid=812 comm="syz.1.167" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.184113][ T813] kvm: kvm [812]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 44.200390][ T36] audit: type=1400 audit(1751015239.390:261): avc: denied { read write } for pid=812 comm="syz.1.167" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.232917][ T36] audit: type=1400 audit(1751015239.390:262): avc: denied { sqpoll } for pid=812 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.362006][ T36] audit: type=1400 audit(1751015239.580:263): avc: denied { ioctl } for pid=816 comm="syz.1.168" path="socket:[8088]" dev="sockfs" ino=8088 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.521849][ T378] usb 4-1: 0:2 : does not exist [ 44.577513][ T822] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 44.584827][ T822] rust_binder: Write failure EINVAL in pid:140 [ 44.603305][ T824] SELinux: security_context_str_to_sid () failed with errno=-22 [ 44.688718][ T828] netlink: 'syz.2.172': attribute type 5 has an invalid length. [ 44.700792][ T828] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.724794][ T36] audit: type=1400 audit(1751015239.950:264): avc: denied { write } for pid=834 comm="syz.0.174" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.726532][ T837] rust_binder: Error while translating object. [ 44.746461][ T837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.748757][ T36] audit: type=1400 audit(1751015239.950:265): avc: denied { remove_name } for pid=834 comm="syz.0.174" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.786813][ T36] audit: type=1400 audit(1751015239.950:266): avc: denied { unlink } for pid=834 comm="syz.0.174" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.792987][ T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 44.809742][ T36] audit: type=1400 audit(1751015239.950:267): avc: denied { append } for pid=836 comm="syz.2.175" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.846942][ T36] audit: type=1400 audit(1751015240.010:268): avc: denied { accept } for pid=798 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.866878][ T36] audit: type=1400 audit(1751015240.080:269): avc: denied { write } for pid=839 comm="syz.2.177" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 44.967480][ T378] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 44.979065][ T378] usb 4-1: USB disconnect, device number 11 [ 44.989448][ T848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.024839][ T855] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 45.142974][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.292955][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 45.299280][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 45.309196][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 45.319592][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.328672][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.336715][ T45] usb 1-1: SerialNumber: syz [ 45.342622][ T842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.349863][ T842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.794577][ T881] tmpfs: Unknown parameter 'rac$]]?-' [ 45.967513][ T885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.968245][ T885] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 45.983020][ T889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.005916][ T891] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.014655][ T891] rust_binder: Read failure Err(EFAULT) in pid:104 [ 46.058286][ T898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.065047][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:205 [ 46.227035][ T912] overlayfs: failed to resolve './file0': -2 [ 46.308331][ T918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.556686][ T922] binder: Bad value for 'stats' [ 46.764227][ T942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.937785][ T946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.937822][ T946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:117 [ 47.102948][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.243013][ T9] usb 4-1: device descriptor read/64, error -71 [ 47.482971][ T9] usb 4-1: device descriptor read/64, error -71 [ 47.722979][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 47.852958][ T9] usb 4-1: device descriptor read/64, error -71 [ 47.875337][ T45] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 47.888322][ T45] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 47.895570][ T45] usb 1-1: USB disconnect, device number 13 [ 47.933022][ T953] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 47.941327][ T953] overlayfs: missing 'lowerdir' [ 48.092950][ T9] usb 4-1: device descriptor read/64, error -71 [ 48.203759][ T9] usb usb4-port1: attempt power cycle [ 48.242949][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.393981][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.404951][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.414805][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.427729][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.436797][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.445580][ T45] usb 1-1: config 0 descriptor?? [ 48.542997][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 48.564060][ T9] usb 4-1: device descriptor read/8, error -71 [ 48.588924][ T955] fuse: Bad value for 'user_id' [ 48.593847][ T955] fuse: Bad value for 'user_id' [ 48.694041][ T9] usb 4-1: device descriptor read/8, error -71 [ 48.853632][ T953] 9pnet_fd: Insufficient options for proto=fd [ 48.861396][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 48.867478][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 48.876233][ T45] usb 1-1: USB disconnect, device number 14 [ 48.943035][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 48.964010][ T9] usb 4-1: device descriptor read/8, error -71 [ 49.094176][ T9] usb 4-1: device descriptor read/8, error -71 [ 49.203035][ T9] usb usb4-port1: unable to enumerate USB device [ 49.400697][ T966] fuse: blksize only supported for fuseblk [ 49.420611][ T968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 49.471481][ T972] rust_binder: Write failure EINVAL in pid:218 [ 49.601019][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 49.601039][ T36] audit: type=1400 audit(1751015244.820:287): avc: denied { search } for pid=984 comm="syz.0.228" name="/" dev="configfs" ino=2468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.685581][ T989] exFAT-fs (rnullb0): invalid boot record signature [ 49.692274][ T989] exFAT-fs (rnullb0): failed to read boot sector [ 49.698902][ T989] exFAT-fs (rnullb0): failed to recognize exfat type [ 49.706543][ T36] audit: type=1400 audit(1751015244.930:288): avc: denied { read } for pid=988 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.748624][ T36] audit: type=1400 audit(1751015244.970:289): avc: denied { name_bind } for pid=992 comm="syz.0.232" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 49.786988][ T36] audit: type=1400 audit(1751015244.970:290): avc: denied { node_bind } for pid=992 comm="syz.0.232" saddr=::ffff:127.0.0.1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.817465][ T378] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.827477][ T36] audit: type=1400 audit(1751015244.970:291): avc: denied { name_bind } for pid=992 comm="syz.0.232" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.849659][ T36] audit: type=1400 audit(1751015245.040:292): avc: denied { create } for pid=995 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.953158][ T1008] syzkaller0: entered promiscuous mode [ 49.958886][ T1008] syzkaller0: entered allmulticast mode [ 49.993976][ T378] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.001844][ T1016] syzkaller0: entered promiscuous mode [ 50.004141][ T378] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.009743][ T1016] syzkaller0: entered allmulticast mode [ 50.020958][ T378] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.033366][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.041634][ T378] usb 2-1: SerialNumber: syz [ 50.056235][ T36] audit: type=1400 audit(1751015245.280:293): avc: denied { listen } for pid=1018 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.185714][ T1028] capability: warning: `syz.0.242' uses deprecated v2 capabilities in a way that may be insecure [ 50.260221][ T378] usb 2-1: 0:2 : does not exist [ 50.276413][ T378] usb 2-1: USB disconnect, device number 14 [ 50.290019][ T1040] netlink: 'syz.2.245': attribute type 12 has an invalid length. [ 50.299903][ T1037] netlink: 'syz.2.245': attribute type 12 has an invalid length. [ 50.325766][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.479730][ T1046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 50.481000][ T36] audit: type=1400 audit(1751015245.700:294): avc: denied { connect } for pid=1045 comm="syz.0.248" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.625080][ T1052] mmap: syz.0.251 (1052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.722848][ T1061] FAT-fs (rnullb0): bogus number of reserved sectors [ 50.723809][ T36] audit: type=1400 audit(1751015245.940:295): avc: denied { read } for pid=1059 comm="syz.3.254" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.752924][ T1061] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 50.830670][ T36] audit: type=1400 audit(1751015246.050:296): avc: denied { append } for pid=1062 comm="syz.0.255" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.854630][ T1065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.854689][ T1065] rust_binder: Write failure EFAULT in pid:151 [ 50.880004][ T1063] bridge0: entered promiscuous mode [ 50.892186][ T1062] bridge0: left promiscuous mode [ 50.912004][ T1070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.912378][ T1070] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 50.920357][ T1070] rust_binder: Error while translating object. [ 50.930006][ T1070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.942972][ T1070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 51.036130][ T1089] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 51.086571][ T1095] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 51.278757][ T13] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 51.288509][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.295111][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.332100][ T1117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 51.332508][ T1117] rust_binder: Error while translating object. [ 51.347840][ T1117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.354140][ T1117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 51.534749][ T1129] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 51.551107][ T1129] rust_binder: Write failure EINVAL in pid:262 [ 51.564571][ T1131] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 51.662939][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 51.814050][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.824421][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.839216][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.848632][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.861964][ T9] usb 4-1: SerialNumber: syz [ 51.895551][ T1144] overlayfs: missing 'lowerdir' [ 51.982980][ T465] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 52.070927][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 52.134092][ T465] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.145148][ T465] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 52.156148][ T465] usb 3-1: config 0 interface 0 has no altsetting 0 [ 52.162794][ T465] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 52.171864][ T465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.180486][ T465] usb 3-1: config 0 descriptor?? [ 52.185796][ T1138] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 52.212978][ T63] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 52.270511][ T1122] binder: Unknown parameter 'context' [ 52.304226][ T439] usb 4-1: USB disconnect, device number 16 [ 52.372983][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 52.380056][ T63] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 52.388387][ T63] usb 1-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 52.399092][ T63] usb 1-1: config 0 has no interface number 0 [ 52.407896][ T63] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 52.417003][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.425058][ T63] usb 1-1: Product: syz [ 52.429235][ T63] usb 1-1: Manufacturer: syz [ 52.433964][ T63] usb 1-1: SerialNumber: syz [ 52.439360][ T63] usb 1-1: config 0 descriptor?? [ 52.555817][ T1158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.556799][ T1159] rust_binder: Error in use_page_slow: ESRCH [ 52.563488][ T1159] rust_binder: use_range failure ESRCH [ 52.569522][ T1159] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 52.575203][ T1159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.583262][ T1159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:177 [ 52.599961][ T465] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x6 [ 52.617265][ T465] holtek_mouse 0003:04D9:A067.0009: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 52.646153][ T465] usb 1-1: USB disconnect, device number 15 [ 52.800666][ T439] usb 3-1: USB disconnect, device number 12 [ 53.190140][ T1166] loop9: detected capacity change from 0 to 7 [ 53.196536][ T1166] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.204539][ T1166] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.212487][ T1166] loop9: unable to read partition table [ 53.218264][ T1166] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 53.218264][ T1166] ) failed (rc=-5) [ 53.232519][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.240666][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.248925][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.256913][ T1168] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.265003][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.273349][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.322945][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.322986][ T1110] Bluetooth: hci0: command 0x1003 tx timeout [ 53.360355][ T1172] 9pnet: Could not find request transport: xen [ 53.366832][ T1172] 9pnet: Unknown protocol version 9p200O#0.L [ 53.374173][ T1174] overlayfs: missing 'lowerdir' [ 53.458123][ T1186] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.458508][ T1186] rust_binder: Error while translating object. [ 53.465458][ T1186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.471634][ T1186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 53.782947][ T311] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 53.803064][ T378] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 53.942926][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 53.953675][ T311] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 53.961953][ T311] usb 4-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 53.972828][ T311] usb 4-1: config 0 has no interface number 0 [ 53.980397][ T378] usb 2-1: No LPM exit latency info found, disabling LPM. [ 53.988289][ T378] usb 2-1: config 1 interface 0 altsetting 239 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 53.999350][ T311] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 54.008424][ T378] usb 2-1: config 1 interface 0 has no altsetting 0 [ 54.015060][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.023162][ T311] usb 4-1: Product: syz [ 54.027365][ T311] usb 4-1: Manufacturer: syz [ 54.032060][ T311] usb 4-1: SerialNumber: syz [ 54.037706][ T311] usb 4-1: config 0 descriptor?? [ 54.043300][ T378] usb 2-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.40 [ 54.052459][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.061732][ T378] usb 2-1: Product: ӿ [ 54.065900][ T378] usb 2-1: Manufacturer: 媴褿衋ﭬۼ﷤煽ᆚ咋꿾஖⸢㱷⌖堀㝭ଠ◭䔷쨼⁌˒ु좟酃㥧儍맩⧑懗獏֔궐驏덮粞膈Ɂ뽨鄉沶ࡼ哧䂬틪￭䴾ᣮ⸟ﯦ臛䭔ਪ婢㚵ɪ䊁읳囨ถꂠ懭䕢牆벵鸋퐩罴䮼噩쯿ᦨ瘏佡ԁ᥷᧲궡௺ﲨ㧎⌘ᆿ嘹蝀ᘼ쑳晭楮藬 [ 54.095092][ T378] usb 2-1: SerialNumber: 㰟瓯ᕩ慉⛷ᾓ䪤禁ฮև喁ힺ怓踈짇䲝뵍夨鸝苧⣆쒜窴凊䁧꛱ᇵᆹ᜶ꓺᯢ혒䤄☝썚Վ茭愦ѿᴣ⟺ꪗӅᵲㆢ䖤罅皡말ᚋ鬴뇩䅸⃓ᰅힸ길知鉩颶⡄㻵㾙ᛅ詢⹙ṋꈋ洳픆ᣈ႕膓꘾檵뒀躮ඍ녑귐ၱఅ岺ᰁ䓢ፀ璈꘩⺖럁␓ [ 54.128419][ T1198] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 54.262653][ T311] usb 4-1: USB disconnect, device number 17 [ 54.314737][ T1218] 9pnet: Could not find request transport: xen [ 54.320947][ T1218] 9pnet: Unknown protocol version 9p200O#0.L [ 54.339329][ T378] usbhid 2-1:1.0: can't add hid device: -71 [ 54.345422][ T378] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 54.354765][ T378] usb 2-1: USB disconnect, device number 15 [ 54.868825][ T1240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 54.869567][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 54.869586][ T36] audit: type=1400 audit(1751015250.090:307): avc: denied { mount } for pid=1239 comm="syz.2.313" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.907207][ T1240] overlay: ./file1 is not a directory [ 54.971708][ T36] audit: type=1400 audit(1751015250.190:308): avc: denied { append } for pid=1248 comm="syz.3.317" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.032990][ T1253] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 55.067751][ T1257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 55.129296][ T1262] 9pnet: Could not find request transport: xen [ 55.144975][ T1262] 9pnet: Unknown protocol version 9p200O#0.L [ 55.152332][ T1263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.152965][ T311] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 55.314064][ T311] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 55.322352][ T311] usb 3-1: config 0 has no interface number 0 [ 55.329095][ T311] usb 3-1: config 0 interface 208 has no altsetting 0 [ 55.337516][ T311] usb 3-1: New USB device found, idVendor=0403, idProduct=fa04, bcdDevice=97.e1 [ 55.346704][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.354744][ T311] usb 3-1: Product: syz [ 55.358937][ T311] usb 3-1: Manufacturer: syz [ 55.363721][ T311] usb 3-1: SerialNumber: syz [ 55.369006][ T311] usb 3-1: config 0 descriptor?? [ 55.604884][ T311] ftdi_sio 3-1:0.208: FTDI USB Serial Device converter detected [ 55.613058][ T311] ftdi_sio ttyUSB0: unknown device type: 0x97e1 [ 55.620194][ T311] usb 3-1: USB disconnect, device number 13 [ 55.626911][ T311] ftdi_sio 3-1:0.208: device disconnected [ 55.903061][ T378] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 56.053219][ T1282] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 56.053248][ T1282] rust_binder: Error while translating object. [ 56.063052][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 56.065817][ T1282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.072979][ T378] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.076828][ T1282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 56.086600][ T378] usb 2-1: config 1 has no interface number 1 [ 56.110356][ T378] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 56.123674][ T378] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 56.136222][ T378] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.145701][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.153903][ T378] usb 2-1: Product: syz [ 56.158217][ T36] audit: type=1400 audit(1751015251.370:309): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.162949][ T378] usb 2-1: Manufacturer: syz [ 56.196878][ T378] usb 2-1: SerialNumber: syz [ 56.315380][ T1295] overlayfs: missing 'lowerdir' [ 56.412099][ T378] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 56.420624][ T378] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 56.428161][ T378] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 56.437811][ T378] usb 2-1: USB disconnect, device number 16 [ 56.450505][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.604222][ T465] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 56.719212][ T36] audit: type=1400 audit(1751015251.940:310): avc: denied { connect } for pid=1299 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.745404][ T465] usb 4-1: device descriptor read/64, error -71 [ 56.752181][ T36] audit: type=1400 audit(1751015251.940:311): avc: denied { shutdown } for pid=1299 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.826705][ T1305] binder: Bad value for 'max' [ 56.867459][ T1311] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.871070][ T1312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 56.877703][ T1312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:299 [ 56.957445][ T1316] netlink: 116 bytes leftover after parsing attributes in process `syz.2.340'. [ 56.976871][ T36] audit: type=1400 audit(1751015252.200:312): avc: denied { write } for pid=1317 comm="syz.0.341" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 57.001275][ T36] audit: type=1400 audit(1751015252.200:313): avc: denied { open } for pid=1317 comm="syz.0.341" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 57.026062][ T465] usb 4-1: device descriptor read/64, error -71 [ 57.075455][ T1327] SELinux: security_context_str_to_sid () failed with errno=-22 [ 57.183030][ T406] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.199470][ T36] audit: type=1400 audit(1751015252.420:314): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.224034][ T36] audit: type=1400 audit(1751015252.440:315): avc: denied { mounton } for pid=1331 comm="syz.0.346" path="/102/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 57.272973][ T465] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 57.334066][ T406] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.347073][ T406] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 57.356154][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.364849][ T406] usb 2-1: config 0 descriptor?? [ 57.370929][ T406] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 57.402965][ T465] usb 4-1: device descriptor read/64, error -71 [ 57.642953][ T465] usb 4-1: device descriptor read/64, error -71 [ 57.753111][ T465] usb usb4-port1: attempt power cycle [ 58.093015][ T465] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 58.128298][ T465] usb 4-1: device descriptor read/8, error -71 [ 58.264131][ T465] usb 4-1: device descriptor read/8, error -71 [ 58.274551][ T36] audit: type=1400 audit(1751015253.500:316): avc: denied { map } for pid=1313 comm="syz.1.339" path="socket:[11024]" dev="sockfs" ino=11024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.326815][ T1356] SELinux: security_context_str_to_sid () failed with errno=-22 [ 58.334994][ T1357] SELinux: security_context_str_to_sid () failed with errno=-22 [ 58.484064][ T1364] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.490889][ T1364] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.503121][ T465] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 58.528123][ T1367] x_tables: duplicate underflow at hook 2 [ 58.535281][ T465] usb 4-1: device descriptor read/8, error -71 [ 58.664106][ T465] usb 4-1: device descriptor read/8, error -71 [ 58.773092][ T465] usb usb4-port1: unable to enumerate USB device [ 58.852955][ T63] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 59.003019][ T63] usb 3-1: Using ep0 maxpacket: 8 [ 59.009303][ T63] usb 3-1: config 0 interface 0 has no altsetting 0 [ 59.016009][ T63] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 59.025138][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.033807][ T63] usb 3-1: config 0 descriptor?? [ 59.442721][ T63] sony 0003:1430:474C.000A: unknown main item tag 0x6 [ 59.450198][ T63] sony 0003:1430:474C.000A: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.2-1/input0 [ 59.461377][ T63] sony 0003:1430:474C.000A: failed to claim input [ 59.646341][ T465] usb 3-1: USB disconnect, device number 14 [ 59.932636][ T465] usb 2-1: USB disconnect, device number 17 [ 59.952251][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 59.952268][ T36] audit: type=1326 audit(1751015255.170:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1379 comm="syz.1.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9d118e929 code=0x0 [ 60.053660][ T1381] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 60.239627][ T1390] rust_binder: Error while translating object. [ 60.264653][ T1390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 60.280301][ T1390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:352 [ 60.512971][ T1403] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.587695][ T1410] exFAT-fs (rnullb0): invalid boot record signature [ 60.594356][ T1410] exFAT-fs (rnullb0): failed to read boot sector [ 60.600854][ T1410] exFAT-fs (rnullb0): failed to recognize exfat type [ 60.608096][ T1411] exFAT-fs (rnullb0): invalid boot record signature [ 60.614796][ T1411] exFAT-fs (rnullb0): failed to read boot sector [ 60.621220][ T1411] exFAT-fs (rnullb0): failed to recognize exfat type [ 60.702977][ T465] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 60.815050][ T1424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 60.815087][ T1424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:196 [ 60.824795][ T1424] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.834785][ T1424] rust_binder: Read failure Err(EFAULT) in pid:196 [ 60.842975][ T465] usb 4-1: device descriptor read/64, error -71 [ 60.911582][ T1433] can0: slcan on ptm0. [ 60.919659][ T36] audit: type=1400 audit(1751015256.140:322): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.951186][ T36] audit: type=1400 audit(1751015256.160:323): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.972775][ T36] audit: type=1400 audit(1751015256.160:324): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.994577][ T36] audit: type=1400 audit(1751015256.160:325): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.031283][ T36] audit: type=1400 audit(1751015256.160:326): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.056131][ T36] audit: type=1400 audit(1751015256.200:327): avc: denied { read } for pid=1440 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.059006][ T1433] can0 (unregistered): slcan off ptm0. [ 61.080153][ T36] audit: type=1400 audit(1751015256.200:328): avc: denied { open } for pid=1440 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.102987][ T465] usb 4-1: device descriptor read/64, error -71 [ 61.135427][ T1457] rust_binder: Write failure EINVAL in pid:208 [ 61.136890][ T36] audit: type=1400 audit(1751015256.200:329): avc: denied { getattr } for pid=1440 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.171840][ T36] audit: type=1400 audit(1751015256.270:330): avc: denied { write } for pid=1439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.362943][ T465] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 61.456533][ T1502] fuseblk: Bad value for 'source' [ 61.463356][ T1502] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 61.502942][ T465] usb 4-1: device descriptor read/64, error -71 [ 61.532981][ T45] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 61.628168][ T1522] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 61.662955][ T45] usb 1-1: device descriptor read/64, error -71 [ 61.739042][ T1529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 61.762972][ T465] usb 4-1: device descriptor read/64, error -71 [ 61.873069][ T465] usb usb4-port1: attempt power cycle [ 61.912947][ T45] usb 1-1: device descriptor read/64, error -71 [ 62.152959][ T45] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 62.212950][ T465] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 62.234100][ T465] usb 4-1: device descriptor read/8, error -71 [ 62.292961][ T45] usb 1-1: device descriptor read/64, error -71 [ 62.364149][ T465] usb 4-1: device descriptor read/8, error -71 [ 62.532941][ T45] usb 1-1: device descriptor read/64, error -71 [ 62.615965][ T465] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 62.653215][ T45] usb usb1-port1: attempt power cycle [ 62.992950][ T45] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 63.042954][ T465] usb 4-1: device not accepting address 25, error -71 [ 63.049983][ T465] usb usb4-port1: unable to enumerate USB device [ 63.187192][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.195421][ T1552] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.272108][ T1561] syz.0.411 uses obsolete (PF_INET,SOCK_PACKET) [ 65.211526][ T36] kauditd_printk_skb: 110 callbacks suppressed [ 65.211545][ T36] audit: type=1400 audit(1751015260.430:441): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.242962][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.249116][ T1110] Bluetooth: hci0: command 0x1003 tx timeout [ 65.252415][ T36] audit: type=1400 audit(1751015260.440:442): avc: denied { read write } for pid=1595 comm="syz.3.424" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 65.282714][ T36] audit: type=1400 audit(1751015260.440:443): avc: denied { read write } for pid=1595 comm="syz.3.424" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 65.306957][ T36] audit: type=1400 audit(1751015260.440:444): avc: denied { write } for pid=1595 comm="syz.3.424" name="ipv6_route" dev="proc" ino=4026532583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 65.330590][ T36] audit: type=1400 audit(1751015260.470:445): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.355600][ T36] audit: type=1400 audit(1751015260.490:446): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.380078][ T36] audit: type=1400 audit(1751015260.500:447): avc: denied { create } for pid=1597 comm="syz.0.425" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 65.402380][ T36] audit: type=1400 audit(1751015260.520:448): avc: denied { read write } for pid=1598 comm="syz.1.426" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 65.426150][ T36] audit: type=1400 audit(1751015260.520:449): avc: denied { mounton } for pid=1598 comm="syz.1.426" path="/90" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 65.448086][ T36] audit: type=1400 audit(1751015260.520:450): avc: denied { read } for pid=1597 comm="syz.0.425" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 68.043435][ T45] usb 1-1: device descriptor read/8, error -32 [ 68.173515][ T45] usb 1-1: device descriptor read/8, error -32 [ 68.412953][ T45] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 68.433502][ T45] usb 1-1: device descriptor read/8, error -32 [ 68.573523][ T45] usb 1-1: device descriptor read/8, error -32 [ 68.683039][ T45] usb usb1-port1: unable to enumerate USB device [ 70.200609][ T1765] futex_wake_op: syz.3.488 tries to shift op by 144; fix this program [ 70.222200][ T36] kauditd_printk_skb: 428 callbacks suppressed [ 70.222219][ T36] audit: type=1400 audit(1751015265.440:879): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.261495][ T36] audit: type=1400 audit(1751015265.480:880): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.286576][ T36] audit: type=1400 audit(1751015265.510:881): avc: denied { read write } for pid=1774 comm="syz.3.491" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 70.344097][ T36] audit: type=1400 audit(1751015265.530:882): avc: denied { read } for pid=1774 comm="syz.3.491" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 70.386281][ T36] audit: type=1400 audit(1751015265.530:883): avc: denied { create } for pid=1774 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 70.406747][ T36] audit: type=1400 audit(1751015265.550:884): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.433285][ T36] audit: type=1400 audit(1751015265.550:885): avc: denied { create } for pid=1776 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 70.454131][ T36] audit: type=1400 audit(1751015265.550:886): avc: denied { read } for pid=1778 comm="syz.3.493" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 70.476861][ T36] audit: type=1400 audit(1751015265.560:887): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.501111][ T36] audit: type=1400 audit(1751015265.570:888): avc: denied { create } for pid=1778 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 71.068567][ T1804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1804 comm=syz.0.503 [ 71.665887][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 72.344604][ T1922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 75.543903][ T36] kauditd_printk_skb: 709 callbacks suppressed [ 75.543922][ T36] audit: type=1400 audit(1751015270.770:1598): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.574546][ T36] audit: type=1400 audit(1751015270.770:1599): avc: denied { read write } for pid=2095 comm="syz.1.608" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 75.597662][ T36] audit: type=1400 audit(1751015270.770:1600): avc: denied { write } for pid=2095 comm="syz.1.608" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 75.621278][ T36] audit: type=1400 audit(1751015270.770:1601): avc: denied { read write } for pid=2095 comm="syz.1.608" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 75.731954][ T36] audit: type=1400 audit(1751015270.950:1602): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.767290][ T36] audit: type=1400 audit(1751015270.990:1603): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.793828][ T36] audit: type=1400 audit(1751015270.990:1604): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.829701][ T36] audit: type=1400 audit(1751015270.990:1605): avc: denied { read } for pid=2100 comm="syz.2.611" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 75.852523][ T36] audit: type=1400 audit(1751015270.990:1606): avc: denied { read write } for pid=2100 comm="syz.2.611" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 75.876325][ T36] audit: type=1400 audit(1751015270.990:1607): avc: denied { mounton } for pid=2100 comm="syz.2.611" path="/155/file0" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 76.611031][ T2151] capability: warning: `syz.1.629' uses 32-bit capabilities (legacy support in use) [ 76.653455][ T2154] FAULT_INJECTION: forcing a failure. [ 76.653455][ T2154] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.666819][ T2154] CPU: 1 UID: 0 PID: 2154 Comm: syz.1.630 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 76.666853][ T2154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.666875][ T2154] Call Trace: [ 76.666882][ T2154] [ 76.666891][ T2154] __dump_stack+0x21/0x30 [ 76.666922][ T2154] dump_stack_lvl+0x10c/0x190 [ 76.666949][ T2154] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.666977][ T2154] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 76.667014][ T2154] dump_stack+0x19/0x20 [ 76.667040][ T2154] should_fail_ex+0x3d9/0x530 [ 76.667067][ T2154] should_fail+0xf/0x20 [ 76.667091][ T2154] should_fail_usercopy+0x1e/0x30 [ 76.667120][ T2154] _copy_from_user+0x22/0xb0 [ 76.667153][ T2154] get_user_ifreq+0x71/0x180 [ 76.667192][ T2154] inet_ioctl+0x396/0x4d0 [ 76.667220][ T2154] ? __cfi_inet_ioctl+0x10/0x10 [ 76.667250][ T2154] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 76.667277][ T2154] sock_do_ioctl+0x102/0x330 [ 76.667307][ T2154] ? sock_show_fdinfo+0xd0/0xd0 [ 76.667338][ T2154] ? __cfi_vfs_write+0x10/0x10 [ 76.667367][ T2154] ? __kasan_check_write+0x18/0x20 [ 76.667394][ T2154] ? mutex_unlock+0x8b/0x240 [ 76.667422][ T2154] sock_ioctl+0x634/0x7b0 [ 76.667450][ T2154] ? __cfi_sock_ioctl+0x10/0x10 [ 76.667480][ T2154] ? __fget_files+0x2c5/0x340 [ 76.667513][ T2154] ? bpf_lsm_file_ioctl+0xd/0x20 [ 76.667538][ T2154] ? security_file_ioctl+0x34/0xd0 [ 76.667572][ T2154] ? __cfi_sock_ioctl+0x10/0x10 [ 76.667599][ T2154] __se_sys_ioctl+0x132/0x1b0 [ 76.667632][ T2154] __x64_sys_ioctl+0x7f/0xa0 [ 76.667665][ T2154] x64_sys_call+0x1878/0x2ee0 [ 76.667695][ T2154] do_syscall_64+0x58/0xf0 [ 76.667716][ T2154] ? clear_bhb_loop+0x50/0xa0 [ 76.667742][ T2154] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.667767][ T2154] RIP: 0033:0x7fb9d118e929 [ 76.667794][ T2154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.667815][ T2154] RSP: 002b:00007fb9d2067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.667848][ T2154] RAX: ffffffffffffffda RBX: 00007fb9d13b5fa0 RCX: 00007fb9d118e929 [ 76.667866][ T2154] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 76.667882][ T2154] RBP: 00007fb9d2067090 R08: 0000000000000000 R09: 0000000000000000 [ 76.667896][ T2154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.667911][ T2154] R13: 0000000000000000 R14: 00007fb9d13b5fa0 R15: 00007ffe7c1de428 [ 76.667931][ T2154] [ 77.214177][ T2190] FAULT_INJECTION: forcing a failure. [ 77.214177][ T2190] name failslab, interval 1, probability 0, space 0, times 1 [ 77.226842][ T2190] CPU: 0 UID: 0 PID: 2190 Comm: syz.0.644 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 77.226865][ T2190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.226876][ T2190] Call Trace: [ 77.226881][ T2190] [ 77.226888][ T2190] __dump_stack+0x21/0x30 [ 77.226909][ T2190] dump_stack_lvl+0x10c/0x190 [ 77.226926][ T2190] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.226944][ T2190] ? selinux_perf_event_alloc+0x110/0x110 [ 77.226969][ T2190] dump_stack+0x19/0x20 [ 77.226994][ T2190] should_fail_ex+0x3d9/0x530 [ 77.227020][ T2190] should_failslab+0xac/0x100 [ 77.227044][ T2190] __kmalloc_cache_noprof+0x41/0x3c0 [ 77.227064][ T2190] ? inet_alloc_ifa+0x5e/0x1c0 [ 77.227085][ T2190] inet_alloc_ifa+0x5e/0x1c0 [ 77.227097][ T2190] ? devinet_ioctl+0xa10/0x1950 [ 77.227111][ T2190] devinet_ioctl+0x5f3/0x1950 [ 77.227125][ T2190] ? __cfi_devinet_ioctl+0x10/0x10 [ 77.227139][ T2190] ? _copy_from_user+0x8b/0xb0 [ 77.227160][ T2190] ? get_user_ifreq+0x131/0x180 [ 77.227179][ T2190] inet_ioctl+0x3ca/0x4d0 [ 77.227196][ T2190] ? __cfi_inet_ioctl+0x10/0x10 [ 77.227215][ T2190] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 77.227232][ T2190] sock_do_ioctl+0x102/0x330 [ 77.227251][ T2190] ? sock_show_fdinfo+0xd0/0xd0 [ 77.227271][ T2190] ? __cfi_vfs_write+0x10/0x10 [ 77.227307][ T2190] ? __kasan_check_write+0x18/0x20 [ 77.227327][ T2190] ? mutex_unlock+0x8b/0x240 [ 77.227346][ T2190] sock_ioctl+0x634/0x7b0 [ 77.227366][ T2190] ? __cfi_sock_ioctl+0x10/0x10 [ 77.227387][ T2190] ? __fget_files+0x2c5/0x340 [ 77.227409][ T2190] ? bpf_lsm_file_ioctl+0xd/0x20 [ 77.227427][ T2190] ? security_file_ioctl+0x34/0xd0 [ 77.227450][ T2190] ? __cfi_sock_ioctl+0x10/0x10 [ 77.227469][ T2190] __se_sys_ioctl+0x132/0x1b0 [ 77.227492][ T2190] __x64_sys_ioctl+0x7f/0xa0 [ 77.227514][ T2190] x64_sys_call+0x1878/0x2ee0 [ 77.227535][ T2190] do_syscall_64+0x58/0xf0 [ 77.227549][ T2190] ? clear_bhb_loop+0x50/0xa0 [ 77.227579][ T2190] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.227595][ T2190] RIP: 0033:0x7f04fe98e929 [ 77.227607][ T2190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.227621][ T2190] RSP: 002b:00007f04ff7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.227637][ T2190] RAX: ffffffffffffffda RBX: 00007f04febb5fa0 RCX: 00007f04fe98e929 [ 77.227649][ T2190] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 77.227659][ T2190] RBP: 00007f04ff7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.227669][ T2190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.227678][ T2190] R13: 0000000000000000 R14: 00007f04febb5fa0 R15: 00007ffd03f12a68 [ 77.227691][ T2190] [ 77.986029][ T2203] >: renamed from veth0_vlan (while UP) [ 78.075463][ T2211] FAULT_INJECTION: forcing a failure. [ 78.075463][ T2211] name failslab, interval 1, probability 0, space 0, times 0 [ 78.088162][ T2211] CPU: 1 UID: 0 PID: 2211 Comm: syz.1.653 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 78.088197][ T2211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.088212][ T2211] Call Trace: [ 78.088220][ T2211] [ 78.088229][ T2211] __dump_stack+0x21/0x30 [ 78.088266][ T2211] dump_stack_lvl+0x10c/0x190 [ 78.088286][ T2211] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.088305][ T2211] ? preempt_schedule_thunk+0x1a/0x40 [ 78.088331][ T2211] dump_stack+0x19/0x20 [ 78.088349][ T2211] should_fail_ex+0x3d9/0x530 [ 78.088368][ T2211] should_failslab+0xac/0x100 [ 78.088392][ T2211] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 78.088413][ T2211] ? __alloc_skb+0x10c/0x370 [ 78.088437][ T2211] ? __queue_delayed_work+0x18e/0x240 [ 78.088454][ T2211] __alloc_skb+0x10c/0x370 [ 78.088478][ T2211] rtmsg_ifa+0xfa/0x1f0 [ 78.088495][ T2211] __inet_insert_ifa+0x838/0xa60 [ 78.088513][ T2211] ? kasan_save_alloc_info+0x40/0x50 [ 78.088532][ T2211] ? inet_rcu_free_ifa+0xe0/0xe0 [ 78.088549][ T2211] ? __kasan_check_read+0x15/0x20 [ 78.088569][ T2211] devinet_ioctl+0xf70/0x1950 [ 78.088585][ T2211] ? __cfi_devinet_ioctl+0x10/0x10 [ 78.088600][ T2211] ? _copy_from_user+0x8b/0xb0 [ 78.088623][ T2211] ? get_user_ifreq+0x131/0x180 [ 78.088643][ T2211] inet_ioctl+0x3ca/0x4d0 [ 78.088662][ T2211] ? __cfi_inet_ioctl+0x10/0x10 [ 78.088687][ T2211] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 78.088706][ T2211] sock_do_ioctl+0x102/0x330 [ 78.088727][ T2211] ? sock_show_fdinfo+0xd0/0xd0 [ 78.088749][ T2211] ? __cfi_vfs_write+0x10/0x10 [ 78.088769][ T2211] ? __kasan_check_write+0x18/0x20 [ 78.088788][ T2211] ? mutex_unlock+0x8b/0x240 [ 78.088808][ T2211] sock_ioctl+0x634/0x7b0 [ 78.088828][ T2211] ? __cfi_sock_ioctl+0x10/0x10 [ 78.088848][ T2211] ? __fget_files+0x2c5/0x340 [ 78.088883][ T2211] ? bpf_lsm_file_ioctl+0xd/0x20 [ 78.088902][ T2211] ? security_file_ioctl+0x34/0xd0 [ 78.088926][ T2211] ? __cfi_sock_ioctl+0x10/0x10 [ 78.088945][ T2211] __se_sys_ioctl+0x132/0x1b0 [ 78.088970][ T2211] __x64_sys_ioctl+0x7f/0xa0 [ 78.088995][ T2211] x64_sys_call+0x1878/0x2ee0 [ 78.089016][ T2211] do_syscall_64+0x58/0xf0 [ 78.089031][ T2211] ? clear_bhb_loop+0x50/0xa0 [ 78.089049][ T2211] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.089067][ T2211] RIP: 0033:0x7fb9d118e929 [ 78.089081][ T2211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.089095][ T2211] RSP: 002b:00007fb9d2067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.089114][ T2211] RAX: ffffffffffffffda RBX: 00007fb9d13b5fa0 RCX: 00007fb9d118e929 [ 78.089126][ T2211] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 78.089138][ T2211] RBP: 00007fb9d2067090 R08: 0000000000000000 R09: 0000000000000000 [ 78.089148][ T2211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.089159][ T2211] R13: 0000000000000000 R14: 00007fb9d13b5fa0 R15: 00007ffe7c1de428 [ 78.089172][ T2211] [ 79.237936][ T2240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 79.823093][ T2257] FAULT_INJECTION: forcing a failure. [ 79.823093][ T2257] name failslab, interval 1, probability 0, space 0, times 0 [ 79.835801][ T2257] CPU: 1 UID: 0 PID: 2257 Comm: syz.1.671 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 79.835837][ T2257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.835851][ T2257] Call Trace: [ 79.835859][ T2257] [ 79.835869][ T2257] __dump_stack+0x21/0x30 [ 79.835892][ T2257] dump_stack_lvl+0x10c/0x190 [ 79.835910][ T2257] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.835929][ T2257] ? unwind_get_return_address+0x51/0x90 [ 79.835945][ T2257] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 79.835967][ T2257] dump_stack+0x19/0x20 [ 79.835984][ T2257] should_fail_ex+0x3d9/0x530 [ 79.836006][ T2257] should_failslab+0xac/0x100 [ 79.836029][ T2257] __kmalloc_noprof+0x69/0x450 [ 79.836049][ T2257] ? fib_trie_table+0x50/0x210 [ 79.836069][ T2257] fib_trie_table+0x50/0x210 [ 79.836088][ T2257] ? kasan_save_free_info+0x4a/0x60 [ 79.836113][ T2257] ? __kasan_slab_free+0x5f/0x80 [ 79.836136][ T2257] fib_new_table+0x13c/0x2c0 [ 79.836151][ T2257] fib_add_ifaddr+0x2d9/0xd30 [ 79.836168][ T2257] ? __cfi_fib_add_ifaddr+0x10/0x10 [ 79.836185][ T2257] ? __kasan_check_write+0x18/0x20 [ 79.836203][ T2257] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 79.836229][ T2257] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 79.836253][ T2257] ? __kasan_slab_free+0x6a/0x80 [ 79.836287][ T2257] ? kmem_cache_free+0x1c1/0x4c0 [ 79.836306][ T2257] ? __kfree_skb+0x18f/0x210 [ 79.836320][ T2257] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 79.836333][ T2257] ? __wake_up+0x169/0x190 [ 79.836354][ T2257] ? consume_skb+0x91/0x1a0 [ 79.836395][ T2257] ? netlink_broadcast_filtered+0x1173/0x1200 [ 79.836413][ T2257] ? downgrade_write+0x440/0x440 [ 79.836432][ T2257] fib_inetaddr_event+0x161/0x320 [ 79.836448][ T2257] ? __cfi_fib_inetaddr_event+0x10/0x10 [ 79.836464][ T2257] notifier_call_chain+0x10b/0x2c0 [ 79.836486][ T2257] blocking_notifier_call_chain+0x6a/0x90 [ 79.836508][ T2257] __inet_insert_ifa+0x84c/0xa60 [ 79.836526][ T2257] ? kasan_save_alloc_info+0x40/0x50 [ 79.836544][ T2257] ? inet_rcu_free_ifa+0xe0/0xe0 [ 79.836561][ T2257] ? __kasan_check_read+0x15/0x20 [ 79.836579][ T2257] devinet_ioctl+0xf70/0x1950 [ 79.836595][ T2257] ? __cfi_devinet_ioctl+0x10/0x10 [ 79.836609][ T2257] ? _copy_from_user+0x8b/0xb0 [ 79.836632][ T2257] ? get_user_ifreq+0x131/0x180 [ 79.836651][ T2257] inet_ioctl+0x3ca/0x4d0 [ 79.836669][ T2257] ? __cfi_inet_ioctl+0x10/0x10 [ 79.836690][ T2257] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 79.836708][ T2257] sock_do_ioctl+0x102/0x330 [ 79.836729][ T2257] ? sock_show_fdinfo+0xd0/0xd0 [ 79.836749][ T2257] ? __cfi_vfs_write+0x10/0x10 [ 79.836769][ T2257] ? __kasan_check_write+0x18/0x20 [ 79.836787][ T2257] ? mutex_unlock+0x8b/0x240 [ 79.836806][ T2257] sock_ioctl+0x634/0x7b0 [ 79.836826][ T2257] ? __cfi_sock_ioctl+0x10/0x10 [ 79.836846][ T2257] ? __fget_files+0x2c5/0x340 [ 79.836874][ T2257] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.836892][ T2257] ? security_file_ioctl+0x34/0xd0 [ 79.836915][ T2257] ? __cfi_sock_ioctl+0x10/0x10 [ 79.836934][ T2257] __se_sys_ioctl+0x132/0x1b0 [ 79.836958][ T2257] __x64_sys_ioctl+0x7f/0xa0 [ 79.836980][ T2257] x64_sys_call+0x1878/0x2ee0 [ 79.837014][ T2257] do_syscall_64+0x58/0xf0 [ 79.837026][ T2257] ? clear_bhb_loop+0x50/0xa0 [ 79.837044][ T2257] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.837060][ T2257] RIP: 0033:0x7fb9d118e929 [ 79.837072][ T2257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.837086][ T2257] RSP: 002b:00007fb9d2067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.837131][ T2257] RAX: ffffffffffffffda RBX: 00007fb9d13b5fa0 RCX: 00007fb9d118e929 [ 79.837144][ T2257] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 79.837155][ T2257] RBP: 00007fb9d2067090 R08: 0000000000000000 R09: 0000000000000000 [ 79.837165][ T2257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.837175][ T2257] R13: 0000000000000000 R14: 00007fb9d13b5fa0 R15: 00007ffe7c1de428 [ 79.837189][ T2257] [ 80.655652][ T36] kauditd_printk_skb: 393 callbacks suppressed [ 80.655676][ T36] audit: type=1400 audit(1751015275.880:2001): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.687724][ T36] audit: type=1400 audit(1751015275.880:2002): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.713611][ T36] audit: type=1400 audit(1751015275.920:2003): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.728722][ T2268] netlink: 25 bytes leftover after parsing attributes in process `syz.2.675'. [ 80.738884][ T36] audit: type=1400 audit(1751015275.920:2004): avc: denied { read write } for pid=2266 comm="syz.3.676" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 80.776544][ T36] audit: type=1400 audit(1751015275.920:2005): avc: denied { name_bind } for pid=2266 comm="syz.3.676" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 80.798436][ T36] audit: type=1400 audit(1751015275.920:2006): avc: denied { create } for pid=2266 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 80.819132][ T36] audit: type=1400 audit(1751015275.920:2007): avc: denied { create } for pid=2266 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 80.840367][ T36] audit: type=1400 audit(1751015275.920:2008): avc: denied { create } for pid=2266 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 80.861365][ T36] audit: type=1400 audit(1751015275.920:2009): avc: denied { mounton } for pid=2266 comm="syz.3.676" path="/proc/442/cgroup" dev="proc" ino=16787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=0 [ 80.884353][ T36] audit: type=1400 audit(1751015275.940:2010): avc: denied { read write } for pid=2269 comm="syz.1.677" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 81.798910][ T2322] syz.0.698: attempt to access beyond end of device [ 81.798910][ T2322] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.294254][ T2338] syz.2.705 (2338): attempted to duplicate a private mapping with mremap. This is not supported. [ 83.826060][ T2438] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 83.907019][ T2444] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 85.983909][ T36] kauditd_printk_skb: 780 callbacks suppressed [ 85.983927][ T36] audit: type=1400 audit(1751015281.210:2791): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.020956][ T36] audit: type=1400 audit(1751015281.210:2792): avc: denied { read } for pid=2585 comm="syz.2.789" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 86.044322][ T36] audit: type=1400 audit(1751015281.210:2793): avc: denied { create } for pid=2585 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 86.064307][ T36] audit: type=1400 audit(1751015281.210:2794): avc: denied { read } for pid=2585 comm="syz.2.789" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 86.087456][ T36] audit: type=1400 audit(1751015281.210:2795): avc: denied { read } for pid=2585 comm="syz.2.789" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 86.110200][ T36] audit: type=1400 audit(1751015281.220:2796): avc: denied { create } for pid=2585 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 86.129998][ T36] audit: type=1400 audit(1751015281.240:2797): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.154259][ T36] audit: type=1400 audit(1751015281.290:2798): avc: denied { read write } for pid=2590 comm="syz.2.791" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 86.177597][ T36] audit: type=1400 audit(1751015281.310:2799): avc: denied { write } for pid=2590 comm="syz.2.791" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 86.202046][ T36] audit: type=1400 audit(1751015281.330:2800): avc: denied { create } for pid=2590 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 86.275483][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.434609][ T2629] netlink: 'syz.0.801': attribute type 4 has an invalid length. [ 86.442388][ T2629] netlink: 3681 bytes leftover after parsing attributes in process `syz.0.801'. [ 87.307997][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 87.320865][ T304] Bluetooth: hci2: Frame reassembly failed (-84) [ 87.327425][ T304] Bluetooth: hci2: Frame reassembly failed (-84) [ 88.282962][ T2652] Bluetooth: hci0: command 0x1003 tx timeout [ 88.282960][ T1110] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.322973][ T1110] Bluetooth: hci2: command 0x1003 tx timeout [ 89.329085][ T2651] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 89.335247][ T2652] Bluetooth: hci1: command 0x1003 tx timeout [ 89.341407][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 90.619649][ T2764] netlink: 'syz.1.853': attribute type 12 has an invalid length. [ 91.148105][ T36] kauditd_printk_skb: 384 callbacks suppressed [ 91.148128][ T36] audit: type=1400 audit(1751015286.370:3185): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.179411][ T36] audit: type=1400 audit(1751015286.370:3186): avc: denied { read } for pid=2791 comm="syz.1.863" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 91.202607][ T36] audit: type=1400 audit(1751015286.370:3187): avc: denied { create } for pid=2791 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 91.222904][ T36] audit: type=1400 audit(1751015286.440:3188): avc: denied { read } for pid=2791 comm="syz.1.863" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 91.245483][ T36] audit: type=1400 audit(1751015286.450:3189): avc: denied { read write } for pid=2791 comm="syz.1.863" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 91.269230][ T36] audit: type=1400 audit(1751015286.470:3190): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.293620][ T36] audit: type=1400 audit(1751015286.490:3191): avc: denied { read append } for pid=2794 comm="syz.0.864" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 91.318514][ T36] audit: type=1400 audit(1751015286.520:3192): avc: denied { create } for pid=2794 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 91.338798][ T36] audit: type=1400 audit(1751015286.520:3193): avc: denied { create } for pid=2794 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 91.339672][ T2797] netlink: 'syz.3.865': attribute type 4 has an invalid length. [ 91.358426][ T36] audit: type=1400 audit(1751015286.520:3194): avc: denied { create } for pid=2794 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 91.368519][ T2797] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.865'. [ 93.570305][ T2874] netlink: 'syz.0.893': attribute type 4 has an invalid length. [ 93.578174][ T2874] netlink: 'syz.0.893': attribute type 7 has an invalid length. [ 93.586295][ T2874] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.893'. [ 94.563869][ T2918] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 94.666137][ T2940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 94.675113][ T2940] bridge_slave_1: left allmulticast mode [ 94.680865][ T2940] bridge_slave_1: left promiscuous mode [ 94.686925][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.694974][ T2940] bridge_slave_0: left allmulticast mode [ 94.700717][ T2940] bridge_slave_0: left promiscuous mode [ 94.706424][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.529135][ T36] kauditd_printk_skb: 367 callbacks suppressed [ 96.529155][ T36] audit: type=1400 audit(1751015291.750:3562): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.559776][ T36] audit: type=1400 audit(1751015291.760:3563): avc: denied { create } for pid=3043 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 96.579292][ T36] audit: type=1400 audit(1751015291.760:3564): avc: denied { create } for pid=3043 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=0 [ 96.598910][ T36] audit: type=1400 audit(1751015291.760:3565): avc: denied { read write } for pid=3043 comm="syz.3.948" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 96.622353][ T36] audit: type=1400 audit(1751015291.770:3566): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.647447][ T36] audit: type=1400 audit(1751015291.850:3567): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.671731][ T36] audit: type=1400 audit(1751015291.860:3568): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.695997][ T36] audit: type=1400 audit(1751015291.870:3569): avc: denied { read write } for pid=3048 comm="syz.3.951" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 96.720691][ T36] audit: type=1400 audit(1751015291.870:3570): avc: denied { read } for pid=3047 comm="syz.2.950" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 96.743682][ T36] audit: type=1400 audit(1751015291.870:3571): avc: denied { mounton } for pid=3047 comm="syz.2.950" path="/242/binderfs2" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 98.624444][ T3141] netlink: 9 bytes leftover after parsing attributes in process `syz.1.984'. [ 98.633698][ T3141] gretap0: entered promiscuous mode [ 98.640805][ T3141] netlink: 5 bytes leftover after parsing attributes in process `syz.1.984'. [ 98.649831][ T3141] 0{X: renamed from gretap0 [ 98.658023][ T3141] 0{X: left promiscuous mode [ 98.663881][ T3141] 0{X: entered allmulticast mode [ 98.670253][ T3141] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 99.551281][ T3174] can0: slcan on ptm0. [ 101.532879][ T36] kauditd_printk_skb: 18594 callbacks suppressed [ 101.532904][ T36] audit: type=1400 audit(1751015296.750:22166): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.541108][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.560412][ T36] audit: type=1400 audit(1751015296.760:22167): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.567587][ T148] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 101.588094][ T36] audit: type=1400 audit(1751015296.760:22168): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.597036][ T148] audit: backlog limit exceeded [ 101.617335][ T36] audit: type=1400 audit(1751015296.760:22169): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.622704][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.643310][ T36] audit: type=1400 audit(1751015296.760:22170): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.649903][ T148] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 102.406711][ T3266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19318 sclass=netlink_route_socket pid=3266 comm=syz.3.1031 [ 102.617531][ T3173] can0 (unregistered): slcan off ptm0. [ 104.890970][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.542991][ T36] kauditd_printk_skb: 37588 callbacks suppressed [ 106.543011][ T36] audit: type=1400 audit(1751015301.760:59368): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.551767][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.572061][ T36] audit: type=1400 audit(1751015301.770:59369): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.580456][ T3458] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.598292][ T36] audit: type=1400 audit(1751015301.770:59370): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.605032][ T148] audit: audit_lost=133 audit_rate_limit=0 audit_backlog_limit=64 [ 106.625851][ T36] audit: type=1400 audit(1751015301.770:59371): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.633910][ T3458] audit: audit_lost=134 audit_rate_limit=0 audit_backlog_limit=64 [ 106.654682][ T36] audit: type=1400 audit(1751015301.770:59372): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.662443][ T148] audit: backlog limit exceeded [ 106.922916][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 106.928967][ T2651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.207575][ T3546] can0: slcan on ttyS3. [ 108.266674][ T3546] can0 (unregistered): slcan off ttyS3. [ 108.308319][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.315052][ T3551] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 108.322007][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.362973][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 110.362989][ T2651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.552882][ T36] kauditd_printk_skb: 44647 callbacks suppressed [ 111.552920][ T36] audit: type=1400 audit(1751015306.770:103818): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.561375][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.580646][ T36] audit: type=1400 audit(1751015306.780:103819): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.587596][ T148] audit: audit_lost=202 audit_rate_limit=0 audit_backlog_limit=64 [ 111.609713][ T3646] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.616565][ T148] audit: backlog limit exceeded [ 111.622781][ T3646] audit: audit_lost=203 audit_rate_limit=0 audit_backlog_limit=64 [ 111.627850][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.635649][ T3646] audit: backlog limit exceeded [ 111.642150][ T148] audit: audit_lost=204 audit_rate_limit=0 audit_backlog_limit=64 [ 112.142420][ T3669] can0: slcan on ptm0. [ 112.471492][ T3694] netlink: 'syz.1.1190': attribute type 5 has an invalid length. [ 112.479755][ T3694] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1190'. [ 112.710516][ T3724] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.445920][ T3779] syz.0.1218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.458094][ T3777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3777 comm=syz.3.1217 [ 114.267735][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.619292][ T3884] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 115.644768][ T3884] syzkaller0: entered promiscuous mode [ 115.650543][ T3884] syzkaller0: entered allmulticast mode [ 116.282915][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 116.283738][ T2651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.566037][ T36] kauditd_printk_skb: 40557 callbacks suppressed [ 116.566057][ T36] audit: type=1400 audit(1751015311.790:144367): avc: denied { read } for pid=3933 comm="syz.2.1275" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.597411][ T36] audit: type=1400 audit(1751015311.800:144368): avc: denied { open } for pid=3933 comm="syz.2.1275" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.623069][ T36] audit: type=1400 audit(1751015311.810:144369): avc: denied { ioctl } for pid=3933 comm="syz.2.1275" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.684786][ T36] audit: type=1400 audit(1751015311.900:144370): avc: denied { read } for pid=3945 comm="syz.1.1277" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 116.709782][ T36] audit: type=1400 audit(1751015311.910:144371): avc: denied { open } for pid=3945 comm="syz.1.1277" path="net:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 116.742114][ T36] audit: type=1400 audit(1751015311.910:144372): avc: denied { create } for pid=3945 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.769778][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 116.806123][ T36] audit: type=1400 audit(1751015311.910:144373): avc: denied { getopt } for pid=3945 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.837432][ T36] audit: type=1400 audit(1751015311.950:144374): avc: denied { create } for pid=3945 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.878654][ T36] audit: type=1400 audit(1751015311.950:144375): avc: denied { write } for pid=3945 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.919728][ T36] audit: type=1400 audit(1751015311.950:144376): avc: denied { ioctl } for pid=3945 comm="syz.1.1277" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.944292][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 116.963649][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.981320][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.004380][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.011223][ T3978] overlayfs: failed to resolve './cgroup/file0': -2 [ 117.013615][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.032799][ T9] usb 4-1: Product: 鱌骽ᵍ憐鸡榘뢏넢픵窬麩딷뱴嶎 [ 117.081174][ T9] usb 4-1: Manufacturer: 쾪 [ 117.090849][ T9] usb 4-1: SerialNumber: Т [ 117.121375][ T3990] binder: Unknown parameter '0x0000000000000003' [ 117.129946][ T3993] binder: Unknown parameter '0x0000000000000003' [ 117.312021][ T9] usb 4-1: USB disconnect, device number 26 [ 117.322910][ T63] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 117.483667][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 117.489980][ T63] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 117.498546][ T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.508787][ T63] usb 3-1: config 0 has no interface number 0 [ 117.516345][ T63] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 117.525463][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.533475][ T63] usb 3-1: Product: syz [ 117.537748][ T63] usb 3-1: Manufacturer: syz [ 117.542347][ T63] usb 3-1: SerialNumber: syz [ 117.547935][ T63] usb 3-1: config 0 descriptor?? [ 117.554104][ T63] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 117.560471][ T63] usb 3-1: No valid video chain found. [ 117.754969][ T63] usb 3-1: USB disconnect, device number 15 [ 117.822919][ T4043] /dev/rnullb0: Can't open blockdev [ 118.182992][ T63] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 118.238455][ T4055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.246991][ T4055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.275750][ T4059] binder: Unknown parameter 'statP*6[o^o' [ 118.342908][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 118.349147][ T63] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.360204][ T63] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.369978][ T63] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.376624][ T63] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 118.386719][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.395777][ T63] usb 2-1: config 0 descriptor?? [ 118.489645][ T378] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 118.500756][ T378] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.558191][ T4069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.558780][ T4069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:840 [ 119.004352][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 119.020604][ T63] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.029689][ T63] usb 2-1: USB disconnect, device number 18 [ 119.203162][ T4087] tipc: Started in network mode [ 119.208368][ T4087] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 119.215792][ T4087] tipc: Enabled bearer , priority 10 [ 119.224309][ T4087] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 119.232587][ T4087] tipc: Enabled bearer , priority 10 [ 119.592954][ T63] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 119.752948][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 119.759591][ T63] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 119.773785][ T63] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 119.783311][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.791373][ T63] usb 3-1: Product: syz [ 119.796062][ T63] usb 3-1: Manufacturer: syz [ 119.800684][ T63] usb 3-1: SerialNumber: syz [ 119.806615][ T63] usb 3-1: config 0 descriptor?? [ 119.812950][ T63] usb 3-1: bad CDC descriptors [ 119.817991][ T63] usb 3-1: unsupported MDLM descriptors [ 119.862963][ T465] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 119.992956][ T465] usb 1-1: device descriptor read/64, error -32 [ 120.052920][ T378] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 120.123036][ T45] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 120.212917][ T378] usb 2-1: Using ep0 maxpacket: 8 [ 120.219191][ T378] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.230488][ T378] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.240692][ T378] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.242928][ T465] usb 1-1: device descriptor read/64, error -32 [ 120.247619][ T378] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 120.263078][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.272050][ T378] usb 2-1: config 0 descriptor?? [ 120.292948][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 120.332937][ T63] tipc: Node number set to 10922666 [ 120.362927][ T465] raw-gadget.1 gadget.0: failed to queue suspend event [ 120.382990][ T465] raw-gadget.1 gadget.0: failed to queue reset event [ 120.432958][ T45] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 120.452930][ T465] raw-gadget.1 gadget.0: failed to queue resume event [ 120.532919][ T465] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 120.540657][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 120.547972][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 120.555427][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 120.562568][ T465] raw-gadget.1 gadget.0: failed to queue reset event [ 120.582922][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 120.588390][ T45] usb usb4-port1: attempt power cycle [ 120.632947][ T465] raw-gadget.1 gadget.0: failed to queue resume event [ 120.712961][ T465] usb 1-1: device descriptor read/64, error -32 [ 120.823068][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 120.830339][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 120.837621][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 120.844751][ T465] raw-gadget.1 gadget.0: failed to queue reset event [ 120.888442][ T378] usbhid 2-1:0.0: can't add hid device: -71 [ 120.894553][ T378] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.906301][ T378] usb 2-1: USB disconnect, device number 19 [ 120.912914][ T465] raw-gadget.1 gadget.0: failed to queue resume event [ 120.932936][ T45] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 120.953365][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 120.982923][ T465] usb 1-1: device descriptor read/64, error -32 [ 121.092926][ T465] raw-gadget.1 gadget.0: failed to queue suspend event [ 121.092926][ T45] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 121.113340][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 121.118886][ T45] usb usb4-port1: unable to enumerate USB device [ 121.122978][ T465] usb usb1-port1: attempt power cycle [ 121.130633][ T465] raw-gadget.1 gadget.0: failed to queue disconnect event [ 121.153035][ T465] raw-gadget.1 gadget.0: failed to queue reset event [ 121.222947][ T465] raw-gadget.1 gadget.0: failed to queue resume event [ 121.229959][ T465] raw-gadget.1 gadget.0: failed to queue reset event [ 121.443318][ T465] raw-gadget.1 gadget.0: failed to queue resume event [ 121.458416][ T4135] ------------[ cut here ]------------ [ 121.463950][ T4135] WARNING: CPU: 0 PID: 4135 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 121.473392][ T4135] Modules linked in: [ 121.477316][ T4135] CPU: 0 UID: 0 PID: 4135 Comm: syz.1.1318 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 121.490846][ T4135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.500953][ T4135] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 121.506962][ T4135] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e4 32 ee 05 00 0f 85 c4 00 00 00 c6 05 d7 32 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 121.526663][ T4135] RSP: 0018:ffffc9000ecdf9a0 EFLAGS: 00010246 [ 121.532775][ T4135] RAX: 0000000000000000 RBX: 1ffff92001d9bf38 RCX: 0000000000000000 [ 121.540817][ T4135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ecdfa48 [ 121.548864][ T4135] RBP: ffffc9000ecdfad0 R08: ffffc9000ecdfa47 R09: 0000000000000000 [ 121.556904][ T4135] R10: ffffc9000ecdfa30 R11: fffff52001d9bf49 R12: ffffc9000ecdf9e0 [ 121.564930][ T4135] R13: 0000000000000034 R14: dffffc0000000000 R15: 0000000000000000 [ 121.572975][ T4135] FS: 00007fb9d20676c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 121.581935][ T4135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.588584][ T4135] CR2: 000000110c2908be CR3: 0000000115a92000 CR4: 00000000003526b0 [ 121.596614][ T4135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.604662][ T4135] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.612661][ T4135] Call Trace: [ 121.616014][ T4135] [ 121.618967][ T4135] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 121.624682][ T4135] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 121.630569][ T4135] ? try_to_wake_up+0xe17/0x1aa0 [ 121.635603][ T4135] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 121.641799][ T4135] ___kmalloc_large_node+0x9c/0x1d0 [ 121.647090][ T4135] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 121.653314][ T4135] __kmalloc_large_node_noprof+0x1e/0xe0 [ 121.659023][ T4135] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 121.665265][ T4135] __kmalloc_noprof+0x26d/0x450 [ 121.670173][ T4135] ? __kasan_check_write+0x18/0x20 [ 121.675357][ T4135] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 121.681374][ T4135] ? __cfi_futex_wake+0x10/0x10 [ 121.686319][ T4135] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 121.692772][ T4135] ? selinux_file_ioctl+0x6e0/0x1360 [ 121.698153][ T4135] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 121.703763][ T4135] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 121.709000][ T4135] ? __ia32_sys_rt_sigreturn+0x687/0x7a0 [ 121.714710][ T4135] ? do_futex+0x356/0x500 [ 121.719083][ T4135] ? __cfi_do_futex+0x10/0x10 [ 121.723881][ T4135] ? __se_sys_futex+0x28f/0x300 [ 121.728791][ T4135] ? bpf_lsm_file_ioctl+0xd/0x20 [ 121.733891][ T4135] ? security_file_ioctl+0x34/0xd0 [ 121.739048][ T4135] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 121.745620][ T4135] __se_sys_ioctl+0x132/0x1b0 [ 121.750342][ T4135] __x64_sys_ioctl+0x7f/0xa0 [ 121.755025][ T4135] x64_sys_call+0x1878/0x2ee0 [ 121.759751][ T4135] do_syscall_64+0x58/0xf0 [ 121.764223][ T4135] ? clear_bhb_loop+0x50/0xa0 [ 121.768936][ T4135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.774905][ T4135] RIP: 0033:0x7fb9d118e929 [ 121.779362][ T4135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.799151][ T4135] RSP: 002b:00007fb9d2067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.807630][ T4135] RAX: ffffffffffffffda RBX: 00007fb9d13b5fa0 RCX: 00007fb9d118e929 [ 121.815686][ T4135] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000007 [ 121.823716][ T4135] RBP: 00007fb9d1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.831719][ T4135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.839773][ T4135] R13: 0000000000000000 R14: 00007fb9d13b5fa0 R15: 00007ffe7c1de428 [ 121.847808][ T4135] [ 121.850852][ T4135] ---[ end trace 0000000000000000 ]--- [ 121.912955][ T465] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 121.933065][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 121.940353][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 121.947978][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 121.955175][ T465] usb 1-1: device descriptor read/8, error -32 [ 121.967892][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 121.967907][ T36] audit: type=1400 audit(1751015317.190:144467): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 122.083079][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.090425][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.097687][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.104799][ T465] usb 1-1: device descriptor read/8, error -32 [ 122.212934][ T465] raw-gadget.1 gadget.0: failed to queue suspend event [ 122.220038][ T465] raw-gadget.1 gadget.0: failed to queue reset event [ 122.292932][ T465] raw-gadget.1 gadget.0: failed to queue resume event [ 122.352923][ T465] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 122.366238][ T378] usb 3-1: USB disconnect, device number 16 [ 122.373077][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.380374][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.387692][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.394801][ T465] usb 1-1: device descriptor read/8, error -32 [ 122.533104][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.540369][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.547668][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 122.554749][ T465] usb 1-1: device descriptor read/8, error -32 [ 122.662974][ T465] raw-gadget.1 gadget.0: failed to queue suspend event [ 122.669999][ T465] usb usb1-port1: unable to enumerate USB device [ 122.676726][ T4125] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1314' sets config #0 [ 122.691659][ T36] audit: type=1400 audit(1751015317.910:144468): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1