last executing test programs: 1m19.833903017s ago: executing program 2 (id=383): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffbf, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xd, 0x0, 0x0, @pid}]}, 0x24}}, 0x6045) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="812adc35ed6f211d0ed91ed06e1fd117000000080000000009000000080014000000000005001300000000001e3f81c464c72ad0d411cfa704ae107e65029da2607b24f459d952ec15adc7571897ce132fb2475f2ab7a3720f57b03d17a1b8bc0234d8562b74219ab5fd7b768353e0a76a995220099a30eaebe712f1a5d6eb594aee1d9cd6d95391cb133d9dc83421cee762c6825bc23dc10d1bd0cf477e9f5f81ed54338b0a7cb3c27913fffdee8d058eae8d085a379a5fe953a456993ff50777648e6e12fb4cd49ac2373239f5e575e63e6aea455440edcc1536d5603fc5a0822407"], 0x24}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r8 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r9 = fcntl$dupfd(r5, 0x0, r5) ioctl$UFFDIO_CONTINUE(r9, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) 1m19.760965401s ago: executing program 2 (id=384): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005200010004bd7000fcecc6240a0000007055049ef7"], 0x14}}, 0x8800) 1m19.760170361s ago: executing program 2 (id=385): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000180)={{}, "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"}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}}) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m18.365098704s ago: executing program 2 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(r2) kcmp(r3, r2, 0x0, r1, r1) linkat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x1000) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = dup2(r4, r4) write$UHID_INPUT(r5, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x9101) move_mount(r6, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 1m18.364763184s ago: executing program 2 (id=396): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x9, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @rand_addr=' \x01\x00', 0x7, 0x1}, 0x80, 0x0}}], 0x2, 0x0) 1m17.986179716s ago: executing program 2 (id=402): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) poll(&(0x7f0000000080)=[{r0, 0x22}, {r1, 0x4004}, {r2, 0x410}], 0x3, 0x4) (async) poll(&(0x7f0000000080)=[{r0, 0x22}, {r1, 0x4004}, {r2, 0x410}], 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x98, 0x4, 0x4e, 0x20, 0xdba, 0x3000, 0x5170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x26, 0x40, 0x1, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x57, 0x95, 0xbf, 0x3}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x98, 0x4, 0x4e, 0x20, 0xdba, 0x3000, 0x5170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x26, 0x40, 0x1, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x57, 0x95, 0xbf, 0x3}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x1000404, &(0x7f0000000240)={[{@xino_auto}, {@redirect_dir_nofollow, 0x3a}], [{@func={'func', 0x3d, 'FILE_MMAP'}}], 0x2f}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) 1m17.92409866s ago: executing program 32 (id=402): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) poll(&(0x7f0000000080)=[{r0, 0x22}, {r1, 0x4004}, {r2, 0x410}], 0x3, 0x4) (async) poll(&(0x7f0000000080)=[{r0, 0x22}, {r1, 0x4004}, {r2, 0x410}], 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x98, 0x4, 0x4e, 0x20, 0xdba, 0x3000, 0x5170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x26, 0x40, 0x1, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x57, 0x95, 0xbf, 0x3}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x98, 0x4, 0x4e, 0x20, 0xdba, 0x3000, 0x5170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x26, 0x40, 0x1, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x57, 0x95, 0xbf, 0x3}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x1000404, &(0x7f0000000240)={[{@xino_auto}, {@redirect_dir_nofollow, 0x3a}], [{@func={'func', 0x3d, 'FILE_MMAP'}}], 0x2f}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) 9.039927917s ago: executing program 4 (id=897): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000400)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/86, 0x56, 0x0, 0xfffffffe, 0x7}}, 0x120) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000040)='@', 0x1}], 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84010000100001000000000800000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000010000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003c000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007a050000000000008a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000002b0d00000000000000000000000000000a00010000000000000000004c001200726663343330392861757468656e6365736e286e68706f6c79313330352c637472286361737435292929000000000000000000000000000000000000000000000000000080010000480001"], 0x184}, 0x1, 0x0, 0x0, 0x60040000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 8.165410169s ago: executing program 4 (id=901): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x10000023, 0x0, @thr={0x0, &(0x7f0000000140)="3d344100b496e2a4eb"}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4016060000"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x40, 0x12, 0x4, "df1dbac2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.247281731s ago: executing program 1 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc010000020000000000000000000000040004"], 0xc0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x16, 0x1, 0xfffffffc, 0x4, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) 5.247201471s ago: executing program 1 (id=922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xc001102c, 0x0, 0x3}]}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x10001, 0x7}) 5.211375654s ago: executing program 1 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x143) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x1db) mknodat$loop(r0, &(0x7f0000000180)='./file1\x00', 0xc000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000224effffffff", 0x58}], 0x1) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 5.09652351s ago: executing program 4 (id=927): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1d0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/450]) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="200906000000f99d5133974f27d1d7e2eb22dc1f36b3710000000000000000e2ad9fbdf546fac3842507dcff593312f529f66271ecc0f83c930586b2d82b37d25a1790e40e1e5d7858a33e79dd1e1c37c81bee3a287d542add4fc357a5d0b5ac193f5438a58d60a4c5deec56ab38cd69e33b1d3ccb7f33ec6dc63677e850d911eb177ec98d017693b3133e7f8e1c25f1de4794c8e12621ae4b15316f780a8412265e94496063315e7c8e328a078d39de395fbbde39d0d57400f6ec2e1f5b97a6dcd513c2cf28dbadcdd7e29e4b33f4f599ce74844220"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x341, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000000c0)={0x160000, 0x0, {[0x1a79, 0x10000000000008, 0x9, 0xffffffffffffffff, 0x3717, 0x2, 0x1, 0x3]}}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000240)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket$xdp(0x2c, 0x3, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0xb1, 0x2, 0x0, 0x5}, {0x106, 0x0, 0x4}, {0x7, 0x2, 0x1, 0x7}, {0xd69, 0xe, 0xc, 0xffffffff}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, "23f575d9adb42d4408020e90d11ecf00", 0x0, 0x7fffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 2.153054693s ago: executing program 1 (id=931): munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x12) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="00000018040103000400c400100045ae00280065000001069078ac1414aaac1414bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x36) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002e5000/0x2000)=nil, 0x3000}) pipe(&(0x7f0000000000)={0x0, 0x0}) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0xc) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) socket$vsock_stream(0x28, 0x1, 0x0) 2.078930558s ago: executing program 4 (id=933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="660f2e466966ba4300ed66b8e5008ed866ba2000b001fe0f06c4c271a9c6b80b82fbdd0f21f8350000000c0f23f80fc79853430000640f01c8", 0x39}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.952733255s ago: executing program 4 (id=935): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="3e32edc5391912eb5f3e1a5daf3b13f0ce77ae57e59c39226a1aeb5611008bc13067f15d9dd375662f8eec8b94215192c6cbd10a54d7f85ef4a3cf6b2d194268946267843765c58c8363e5cd2394ebffe0e81a356ec9ba7899bef4c3b5774af47fc9b443cc68ec3e236cc67623e5ce2949f501944d1f69c702b1474a3b41745cdea0e53212f75a4be7560a422564421c1ae56abadc7b7875eff8a36ddef321006bf2711479e5eceb2d249da78b3dba85f23c2fdfb579cf112aee0693", 0xbc}, {&(0x7f0000000240)="f89e8f2535a3a7546894f9b6a9d67d718b715b80caf6dd035a0eb0e84146550b44df38a78a031643b7c0bfe6f8af149bd418fa81ebfff238c38dcc0de9b85189a699897b919a35d2e41c0a16e4f3f066875875cc780468f74aa0ce7251b2ba8c037cb14e36bdda871e63729d1554e5af5b9ad0d72dbb5012c0792a665ef2632ab2b96f00e3502d66f5221572be5c69d4a8ac37f7105b14cc4625de3457a765d72f8a4cad070971f66c83e8ae7be767e3ba8f0cad0e2b7e824c157b782ba162641e164acf3957ff616f1c86bfbe0cc95d", 0xd0}, {&(0x7f0000000040)}, {&(0x7f0000000a40)="a215a009cdc4f51e00128e0c11632ad695ba359452c9654a2ceadcdc4825b6ef5d99c289c3513260b7fc1adc88c68700c2baf249e64d58bcc421a732845191ee9e1fbed157f56e626ebaf676d7eed1db63ade812844b00a4bbaadb8e5257f2d106cd12c91a9dac45eef9656dd3dd35a339c49ba27bda67a4c951da59aeaa5f2270e73470b59d572bd974e5b5008de290b10e54e71a4a32650bfd47d3daab0086bcd0241d18121f5fb3a6dfb6869afec9447534c468fedea8c28bbd9489f9a205b66e73348af1aacbc84f4e9a52f62706a3380e802612db99fc30296d002c84403be493bb55a5a738a493a4439460866f3f1322806a4be2a1e5b1da01060d4df2f52be9e85423104ac258e072ac2f9804ef9be7890900f2772646d2f4900d54f388167fdc95216aa5918cf21fdc9cbc2f4f3974172ee0460fdd1c14a7698abda49030899a3021004818b763b250c2be45dc1e89122a2f9f316a5f972553034250963ee4c033ca858f1e5a68de7e590002d24ac50155276d1697837fcaaa6ad99965b529b70569532d7d617c1b3a1d95869839878cc5738ca5b23002db4a2de95be8c803262f62f84ac7e9b7bd236d465ae594c17df65816c5afef6ebffdda247b265c6385207f6f003deb962975077f88a712009921248593a52bcec3e4f9ae269bf5615edb405ff97177a5ae9be9cba4517745806b86ab4d57abf7de2941d2b3f53ff254763847424c61398a3f252e5044eafc913ca204fee6bf4fb076539fb770a128b137a87bdbd67c4df690df16731308d9a643644e3c53f7197bd4f1259d06c7f1cb8c0ad23d8925b93bb09594352ddf88989519fb8810aa10a7cdb5d549c57840e2c35304ab7cfe6f03f5dd1e8341859cb4bfe7be72edd8ad9bd77e3857f2f228ef70ea46229a11117330605d0b902ea120bb62b5dacc40cc0e", 0x29c}], 0x4) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8}}) 1.901390958s ago: executing program 4 (id=937): syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff04, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff04, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="1201000000000020435505000000000000010902240001000000030904000901030002000921040000012205000905810300"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, &(0x7f00000000c0)={0x40, 0x2e, 0x7, {0x7, 0xf, "973af9106e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.746234407s ago: executing program 1 (id=938): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r5, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r2, 0xffffffffffffa43d, r6) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000280)=""/206, 0xce}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f0000002d00)=""/117, 0x75}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000440)=""/88, 0x58}], 0x9}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x7, 0x40000100, 0x0) r9 = socket$inet6(0xa, 0xa, 0x8) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x4}, 0x1c) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) execve(&(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002500)={[&(0x7f0000002380)='cgroup.subtree_control\x00']}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@local, 0x0, r1}) 1.612426655s ago: executing program 1 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) write(r1, &(0x7f0000000280)="cb60f0890678b359dfeeef3d3bac95cf4f9bece35fd8a01db39a657d5198111c93f2b0bc76c65060f5b2330d94407afa97c06106a565bc51c2179699b2968d2d8ab313b32b22b98ea4408a8c3257ccb98aaa1bc96bf4e68613b96eaaadda8bab34dfc5c1b5688c7ee7de3fe5f5c98df95dbb41693475a6d0", 0x78) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_MCE_KILL_GET(0x22) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", ""]}, 0x14}}, 0x0) 513.16288ms ago: executing program 3 (id=946): r0 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') utimensat(r1, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000100)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x7}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x3}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 491.961811ms ago: executing program 3 (id=947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000000080)) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0xfe01, &(0x7f0000000080)=0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x979, 0xfffffeff, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x66, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1, {[@end, @end, @timestamp={0x44, 0x10, 0x45, 0x0, 0x1, [0x5, 0x6, 0x3]}, @cipso={0x86, 0x27, 0x3, [{0x1, 0xa, "a05fce57faa73447"}, {0x1, 0x2}, {0x2, 0x4, "8fa6"}, {0x5, 0x11, "aac5cca53363c2692c3f86f3429849"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100448}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0xc081}, 0x24000000) 408.840356ms ago: executing program 3 (id=948): mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_clone(0x200c000, 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x0, 0xc, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x9}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xe28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, 0x60}}, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 368.405848ms ago: executing program 0 (id=950): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) (async) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) recvmsg(r1, &(0x7f0000000880)={&(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000740)=""/72, 0x48}], 0x9}, 0x40002161) 268.979584ms ago: executing program 0 (id=951): r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = socket$inet6(0xa, 0x3, 0x39) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) unshare(0x22020600) r4 = eventfd(0x81) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, r2, 0x0, 0x0, 0x7ff, 0x0, 0x3, r4}]) sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d8", 0x12}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 206.241718ms ago: executing program 0 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)='M', 0x1}], 0x1}}], 0x3, 0x6081851) 187.690379ms ago: executing program 0 (id=953): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 32) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 32) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 121.107153ms ago: executing program 0 (id=954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0xe}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffe) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x0, 0x44) finit_module(r3, 0x0, 0x0) keyctl$link(0x8, r2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private}}}}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 86.864055ms ago: executing program 0 (id=955): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150fdf0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcb05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc28afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f2724f5024a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4a7e642fdc56d11c2ec87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b09ffd42a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3da452647e342e2591be4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0xffffffffffffffff, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000380)="b805000000b9000001000f01c164460f01cb66f2a40f3266b836000f00d826c1a1c80000002e66baf80cb8d767738bef66bafc0cec3e400f01c3470f01c2410f30", 0x41}], 0x1, 0x41, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) lseek(r5, 0x101, 0x1) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, 0x0) unshare(0x24020400) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005fb000/0x400000)=nil) ioctl$KVM_RUN(r4, 0xae80, 0x0) 61.121057ms ago: executing program 3 (id=956): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) close(0x3) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@redirect_dir_off}]}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000180)=r3) 751.39µs ago: executing program 3 (id=957): sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000002000/0x2000)=nil, 0x40000, 0x1}}) (async) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000002000/0x2000)=nil, 0x40000, 0x1}}) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x0, 0x203}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) epoll_create(0x6) (async) r3 = epoll_create(0x6) epoll_pwait2(r3, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x24c) (async) chmod(&(0x7f0000000100)='./file0\x00', 0x24c) 0s ago: executing program 3 (id=958): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40043) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) fcntl$setsig(r0, 0xa, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) tkill(r3, 0xd) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x51, 0x0, &(0x7f00000001c0)="a8dc697a7cb7cae463fa05cfe06b059be405365868e940997ff2b5dae6e2893ce9efce9ce3e6b897f66455c39bd0d4f8c9ea8bc04cfcfb2d090f58587afe2c76f6b71a7235aa8d1583c4fb227966aa278d"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000001, 0x20000000000, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa19, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x8000000, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000340)=@arm64={0x7, 0x9, 0x6, '\x00', 0x2000000000003}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xc000, 0x10, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffffffff, 0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x7, 0x8}, {0x2000, 0x60000, 0x0, 0xff, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xb, 0x0, 0x0, 0x0, 0xff, 0x0, 0x88, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x9, 0x0, 0xe, 0x0, 0x4, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0xfe, 0x8, 0x0, 0x5}, {0x0, 0x26000, 0xa, 0xfe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9000, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x6, 0x0, 0x0, 0x4}, {0xffff1000}, {0xdddd1000, 0xffff}, 0x5df8ffcb, 0x0, 0x6000, 0x50, 0xfffffffffffffffd, 0xf801, 0xd000, [0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x100000, 0x0) kernel console output (not intermixed with test programs): rings: Mfr=1, Product=2, SerialNumber=3 [ 95.350359][ T644] usb 2-1: Product: syz [ 95.354561][ T644] usb 2-1: Manufacturer: syz [ 95.359173][ T644] usb 2-1: SerialNumber: syz [ 96.215958][ T644] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 96.231013][ T644] asix 2-1:2.88: probe with driver asix failed with error -71 [ 96.239786][ T644] usb 2-1: USB disconnect, device number 46 [ 96.291447][ T1855] netlink: 57 bytes leftover after parsing attributes in process `syz.1.464'. [ 96.333922][ T64] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 96.469697][ T9] usb 1-1: USB disconnect, device number 37 [ 96.485302][ T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.497272][ T64] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 96.507097][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.515432][ T64] usb 4-1: Product: syz [ 96.519672][ T64] usb 4-1: Manufacturer: syz [ 96.525013][ T64] usb 4-1: SerialNumber: syz [ 96.530528][ T64] usb 4-1: config 0 descriptor?? [ 96.613929][ T644] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 96.741670][ T36] audit: type=1400 audit(1770755007.835:483): avc: denied { create } for pid=1845 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.773836][ T644] usb 2-1: Using ep0 maxpacket: 32 [ 96.780123][ T644] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 96.789294][ T644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.798174][ T644] usb 2-1: config 0 descriptor?? [ 96.965082][ T64] usb 4-1: bad CDC descriptors [ 96.970989][ T64] usb 4-1: unsupported MDLM descriptors [ 96.979643][ T64] usb 4-1: USB disconnect, device number 39 [ 97.113289][ T36] audit: type=1400 audit(1770755008.205:484): avc: denied { create } for pid=1867 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.184113][ T1873] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 97.192905][ T1873] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.211436][ T644] uclogic 0003:28BD:0075.0016: interface is invalid, ignoring [ 97.273897][ T64] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 97.383876][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 97.423863][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 97.431066][ T64] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 97.441283][ T64] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 97.452451][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.461786][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.469847][ T64] usb 4-1: Product: 灴 [ 97.474153][ T64] usb 4-1: Manufacturer: ∆ಉ鋎᠁ಒ楙┺ℚﵽ궺闑ብᄰ鯽㰜㗐౶ⳉ쮒쿆惌ᅫ닪怉磬ᄊ鑙ଲ᳿⌧쌭릹겼䩅㔆䍕繹ⓖ艎䠰㶅뒪剢〙䳳곔ꛡ땧睜럒鏆䉧䤖ᐵ趝阸顪춦즷譋줍롼픛Ň귊⊣Ḁ嬂ᆵᵴ瑩ⅾ᝽ [ 97.499573][ T64] usb 4-1: SerialNumber: ࠬ [ 97.513907][ T9] usb 1-1: device descriptor read/64, error -71 [ 97.569137][ T1855] pim6reg1: entered promiscuous mode [ 97.574528][ T1855] pim6reg1: entered allmulticast mode [ 97.580827][ T1855] kvm: user requested TSC rate below hardware speed [ 97.753873][ T9] usb 1-1: device descriptor read/64, error -71 [ 97.993865][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 98.123880][ T9] usb 1-1: device descriptor read/64, error -71 [ 98.215353][ T64] cdc_ncm 4-1:1.0: bind() failure [ 98.222820][ T64] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 98.229854][ T64] cdc_ncm 4-1:1.1: bind() failure [ 98.237983][ T64] usb 4-1: USB disconnect, device number 40 [ 98.363912][ T9] usb 1-1: device descriptor read/64, error -71 [ 98.473989][ T9] usb usb1-port1: attempt power cycle [ 98.543898][ T64] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 98.695231][ T64] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 98.706363][ T64] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.716334][ T64] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 98.729570][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.736260][ T64] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 98.745359][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.754408][ T64] usb 4-1: config 0 descriptor?? [ 98.814052][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 98.834964][ T9] usb 1-1: device descriptor read/8, error -71 [ 98.965556][ T9] usb 1-1: device descriptor read/8, error -71 [ 99.162950][ T64] hid-picolcd 0003:04D8:C002.0017: ignoring exceeding usage max [ 99.203873][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 99.223930][ T64] hid-picolcd 0003:04D8:C002.0017: No report with id 0x11 found [ 99.234167][ T9] usb 1-1: device descriptor read/8, error -71 [ 99.364860][ T373] usb 2-1: USB disconnect, device number 47 [ 99.367512][ T9] usb 1-1: device descriptor read/8, error -71 [ 99.384186][ T63] usb 4-1: USB disconnect, device number 41 [ 99.427208][ T1886] rtc_cmos 00:00: Alarms can be up to one day in the future [ 99.484347][ T9] usb usb1-port1: unable to enumerate USB device [ 99.823888][ T373] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 99.973863][ T373] usb 2-1: Using ep0 maxpacket: 32 [ 99.980501][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.991466][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.001318][ T373] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.010499][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.019326][ T373] usb 2-1: config 0 descriptor?? [ 100.024365][ T36] audit: type=1400 audit(1770755011.115:485): avc: denied { mounton } for pid=1896 comm="syz.3.478" path="/114/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.048530][ T373] hub 2-1:0.0: USB hub found [ 100.248351][ T373] hub 2-1:0.0: 1 port detected [ 100.308522][ T644] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.320766][ T644] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.334299][ T644] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.342058][ T644] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.364446][ T644] rtc rtc0: __rtc_set_alarm: err=-22 [ 100.593871][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 100.724820][ T9] usb 1-1: device descriptor read/64, error -71 [ 100.862199][ T373] hub 2-1:0.0: activate --> -90 [ 100.976420][ T1907] netlink: 68 bytes leftover after parsing attributes in process `syz.3.480'. [ 100.985609][ T9] usb 1-1: device descriptor read/64, error -71 [ 101.224147][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 101.265530][ T63] usb 2-1: USB disconnect, device number 48 [ 101.283850][ T64] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 101.364337][ T9] usb 1-1: device descriptor read/64, error -71 [ 101.434453][ T64] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 101.450860][ T64] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 101.460079][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 101.468609][ T64] usb 4-1: Product: syz [ 101.472846][ T64] usb 4-1: Manufacturer: syz [ 101.477850][ T64] usb 4-1: SerialNumber: syz [ 101.493949][ T373] usb 2-1-port1: config error [ 101.515816][ T64] usb 4-1: config 0 descriptor?? [ 101.524516][ T64] cdc_acm 4-1:0.0: Zero length descriptor references [ 101.531268][ T64] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 101.613847][ T9] usb 1-1: device descriptor read/64, error -71 [ 101.724116][ T9] usb usb1-port1: attempt power cycle [ 101.733516][ T64] usb 4-1: USB disconnect, device number 42 [ 101.933372][ T36] audit: type=1400 audit(1770755013.025:486): avc: denied { mount } for pid=1941 comm="syz.4.490" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.004342][ T36] audit: type=1400 audit(1770755013.025:487): avc: denied { remount } for pid=1941 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.031838][ T36] audit: type=1400 audit(1770755013.125:488): avc: denied { unmount } for pid=1665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.063870][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 102.094923][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.224923][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.473871][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 102.516481][ T36] audit: type=1400 audit(1770755013.605:489): avc: denied { write } for pid=1951 comm="syz.1.493" path="socket:[15139]" dev="sockfs" ino=15139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.524729][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.695588][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.813920][ T9] usb usb1-port1: unable to enumerate USB device [ 102.983874][ T63] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 103.155021][ T63] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 103.164364][ T373] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 103.172078][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.181141][ T63] usb 2-1: config 0 descriptor?? [ 103.325024][ T373] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.337463][ T373] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.346610][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.354695][ T373] usb 4-1: Product: syz [ 103.358912][ T373] usb 4-1: Manufacturer: syz [ 103.363537][ T373] usb 4-1: SerialNumber: syz [ 103.386711][ T36] audit: type=1400 audit(1770755014.485:490): avc: denied { mounton } for pid=1957 comm="syz.0.496" path="/122/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 103.387229][ T1959] overlay: ./file0 is not a directory [ 103.411411][ T1954] netlink: 72 bytes leftover after parsing attributes in process `syz.1.494'. [ 103.425861][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 103.431905][ T63] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.440693][ T63] usb 2-1: USB disconnect, device number 49 [ 104.127245][ T1967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=1967 comm=syz.0.498 [ 104.259257][ T373] cdc_ncm 4-1:1.0: failed to get mac address [ 104.265634][ T373] cdc_ncm 4-1:1.0: bind() failure [ 104.272049][ T373] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 104.283200][ T373] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 104.293094][ T373] usb 4-1: USB disconnect, device number 43 [ 104.579935][ T1990] overlayfs: missing 'lowerdir' [ 104.833885][ T373] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 104.985522][ T373] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.994178][ T373] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 105.005831][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 4 [ 105.016813][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 0 [ 105.027652][ T45] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 105.035303][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.043904][ T64] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 105.047949][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 105.062797][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 105.072561][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 105.084989][ T373] usb 1-1: string descriptor 0 read error: -22 [ 105.091555][ T373] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 105.100843][ T373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.110379][ T373] usb 1-1: config 0 descriptor?? [ 105.118643][ T1993] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.139324][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.195520][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.204303][ T64] usb 2-1: not running at top speed; connect to a high speed hub [ 105.213091][ T64] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 105.223674][ T64] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.223713][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.236943][ T64] usb 2-1: config 1 interface 0 has no altsetting 0 [ 105.247429][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 105.254397][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.261502][ T45] usb 4-1: config 64 has an invalid interface number: 88 but max is 0 [ 105.268443][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.277654][ T45] usb 4-1: config 64 has no interface number 0 [ 105.285090][ T64] usb 2-1: Product: syz [ 105.292590][ T45] usb 4-1: config 64 interface 88 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 105.295689][ T64] usb 2-1: Manufacturer: syz [ 105.307429][ T45] usb 4-1: config 64 interface 88 has no altsetting 0 [ 105.311144][ T64] usb 2-1: SerialNumber: syz [ 105.321026][ T45] usb 4-1: New USB device found, idVendor=d57b, idProduct=89e1, bcdDevice=5c.2b [ 105.331733][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.333573][ T9] usb 1-1: USB disconnect, device number 46 [ 105.339788][ T45] usb 4-1: Product: syz [ 105.350022][ T45] usb 4-1: Manufacturer: syz [ 105.354687][ T45] usb 4-1: SerialNumber: syz [ 105.551354][ T64] cdc_ether 2-1:1.0: skipping garbage [ 105.557159][ T64] cdc_ether 2-1:1.0: skipping garbage [ 105.562725][ T64] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 105.573985][ T64] usb 2-1: USB disconnect, device number 50 [ 105.582693][ T1997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.592034][ T1997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.861690][ T2009] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.513' sets config #23 [ 106.065313][ T2012] fuse: Unknown parameter 'cd' [ 106.072756][ T2012] input: syz0 as /devices/virtual/input/input24 [ 106.106302][ T342] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 106.123892][ T45] usb 4-1: USB disconnect, device number 44 [ 106.134203][ T2016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2016 comm=syz.3.516 [ 106.148949][ T2016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.516'. [ 106.158924][ T2016] netlink: 68 bytes leftover after parsing attributes in process `syz.3.516'. [ 106.170157][ T2016] overlay: ./file1 is not a directory [ 106.275582][ T342] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.286142][ T342] usb 1-1: config 127 has an invalid interface number: 106 but max is 0 [ 106.294642][ T342] usb 1-1: config 127 has no interface number 0 [ 106.301145][ T342] usb 1-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 106.311513][ T342] usb 1-1: config 127 interface 106 has no altsetting 0 [ 106.320418][ T342] usb 1-1: string descriptor 0 read error: -22 [ 106.326953][ T342] usb 1-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 106.336552][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.346892][ T342] ftdi_sio 1-1:127.106: FTDI USB Serial Device converter detected [ 106.355306][ T342] usb 1-1: Detected SIO [ 106.359513][ T342] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 106.367923][ T342] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.405685][ T2024] FAULT_INJECTION: forcing a failure. [ 106.405685][ T2024] name failslab, interval 1, probability 0, space 0, times 1 [ 106.418478][ T2024] CPU: 0 UID: 0 PID: 2024 Comm: syz.1.518 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 106.418512][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 106.418528][ T2024] Call Trace: [ 106.418534][ T2024] [ 106.418544][ T2024] __dump_stack+0x21/0x30 [ 106.418577][ T2024] dump_stack_lvl+0x140/0x1c0 [ 106.418600][ T2024] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.418624][ T2024] dump_stack+0x19/0x20 [ 106.418651][ T2024] should_fail_ex+0x3d7/0x530 [ 106.418676][ T2024] should_failslab+0xac/0x100 [ 106.418703][ T2024] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 106.418742][ T2024] ? __d_alloc+0x42/0x8e0 [ 106.418763][ T2024] ? selinux_perf_event_alloc+0x110/0x110 [ 106.418783][ T2024] __d_alloc+0x42/0x8e0 [ 106.418802][ T2024] ? avc_has_perm_noaudit+0x26c/0x360 [ 106.418825][ T2024] ? __asan_memcpy+0x5a/0x80 [ 106.418846][ T2024] d_alloc_parallel+0xe4/0x1320 [ 106.418870][ T2024] ? selinux_inode_permission+0x3f2/0x5d0 [ 106.418899][ T2024] ? avc_has_perm_noaudit+0x26c/0x360 [ 106.418922][ T2024] ? __cfi_d_alloc_parallel+0x10/0x10 [ 106.418945][ T2024] ? __kasan_check_write+0x18/0x20 [ 106.418967][ T2024] ? rwsem_read_trylock+0x274/0x5b0 [ 106.418993][ T2024] ? downgrade_write+0x460/0x460 [ 106.419015][ T2024] __lookup_slow+0x150/0x420 [ 106.419042][ T2024] ? lookup_one_len+0x300/0x300 [ 106.419066][ T2024] ? down_read+0x7f/0xe0 [ 106.419101][ T2024] lookup_slow+0x57/0x80 [ 106.419125][ T2024] link_path_walk+0x990/0xec0 [ 106.419150][ T2024] __filename_parentat+0x22a/0x650 [ 106.419177][ T2024] ? vfs_path_parent_lookup+0x70/0x70 [ 106.419206][ T2024] ? __virt_addr_valid+0x2a6/0x380 [ 106.419226][ T2024] ? __check_object_size+0x527/0x830 [ 106.419250][ T2024] do_rmdir+0xe0/0x590 [ 106.419267][ T2024] ? __cfi_do_rmdir+0x10/0x10 [ 106.419284][ T2024] ? strncpy_from_user+0x14d/0x270 [ 106.419303][ T2024] ? __kasan_check_write+0x18/0x20 [ 106.419325][ T2024] ? getname_flags+0x208/0x700 [ 106.419347][ T2024] ? __kasan_check_read+0x15/0x20 [ 106.419369][ T2024] __x64_sys_rmdir+0x4b/0x60 [ 106.419387][ T2024] x64_sys_call+0xaf7/0x2ee0 [ 106.419412][ T2024] do_syscall_64+0x57/0xf0 [ 106.419438][ T2024] ? clear_bhb_loop+0x50/0xa0 [ 106.419465][ T2024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.419491][ T2024] RIP: 0033:0x7ff62b19bf79 [ 106.419514][ T2024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.419529][ T2024] RSP: 002b:00007ff62bfad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 106.419557][ T2024] RAX: ffffffffffffffda RBX: 00007ff62b415fa0 RCX: 00007ff62b19bf79 [ 106.419572][ T2024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 106.419584][ T2024] RBP: 00007ff62bfad090 R08: 0000000000000000 R09: 0000000000000000 [ 106.419596][ T2024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.419608][ T2024] R13: 00007ff62b416038 R14: 00007ff62b415fa0 R15: 00007ffc8eebf7d8 [ 106.419624][ T2024] [ 106.731561][ T2027] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 106.731583][ T2027] rust_binder: Read failure Err(EFAULT) in pid:460 [ 106.740300][ T2027] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 106.761767][ T36] audit: type=1400 audit(1770755017.855:491): avc: denied { bind } for pid=2028 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.802022][ T2033] netlink: 'syz.1.521': attribute type 25 has an invalid length. [ 107.093874][ T64] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 107.103888][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 107.243841][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 107.250232][ T64] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.258582][ T64] usb 2-1: config 0 has no interface number 0 [ 107.264803][ T64] usb 2-1: config 0 interface 184 has no altsetting 0 [ 107.272696][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 107.281886][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.290728][ T64] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.299972][ T9] usb 4-1: config 0 descriptor?? [ 107.305065][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.313299][ T64] usb 2-1: Product: syz [ 107.318613][ T64] usb 2-1: Manufacturer: syz [ 107.323273][ T64] usb 2-1: SerialNumber: syz [ 107.328952][ T64] usb 2-1: config 0 descriptor?? [ 107.336216][ T64] smsc75xx v1.0.0 [ 107.835664][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 107.841669][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 107.854447][ T9] usb 4-1: USB disconnect, device number 45 [ 107.937308][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.948238][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.183907][ T9] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 108.198452][ T2052] FAULT_INJECTION: forcing a failure. [ 108.198452][ T2052] name failslab, interval 1, probability 0, space 0, times 0 [ 108.211217][ T2052] CPU: 0 UID: 0 PID: 2052 Comm: syz.4.527 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 108.211248][ T2052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 108.211261][ T2052] Call Trace: [ 108.211268][ T2052] [ 108.211275][ T2052] __dump_stack+0x21/0x30 [ 108.211311][ T2052] dump_stack_lvl+0x140/0x1c0 [ 108.211338][ T2052] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.211367][ T2052] ? ovl_lookup_single+0x6ba/0xb90 [ 108.211401][ T2052] dump_stack+0x19/0x20 [ 108.211427][ T2052] should_fail_ex+0x3d7/0x530 [ 108.211451][ T2052] ? ovl_stack_alloc+0x31/0xb0 [ 108.211483][ T2052] should_failslab+0xac/0x100 [ 108.211515][ T2052] __kmalloc_noprof+0x69/0x500 [ 108.211551][ T2052] ? ovl_lookup_layer+0x355/0x420 [ 108.211582][ T2052] ? ovl_stack_alloc+0x31/0xb0 [ 108.211616][ T2052] ovl_stack_alloc+0x31/0xb0 [ 108.211648][ T2052] ovl_lookup+0x593/0x1d60 [ 108.211681][ T2052] ? d_alloc_parallel+0x11c0/0x1320 [ 108.211712][ T2052] ? __cfi_ovl_lookup+0x10/0x10 [ 108.211743][ T2052] ? __cfi_d_alloc_parallel+0x10/0x10 [ 108.211770][ T2052] ? __kasan_check_write+0x18/0x20 [ 108.211797][ T2052] ? rwsem_read_trylock+0x274/0x5b0 [ 108.211826][ T2052] ? downgrade_write+0x460/0x460 [ 108.211854][ T2052] __lookup_slow+0x2e2/0x420 [ 108.211886][ T2052] ? lookup_one_len+0x300/0x300 [ 108.211916][ T2052] ? down_read+0x7f/0xe0 [ 108.211943][ T2052] lookup_slow+0x57/0x80 [ 108.211973][ T2052] link_path_walk+0x990/0xec0 [ 108.212001][ T2052] __filename_parentat+0x22a/0x650 [ 108.212034][ T2052] ? vfs_path_parent_lookup+0x70/0x70 [ 108.212068][ T2052] ? __virt_addr_valid+0x2a6/0x380 [ 108.212091][ T2052] ? __check_object_size+0x527/0x830 [ 108.212120][ T2052] do_rmdir+0xe0/0x590 [ 108.212142][ T2052] ? __cfi_do_rmdir+0x10/0x10 [ 108.212163][ T2052] ? strncpy_from_user+0x14d/0x270 [ 108.212187][ T2052] ? __kasan_check_write+0x18/0x20 [ 108.212213][ T2052] ? getname_flags+0x208/0x700 [ 108.212241][ T2052] ? __kasan_check_read+0x15/0x20 [ 108.212266][ T2052] __x64_sys_rmdir+0x4b/0x60 [ 108.212288][ T2052] x64_sys_call+0xaf7/0x2ee0 [ 108.212318][ T2052] do_syscall_64+0x57/0xf0 [ 108.212348][ T2052] ? clear_bhb_loop+0x50/0xa0 [ 108.212378][ T2052] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.212407][ T2052] RIP: 0033:0x7f1d3479bf79 [ 108.212426][ T2052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.212445][ T2052] RSP: 002b:00007f1d356ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 108.212469][ T2052] RAX: ffffffffffffffda RBX: 00007f1d34a15fa0 RCX: 00007f1d3479bf79 [ 108.212486][ T2052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 108.212500][ T2052] RBP: 00007f1d356ef090 R08: 0000000000000000 R09: 0000000000000000 [ 108.212515][ T2052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.212537][ T2052] R13: 00007f1d34a16038 R14: 00007f1d34a15fa0 R15: 00007ffff7126af8 [ 108.212557][ T2052] [ 108.585006][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 108.594984][ T9] usb 4-1: config 0 has no interface number 0 [ 108.601098][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 108.609665][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 108.618931][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.626990][ T9] usb 4-1: Product: syz [ 108.631275][ T9] usb 4-1: Manufacturer: syz [ 108.636186][ T9] usb 4-1: SerialNumber: syz [ 108.641788][ T9] usb 4-1: config 0 descriptor?? [ 108.874717][ T342] usb 1-1: USB disconnect, device number 47 [ 108.884884][ T342] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 108.897568][ T342] ftdi_sio 1-1:127.106: device disconnected [ 108.920761][ T2058] Unsupported ieee802154 address type: 0 [ 109.052543][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 109.062771][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 109.074131][ T9] usb 4-1: USB disconnect, device number 46 [ 109.363860][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 109.513857][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 109.520222][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 109.528609][ T10] usb 1-1: config 0 has no interface number 0 [ 109.534943][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.546933][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 109.556278][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.567830][ T10] usb 1-1: Product: syz [ 109.572078][ T10] usb 1-1: Manufacturer: syz [ 109.576926][ T10] usb 1-1: SerialNumber: syz [ 109.582837][ T10] usb 1-1: config 0 descriptor?? [ 109.588859][ T2066] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.690752][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 109.709415][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 109.719212][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.728777][ T64] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 109.758919][ T64] usb 2-1: USB disconnect, device number 51 [ 109.796808][ T2066] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.013853][ T45] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 110.165339][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.185315][ T45] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 110.195284][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.203494][ T45] usb 4-1: Product: syz [ 110.214226][ T45] usb 4-1: Manufacturer: syz [ 110.224106][ T45] usb 4-1: SerialNumber: syz [ 110.233369][ T45] usb 4-1: config 0 descriptor?? [ 110.245987][ T45] CoreChips 4-1:0.0: probe with driver CoreChips failed with error -22 [ 110.446987][ T2076] netlink: 64 bytes leftover after parsing attributes in process `syz.3.536'. [ 110.456714][ T36] audit: type=1400 audit(1770755021.555:492): avc: denied { execute } for pid=2072 comm="syz.3.536" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.477757][ T36] audit: type=1400 audit(1770755021.555:493): avc: denied { execute_no_trans } for pid=2072 comm="syz.3.536" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.181907][ T2083] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.538'. [ 111.208244][ T2090] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 111.214191][ T2090] syzkaller0: owner set to 0 [ 111.218994][ T2088] netlink: 'syz.1.539': attribute type 6 has an invalid length. [ 111.226793][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 111.833867][ T45] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 111.985325][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.995198][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 112.004338][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.013283][ T45] usb 2-1: config 0 descriptor?? [ 112.422417][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 112.432031][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 112.441169][ T45] usb 2-1: USB disconnect, device number 52 [ 112.456085][ T2127] FAULT_INJECTION: forcing a failure. [ 112.456085][ T2127] name failslab, interval 1, probability 0, space 0, times 0 [ 112.468906][ T2127] CPU: 1 UID: 0 PID: 2127 Comm: syz.0.553 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 112.468942][ T2127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 112.468957][ T2127] Call Trace: [ 112.468966][ T2127] [ 112.468976][ T2127] __dump_stack+0x21/0x30 [ 112.469011][ T2127] dump_stack_lvl+0x140/0x1c0 [ 112.469036][ T2127] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.469067][ T2127] dump_stack+0x19/0x20 [ 112.469085][ T2127] should_fail_ex+0x3d7/0x530 [ 112.469103][ T2127] should_failslab+0xac/0x100 [ 112.469150][ T2127] __kmalloc_cache_noprof+0x41/0x470 [ 112.469177][ T2127] ? lockref_get+0x131/0x1c0 [ 112.469208][ T2127] ? inode_doinit_use_xattr+0x6a/0x550 [ 112.469233][ T2127] ? __kasan_check_write+0x18/0x20 [ 112.469253][ T2127] inode_doinit_use_xattr+0x6a/0x550 [ 112.469290][ T2127] inode_doinit_with_dentry+0x770/0xde0 [ 112.469321][ T2127] ? sb_finish_set_opts+0xa40/0xa40 [ 112.469348][ T2127] ? __kasan_slab_free+0x6a/0x80 [ 112.469382][ T2127] selinux_d_instantiate+0x2b/0x40 [ 112.469402][ T2127] security_d_instantiate+0xb8/0xf0 [ 112.469438][ T2127] d_splice_alias+0x71/0x3a0 [ 112.469465][ T2127] ovl_lookup+0x1ba0/0x1d60 [ 112.469501][ T2127] ? __cfi_ovl_lookup+0x10/0x10 [ 112.469542][ T2127] ? __cfi_d_alloc_parallel+0x10/0x10 [ 112.469562][ T2127] ? rwsem_read_trylock+0x274/0x5b0 [ 112.469603][ T2127] ? downgrade_write+0x460/0x460 [ 112.469629][ T2127] __lookup_slow+0x2e2/0x420 [ 112.469656][ T2127] ? lookup_one_len+0x300/0x300 [ 112.469685][ T2127] ? down_read+0x7f/0xe0 [ 112.469704][ T2127] lookup_slow+0x57/0x80 [ 112.469742][ T2127] link_path_walk+0x990/0xec0 [ 112.469771][ T2127] __filename_parentat+0x22a/0x650 [ 112.469803][ T2127] ? vfs_path_parent_lookup+0x70/0x70 [ 112.469836][ T2127] ? __virt_addr_valid+0x2a6/0x380 [ 112.469853][ T2127] ? __check_object_size+0x527/0x830 [ 112.469873][ T2127] do_rmdir+0xe0/0x590 [ 112.469907][ T2127] ? __cfi_do_rmdir+0x10/0x10 [ 112.469927][ T2127] ? strncpy_from_user+0x14d/0x270 [ 112.469949][ T2127] ? __kasan_check_write+0x18/0x20 [ 112.469973][ T2127] ? getname_flags+0x208/0x700 [ 112.470004][ T2127] ? __kasan_check_read+0x15/0x20 [ 112.470023][ T2127] __x64_sys_rmdir+0x4b/0x60 [ 112.470054][ T2127] x64_sys_call+0xaf7/0x2ee0 [ 112.470084][ T2127] do_syscall_64+0x57/0xf0 [ 112.470119][ T2127] ? clear_bhb_loop+0x50/0xa0 [ 112.470150][ T2127] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.470171][ T2127] RIP: 0033:0x7f855c99bf79 [ 112.470186][ T2127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.470219][ T2127] RSP: 002b:00007f855d8ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 112.470244][ T2127] RAX: ffffffffffffffda RBX: 00007f855cc15fa0 RCX: 00007f855c99bf79 [ 112.470259][ T2127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 112.470272][ T2127] RBP: 00007f855d8ea090 R08: 0000000000000000 R09: 0000000000000000 [ 112.470291][ T2127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.470301][ T2127] R13: 00007f855cc16038 R14: 00007f855cc15fa0 R15: 00007fff31cf0808 [ 112.470315][ T2127] [ 112.789256][ T36] audit: type=1326 audit(1770755023.884:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2072 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f299bf79 code=0x7fc00000 [ 112.795776][ T342] usb 4-1: USB disconnect, device number 47 [ 112.901432][ T2138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.912606][ T2138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.962234][ T2141] fuse: Bad value for 'user_id' [ 112.971624][ T2138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.985860][ T2141] fuse: Bad value for 'user_id' [ 112.991908][ T2138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.050553][ T36] audit: type=1400 audit(1770755024.144:495): avc: denied { bind } for pid=2145 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.323899][ T644] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 113.485031][ T644] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 113.493956][ T644] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 113.504478][ T644] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.515277][ T644] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.526334][ T644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.534580][ T644] usb 4-1: Product: syz [ 113.536335][ T12] bridge_slave_1: left allmulticast mode [ 113.538834][ T644] usb 4-1: Manufacturer: 乨铺툈克䆍컆퍝꼲牞导㘫ⱔ漩氺崫ニ띮壷ސ뉽⣩늠迻᪭べ槊⫯嬕挎䊣᳆秿ᛪ覻㓝뇞쵦䂜ᮽᑅ⿿洜鏷伟邲Ꮃ㞒觌쓉⛲텭ꕀꭶຟʥ䫮킎வ흍Ᏽሼ敆⑫㭐쳜ꑚ팏訧₮ﳯ癘ኃ쾀萪﬙㽞餌ꃛ퀕씄﫢ﺷざᧈ䇅^襙쐉܎⤿㙺놥哼㊹鹹࿹䋩쪢誽嫍 [ 113.545000][ T12] bridge_slave_1: left promiscuous mode [ 113.580311][ T644] usb 4-1: SerialNumber: syz [ 113.585575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.597318][ T12] bridge_slave_0: left allmulticast mode [ 113.602998][ T12] bridge_slave_0: left promiscuous mode [ 113.609155][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.692869][ T2157] kvm: user requested TSC rate below hardware speed [ 113.700746][ T2157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 113.750020][ T2154] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.757237][ T2154] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.765203][ T2154] bridge_slave_0: entered allmulticast mode [ 113.771651][ T2154] bridge_slave_0: entered promiscuous mode [ 113.778483][ T2154] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.785768][ T2154] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.792864][ T2154] bridge_slave_1: entered allmulticast mode [ 113.802889][ T2154] bridge_slave_1: entered promiscuous mode [ 113.810475][ T644] usb 4-1: 0:2 : does not exist [ 113.810499][ T12] veth1_macvtap: left promiscuous mode [ 113.821675][ T12] veth0_vlan: left promiscuous mode [ 113.828581][ T644] usb 4-1: USB disconnect, device number 48 [ 113.852097][ T2162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.863207][ T2162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.875606][ T2162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.885575][ T2162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.013650][ T2154] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.020775][ T2154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.028163][ T2154] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.035288][ T2154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.060587][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.068527][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.078985][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.086137][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.095971][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.103042][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.136542][ T2154] veth0_vlan: entered promiscuous mode [ 114.153060][ T2154] veth1_macvtap: entered promiscuous mode [ 114.194202][ T2173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.203272][ T2173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.423845][ T64] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 114.575332][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.583557][ T64] usb 2-1: not running at top speed; connect to a high speed hub [ 114.593133][ T64] usb 2-1: string descriptor 0 read error: -22 [ 114.599745][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.609621][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.628874][ T36] audit: type=1400 audit(1770755025.724:496): avc: denied { create } for pid=2190 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.648918][ T36] audit: type=1400 audit(1770755025.724:497): avc: denied { map } for pid=2190 comm="syz.0.573" path="socket:[16336]" dev="sockfs" ino=16336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.673322][ T36] audit: type=1400 audit(1770755025.724:498): avc: denied { read } for pid=2190 comm="syz.0.573" path="socket:[16336]" dev="sockfs" ino=16336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.758846][ T2198] fuseblk: Bad value for 'fd' [ 114.821413][ T64] cdc_ncm 2-1:1.0: bind() failure [ 114.828767][ T64] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 114.837094][ T64] cdc_ncm 2-1:1.1: bind() failure [ 114.843634][ T64] usb 2-1: USB disconnect, device number 53 [ 114.967688][ T36] audit: type=1400 audit(1770755026.064:499): avc: denied { create } for pid=2204 comm="syz.0.578" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.988427][ T36] audit: type=1400 audit(1770755026.064:500): avc: denied { write } for pid=2204 comm="syz.0.578" name="file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.011347][ T36] audit: type=1400 audit(1770755026.064:501): avc: denied { open } for pid=2204 comm="syz.0.578" path="/153/file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.514496][ T2227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.586'. [ 115.613865][ T45] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 115.707028][ T36] audit: type=1400 audit(1770755026.804:502): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.765713][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.777990][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 115.787116][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.796590][ T45] usb 2-1: config 0 descriptor?? [ 115.894005][ T63] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 116.004583][ T2224] netlink: 'syz.1.585': attribute type 11 has an invalid length. [ 116.012483][ T2224] netlink: 'syz.1.585': attribute type 2 has an invalid length. [ 116.043938][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 116.052133][ T63] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 116.061313][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.069428][ T63] usb 4-1: Product: syz [ 116.073675][ T63] usb 4-1: Manufacturer: syz [ 116.078350][ T63] usb 4-1: SerialNumber: syz [ 116.223495][ T45] kye 0003:0458:500F.0018: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 116.236343][ T45] kye 0003:0458:500F.0018: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.1-1/input0 [ 116.261019][ T45] kye 0003:0458:500F.0018: tablet-enabling feature report not found [ 116.269170][ T45] kye 0003:0458:500F.0018: tablet enabling failed [ 116.384025][ T36] audit: type=1400 audit(1770755027.484:503): avc: denied { ioctl } for pid=2254 comm="syz.0.595" path="/160/file0" dev="tmpfs" ino=908 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.425331][ T64] usb 2-1: USB disconnect, device number 54 [ 116.494250][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 116.504650][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffff92 [ 116.515952][ T10] asix 1-1:0.188: probe with driver asix failed with error -110 [ 116.541946][ T2260] kvm: user requested TSC rate below hardware speed [ 116.549429][ T2260] overlayfs: conflicting options: metacopy=off,verity=require [ 116.629247][ T2262] overlay: ./file0 is not a directory [ 116.635311][ T2263] overlay: ./file0 is not a directory [ 116.669217][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.677914][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.686509][ T2265] loop7: detected capacity change from 0 to 16384 [ 117.131473][ T2279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.140119][ T2279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.152259][ T2278] GUP no longer grows the stack in syz.0.602 (2278): 200000004000-200000005000 (200000001000) [ 117.162647][ T2278] CPU: 0 UID: 0 PID: 2278 Comm: syz.0.602 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 117.162682][ T2278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 117.162697][ T2278] Call Trace: [ 117.162705][ T2278] [ 117.162713][ T2278] __dump_stack+0x21/0x30 [ 117.162750][ T2278] dump_stack_lvl+0x140/0x1c0 [ 117.162769][ T2278] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.162808][ T2278] ? find_vma+0xd3/0x120 [ 117.162837][ T2278] dump_stack+0x19/0x20 [ 117.162861][ T2278] __get_user_pages+0x1e18/0x22b0 [ 117.162892][ T2278] ? update_load_avg+0x506/0x1990 [ 117.162910][ T2278] ? __kasan_check_write+0x18/0x20 [ 117.162944][ T2278] ? down_read_killable+0x7f/0x100 [ 117.162971][ T2278] ? populate_vma_page_range+0x220/0x220 [ 117.163003][ T2278] ? kvm_sched_clock_read+0x15/0x30 [ 117.163029][ T2278] __gup_longterm_locked+0xc5a/0x1600 [ 117.163045][ T2278] ? try_grab_folio_fast+0x155/0x520 [ 117.163061][ T2278] ? follow_pfn_pte+0x110/0x110 [ 117.163087][ T2278] ? __pte_offset_map+0x1b0/0x230 [ 117.163112][ T2278] gup_fast_fallback+0x12e9/0x14e0 [ 117.163134][ T2278] ? finish_task_switch+0x1d9/0x760 [ 117.163161][ T2278] ? get_user_pages_fast_only+0xc0/0xc0 [ 117.163182][ T2278] ? __futex_queue+0x19f/0x350 [ 117.163205][ T2278] ? __cfi___futex_queue+0x10/0x10 [ 117.163223][ T2278] get_user_pages_fast+0x73/0xb0 [ 117.163252][ T2278] __iov_iter_get_pages_alloc+0x3ca/0xa30 [ 117.163284][ T2278] ? mutex_lock+0x97/0x1d0 [ 117.163305][ T2278] ? __cfi_mutex_lock+0x10/0x10 [ 117.163329][ T2278] iov_iter_get_pages2+0x68/0xb0 [ 117.163350][ T2278] __se_sys_vmsplice+0x7f4/0x1570 [ 117.163376][ T2278] ? __x64_sys_vmsplice+0xc0/0xc0 [ 117.163418][ T2278] ? __cfi_futex_wait+0x10/0x10 [ 117.163447][ T2278] ? __se_sys_mremap+0x68e/0xfe0 [ 117.163475][ T2278] ? xfd_validate_state+0x68/0x140 [ 117.163496][ T2278] ? __kasan_check_write+0x18/0x20 [ 117.163514][ T2278] ? fpregs_restore_userregs+0x11c/0x260 [ 117.163543][ T2278] __x64_sys_vmsplice+0x9f/0xc0 [ 117.163574][ T2278] x64_sys_call+0x105d/0x2ee0 [ 117.163603][ T2278] do_syscall_64+0x57/0xf0 [ 117.163633][ T2278] ? clear_bhb_loop+0x50/0xa0 [ 117.163656][ T2278] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.163677][ T2278] RIP: 0033:0x7f855c99bf79 [ 117.163707][ T2278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.163731][ T2278] RSP: 002b:00007f855d8ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 117.163753][ T2278] RAX: ffffffffffffffda RBX: 00007f855cc15fa0 RCX: 00007f855c99bf79 [ 117.163776][ T2278] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000088 [ 117.163786][ T2278] RBP: 00007f855ca327e0 R08: 0000000000000000 R09: 0000000000000000 [ 117.163796][ T2278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.163805][ T2278] R13: 00007f855cc16038 R14: 00007f855cc15fa0 R15: 00007fff31cf0808 [ 117.163819][ T2278] [ 117.234028][ T45] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 117.604911][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.615890][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.625702][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.638687][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.647790][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.656605][ T45] usb 2-1: config 0 descriptor?? [ 117.986185][ T2290] overlayfs: upper fs does not support file handles, falling back to index=off. [ 118.065782][ T45] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 118.079207][ T2295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.088075][ T2295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.088103][ T45] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.552977][ T36] audit: type=1326 audit(1770755029.644:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2233 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f299bf79 code=0x7fc00000 [ 118.577401][ T2271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.586106][ T2271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.587026][ T63] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 118.597478][ T64] usb 2-1: USB disconnect, device number 55 [ 118.633098][ T2304] 9pnet_fd: p9_fd_create_tcp (2304): problem binding to privport [ 118.641927][ T63] usb 4-1: USB disconnect, device number 49 [ 118.652239][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.741803][ T2309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 118.741843][ T2309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:440 [ 118.752193][ T2309] erofs: dax options not supported [ 118.769122][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.777887][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.789030][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.798631][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.808501][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.819122][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.829315][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.838733][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.848006][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.858029][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.866937][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.875598][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.436934][ T2352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.445707][ T2352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.453562][ T64] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 119.464278][ T2352] fuse: Unknown parameter 'grou' [ 119.483868][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 119.606107][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.617138][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.627239][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.640336][ T64] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.649695][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.658776][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 119.669905][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 119.681218][ T64] usb 2-1: config 0 descriptor?? [ 119.686554][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 119.701013][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 119.710320][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.719509][ T10] usb 4-1: config 0 descriptor?? [ 119.725086][ T2347] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 120.103008][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.110636][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.118157][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.125666][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.133868][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.141336][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.152688][ T10] wacom 0003:056A:005B.001B: unknown main item tag 0x0 [ 120.159829][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.167397][ T10] wacom 0003:056A:005B.001B: unknown main item tag 0x0 [ 120.174391][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.181865][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.189517][ T10] wacom 0003:056A:005B.001B: unknown main item tag 0x0 [ 120.196860][ T10] wacom 0003:056A:005B.001B: unknown main item tag 0x0 [ 120.203912][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.211337][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.218805][ T10] wacom 0003:056A:005B.001B: unknown main item tag 0x0 [ 120.234503][ T10] wacom 0003:056A:005B.001B: hidraw0: USB HID v1.01 Device [HID 056a:005b] on usb-dummy_hcd.3-1/input0 [ 120.234908][ T2362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.248235][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.263606][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.271127][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.272532][ T2362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.281427][ T64] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 120.294132][ T64] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 120.320438][ T64] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 120.353377][ T64] usb 2-1: USB disconnect, device number 56 [ 120.355370][ T63] usb 4-1: USB disconnect, device number 50 [ 120.374666][ T2365] fuse: Unknown parameter '`0x000000000000000a' [ 120.997335][ T2376] rust_binder: Write failure EFAULT in pid:20 [ 121.023798][ T36] audit: type=1400 audit(1770755032.114:505): avc: denied { setcheckreqprot } for pid=2380 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.103918][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 121.156925][ T2385] SELinux: Context system_u:object_r:default_context_t:s0 is not valid (left unmapped). [ 121.167211][ T36] audit: type=1400 audit(1770755032.264:506): avc: denied { relabelto } for pid=2384 comm="syz.0.636" name="180" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:default_context_t:s0" [ 121.193897][ T36] audit: type=1400 audit(1770755032.264:507): avc: denied { associate } for pid=2384 comm="syz.0.636" name="180" dev="tmpfs" ino=1022 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:default_context_t:s0" [ 121.228828][ T36] audit: type=1400 audit(1770755032.324:508): avc: denied { write } for pid=290 comm="syz-executor" name="180" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:default_context_t:s0" [ 121.256339][ T64] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 121.257484][ T2388] cgroup: Unknown subsys name 'measure' [ 121.267874][ T36] audit: type=1400 audit(1770755032.324:509): avc: denied { remove_name } for pid=290 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:default_context_t:s0" [ 121.271983][ T2388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.307465][ T2388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.312229][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 121.319299][ T2389] cgroup: Unknown subsys name 'measure' [ 121.324771][ T36] audit: type=1400 audit(1770755032.324:510): avc: denied { rmdir } for pid=290 comm="syz-executor" name="180" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:default_context_t:s0" [ 121.331604][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.359138][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.365883][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.376127][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.387854][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 121.397403][ T10] usb 4-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 121.408501][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.420156][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.429999][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.438763][ T10] usb 4-1: Product: syz [ 121.443540][ T10] usb 4-1: Manufacturer: syz [ 121.449028][ T10] usb 4-1: SerialNumber: syz [ 121.455876][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.466674][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.478260][ T64] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.488162][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.496880][ T64] usb 2-1: SerialNumber: syz [ 121.683058][ T10] usb 4-1: 0:2 : does not exist [ 121.692971][ T10] usb 4-1: USB disconnect, device number 51 [ 121.710423][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.710507][ T64] usb 2-1: 0:2 : does not exist [ 121.736752][ T64] usb 2-1: USB disconnect, device number 57 [ 121.758250][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.221055][ T36] audit: type=1400 audit(1770755033.314:511): avc: denied { append } for pid=2393 comm="syz.1.639" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.230303][ T2394] bridge0: port 3(erspan0) entered blocking state [ 122.250720][ T2394] bridge0: port 3(erspan0) entered disabled state [ 122.257350][ T2394] erspan0: entered allmulticast mode [ 122.263007][ T2394] erspan0: entered promiscuous mode [ 122.268455][ T2394] bridge0: port 3(erspan0) entered blocking state [ 122.274950][ T2394] bridge0: port 3(erspan0) entered forwarding state [ 122.282143][ T2395] erspan0: left allmulticast mode [ 122.287299][ T2395] erspan0: left promiscuous mode [ 122.292439][ T2395] bridge0: port 3(erspan0) entered disabled state [ 122.424174][ T63] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 122.516297][ T2402] 9pnet_fd: p9_fd_create_tcp (2402): problem connecting socket to 127.0.0.1 [ 122.537694][ T36] audit: type=1400 audit(1770755033.634:512): avc: denied { validate_trans } for pid=2403 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.540429][ T2404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.561571][ T45] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 122.567909][ T2404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.583845][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 122.590315][ T63] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.598583][ T63] usb 4-1: config 0 has no interface number 0 [ 122.606739][ T63] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.615975][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.624055][ T63] usb 4-1: Product: syz [ 122.628394][ T63] usb 4-1: Manufacturer: syz [ 122.632992][ T63] usb 4-1: SerialNumber: syz [ 122.638695][ T63] usb 4-1: config 0 descriptor?? [ 122.644644][ T63] smsc95xx v2.0.0 [ 122.693939][ T45] usb 2-1: device descriptor read/64, error -71 [ 122.933869][ T45] usb 2-1: device descriptor read/64, error -71 [ 123.046768][ T63] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 123.057570][ T63] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.173897][ T45] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 123.303880][ T45] usb 2-1: device descriptor read/64, error -71 [ 123.543864][ T45] usb 2-1: device descriptor read/64, error -71 [ 123.619269][ T36] audit: type=1400 audit(1770755034.714:513): avc: denied { shutdown } for pid=2407 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.654110][ T45] usb usb2-port1: attempt power cycle [ 123.693477][ T2419] usb usb9: usbfs: process 2419 (syz.0.648) did not claim interface 4 before use [ 123.705591][ T2419] input: syz0 as /devices/virtual/input/input29 [ 123.728178][ T63] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 123.739478][ T63] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 123.748897][ T63] usb 4-1: USB disconnect, device number 52 [ 123.765113][ T36] audit: type=1400 audit(1770755034.864:514): avc: denied { create } for pid=2422 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.003894][ T45] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 124.025076][ T45] usb 2-1: device descriptor read/8, error -71 [ 124.118842][ T2436] 9p: Unknown uid 00000000004294967295 [ 124.160145][ T45] usb 2-1: device descriptor read/8, error -71 [ 124.403909][ T45] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 124.425248][ T45] usb 2-1: device descriptor read/8, error -71 [ 124.493881][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 124.555255][ T45] usb 2-1: device descriptor read/8, error -71 [ 124.643868][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 124.650357][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.658884][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.667621][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.674482][ T45] usb usb2-port1: unable to enumerate USB device [ 124.676861][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 124.694276][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 124.704387][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.714186][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 124.724361][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.737656][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 124.746943][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.755874][ T10] usb 4-1: config 0 descriptor?? [ 124.762121][ T2445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.770342][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 124.970765][ T2445] cgroup: none used incorrectly [ 124.976094][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 124.987467][ T10] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 124.999893][ T10] usb 4-1: USB disconnect, device number 53 [ 125.008548][ T10] usblp0: removed [ 125.090261][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.099966][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.501018][ T2466] netlink: 'syz.3.666': attribute type 20 has an invalid length. [ 125.510060][ T2466] overlayfs: failed to resolve './file0': -2 [ 125.620739][ T2470] netlink: 188 bytes leftover after parsing attributes in process `syz.0.668'. [ 125.630814][ T2471] netlink: 188 bytes leftover after parsing attributes in process `syz.0.668'. [ 125.650830][ T2476] netlink: 124 bytes leftover after parsing attributes in process `syz.0.669'. [ 125.652279][ T2475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.668517][ T2475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.723882][ T373] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 125.773863][ T45] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 125.853843][ T373] usb 2-1: device descriptor read/64, error -71 [ 125.925220][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.935508][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 125.948536][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 125.957644][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.967239][ T45] usb 4-1: config 0 descriptor?? [ 126.093838][ T373] usb 2-1: device descriptor read/64, error -71 [ 126.178970][ T45] usb 4-1: string descriptor 0 read error: -71 [ 126.186236][ T45] usb 4-1: USB disconnect, device number 54 [ 126.302303][ T2484] netlink: 'syz.0.672': attribute type 27 has an invalid length. [ 126.312461][ T2484] bridge_slave_1: left allmulticast mode [ 126.322581][ T46] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 126.330964][ T46] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 126.338466][ T373] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 126.346876][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 126.376041][ T2488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.385247][ T2488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.473993][ T373] usb 2-1: device descriptor read/64, error -71 [ 126.698944][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 126.698964][ T36] audit: type=1400 audit(1770755037.794:519): avc: denied { getattr } for pid=2490 comm="syz.3.675" name="/" dev="incremental-fs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.728581][ T373] usb 2-1: device descriptor read/64, error -71 [ 126.784025][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 126.803999][ T644] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 126.844021][ T373] usb usb2-port1: attempt power cycle [ 126.917177][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.925753][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.993869][ T45] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 127.091656][ T2500] tipc: Can't bind to reserved service type 0 [ 127.144365][ T45] usb 4-1: no configurations [ 127.149207][ T45] usb 4-1: can't read configurations, error -22 [ 127.183938][ T373] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 127.205445][ T373] usb 2-1: device descriptor read/8, error -71 [ 127.285004][ T45] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 127.335068][ T373] usb 2-1: device descriptor read/8, error -71 [ 127.434360][ T45] usb 4-1: no configurations [ 127.439106][ T45] usb 4-1: can't read configurations, error -22 [ 127.445770][ T45] usb usb4-port1: attempt power cycle [ 127.573850][ T373] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 127.595002][ T373] usb 2-1: device descriptor read/8, error -71 [ 127.725283][ T373] usb 2-1: device descriptor read/8, error -71 [ 127.783908][ T45] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 127.804698][ T45] usb 4-1: no configurations [ 127.809330][ T45] usb 4-1: can't read configurations, error -22 [ 127.833948][ T373] usb usb2-port1: unable to enumerate USB device [ 127.843759][ T36] audit: type=1400 audit(1770755038.934:520): avc: denied { getopt } for pid=2518 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.944316][ T45] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 127.965126][ T45] usb 4-1: no configurations [ 127.969786][ T45] usb 4-1: can't read configurations, error -22 [ 127.976253][ T45] usb usb4-port1: unable to enumerate USB device [ 128.477388][ T2533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.487277][ T2533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.497049][ T2533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.497599][ T2535] rust_binder: Write failure EINVAL in pid:651 [ 128.498473][ T36] audit: type=1400 audit(1770755039.594:521): avc: denied { read write } for pid=2532 comm="syz.0.690" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.506490][ T2531] kvm: kvm [2530]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 128.511561][ T36] audit: type=1400 audit(1770755039.594:522): avc: denied { open } for pid=2532 comm="syz.0.690" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.686571][ T36] audit: type=1400 audit(1770755039.784:523): avc: denied { getopt } for pid=2539 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.826567][ T36] audit: type=1400 audit(1770755039.924:524): avc: denied { mounton } for pid=2555 comm="syz.1.696" path="/20/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 128.827826][ T2556] 9pnet_fd: p9_fd_create_unix (2556): problem connecting socket: ./file0: -30 [ 129.077706][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.086301][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.094325][ T644] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 129.099866][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.110531][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.119389][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.128066][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.233949][ T644] usb 2-1: device descriptor read/64, error -71 [ 129.473874][ T644] usb 2-1: device descriptor read/64, error -71 [ 129.674135][ T36] audit: type=1400 audit(1770755040.774:525): avc: denied { setopt } for pid=2563 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.694450][ T2564] netlink: 72 bytes leftover after parsing attributes in process `syz.0.699'. [ 129.713854][ T644] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 129.843943][ T644] usb 2-1: device descriptor read/64, error -71 [ 130.083844][ T644] usb 2-1: device descriptor read/64, error -71 [ 130.193996][ T644] usb usb2-port1: attempt power cycle [ 130.353879][ T10] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 130.483922][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 130.505056][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.515256][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.526015][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 130.535360][ T644] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 130.542988][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.551125][ T10] usb 4-1: SerialNumber: syz [ 130.558188][ T10] usb 4-1: 0:2 : does not exist [ 130.565109][ T644] usb 2-1: device descriptor read/8, error -71 [ 130.695096][ T644] usb 2-1: device descriptor read/8, error -71 [ 130.737805][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.746435][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.783971][ T10] usb 4-1: USB disconnect, device number 59 [ 130.933877][ T644] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 130.955215][ T644] usb 2-1: device descriptor read/8, error -71 [ 131.095269][ T644] usb 2-1: device descriptor read/8, error -71 [ 131.155487][ T2590] input: syz0 as /devices/virtual/input/input30 [ 131.173855][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 131.204024][ T644] usb usb2-port1: unable to enumerate USB device [ 131.300479][ T2602] overlayfs: missing 'lowerdir' [ 131.307849][ T2603] input: syz0 as /devices/virtual/input/input31 [ 131.333810][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 131.367497][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.393813][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.412496][ T10] usb 4-1: Product: syz [ 131.417562][ T10] usb 4-1: Manufacturer: syz [ 131.422209][ T10] usb 4-1: SerialNumber: syz [ 131.433097][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 131.439937][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 131.661593][ T36] audit: type=1400 audit(1770755042.754:526): avc: denied { attach_queue } for pid=2587 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.703119][ T2620] usb usb8: usbfs: process 2620 (syz.4.718) did not claim interface 63 before use [ 131.714278][ T2620] binder: Unknown parameter 'fscontext?}b/00#/00#' [ 131.793838][ T2623] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 131.801623][ T2623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 131.810582][ T2623] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.899016][ T2632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.908320][ T2632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.918204][ T2630] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 131.931485][ T36] audit: type=1400 audit(1770755043.024:527): avc: denied { mounton } for pid=2629 comm="syz.1.722" path="/22/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.045807][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 132.052718][ T10] r8152-cfgselector 4-1: bad CDC descriptors [ 132.060198][ T10] r8152-cfgselector 4-1: USB disconnect, device number 60 [ 132.413855][ T644] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 132.564178][ T644] usb 2-1: Using ep0 maxpacket: 8 [ 132.604498][ T644] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 132.615554][ T644] usb 2-1: config 0 has no interface number 0 [ 132.624562][ T644] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 132.633672][ T644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.654480][ T644] usb 2-1: Product: syz [ 132.658906][ T644] usb 2-1: Manufacturer: syz [ 132.663592][ T644] usb 2-1: SerialNumber: syz [ 132.674517][ T644] usb 2-1: config 0 descriptor?? [ 132.817177][ T36] audit: type=1400 audit(1770755043.914:528): avc: denied { bind } for pid=2662 comm="syz.0.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.825258][ T2663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 132.848032][ T2663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.856702][ T2663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.903837][ T64] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 133.053811][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 133.060076][ T64] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 133.068329][ T64] usb 4-1: config 0 has no interface number 0 [ 133.074498][ T64] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 133.085766][ T64] usb 4-1: config 0 interface 96 has no altsetting 0 [ 133.094072][ T64] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 133.103210][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.111332][ T64] usb 4-1: Product: syz [ 133.115581][ T64] usb 4-1: Manufacturer: syz [ 133.120231][ T64] usb 4-1: SerialNumber: syz [ 133.125840][ T64] usb 4-1: config 0 descriptor?? [ 133.382972][ T2665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 133.405657][ T36] audit: type=1400 audit(1770755044.504:529): avc: denied { execmem } for pid=2664 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 133.627223][ T2668] bridge_slave_1: entered allmulticast mode [ 133.844054][ T64] usb 4-1: USB disconnect, device number 61 [ 133.877696][ T2683] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 133.900866][ T36] audit: type=1400 audit(1770755044.994:530): avc: denied { remount } for pid=2684 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 133.927519][ T36] audit: type=1400 audit(1770755045.024:531): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 134.369983][ T2689] netlink: 228 bytes leftover after parsing attributes in process `syz.0.740'. [ 134.534718][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 134.764980][ T2709] rust_binder: 523: no such ref 1 [ 135.036222][ T644] usb 2-1: USB disconnect, device number 70 [ 135.049462][ T36] audit: type=1400 audit(1770755046.144:532): avc: denied { audit_write } for pid=2714 comm="syz.1.750" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 135.390964][ T36] audit: type=1400 audit(1770755046.484:533): avc: denied { create } for pid=2727 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 135.415256][ T2730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.423770][ T2730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.463872][ T644] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 135.508546][ T2730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.517157][ T2730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.613869][ T644] usb 2-1: Using ep0 maxpacket: 32 [ 135.620441][ T644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.632101][ T644] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.641214][ T644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.649319][ T64] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 135.657732][ T644] usb 2-1: config 0 descriptor?? [ 135.668378][ T644] hub 2-1:0.0: USB hub found [ 135.816271][ T64] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.825437][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.833492][ T64] usb 4-1: Product: syz [ 135.837757][ T64] usb 4-1: Manufacturer: syz [ 135.842399][ T64] usb 4-1: SerialNumber: syz [ 136.075182][ T2738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.084144][ T2738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.608511][ T36] audit: type=1326 audit(1770755047.704:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2741 comm="syz.0.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f855c99bf79 code=0x0 [ 136.640703][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.649396][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.176145][ T2750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.184754][ T2750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.946214][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.954877][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.963455][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.972079][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.402990][ T64] usb 4-1: USB disconnect, device number 62 [ 138.546956][ T2761] netlink: 5 bytes leftover after parsing attributes in process `syz.3.763'. [ 138.555997][ T2761] 0{X: renamed from gretap0 (while UP) [ 138.562787][ T2761] 0{X: entered allmulticast mode [ 138.568808][ T2761] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 138.664659][ T644] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 138.682803][ T644] usbhid 2-1:0.0: can't add hid device: -71 [ 138.692343][ T644] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.724784][ T644] usb 2-1: USB disconnect, device number 71 [ 138.765268][ T2773] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 139.114416][ T644] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 139.123879][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 139.263836][ T644] usb 2-1: device descriptor read/64, error -71 [ 139.323817][ T64] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 139.484840][ T64] usb 4-1: config 4 has an invalid interface number: 64 but max is 0 [ 139.501774][ T64] usb 4-1: config 4 has no interface number 0 [ 139.513817][ T644] usb 2-1: device descriptor read/64, error -71 [ 139.520660][ T64] usb 4-1: config 4 interface 64 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 139.543436][ T64] usb 4-1: config 4 interface 64 has no altsetting 0 [ 139.558319][ T64] usb 4-1: Dual-Role OTG device on HNP port [ 139.569721][ T64] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=ec.cc [ 139.584422][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.598926][ T64] usb 4-1: Product: syz [ 139.611187][ T64] usb 4-1: Manufacturer: syz [ 139.618176][ T64] usb 4-1: SerialNumber: syz [ 139.773836][ T644] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 139.913846][ T644] usb 2-1: device descriptor read/64, error -71 [ 140.153838][ T644] usb 2-1: device descriptor read/64, error -71 [ 140.264900][ T644] usb usb2-port1: attempt power cycle [ 140.643825][ T644] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 140.685179][ T644] usb 2-1: device descriptor read/8, error -71 [ 140.814925][ T644] usb 2-1: device descriptor read/8, error -71 [ 141.073830][ T644] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 141.118004][ T644] usb 2-1: device descriptor read/8, error -71 [ 141.254912][ T644] usb 2-1: device descriptor read/8, error -71 [ 141.388542][ T2787] sock: sock_timestamping_bind_phc: sock not bind to device [ 141.429036][ T644] usb usb2-port1: unable to enumerate USB device [ 142.018649][ T64] usb 4-1: USB disconnect, device number 63 [ 142.103592][ T2809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 142.207685][ T36] audit: type=1400 audit(1770755053.304:535): avc: denied { lock } for pid=2816 comm="syz.3.782" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 142.243874][ T644] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 142.393824][ T644] usb 2-1: Using ep0 maxpacket: 32 [ 142.400204][ T644] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.408448][ T644] usb 2-1: config 0 has no interface number 0 [ 142.414595][ T644] usb 2-1: config 0 interface 184 has no altsetting 0 [ 142.423248][ T644] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.432473][ T644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.440554][ T644] usb 2-1: Product: syz [ 142.444775][ T644] usb 2-1: Manufacturer: syz [ 142.449389][ T644] usb 2-1: SerialNumber: syz [ 142.455121][ T644] usb 2-1: config 0 descriptor?? [ 142.460879][ T644] smsc75xx v1.0.0 [ 142.687628][ T36] audit: type=1400 audit(1770755053.784:536): avc: denied { bind } for pid=2834 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.843183][ T36] audit: type=1326 audit(1770755053.934:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2843 comm="syz.0.790" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f855c99bf79 code=0x0 [ 142.894692][ T36] audit: type=1400 audit(1770755053.994:538): avc: denied { watch_reads } for pid=2843 comm="syz.0.790" path="/257/control" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.993303][ T36] audit: type=1400 audit(1770755054.084:539): avc: denied { shutdown } for pid=2847 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.025943][ T2850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 143.034941][ T2850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 143.067105][ T644] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 143.078117][ T644] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.279507][ T2805] tipc: Started in network mode [ 143.284726][ T2805] tipc: Node identity 7f000001, cluster identity 4711 [ 143.291949][ T2805] tipc: Enabling of bearer rejected, failed to enable media [ 143.302614][ T2805] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 143.311856][ T2805] tipc: Enabled bearer , priority 10 [ 143.318743][ T644] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 143.329735][ T644] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 143.339462][ T644] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 143.350048][ T644] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 143.359566][ T644] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 143.536540][ T2856] vlan0: entered allmulticast mode [ 143.541780][ T2856] veth0_vlan: entered allmulticast mode [ 143.547816][ T2855] vlan0: left allmulticast mode [ 143.552715][ T2855] veth0_vlan: left allmulticast mode [ 143.681536][ T2862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.692230][ T2862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.081787][ T2871] netlink: 252 bytes leftover after parsing attributes in process `syz.3.799'. [ 144.103586][ T2873] IPv6: A: Disabled Multicast RS [ 144.248969][ T2884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.257813][ T2884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.266392][ T2885] tmpfs: Bad value for 'nr_inodes' [ 144.353842][ T63] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 144.423854][ T644] tipc: Node number set to 2130706433 [ 144.505016][ T63] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 65, using maximum allowed: 30 [ 144.515837][ T63] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 144.528810][ T63] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.535485][ T63] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 144.544606][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.553367][ T63] usb 4-1: config 0 descriptor?? [ 144.819969][ T2892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 144.857858][ T36] audit: type=1400 audit(1770755055.954:540): avc: denied { shutdown } for pid=2893 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.981369][ T36] audit: type=1400 audit(1770755056.074:541): avc: denied { setattr } for pid=2898 comm="syz.0.809" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.984705][ T2899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.013155][ T2899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.023870][ T342] usb 2-1: USB disconnect, device number 76 [ 145.156179][ T36] audit: type=1400 audit(1770755056.254:542): avc: denied { ioctl } for pid=2905 comm="syz.1.811" path="socket:[24892]" dev="sockfs" ino=24892 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.186659][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 145.192852][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.203873][ T36] audit: type=1400 audit(1770755056.284:543): avc: denied { getopt } for pid=2905 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.225674][ T63] usb 4-1: USB disconnect, device number 64 [ 145.553701][ T36] audit: type=1400 audit(1770755056.644:544): avc: denied { append } for pid=2923 comm="syz.0.817" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.613731][ T2929] syzkaller1: entered promiscuous mode [ 145.619364][ T2929] syzkaller1: entered allmulticast mode [ 145.654021][ T2927] rust_binder: 183: no such ref 3 [ 145.825344][ T2945] overlayfs: disabling nfs_export due to verity=require [ 146.173852][ T63] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 146.325023][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.336058][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.345869][ T63] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 146.354993][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.366766][ T63] usb 2-1: config 0 descriptor?? [ 146.776775][ T63] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 146.923910][ T45] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 146.970740][ T2980] fuse: Bad value for 'fd' [ 146.980651][ T2980] fuse: Unknown parameter '' [ 146.994009][ T2957] kvm: kvm [2956]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400005 [ 147.012877][ T2957] can0: slcan on ttyS3. [ 147.017693][ T2983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.029328][ T2983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.074213][ T2957] can0 (unregistered): slcan off ttyS3. [ 147.081633][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.096400][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 147.106010][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 147.114141][ T45] usb 4-1: Product: syz [ 147.118306][ T45] usb 4-1: Manufacturer: syz [ 147.122933][ T45] usb 4-1: SerialNumber: syz [ 147.331371][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 147.533642][ T45] usb 4-1: USB disconnect, device number 65 [ 147.541015][ T45] usblp0: removed [ 147.645821][ T644] usb 2-1: USB disconnect, device number 77 [ 147.760720][ T2993] netlink: 152 bytes leftover after parsing attributes in process `syz.0.838'. [ 147.850121][ T3004] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 147.871700][ T3004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.882085][ T3004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.203860][ T45] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 148.283893][ T63] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 148.355329][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.366343][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.376146][ T45] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 148.385225][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.394018][ T45] usb 2-1: config 0 descriptor?? [ 148.413907][ T63] usb 4-1: device descriptor read/64, error -71 [ 148.451046][ T3013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.459743][ T3013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.653858][ T63] usb 4-1: device descriptor read/64, error -71 [ 148.893862][ T63] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 148.908960][ T45] hid-steam 0003:28DE:1142.001D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 148.973857][ T45] hid-steam 0003:28DE:1142.001D: Steam wireless receiver connected [ 148.984599][ T3017] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 148.988595][ T36] kauditd_printk_skb: 113 callbacks suppressed [ 148.988638][ T36] audit: type=1400 audit(1770755060.084:658): avc: denied { mounton } for pid=3015 comm="syz.4.848" path="/bus" dev="ramfs" ino=26447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 149.020045][ T3019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.021841][ T45] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 149.030850][ T3019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.044012][ T63] usb 4-1: device descriptor read/64, error -71 [ 149.060614][ T36] audit: type=1400 audit(1770755060.104:659): avc: denied { read write } for pid=3018 comm="syz.0.849" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.084641][ T36] audit: type=1400 audit(1770755060.104:660): avc: denied { open } for pid=3018 comm="syz.0.849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.112219][ T342] usb 2-1: USB disconnect, device number 78 [ 149.120583][ T342] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected [ 149.128892][ T36] audit: type=1400 audit(1770755060.104:661): avc: denied { ioctl } for pid=3018 comm="syz.0.849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.148942][ T3023] fido_id[3023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 149.245411][ T3031] 9pnet_fd: Insufficient options for proto=fd [ 149.252323][ T3031] overlay: ./file0 is not a directory [ 149.293842][ T63] usb 4-1: device descriptor read/64, error -71 [ 149.404021][ T63] usb usb4-port1: attempt power cycle [ 149.743828][ T63] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 149.775706][ T63] usb 4-1: device descriptor read/8, error -71 [ 149.906065][ T63] usb 4-1: device descriptor read/8, error -71 [ 149.993844][ T45] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 150.035255][ T3042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.045633][ T3042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.066048][ T3047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.074791][ T3047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.144006][ T63] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 150.152941][ T45] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.164053][ T45] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.177391][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.184121][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 150.193288][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.201523][ T63] usb 4-1: device descriptor read/8, error -71 [ 150.208755][ T45] usb 2-1: config 0 descriptor?? [ 150.335052][ T63] usb 4-1: device descriptor read/8, error -71 [ 150.444059][ T63] usb usb4-port1: unable to enumerate USB device [ 150.601640][ T3051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.610330][ T3051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.622266][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 150.628968][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 150.637957][ T45] usb 2-1: USB disconnect, device number 79 [ 151.145002][ T36] audit: type=1400 audit(1770755062.244:662): avc: denied { mount } for pid=3066 comm="syz.0.864" name="/" dev="ramfs" ino=27744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.194389][ T3078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.866'. [ 151.260743][ T3082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.269399][ T3082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.278920][ T3079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.287544][ T3079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.453869][ T45] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 151.603860][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 151.610141][ T45] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 151.621442][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.631788][ T45] usb 2-1: config 0 has no interface number 0 [ 151.638038][ T45] usb 2-1: config 0 interface 194 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.652790][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=b7.96 [ 151.662107][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.670218][ T45] usb 2-1: Product: syz [ 151.674546][ T45] usb 2-1: Manufacturer: syz [ 151.679159][ T45] usb 2-1: SerialNumber: syz [ 151.684897][ T45] usb 2-1: config 0 descriptor?? [ 151.693993][ T45] snd-usb-audio 2-1:0.194: probe with driver snd-usb-audio failed with error -2 [ 151.709470][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.815541][ T3097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.824158][ T3097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.892091][ T644] usb 2-1: USB disconnect, device number 80 [ 152.643535][ T3109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3109 comm=syz.3.879 [ 152.656471][ T3109] netlink: 192 bytes leftover after parsing attributes in process `syz.3.879'. [ 152.671264][ T3109] cgroup: Setting release_agent not allowed [ 152.683824][ T644] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 152.823866][ T644] usb 2-1: device descriptor read/64, error -71 [ 152.975567][ T378] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 152.986692][ T3124] kvm: kvm [3123]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 152.996249][ T3124] kvm: kvm [3123]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 153.073895][ T644] usb 2-1: device descriptor read/64, error -71 [ 153.145162][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.156179][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.166637][ T378] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 153.175802][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.185673][ T378] usb 4-1: config 0 descriptor?? [ 153.313851][ T644] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 153.443846][ T644] usb 2-1: device descriptor read/64, error -71 [ 153.594042][ T378] usbhid 4-1:0.0: can't add hid device: -71 [ 153.600311][ T378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 153.609823][ T378] usb 4-1: USB disconnect, device number 70 [ 153.623433][ T3130] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 153.633159][ T3130] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 153.642233][ T3131] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 153.650715][ T36] audit: type=1400 audit(1770755064.754:663): avc: denied { create } for pid=3129 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.665438][ T3130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.678567][ T3131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.680671][ T3130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.687595][ T3131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.702929][ T644] usb 2-1: device descriptor read/64, error -71 [ 153.813941][ T644] usb usb2-port1: attempt power cycle [ 153.846989][ T36] audit: type=1326 audit(1770755064.944:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.4.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d3479bf79 code=0x0 [ 154.153867][ T644] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 154.174998][ T644] usb 2-1: device descriptor read/8, error -71 [ 154.304874][ T644] usb 2-1: device descriptor read/8, error -71 [ 154.312426][ T36] audit: type=1400 audit(1770755065.404:665): avc: denied { create } for pid=3149 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 154.339287][ T3153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.348121][ T378] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 154.356014][ T3153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.478582][ T3163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.490073][ T3163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.515349][ T378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.524060][ T378] usb 4-1: not running at top speed; connect to a high speed hub [ 154.532694][ T378] usb 4-1: config 4 has an invalid interface number: 56 but max is 0 [ 154.541172][ T378] usb 4-1: config 4 has no interface number 0 [ 154.547414][ T644] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 154.555389][ T378] usb 4-1: config 4 interface 56 has no altsetting 0 [ 154.564119][ T378] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=61.74 [ 154.573234][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.581661][ T378] usb 4-1: Product: ᣐ芛萯捚嫺ᴂꭥ㑌﷜⅟挵뾶령뇘㍔糉초࠙ᵸ醄鬞ঌ莕䏄祫麬鑥ꀁ먨脲㫲横䋿뒔蔅ﻁ䵂躄줛귍㣨⮚虻⁄圶ﺛƱⱿ빒㕋ⅶ싽诳뜾魡䏳│䓥惔墉뒋栵ޏ㝤ꦅ榥쵰⥏봄ୈᘭ湷 [ 154.606409][ T378] usb 4-1: Manufacturer: 섔婊脕⭞ﻏ잏尙脿ꍈ溲肳ག俀闰䌛⦲꘶尶匀暄竿鋫慘㘍樫켨嬟ὗ퍤饩㘳㹛깕搪鄆莢觿ꆏﮋ绪燜셅蕱爛ꭸ菱㤱ꔤ粦ᗟ원얌ꘑ䒔뮕㿞읿㉃泄ᲄ鿨뎜ꄆ翅謲첽햹뼖궸멟㸳핬뢑녏畄染裬䋽噕됪窙鿪➟⢕䈪ꅟ㞣粿⎏ᙽ誁 [ 154.638168][ T378] usb 4-1: SerialNumber: କ癁髍컊奱㫢ࡅꙸ綄D싑䙆凅똶瑧悞ည礌嵤輊鉽뽞䀵둃䚕⨏鱷梔Ⱕᣧ帨림◮䯠灷䔺౹곙둒䰓࿍疓䓪隨ꌻ᫒习∏ُ祉ᶐꌇᬛ굠䄚㓜虡䪈燤릞䃻脂鞍Ꝣ托놐Ǥ煆鶴ฉ叚꾨阰契얚茶䢖풠⍾譅謜徙佲ޫ및孖죿끯﫻ꝧ妪 [ 154.670209][ T644] usb 2-1: device descriptor read/8, error -71 [ 154.789746][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.798970][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.807164][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.808394][ T644] usb 2-1: device descriptor read/8, error -71 [ 154.815307][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.829609][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.837596][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.845761][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.854455][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.862494][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.870652][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.878856][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.891270][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.893960][ T378] snd-usb-audio 4-1:4.56: probe with driver snd-usb-audio failed with error -71 [ 154.899977][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.916387][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.925410][ T378] usb 4-1: USB disconnect, device number 71 [ 154.932037][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.934345][ T644] usb usb2-port1: unable to enumerate USB device [ 154.949976][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.958275][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.966319][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.974441][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.982313][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 154.992669][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.000727][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.008804][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.016960][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.025034][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.032935][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.041125][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.049182][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.057273][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.065395][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.073441][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.081523][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.089607][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.097643][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.105735][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.113638][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.121798][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.132291][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.141812][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.150543][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.158579][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.166703][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.174738][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.182757][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.190797][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.199218][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.207261][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.215410][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.223274][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.231497][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.239569][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.247752][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.255754][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.263902][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.271767][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.279951][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.288067][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.296226][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.304284][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.312293][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.320449][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.328592][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.336627][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.344738][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.352642][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.360818][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.368991][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.377127][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.385308][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.393310][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.401442][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.413869][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.421687][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.447932][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.456074][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.464166][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.494258][ T3172] support for cryptoloop has been removed. Use dm-crypt instead. [ 155.505175][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.512999][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.521140][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.529579][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.537762][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.567262][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.578084][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.590465][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.598461][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.606527][ T63] hid-generic 0000:FFFFFFFE:0007.001F: unknown main item tag 0x0 [ 155.615321][ T63] hid-generic 0000:FFFFFFFE:0007.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.657741][ T3176] fido_id[3176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.763920][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 155.883807][ T378] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 155.983836][ T644] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 156.053844][ T378] usb 4-1: Using ep0 maxpacket: 32 [ 156.060928][ T378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.074471][ T378] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 156.093825][ T378] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.113824][ T378] usb 4-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.127107][ T378] usb 4-1: config 1 interface 0 has no altsetting 0 [ 156.145077][ T378] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.154541][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.162656][ T378] usb 4-1: Product: syz [ 156.166973][ T644] usb 2-1: Using ep0 maxpacket: 16 [ 156.172239][ T378] usb 4-1: Manufacturer: syz [ 156.177791][ T378] usb 4-1: SerialNumber: syz [ 156.183260][ T644] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.193378][ T644] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.206375][ T3170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 156.206584][ T644] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.216853][ T3170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 156.233835][ T644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.241939][ T644] usb 2-1: Product: syz [ 156.263832][ T644] usb 2-1: Manufacturer: syz [ 156.268538][ T644] usb 2-1: SerialNumber: syz [ 156.433187][ T378] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 156.443493][ T378] usb 4-1: USB disconnect, device number 72 [ 156.476909][ T644] usb 2-1: failed to enable PITCH for EP 0x82 [ 156.494194][ T644] usb 2-1: 2:1: cannot set freq 3624486 to ep 0x82 [ 156.507118][ T644] usb 2-1: USB disconnect, device number 85 [ 157.118453][ T3190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3190 comm=syz.1.906 [ 157.473854][ T63] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 157.510630][ T3215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.519304][ T3215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.533985][ T378] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 157.623823][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 157.630204][ T63] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 157.638637][ T63] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 157.646908][ T63] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 157.656124][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 157.667056][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.678097][ T63] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 157.687516][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.695579][ T63] usb 2-1: Product: syz [ 157.699879][ T63] usb 2-1: Manufacturer: syz [ 157.703336][ T378] usb 4-1: config 192 has an invalid interface number: 162 but max is 0 [ 157.704626][ T63] usb 2-1: SerialNumber: syz [ 157.713421][ T378] usb 4-1: config 192 has no interface number 0 [ 157.724212][ T63] usb 2-1: config 0 descriptor?? [ 157.724415][ T378] usb 4-1: config 192 interface 162 has no altsetting 0 [ 157.737411][ T63] hub 2-1:0.0: bad descriptor, ignoring hub [ 157.738700][ T378] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 157.743355][ T63] hub 2-1:0.0: probe with driver hub failed with error -5 [ 157.752968][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.763054][ T63] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 157.771294][ T378] usb 4-1: Product: syz [ 157.781614][ T378] usb 4-1: Manufacturer: syz [ 157.786498][ T378] usb 4-1: SerialNumber: syz [ 157.939890][ T63] usb 2-1: USB disconnect, device number 86 [ 157.998709][ T378] usb-storage 4-1:192.162: USB Mass Storage device detected [ 158.007057][ T378] usb-storage 4-1:192.162: device ignored [ 158.084075][ T378] usb 4-1: USB disconnect, device number 73 [ 158.107062][ T3230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.115697][ T3230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.463059][ T36] audit: type=1400 audit(1770755069.554:666): avc: denied { accept } for pid=3231 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.504992][ T3234] af_packet: tpacket_rcv: packet too big, clamped from 65442 to 3966. macoff=82 [ 158.643617][ T3250] fuse: Bad value for 'user_id' [ 158.648692][ T3250] fuse: Bad value for 'user_id' [ 158.654898][ T3250] overlayfs: failed to resolve 'uuid=on': -2 [ 158.699435][ T3257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.708180][ T3257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.719821][ T3257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.729438][ T3257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.843840][ T378] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 158.993847][ T378] usb 2-1: device descriptor read/64, error -71 [ 159.083835][ T63] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 159.233879][ T378] usb 2-1: device descriptor read/64, error -71 [ 159.235907][ T63] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 159.248402][ T63] usb 4-1: config 1 has no interface number 0 [ 159.254698][ T63] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 159.264714][ T63] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 159.276316][ T63] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 159.285475][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.293495][ T63] usb 4-1: Product: syz [ 159.297714][ T63] usb 4-1: Manufacturer: syz [ 159.302337][ T63] usb 4-1: SerialNumber: syz [ 159.308501][ T3264] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 159.315787][ T3264] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 159.473864][ T378] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 159.603860][ T378] usb 2-1: device descriptor read/64, error -71 [ 159.843904][ T378] usb 2-1: device descriptor read/64, error -71 [ 159.954224][ T378] usb usb2-port1: attempt power cycle [ 160.293832][ T378] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 160.315040][ T378] usb 2-1: device descriptor read/8, error -71 [ 160.445118][ T378] usb 2-1: device descriptor read/8, error -71 [ 160.683826][ T378] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 160.705392][ T378] usb 2-1: device descriptor read/8, error -71 [ 160.835070][ T378] usb 2-1: device descriptor read/8, error -71 [ 160.943982][ T378] usb usb2-port1: unable to enumerate USB device [ 161.737465][ T36] audit: type=1400 audit(1770755072.834:667): avc: denied { setopt } for pid=3269 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.784393][ T36] audit: type=1400 audit(1770755072.864:668): avc: denied { ioctl } for pid=3269 comm="syz.0.932" path="socket:[28577]" dev="sockfs" ino=28577 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.827461][ T3275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.836515][ T3275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.852558][ T373] usb 4-1: USB disconnect, device number 74 [ 161.861773][ T3275] netlink: 'syz.0.934': attribute type 46 has an invalid length. [ 161.881562][ T3279] netlink: 'syz.4.935': attribute type 4 has an invalid length. [ 161.892893][ T3279] netlink: 'syz.4.935': attribute type 4 has an invalid length. [ 162.165968][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 162.176826][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 162.186547][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 162.195407][ T373] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 162.355119][ T373] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 162.364304][ T373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.373018][ T373] usb 4-1: config 0 descriptor?? [ 162.392800][ T3291] tipc: Started in network mode [ 162.397752][ T3291] tipc: Node identity 2e0040002eff, cluster identity 4711 [ 162.404993][ T3291] tipc: Enabling of bearer rejected, failed to enable media [ 162.414370][ T36] audit: type=1400 audit(1770755073.514:669): avc: denied { setattr } for pid=3290 comm="syz.0.940" name="NETLINK" dev="sockfs" ino=28621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.425960][ T3291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 162.453866][ T378] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 162.579940][ T3301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.588427][ T378] usb 2-1: device descriptor read/64, error -71 [ 162.592969][ T373] waltop 0003:172F:0032.0020: unknown main item tag 0x0 [ 162.596015][ T3301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.602124][ T373] waltop 0003:172F:0032.0020: unknown main item tag 0x0 [ 162.617034][ T373] waltop 0003:172F:0032.0020: unknown main item tag 0x0 [ 162.624252][ T373] waltop 0003:172F:0032.0020: unknown main item tag 0x0 [ 162.631708][ T373] waltop 0003:172F:0032.0020: unknown main item tag 0x0 [ 162.638883][ T373] waltop 0003:172F:0032.0020: unknown main item tag 0x0 [ 162.650073][ T373] waltop 0003:172F:0032.0020: hidraw0: USB HID v10.00 Device [HID 172f:0032] on usb-dummy_hcd.3-1/input0 [ 162.697168][ T3305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.705925][ T3305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.718902][ T3305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.727547][ T3305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.787248][ T373] usb 4-1: USB disconnect, device number 75 [ 162.843919][ T378] usb 2-1: device descriptor read/64, error -71 [ 163.083837][ T378] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 163.213866][ T378] usb 2-1: device descriptor read/64, error -71 [ 163.453866][ T378] usb 2-1: device descriptor read/64, error -71 [ 163.465121][ T3326] incfs: Options parsing error. -22 [ 163.465121][ T3327] incfs: Options parsing error. -22 [ 163.465184][ T3326] incfs: mount failed -22 [ 163.480158][ T3327] incfs: mount failed -22 [ 163.593953][ T378] usb usb2-port1: attempt power cycle [ 163.800585][ T3349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 163.861930][ C0] BUG: TASK stack guard page was hit at ffffc90001207ff8 (stack is ffffc90001208000..ffffc90001210000) [ 163.861977][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 163.862005][ C0] CPU: 0 UID: 0 PID: 3350 Comm: syz.3.958 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 163.862035][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.862050][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xc/0x140 [ 163.862086][ C0] Code: 89 de 4c 89 f1 e8 44 cb 4c fe 0f 0b 66 90 b8 f4 38 e6 a9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 [ 163.862111][ C0] RSP: 0018:ffffc90001208000 EFLAGS: 00010246 [ 163.862134][ C0] RAX: ffffea000450f008 RBX: ffffea000450f008 RCX: ffffffff8635a840 [ 163.862152][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffea000450f008 [ 163.862168][ C0] RBP: ffffc90001208010 R08: ffff8881f6e72280 R09: 0000000000000002 [ 163.862184][ C0] R10: 0000000000000000 R11: 00000000fffffffc R12: ffff8881f6e722a0 [ 163.862203][ C0] R13: dffffc0000000000 R14: ffff8881f6e72280 R15: ffff8881f6e72320 [ 163.862221][ C0] FS: 00007fb2f38526c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 163.862240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.862255][ C0] CR2: ffffc90001207ff8 CR3: 000000010f266000 CR4: 00000000003526b0 [ 163.862275][ C0] Call Trace: [ 163.862289][ C0] [ 163.862298][ C0] ___rmqueue_pcplist+0x2b7/0x31b0 [ 163.862331][ C0] ? __kasan_check_read+0x15/0x20 [ 163.862358][ C0] ? __zone_watermark_ok+0x134/0x630 [ 163.862381][ C0] ? __cfi___zone_watermark_ok+0x10/0x10 [ 163.862406][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 163.862432][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 163.862462][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 163.862493][ C0] get_page_from_freelist+0x6f5/0x4a20 [ 163.862523][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 163.862545][ C0] ? static_key_count+0x45/0x70 [ 163.862565][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 163.862592][ C0] ? lruvec_init+0x271/0x280 [ 163.862622][ C0] __alloc_pages_noprof+0x35f/0x7e0 [ 163.862644][ C0] ? unwind_next_frame+0x3c1/0x750 [ 163.862668][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 163.862690][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 163.862737][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.862759][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 163.862802][ C0] stack_depot_save_flags+0x672/0x800 [ 163.862827][ C0] stack_depot_save+0x12/0x20 [ 163.862850][ C0] save_stack+0x133/0x240 [ 163.862880][ C0] ? free_contig_range+0x260/0x260 [ 163.862905][ C0] ? __reset_page_owner+0x450/0x450 [ 163.862935][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 163.862967][ C0] ? prep_new_page+0x1c/0x110 [ 163.862985][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 163.863007][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 163.863028][ C0] ? stack_depot_save_flags+0x672/0x800 [ 163.863051][ C0] ? kasan_save_track+0x4f/0x80 [ 163.863078][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 163.863101][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 163.863130][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.863158][ C0] ? krealloc_noprof+0x8d/0x130 [ 163.863186][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.863230][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3bb/0x1f00 [ 163.863265][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 163.863312][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xeeb/0x6640 [ 163.863349][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 163.863386][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 163.863427][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 163.863452][ C0] ? sched_clock_noinstr+0xd/0x30 [ 163.863475][ C0] __set_page_owner+0x8e/0x600 [ 163.863504][ C0] ? __kasan_check_read+0x15/0x20 [ 163.863529][ C0] ? __zone_watermark_ok+0x134/0x630 [ 163.863551][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 163.863581][ C0] ? __cfi___zone_watermark_ok+0x10/0x10 [ 163.863603][ C0] ? kasan_unpoison+0x4a/0x70 [ 163.863628][ C0] post_alloc_hook+0x3b8/0x3f0 [ 163.863667][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 163.863700][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 163.863727][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 163.863760][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 163.863787][ C0] prep_new_page+0x1c/0x110 [ 163.863806][ C0] get_page_from_freelist+0x496e/0x4a20 [ 163.863837][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 163.863859][ C0] ? static_key_count+0x45/0x70 [ 163.863878][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 163.863905][ C0] ? lruvec_init+0x271/0x280 [ 163.863934][ C0] __alloc_pages_noprof+0x35f/0x7e0 [ 163.863956][ C0] ? kernel_text_address+0xa9/0xe0 [ 163.863981][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 163.864004][ C0] ? unwind_get_return_address+0x51/0x90 [ 163.864028][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.864053][ C0] stack_depot_save_flags+0x672/0x800 [ 163.864079][ C0] kasan_save_track+0x4f/0x80 [ 163.864106][ C0] ? kasan_save_track+0x3e/0x80 [ 163.864132][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 163.864154][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 163.864183][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.864211][ C0] ? krealloc_noprof+0x8d/0x130 [ 163.864249][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.864292][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3bb/0x1f00 [ 163.864328][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 163.864369][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xeeb/0x6640 [ 163.864406][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 163.864442][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 163.864483][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 163.864521][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1277/0xa690 [ 163.864552][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 163.864590][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 163.864618][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 163.864645][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 163.864674][ C0] ? do_syscall_64+0x57/0xf0 [ 163.864702][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.864737][ C0] kasan_save_alloc_info+0x40/0x50 [ 163.864760][ C0] __kasan_kmalloc+0x96/0xb0 [ 163.864788][ C0] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.864815][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.864854][ C0] krealloc_noprof+0x8d/0x130 [ 163.864880][ C0] _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.864916][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 163.864941][ C0] ? update_curr+0x6c1/0x9e0 [ 163.864970][ C0] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 163.865007][ C0] ? __kasan_check_write+0x18/0x20 [ 163.865031][ C0] ? mutex_unlock+0x90/0x240 [ 163.865052][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 163.865074][ C0] ? __enqueue_entity+0x58a/0x630 [ 163.865104][ C0] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3bb/0x1f00 [ 163.865144][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 163.865171][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 163.865207][ C0] ? kernel_text_address+0xa9/0xe0 [ 163.865232][ C0] ? __kernel_text_address+0x11/0x40 [ 163.865257][ C0] ? __kasan_check_write+0x18/0x20 [ 163.865287][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 163.865317][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 163.865353][ C0] ? stack_trace_save+0xaa/0x100 [ 163.865372][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 163.865403][ C0] ? stack_depot_save_flags+0x399/0x800 [ 163.865429][ C0] ? kasan_save_track+0x4f/0x80 [ 163.865457][ C0] ? kasan_save_track+0x3e/0x80 [ 163.865484][ C0] ? kasan_save_free_info+0x4a/0x60 [ 163.865506][ C0] ? __kasan_slab_free+0x5f/0x80 [ 163.865534][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 163.865559][ C0] ? audit_log_end+0x1f1/0x240 [ 163.865588][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 163.865613][ C0] ? slow_avc_audit+0x19f/0x220 [ 163.865637][ C0] ? avc_has_perm+0x1ec/0x240 [ 163.865661][ C0] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 163.865690][ C0] ? security_binder_transfer_binder+0x54/0xf0 [ 163.865715][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xd35/0x6640 [ 163.865754][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 163.865789][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 163.865829][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 163.865866][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1277/0xa690 [ 163.865901][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 163.865936][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 163.865965][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 163.865994][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 163.866022][ C0] ? do_syscall_64+0x57/0xf0 [ 163.866051][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.866087][ C0] ? __kasan_slab_free+0x6a/0x80 [ 163.866115][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 163.866141][ C0] ? __wake_up+0x169/0x190 [ 163.866170][ C0] ? audit_log_end+0x1f1/0x240 [ 163.866207][ C0] ? audit_log_end+0x1f1/0x240 [ 163.866236][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.866263][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 163.866295][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.866322][ C0] ? __cfi_common_lsm_audit+0x10/0x10 [ 163.866347][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 163.866377][ C0] ? call_rcu_hurry+0x30/0x30 [ 163.866408][ C0] ? avc_update_node+0x2f1/0x9c0 [ 163.866434][ C0] ? slow_avc_audit+0x19f/0x220 [ 163.866459][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 163.866488][ C0] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 163.866532][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x10/0x10 [ 163.866575][ C0] ? _raw_spin_lock+0x92/0x120 [ 163.866605][ C0] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 163.866633][ C0] ? bpf_lsm_binder_transfer_binder+0xd/0x20 [ 163.866658][ C0] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xeeb/0x6640 [ 163.866696][ C0] ? kasan_unpoison+0x4a/0x70 [ 163.866722][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 163.866758][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 163.866787][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0x10/0x10 [ 163.866834][ C0] ? __kasan_check_write+0x18/0x20 [ 163.866859][ C0] ? _raw_spin_lock+0x92/0x120 [ 163.866886][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.866922][ C0] ? __kasan_check_read+0x15/0x20 [ 163.866945][ C0] ? folio_add_file_rmap_ptes+0x28b/0x3d0 [ 163.866987][ C0] ? insert_page_into_pte_locked+0x292/0x430 [ 163.867022][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 163.867061][ C0] ? __kasan_check_read+0x15/0x20 [ 163.867086][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 163.867119][ C0] ? __asan_memcpy+0x5a/0x80 [ 163.867144][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 163.867176][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 163.867208][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page24copy_from_user_slice_raw+0x333/0x4d0 [ 163.867244][ C0] ? __kasan_check_write+0x18/0x20 [ 163.867269][ C0] ? check_stack_object+0x12b/0x150 [ 163.867301][ C0] ? __check_object_size+0xe0/0x830 [ 163.867327][ C0] ? __cfi___check_object_size+0x10/0x10 [ 163.867355][ C0] ? __kasan_check_write+0x18/0x20 [ 163.867380][ C0] ? _copy_from_user+0x87/0xa0 [ 163.867407][ C0] ? _RNvMs5_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_12BinderObject9read_from+0x67d/0x760 [ 163.867446][ C0] ? __asan_memcpy+0x5a/0x80 [ 163.867470][ C0] ? _RNvMs5_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_12BinderObject9read_from+0x217/0x760 [ 163.867510][ C0] ? __cfi__RNvMs5_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_12BinderObject9read_from+0x10/0x10 [ 163.867551][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x2fcf/0x57b0 [ 163.867589][ C0] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 163.867640][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 163.867749][ C0] ? kernel_text_address+0xa9/0xe0 [ 163.867778][ C0] ? stack_depot_save_flags+0x38/0x800 [ 163.867804][ C0] _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 163.867846][ C0] ? kasan_save_track+0x3e/0x80 [ 163.867875][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0xcb/0x650 [ 163.867935][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 163.867963][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 163.867991][ C0] ? do_syscall_64+0x57/0xf0 [ 163.868019][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.868048][ C0] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 163.868097][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 163.868121][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 163.868150][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.868179][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.868217][ C0] ? krealloc_noprof+0xfa/0x130 [ 163.868244][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xcb/0x200 [ 163.868288][ C0] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 163.868327][ C0] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 163.868369][ C0] ? __kasan_check_write+0x18/0x20 [ 163.868394][ C0] ? _raw_spin_lock+0x92/0x120 [ 163.868424][ C0] ? __asan_memset+0x39/0x50 [ 163.868448][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x26e/0x650 [ 163.868506][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 163.868532][ C0] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 163.868592][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 163.868622][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 163.868657][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 163.868693][ C0] ? __kasan_check_write+0x18/0x20 [ 163.868717][ C0] ? _raw_spin_lock+0x92/0x120 [ 163.868745][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.868774][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 163.868801][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 163.868825][ C0] _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 163.868869][ C0] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 163.868920][ C0] ? __kasan_check_write+0x18/0x20 [ 163.868945][ C0] ? _raw_spin_lock+0x92/0x120 [ 163.868973][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.869003][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1228/0xa690 [ 163.869034][ C0] ? __asan_memcpy+0x5a/0x80 [ 163.869063][ C0] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1277/0xa690 [ 163.869117][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 163.869226][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 163.869253][ C0] ? kernel_text_address+0xa9/0xe0 [ 163.869278][ C0] ? __kernel_text_address+0x11/0x40 [ 163.869311][ C0] ? unwind_get_return_address+0x51/0x90 [ 163.869334][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.869355][ C0] ? arch_stack_walk+0x10a/0x170 [ 163.869391][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 163.869418][ C0] ? kernel_text_address+0xa9/0xe0 [ 163.869442][ C0] ? __kernel_text_address+0x11/0x40 [ 163.869467][ C0] ? unwind_get_return_address+0x51/0x90 [ 163.869490][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.869512][ C0] ? arch_stack_walk+0x10a/0x170 [ 163.869543][ C0] ? stack_depot_save_flags+0x38/0x800 [ 163.869568][ C0] ? kasan_save_track+0x4f/0x80 [ 163.869595][ C0] ? kasan_save_track+0x3e/0x80 [ 163.869622][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 163.869645][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 163.869674][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.869702][ C0] ? krealloc_noprof+0x8d/0x130 [ 163.869735][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.869773][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x7fb/0x1cf0 [ 163.869805][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x460/0x5da0 [ 163.869840][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 163.869867][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 163.869895][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 163.869924][ C0] ? do_syscall_64+0x57/0xf0 [ 163.869954][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.869991][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 163.870014][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 163.870043][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.870071][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.870116][ C0] ? krealloc_noprof+0xfa/0x130 [ 163.870143][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 163.870186][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 163.870229][ C0] ? __kasan_check_write+0x18/0x20 [ 163.870253][ C0] ? _raw_spin_lock+0x92/0x120 [ 163.870290][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.870319][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xe7b/0x1cf0 [ 163.870351][ C0] ? __asan_memcpy+0x5a/0x80 [ 163.870375][ C0] ? _raw_spin_unlock+0x45/0x60 [ 163.870403][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 163.870424][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 163.870459][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 163.870505][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 163.870531][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0xf6/0x490 [ 163.870572][ C0] ? avc_has_perm+0x155/0x240 [ 163.870596][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0x10/0x10 [ 163.870634][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0xf9/0x1f0 [ 163.870686][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 163.870741][ C0] ? __kasan_check_write+0x18/0x20 [ 163.870766][ C0] ? _raw_spin_lock+0x92/0x120 [ 163.870795][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.870825][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x54c/0xa50 [ 163.870856][ C0] ? __asan_memcpy+0x5a/0x80 [ 163.870881][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x794/0xa50 [ 163.870916][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 163.870942][ C0] ? __kernel_text_address+0x11/0x40 [ 163.870967][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 163.871012][ C0] ? __asan_memcpy+0x5a/0x80 [ 163.871038][ C0] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 163.871074][ C0] ? stack_trace_save+0xaa/0x100 [ 163.871095][ C0] ? stack_depot_save_flags+0x38/0x800 [ 163.871120][ C0] ? kasan_save_stack+0x4d/0x60 [ 163.871147][ C0] ? kasan_save_stack+0x3e/0x60 [ 163.871174][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 163.871196][ C0] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 163.871220][ C0] ? __call_rcu_common+0xd7/0x720 [ 163.871252][ C0] ? call_rcu+0x14/0x20 [ 163.871288][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 163.871324][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 163.871353][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 163.871382][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.871412][ C0] ? _raw_spin_unlock+0x45/0x60 [ 163.871441][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 163.871473][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 163.871500][ C0] ? kernel_text_address+0xa9/0xe0 [ 163.871525][ C0] ? __kernel_text_address+0x11/0x40 [ 163.871558][ C0] ? unwind_get_return_address+0x51/0x90 [ 163.871582][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.871602][ C0] ? arch_stack_walk+0x10a/0x170 [ 163.871635][ C0] ? stack_depot_save_flags+0x38/0x800 [ 163.871658][ C0] ? stack_trace_save+0xaa/0x100 [ 163.871678][ C0] ? kasan_save_track+0x4f/0x80 [ 163.871705][ C0] ? kasan_save_track+0x3e/0x80 [ 163.871732][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 163.871754][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 163.871783][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.871812][ C0] ? krealloc_noprof+0x8d/0x130 [ 163.871838][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.871876][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0x268/0x18d0 [ 163.871911][ C0] ? do_dentry_open+0x97b/0x1510 [ 163.871930][ C0] ? vfs_open+0x86/0x240 [ 163.871947][ C0] ? path_openat+0x2bb1/0x34f0 [ 163.871978][ C0] ? do_filp_open+0x1f5/0x440 [ 163.872008][ C0] ? do_sys_openat2+0x134/0x1d0 [ 163.872029][ C0] ? __x64_sys_openat+0x13a/0x170 [ 163.872050][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 163.872079][ C0] ? do_syscall_64+0x57/0xf0 [ 163.872109][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.872145][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 163.872168][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 163.872197][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 163.872225][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 163.872265][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xcb/0x200 [ 163.872310][ C0] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 163.872350][ C0] ? rust_binderfs_create_proc_file+0x131/0x1a0 [ 163.872383][ C0] ? __cfi_rust_binderfs_create_proc_file+0x10/0x10 [ 163.872414][ C0] ? mutex_unlock+0x90/0x240 [ 163.872435][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 163.872458][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 163.872480][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0x10bb/0x18d0 [ 163.872516][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 163.872546][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 163.872571][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 163.872597][ C0] ? update_curr+0xf8/0x9e0 [ 163.872627][ C0] ? xfd_validate_state+0x68/0x140 [ 163.872653][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 163.872675][ C0] ? __kasan_check_write+0x18/0x20 [ 163.872700][ C0] ? __switch_to+0xc4f/0x1300 [ 163.872727][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 163.872753][ C0] ? __cfi___switch_to+0x10/0x10 [ 163.872779][ C0] ? psi_task_switch+0xad/0xa10 [ 163.872802][ C0] ? _raw_spin_unlock+0x45/0x60 [ 163.872831][ C0] ? finish_task_switch+0x139/0x760 [ 163.872854][ C0] ? __switch_to_asm+0x3d/0x70 [ 163.872884][ C0] ? __schedule+0x1357/0x1ea0 [ 163.872905][ C0] ? __sched_text_start+0x10/0x10 [ 163.872925][ C0] ? resched_curr+0x119/0x440 [ 163.872953][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 163.872979][ C0] ? __asan_memcpy+0x5a/0x80 [ 163.873004][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 163.873030][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 163.873050][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 163.873071][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 163.873101][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 163.873136][ C0] ? __cfi_try_to_wake_up+0x10/0x10 [ 163.873159][ C0] ? ioctl_has_perm+0x39a/0x500 [ 163.873180][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 163.873206][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 163.873228][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 163.873250][ C0] ? do_futex+0x37d/0x510 [ 163.873273][ C0] ? __cfi_do_futex+0x10/0x10 [ 163.873305][ C0] ? __fget_files+0x2c5/0x340 [ 163.873334][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 163.873360][ C0] ? security_file_ioctl+0x3e/0x110 [ 163.873380][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 163.873417][ C0] __se_sys_ioctl+0x132/0x1b0 [ 163.873447][ C0] __x64_sys_ioctl+0x7f/0xa0 [ 163.873477][ C0] x64_sys_call+0x1878/0x2ee0 [ 163.873505][ C0] do_syscall_64+0x57/0xf0 [ 163.873534][ C0] ? clear_bhb_loop+0x50/0xa0 [ 163.873564][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.873592][ C0] RIP: 0033:0x7fb2f299bf79 [ 163.873611][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.873632][ C0] RSP: 002b:00007fb2f3852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.873657][ C0] RAX: ffffffffffffffda RBX: 00007fb2f2c16090 RCX: 00007fb2f299bf79 [ 163.873674][ C0] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000008 [ 163.873690][ C0] RBP: 00007fb2f2a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 163.873705][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.873718][ C0] R13: 00007fb2f2c16128 R14: 00007fb2f2c16090 R15: 00007ffcc54e30a8 [ 163.873737][ C0] [ 163.873746][ C0] Modules linked in: [ 163.873769][ C0] ---[ end trace 0000000000000000 ]--- [ 163.873778][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xc/0x140 [ 163.873804][ C0] Code: 89 de 4c 89 f1 e8 44 cb 4c fe 0f 0b 66 90 b8 f4 38 e6 a9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 [ 163.873820][ C0] RSP: 0018:ffffc90001208000 EFLAGS: 00010246 [ 163.873836][ C0] RAX: ffffea000450f008 RBX: ffffea000450f008 RCX: ffffffff8635a840 [ 163.873851][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffea000450f008 [ 163.873864][ C0] RBP: ffffc90001208010 R08: ffff8881f6e72280 R09: 0000000000000002 [ 163.873872][ T36] audit: type=1400 audit(1770755074.954:670): avc: denied { transfer } for pid=3348 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.873878][ C0] R10: 0000000000000000 R11: 00000000fffffffc R12: ffff8881f6e722a0 [ 163.873893][ C0] R13: dffffc0000000000 R14: ffff8881f6e72280 R15: ffff8881f6e72320 [ 163.873910][ C0] FS: 00007fb2f38526c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 163.873974][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.874032][ C0] CR2: ffffc90001207ff8 CR3: 000000010f266000 CR4: 00000000003526b0 [ 163.874096][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 163.885072][ C0] Kernel Offset: disabled