last executing test programs: 1m44.091539634s ago: executing program 2 (id=533): mount$9p_fd(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000240)=ANY=[@ANYBLOB='tran']) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000018"], 0x50}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x20, 0x5f, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @generic="040485721c"]}, 0x20}], 0x1}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) read$hiddev(r3, 0x0, 0xc) landlock_create_ruleset(&(0x7f0000000040)={0x2088, 0x8, 0x4}, 0x18, 0x2) 1m44.074045155s ago: executing program 2 (id=534): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x0, 0x38, 0x3e, {0x3e, 0xb, "541bcdca6811a9f5fd1cfb144c58f44b3f45582d22c7a51294c069b557d8afde35918c9fc6549d2c73a3e837db439eee7406423574a530d8ffff4bbe"}}, &(0x7f0000000100)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "57be4de41837ff8cb12dad0c62d83a389ae8e80edf32926c0c16bf07d2923656e63403576f27f124ec27ea0a78cf9a5283a580480fb3f98d71f88a481d8d52afd58905a1e689116d99abff6be8f103c100fe00e4c2f987cb4241f0b0e0cba1824a7587ae456496b073ba00ea283b2328c7e7173ea949232481d72f"}}, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x0, "0ef82b48"}, @global=@item_4={0x3, 0x1, 0x7, "cf6c3656"}, @global=@item_012={0x1, 0x1, 0x4, 'X'}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1660, 0x2, 0x1, {0x22, 0x4c1}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x0, 0x3, 0xcd, "86ab3a2ab92e9f16226aff9a501f5697163a6760425ffcd9ca6328b8afb76dfddc973967677be06403e377c7c16d8b5f06b72bdf4202512e8026c29a6944deb36d9c8de09ab31b537525e9366baf8710be4ef3bd6905776fddc04d1c40cb13957097e7c02e7aa3b43d04312ae902e18da5b90a2b97ba2611cbdebd5efa42a2df44c2ea735b259c6b3245c4578416017fe6a054ff087eec91977e0d25b722d33166b270b8561dc94abffc44553d59af95bee48421123cb895edd77ee44a4695c9f744c198287693b218eb45c09a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0xf0, "541d57ab69b60c55ae7bcffd3b019ec8b3342951d5dadef8b03e7536ee843895eca81b367b6a6d03f7e48c352d81cf1a9c64019def4c5e3de1bd6f3121c584c584d32169f94c5a31e157e7c99b50676fc363a5d6a91131cadcd5d3b133f5cfec51b30d9828db4166779b50f65c69fd7bdd6733acf05d639aa9dcafff7447c0652f8e98d14eb5d0e3b3271f5d4f1ebbf5dea8df9167339c0b8aa86556e7522b79386d1e7686bd7eb80977561f95ecc959151d4827bb17444f9ba00932ff436d7e5f3f6d24e0b1780c6016c785bf24ced5f359bb79435957d75cdf4027421a5a4ec8fabea2be48b871f61a9c85d6223f86"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xb9}}) 1m43.461227909s ago: executing program 2 (id=545): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x80000001, 0x0, 0x8, 0x8}, &(0x7f0000000040)={0x1d, 0xfffffff7fffffffe, 0x40, 0x7, 0x6, 0xfffffffffffffffe, 0x71e7, 0x9}, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r2 = pidfd_getfd(r0, r1, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1m42.276327373s ago: executing program 2 (id=547): r0 = socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x44}}, 0x40800) 1m42.259678885s ago: executing program 2 (id=548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088a8"], 0xfdef) fsopen(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413"], 0x0) 1m41.014149444s ago: executing program 2 (id=555): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=0']) 1m25.90772098s ago: executing program 32 (id=555): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=0']) 25.471309175s ago: executing program 0 (id=1284): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000000000)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8009, 0x4, 0x6, 0x55d5}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x6, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x6, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0x2, 0x8002, 0xb, 0x3, 0x8001, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x82, 0x3, 0x3, 0x39, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x1, 0x1000, 0xffeffffc, 0x0, 0x4, 0x7, 0x5, 0x2f, 0x7, 0x1000312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x40008000, 0x9, 0x273d, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x6, 0x6, 0xb, 0xa, 0x1, 0x9, 0xc, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0x80000ff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0xf, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfae, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x40003, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1006, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x10014c, 0x60a7, 0x4, 0x7, 0xffffffff, 0x7ffffffe, 0x7, 0x4, 0xc8, 0xee1, 0xfffffffe, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x7, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r4, &(0x7f0000001e80)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)}, 0x9}], 0x3, 0x12040, 0x0) lseek(r2, 0xffffffffffffffff, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e953c03513af3a1e6f78608890f912f087214dac0638", 0xc1}, {&(0x7f0000003040)="3e0cccd8eada1dcbb6550973263da755b8c2aa4a669216ab545ea7ffc1fb2879", 0x20}], 0x2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/162, 0xa2}, {0x0}, {&(0x7f00000006c0)=""/231, 0xfffffffffffffe83}, {&(0x7f0000000240)=""/42, 0x2a}], 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) socket$igmp(0x2, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) socket$nl_route(0x10, 0x3, 0x0) 25.470921085s ago: executing program 0 (id=1285): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "292cda84"}]}}, 0x0}, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) (rerun: 64) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000140)={0x40, 0xe, 0x2, "d817"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f00000005c0)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x7, 0x70, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "4c037cc955cb"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x8, 0x2}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xb9, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x10, 0x21, 0x1}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x1, 0x0, 0xa, 0xff, 0x5}, 0x89, &(0x7f0000000640)={0x5, 0xf, 0x89, 0x5, [@generic={0x3b, 0x10, 0xa, "1c3ffcfde394df00f5f8ef8bb8dd4dbdd54cb55ca49ed759e6198f31c8b0d75c544c76c11abcbd94d4e615af501f9cd4a97c8931ba7e08a2"}, @ssp_cap={0x14, 0x10, 0xa, 0x3f, 0x2, 0x9, 0xf00, 0x1, [0xff3f00, 0x600f]}, @ssp_cap={0x24, 0x10, 0xa, 0xfa, 0x6, 0x6, 0xf00f, 0x101, [0xff00cf, 0xff3f0f, 0x3f00, 0xff00c0, 0x0, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x3f, 0xf, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x2, 0x5a}]}, 0x1, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44b}}]}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000880)={0x20, 0xa, 0x4, "a8e22d83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x40, 0x24, 0x57, {0x57, 0x30, "05145e6876494333bc359d4ace6a11a0a0e5f1a1595663a4755994c452b01fbef3b8983bf1a093c874d8586c5193a3fc8bfc57ba0ada7550ed4a6cbe51addc45944549a4c59b5c92992f804c6baee601cd55d2c814"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc73}}, &(0x7f0000000100)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x3, "97d2e6d2"}, @global=@item_4={0x3, 0x1, 0x3, "3ee13aa2"}, @global=@item_4={0x3, 0x1, 0x7, "5127a20c"}, @global=@item_4={0x3, 0x1, 0x3, "6b75ff1b"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x64c}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x6, 0xde, "a840572cef434e3bc5c8024fa6a143adc11235e898402093895e0e87e1ecdee5aec71452934a9834510a4d21651c13013db890741c4dd9c60703aed477168f5dd9435d21b18b8ce3b88c7fb7fa298acf4b9c3cf581fa3eec7f8aca47516c48d7b02c5e8518bfb7e45058894274666b7c1bd21cea9cae353c2814311e517aaac517631de66e3c279995acb76111dea4bda8c32cb099a7da04ecafb51c53c8dbc0a0a8ff7f3fb176656817fe8e027ef9c4222760d154f4fbd75873ab0f77c228ba5940393b89b31a92e88fdb2a74f081a12fe45f7b361df1c6a55cb7b2bf3f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7b}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6a}, &(0x7f00000003c0)={0x20, 0x1, 0x88, "2f52bb69c92793b782650dc48918ba6404fbb6b40599a378d433cce26217e33d724e802c219deb749dd8b3756c6901012098d535b874a0c429ed5c148c38b6532b267a975a2c53bbca35e11c31bfefb2565ff06ec033fcd1771e48f3e3778620cd92fd7997dc9c88b344d6e26fb67aefc3142ce238bcad36b2e7073000890b4a405fe354dfaf30e6"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xff}}) (rerun: 32) 24.84230257s ago: executing program 0 (id=1293): r0 = socket(0x18, 0x803, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffb, 0x0, 0x8002}) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x2000000d, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca71ea8000000000070cf00b00b0000000000000000000000000000000000000000ba000000002b00", "2809e8dbe108598948224b084afbc11d87313c5240f4debb7990fdcd2baa8dd4192c61ac00000010000000000000000000000000000000000000005a00", "91be4ab3060000000000400000000000000100008000", [0x1, 0x9]}}) prctl$PR_CAPBSET_DROP(0x18, 0x1) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4}}}}}]}}]}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)={0x3, 0x80000, [{0x6000, 0x50, &(0x7f0000000640)=""/80}, {0xfffd5fff, 0x93, &(0x7f00000006c0)=""/147}, {0x8080000, 0x19, &(0x7f0000000780)=""/25}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x40, 0x4, 0x89, {0x89, 0xd, "8677629f0015e88da447765546a41472aaa2d55f36828026e0f67a89a77d374d6467739f7e7b0464f9b72da4c39e58458b27fd2e1bc5c5fc230529dac55cedba620c8f989a82339d6bc3b3bd5eefaf0b9bb2c619ab8f791cff76ed1d15b9aee8ea25593fbffdf18423917e65081c7a9a28920d069c6f7935327d34bc71ae6db79789168f70096a"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x40, 0xb, 0x63, "d6b63c7dba925f4b61a360a8d0f993f503516421e6de4765aac4ccf92badd791801aaca1e363f5e04dc008ee4eb910c8f955ad1d92a466d8f5b2d5b4580bc8f817bf2bf40cb0b99ff42f4d01d29132004e9a22131409c07e4de62a08d2d7f6e5969389"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000480)={0x20, 0x81, 0x3, "94652e"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "951e"}, &(0x7f0000000500)={0x20, 0x83, 0x2, "b5e7"}, &(0x7f0000000540)={0x20, 0x84, 0x2, 'g;'}, &(0x7f0000000580)={0x20, 0x85, 0x3, "82adc3"}}) syz_usb_control_io(r3, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x1a, 0x4, {0x4, 0x21, "ccc0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x10}}) 24.532751517s ago: executing program 4 (id=1295): r0 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!}\x00', 0x0) keyctl$negate(0xd, 0x0, 0x8, r0) (async) keyctl$clear(0x7, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r0, 0x12, 0xd8}, 0x0, &(0x7f0000000100)="639b2fc411e61680427da5164cbc47ad1483", &(0x7f0000000140)=""/216) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) keyctl$get_persistent(0x16, r1, r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000300)={@local, 0xb}) (async) r4 = request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='syz', r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000400)={r0, 0xdd, 0x39}, &(0x7f0000000440)={'enc=', 'oaep', ' hash=', {'michael_mic-generic\x00'}}, &(0x7f00000004c0)="73ad18979996c0af665ed7040c5949142f6e3f975f9339ad220ed464b223fcfc7e8ee583942c0f75c5266a1dcf97d6bc3da91b2cdbdff2632085adda85f5e363175f1313d7bb1467c330a655feff396fbc8d63aaf74c342a1f9c9fcad23cf0078e6118e08e36fed11b2b61f6fc21526549ab72a759281de5282ad4013c5ed6ede1bd2fb3cadf48b6aa76797f30ea39a139b9f8504602536dbb60cced32befef11d0e325411c57ae131eb47bf8bd3b7b1228ecad194ad4dc65430c7550b95367f5c91fb2a741582c8e89ac17b212ce5e76d4de311282da365e71f37ddf8", &(0x7f00000005c0)=""/57) (async) keyctl$setperm(0x5, r4, 0x80000) (async) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000600)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x3000}) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000640)={0x0, 0x7, 0xa000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r6 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x800) shutdown(r6, 0x1) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000007c0)={r3, &(0x7f00000006c0)=']\x00', 0x10b401, &(0x7f0000000700)={@align=0x1000000000, {0x6, 0x10, 0x1000, 0x2}}, 0x80000000, &(0x7f0000000740), &(0x7f0000000780)=0x1c}) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r4) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34) (async) r8 = request_key(&(0x7f0000000880)='syzkaller\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='big_key\x00', 0xfffffffffffffffe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000940)={0x2, 'veth0\x00', {0x6}, 0x3ff}) (async) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000980)=0x4) (async) r9 = add_key(&(0x7f00000009c0)='encrypted\x00', &(0x7f0000000a00)={'syz', 0x0}, &(0x7f0000000a40)="2e2f4a7da8ade4ff9ffd803d6b8e81f4f0f689a7e8cab71c7bfb20643e5a3c56b8fde45f9d1e253919ede2e81d25dc47894c55f35336be7a73bc47ba89157a4d7f", 0x41, r8) (async) process_vm_writev(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/74, 0x4a}, {&(0x7f0000000b40)=""/46, 0x2e}, {&(0x7f0000000b80)=""/229, 0xe5}], 0x3, &(0x7f0000001f40)=[{&(0x7f0000000cc0)=""/156, 0x9c}, {&(0x7f0000000d80)=""/150, 0x96}, {&(0x7f0000000e40)=""/17, 0x11}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/187, 0xbb}], 0x5, 0x0) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000001fc0)={[0x100000001, 0x1, 0x8000000000000000, 0x7, 0xfffffffffffeffff, 0x10001, 0x7fe2, 0x9, 0x6, 0x34a7951c, 0xe6, 0xfffffffffffffffa, 0x5, 0x0, 0x8, 0xba71], 0x30000, 0x41}) (async) keyctl$read(0xb, r4, &(0x7f0000002080)=""/82, 0x52) (async) r10 = add_key$keyring(&(0x7f0000002100), &(0x7f0000002140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, r10, 0x1) (async) keyctl$setperm(0x5, r4, 0x4) 24.463407023s ago: executing program 4 (id=1296): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x40) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0xe}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0xa, 0xa, 0x9], 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "0000d81500"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x6]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x6, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 24.251766431s ago: executing program 0 (id=1299): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r6, r7, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000009900)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="040069800800d800", @ANYRES32=r0, @ANYBLOB="04003600b3ad29753fa4a1048b6ec25aa1ad7692c6187baf713b6f5265aa0578caa46f44b26c35226e264bfd7bcd5203fcde71ae44c95fdd1234f986ef863d0ddc8802471a4a0a927cd6af10f16fbd014358728309ddc74b5f0f1c9bbae9bfe97215b0c3c51c940cc4908adde7fffdc962e39d5bf70f75d4056cc00837ad8b9b91ba6aa16b1f473eae297a8f762fc97b078783bd4b85781be0ce6f3ed504007e80040046800000e023cdeaf163c6"], 0x488}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="ec120000100000012bbd7000ffdbdf250c00ee00060000000000000008007c00", @ANYRES32=r2, @ANYBLOB="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"/4808], 0x12ec}, {&(0x7f0000008680)={0x1270, 0x21, 0x200, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0x156, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x46, 0x80, 0x0, 0x1, [@generic="46e7c560e65c238b73923209c1dfa262d4a83776cb12328b41d16a3e43e2d4407c87ab2b3131d149de253ecc1624ce94b7a099f693aec03e38d1", @typed={0x4, 0x7a}, @nested={0x4, 0x5b}]}, @typed={0xc, 0xd2, 0x0, 0x0, @u64=0x8}, @nested={0x8, 0x77, 0x0, 0x1, [@nested={0x4, 0x6e}]}, @nested={0x105, 0xfa, 0x0, 0x1, [@nested={0x4, 0x103}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x9}, @generic="a6d38f84a1d01bd5fae5d490d8e2067a658d687260b1b8ea8525ac81f14bc00a2ed6eaa8853d4d6fb3951e43c0f6ce0ed18924126d7edf6c4d4b8a50bd3a28da425b79cdb7a8c03e20b0762a2599e3fd2fd72e8d6d2654343d54229c95e6848f6b84c8663fa36399ff1665e3c1db05357299b43c10", @generic="44079f91ac89ec7b1fb802506c58b89ccdbf7659a84880669623dbb2bffcd9534c0d8cf6d39a10804b1e371523fe1803a7814e4aefdd6f1636327f170e4ae3a6b88910c816125174604641856a93d3dbeb804ed0bf2e4114c5bf1c", @generic="56fc0cc48432a1f620dbed826c02c9aa457f5b8d6a3481c8add87571fd685c70efb14b7c72"]}, @nested={0x1004, 0x10d, 0x0, 0x1, [@generic="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"]}, @generic="aa211a8db77f86be4ff8d96e30fbb9122fc2e03278a9e7fb8cd5fa6d3c70aa71552448053d069c5ce81cfac181a50df29e74fc7e121d548012e148656902b83649ea1cda1f4831f344f46516d3e7264bb606e283ba5ab1831e7230995304a1e201d33e330d4e122aa2669dc4be5d4cebd89d30297c073e9e66d5fbcb38ce912f533d81739cd9d4255e4825841f37668799b467beb0e73e2df0aa6643c3f1b9dd1163b66704bfbd362673e5974e1569a5ff931112f7b8483b86c345ff0638e3768efc21d9625a14427fd987663b02dec3103aa27563252481b6"]}, 0x1270}], 0x3}, 0x4004040) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000000c0)=""/160, 0xa0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10, 0x2001) 24.251576691s ago: executing program 0 (id=1300): fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) modify_ldt$read_default(0x2, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r4, 0x20, 0x460e, 0x800000000000002) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r1, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r1, 0x0, 0x0, 0x8080, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd, @fd, @flat=@binder={0x73622a85, 0x1001, 0x1}}, &(0x7f0000000040)={0x1c, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 23.742663726s ago: executing program 3 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000100)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x30, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x4, 0x0, 0x0, @uid=0xee00}, @nested={0x10, 0xcd, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x81}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x40040}, 0x8016) (async) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/uevent_helper', 0x20202, 0x0) sendfile(r6, r6, 0x0, 0xc3) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) futex(&(0x7f0000000440), 0xb, 0x2, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0), 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x64, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x43}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffe, 0x63}}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb0, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3ff, 0x47}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2db}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff259}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x392}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8b3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24040005}, 0x10) (async, rerun: 64) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x2dc, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) 23.338938542s ago: executing program 4 (id=1309): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x30, 0x17, {0x17, 0x7, "79f6c1881fb6a036b120304a99f9522c95d1096208"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x40, 0x12, 0xe7, "dff4c5ab38cd1defe76a74066463eb83b72b489c738a2bdd74767e9b2f5c23cdcd47bae4659e29bd350cfce662ffeb03ac76f004e2298c12f4c3a807a6c62f9fd3b536c02b93426f83daa2cae530f093d660952b380cf1ad324f182e199f283d6fb4cb932a6ff12afb15b0cf172ce6475fe5cba75817522f8fddc1dc9dcf4f34936a95de3ce8a5c2f63c75f8f674a0e0f68a6fbd1f50faaf5d44d49b5129f26d38e2c714504d9879d1c8df82cc1f096f3a5b99ecbcab6de3e82e8b74119973d51350415cc739b9320b9ce0642225d1400d9437e13ad92d76cace8e631f826d01d9397a03a3cb55"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x3, 0xffff, 0x7a, 0xf6e, 0xa, 0x7, 0x0, 0xfff, 0x200, 0x7, 0x1, 0x3ff}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 22.995479032s ago: executing program 1 (id=1311): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}}}}}) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$PTP_PIN_SETFUNC(r2, 0x40043d0d, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r3 = dup(r0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) read$FUSE(r4, 0x0, 0x0) getdents(r4, &(0x7f00000002c0)=""/51, 0x33) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mknodat$null(r3, &(0x7f0000000080)='./file0\x00', 0x410e54315c2597db, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}], [], 0x6b}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002020000082505a1a44000010203010902f0fe02010340000904000001020d00000524060001052400cf000d240f010900000006e109000806241a62bb0109058103000203bc810904010000020d00002604010102020d000009058202000401080b090503020800820605"], &(0x7f0000000480)={0x0, 0x0, 0xc, &(0x7f00000003c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x5, 0x4f}]}}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3f7, 0x2, 0x70bd2c, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x247bd3db41015a6c}, 0x8000) 22.498596465s ago: executing program 1 (id=1312): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e0097305e07af0300000000000000c7"], 0x1c}], 0x1, 0x0, 0x0, 0x8050}, 0x8850) socketpair(0x1e, 0x2, 0x1, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e0097305e07af0300000000000000c7"], 0x1c}], 0x1, 0x0, 0x0, 0x8050}, 0x8850) (async) socketpair(0x1e, 0x2, 0x1, &(0x7f0000000040)) (async) 22.487383636s ago: executing program 1 (id=1313): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000012680)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000180)="eec297052d6d168724796a27846e6a2c7b045f2f6d5adf998416195659c20f9d8d378ac0e9706eca6f1b93e962c66414f87e1e7d889d541311180185bbe036f834f066958b9433dd6bf55af55a6754decebec00209cd65fb8be6c6468932a44f730c6c0adeadab38837e52dbfccb0789a161a89dfccc9cd028d21ebdfd34e19f3f769f32855ff50559493db0f71572552d1c3012333a58ae87500c34ddda52e2dcfe9163dbae9b14a55c322c13a8d5ee7c1f", 0xb2) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 22.423514052s ago: executing program 1 (id=1314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 22.423229502s ago: executing program 1 (id=1315): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x0, 0x38, 0x3e, {0x3e, 0xb, "541bcdca6811a9f5fd1cfb144c58f44b3f45582d22c7a51294c069b557d8afde35918c9fc6549d2c73a3e837db439eee7406423574a530d8ffff4bbe"}}, &(0x7f0000000100)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "57be4de41837ff8cb12dad0c62d83a389ae8e80edf32926c0c16bf07d2923656e63403576f27f124ec27ea0a78cf9a5283a580480fb3f98d71f88a481d8d52afd58905a1e689116d99abff6be8f103c100fe00e4c2f987cb4241f0b0e0cba1824a7587ae456496b073ba00ea283b2328c7e7173ea949232481d72f"}}, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x0, "0ef82b48"}, @global=@item_4={0x3, 0x1, 0x7, "cf6c3656"}, @global=@item_012={0x1, 0x1, 0x4, 'X'}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1660, 0x2, 0x1, {0x22, 0x4c1}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x0, 0x3, 0xcd, "86ab3a2ab92e9f16226aff9a501f5697163a6760425ffcd9ca6328b8afb76dfddc973967677be06403e377c7c16d8b5f06b72bdf4202512e8026c29a6944deb36d9c8de09ab31b537525e9366baf8710be4ef3bd6905776fddc04d1c40cb13957097e7c02e7aa3b43d04312ae902e18da5b90a2b97ba2611cbdebd5efa42a2df44c2ea735b259c6b3245c4578416017fe6a054ff087eec91977e0d25b722d33166b270b8561dc94abffc44553d59af95bee48421123cb895edd77ee44a4695c9f744c198287693b218eb45c09a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0xf0, "541d57ab69b60c55ae7bcffd3b019ec8b3342951d5dadef8b03e7536ee843895eca81b367b6a6d03f7e48c352d81cf1a9c64019def4c5e3de1bd6f3121c584c584d32169f94c5a31e157e7c99b50676fc363a5d6a91131cadcd5d3b133f5cfec51b30d9828db4166779b50f65c69fd7bdd6733acf05d639aa9dcafff7447c0652f8e98d14eb5d0e3b3271f5d4f1ebbf5dea8df9167339c0b8aa86556e7522b79386d1e7686bd7eb80977561f95ecc959151d4827bb17444f9ba00932ff436d7e5f3f6d24e0b1780c6016c785bf24ced5f359bb79435957d75cdf4027421a5a4ec8fabea2be48b871f61a9c85d6223f86"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xb9}}) 21.926185166s ago: executing program 1 (id=1316): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = dup3(r2, r1, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000000)=[@request_death, @register_looper], 0x50, 0x0, &(0x7f0000000180)="db48cd0e4072624902cb7e537e2fd64478f18ada2b4a53082068cb20dfa8006a0a729b137ec1b8504925bb0056f719494a9385485bee634d993af6a49625d22ada74506a749f6c478d5bac82acf19f55"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000280)=[@acquire_done, @acquire, @acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x1}, @clear_death, @dead_binder_done], 0x50, 0x0, &(0x7f00000005c0)="505947389919cee88171d519018a95ccebbabfc66dc862e9536f0270604a00b0d98053c54fdc688efa8e51c3554ec1e3f8504d48a1e7eedef35f84f524932d73d434fee5323d6f3ef0a108b842c9ec9c"}) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa3c2) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 21.672740158s ago: executing program 3 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) rename(0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x400023}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81006e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 21.619351702s ago: executing program 3 (id=1318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000086d0494c20000000000011ac181a009022400010000a000090400020103000e0009211508fe01220700090581030000000000"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8b, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0xfd, 0x10, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8004}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x26, 0x5be4, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xba, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3, 0xf8}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0x7, 0x8a, 0x8}, 0x11d, &(0x7f00000001c0)={0x5, 0xf, 0x11d, 0x6, [@generic={0xbe, 0x10, 0x2, "e2ae9fc2365ac1a5c15a510129a2223de90de97a902d0b13f48454ea74a5190ed10e2144dda1d42527bf1cecbc5c42be07f5d98e8f1fca050c0bb442dd1289f908a998c5e86507134f931d41385d9bff6576646bd107f4569726368bdb2631160589832a9ca7c1f47f846bb735fde8368e2829dcd2704c07a4a89af9c7519d4b94665b4ae65fbfdb3a6f15173b748abba1d6fa068ae47666029beb7ff378958174f5a41bb1b525ef32c621cbb2a2397389148aea76a53730795c8b"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0xf00f, 0x9, [0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x83, "e39b43ed94833e1276ffdcc26df96b1b"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x2c, 0x10, 0x2, "f5c60928f4056353998015a0236a1668895ccdff986428e53a99cc0793a63ae87d32a709939b0af3fd"}]}, 0x6, [{0x5, &(0x7f0000000300)=@string={0x5, 0x3, "38c884"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4e41}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) writev(r2, &(0x7f0000000100), 0x0) fgetxattr(r1, &(0x7f0000003100)=@known='trusted.overlay.origin\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "f7"}, @local=@item_4={0x3, 0x2, 0x5c983cccc807555a, "802f8c29"}]}}, 0x0}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x10, 0x21, 0x70bd29, 0x0, {0x3}}, 0x14}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000540)=0x102) dup(r3) r6 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r6, 0x0, 0x0, 0x400100e3, 0x0, 0x12) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000086d0494c20000000000011ac181a009022400010000a000090400020103000e0009211508fe01220700090581030000000000"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x8b, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0xfd, 0x10, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8004}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x26, 0x5be4, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xba, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3, 0xf8}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0x7, 0x8a, 0x8}, 0x11d, &(0x7f00000001c0)={0x5, 0xf, 0x11d, 0x6, [@generic={0xbe, 0x10, 0x2, "e2ae9fc2365ac1a5c15a510129a2223de90de97a902d0b13f48454ea74a5190ed10e2144dda1d42527bf1cecbc5c42be07f5d98e8f1fca050c0bb442dd1289f908a998c5e86507134f931d41385d9bff6576646bd107f4569726368bdb2631160589832a9ca7c1f47f846bb735fde8368e2829dcd2704c07a4a89af9c7519d4b94665b4ae65fbfdb3a6f15173b748abba1d6fa068ae47666029beb7ff378958174f5a41bb1b525ef32c621cbb2a2397389148aea76a53730795c8b"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0xf00f, 0x9, [0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x83, "e39b43ed94833e1276ffdcc26df96b1b"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x2c, 0x10, 0x2, "f5c60928f4056353998015a0236a1668895ccdff986428e53a99cc0793a63ae87d32a709939b0af3fd"}]}, 0x6, [{0x5, &(0x7f0000000300)=@string={0x5, 0x3, "38c884"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4e41}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) writev(r2, &(0x7f0000000100), 0x0) (async) fgetxattr(r1, &(0x7f0000003100)=@known='trusted.overlay.origin\x00', 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "f7"}, @local=@item_4={0x3, 0x2, 0x5c983cccc807555a, "802f8c29"}]}}, 0x0}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x10, 0x21, 0x70bd29, 0x0, {0x3}}, 0x14}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000540)=0x102) (async) dup(r3) (async) socket$packet(0x11, 0x2, 0x300) (async) recvfrom$packet(r6, 0x0, 0x0, 0x400100e3, 0x0, 0x12) (async) 21.147247114s ago: executing program 0 (id=1319): r0 = socket$unix(0x1, 0x5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = socket(0x1, 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7f) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)={0xe000200c}) 20.316702477s ago: executing program 4 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000320ea508dc0501000100000000010902120001000000000904000062a506"], 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) 18.595941998s ago: executing program 3 (id=1321): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000080)={{r0}, "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"}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000001080), &(0x7f00000010c0)={'U+', 0x4}, 0x16, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000001140)={{r1}, 0x2, &(0x7f0000001100)=[0x40, 0x6], 0x101}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000011c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r4, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c016}, 0x8800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000001380)=0x5) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000013c0)={0x81, 0x0, 0x3}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2010c000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x68, r4, 0x500, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMKID={0x14, 0x55, "0416994f89102e6bb35e0429b881e684"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c8e0148e80281bdf197d0752aed28cf4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="81c5b799d81f"}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) ioctl$FITHAW(r0, 0xc0045878) fsetxattr(r1, &(0x7f0000001580)=@random={'btrfs.', '/\x00'}, &(0x7f00000015c0)='trusted.overlay.nlink\x00', 0x16, 0x2) r5 = syz_open_dev$MSR(&(0x7f0000001600), 0xffff, 0x0) read$msr(r5, &(0x7f0000001640)=""/220, 0xdc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x1) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xb0, r4, 0x200, 0x519, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x9b, 0x5b, "5b1413de8ecbd39c860859c0d580fc7d026048bba3fd6c3379ea343e4abc6562e6294e2855307c316111efd290f6c1fd33477d0b3dfb745fcc1635504cb602aa95d30321a8a24b999a57c4b8ebf4ae24db552d0c1f691d95914ec771145418e7b56e0a3b93ee8f1b62fa145060e8b0f2914cccf16c72fe5e7649316aea542d2d920cc2522286f00ecd78bafe719464ac3df8ab53df25be"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x4044004) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001a00), 0x311000, 0x0) fchmod(r2, 0x0) close(r3) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000001a40)) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000001a80)={0x0, 0x863f, 0x3, 0x54d, 0x7a7f8e59}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000001ac0)={0x6, 'veth0_to_bond\x00', {0x8}, 0x12f4}) 18.595635558s ago: executing program 3 (id=1322): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x45, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "5db20b2a"}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) 17.117436557s ago: executing program 3 (id=1323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000000000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000045b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66bad104edc4c2a191647f00f20f1b9fa9d92b4b66b82a008ee82e650fc75927c4c34579bd5583ffff0a0f79cac744240019000000c744240200000080c7442406000000000f011c240fc7320f01c5", 0x4f}], 0x1, 0x29, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r4, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) getxattr(&(0x7f0000000240)='./file1/file2\x00', &(0x7f00000002c0)=@known='trusted.syz\x00', &(0x7f0000000300)=""/192, 0xc0) 16.795522556s ago: executing program 4 (id=1324): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x0, 0x38, 0x3e, {0x3e, 0xb, "541bcdca6811a9f5fd1cfb144c58f44b3f45582d22c7a51294c069b557d8afde35918c9fc6549d2c73a3e837db439eee7406423574a530d8ffff4bbe"}}, &(0x7f0000000100)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "57be4de41837ff8cb12dad0c62d83a389ae8e80edf32926c0c16bf07d2923656e63403576f27f124ec27ea0a78cf9a5283a580480fb3f98d71f88a481d8d52afd58905a1e689116d99abff6be8f103c100fe00e4c2f987cb4241f0b0e0cba1824a7587ae456496b073ba00ea283b2328c7e7173ea949232481d72f"}}, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x0, "0ef82b48"}, @global=@item_4={0x3, 0x1, 0x7, "cf6c3656"}, @global=@item_012={0x1, 0x1, 0x4, 'X'}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1660, 0x2, 0x1, {0x22, 0x4c1}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x0, 0x3, 0xcd, "86ab3a2ab92e9f16226aff9a501f5697163a6760425ffcd9ca6328b8afb76dfddc973967677be06403e377c7c16d8b5f06b72bdf4202512e8026c29a6944deb36d9c8de09ab31b537525e9366baf8710be4ef3bd6905776fddc04d1c40cb13957097e7c02e7aa3b43d04312ae902e18da5b90a2b97ba2611cbdebd5efa42a2df44c2ea735b259c6b3245c4578416017fe6a054ff087eec91977e0d25b722d33166b270b8561dc94abffc44553d59af95bee48421123cb895edd77ee44a4695c9f744c198287693b218eb45c09a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0xf0, "541d57ab69b60c55ae7bcffd3b019ec8b3342951d5dadef8b03e7536ee843895eca81b367b6a6d03f7e48c352d81cf1a9c64019def4c5e3de1bd6f3121c584c584d32169f94c5a31e157e7c99b50676fc363a5d6a91131cadcd5d3b133f5cfec51b30d9828db4166779b50f65c69fd7bdd6733acf05d639aa9dcafff7447c0652f8e98d14eb5d0e3b3271f5d4f1ebbf5dea8df9167339c0b8aa86556e7522b79386d1e7686bd7eb80977561f95ecc959151d4827bb17444f9ba00932ff436d7e5f3f6d24e0b1780c6016c785bf24ced5f359bb79435957d75cdf4027421a5a4ec8fabea2be48b871f61a9c85d6223f86"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xb9}}) 15.064455487s ago: executing program 4 (id=1325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x80003, 0x0) recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r1, 0x0, 0x0, 0x2042, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000260e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000200000044000500"], 0x174}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x80000000, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x4a9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}}, 0x40000) r7 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0xb, 0x1}, 0xb2d, 0x86, &(0x7f0000000240)={0x0, 0x16, 0x7ecd, 0x0, 0x53f}, 0x8, 0x1, 0x1000, 0x0, 0x4, 0xd, &(0x7f0000000640)="8111cf0ff2bacec4821fd8105cf5d84998f2f01b22d8ae5065f25c381149fdf8449dc44590275953f8f0f8121d54b81ade67d151921520f8752b6347455a83d8702d63363015c5044637fd4d94c12b65b78c17ea61b303e49c274b5b257d16e99fe0c249dc0d0eec0ef9b5bd8daa"}) recvfrom(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000280)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80) 6.04718591s ago: executing program 33 (id=1319): r0 = socket$unix(0x1, 0x5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = socket(0x1, 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7f) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)={0xe000200c}) 6.003101493s ago: executing program 34 (id=1316): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = dup3(r2, r1, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000000)=[@request_death, @register_looper], 0x50, 0x0, &(0x7f0000000180)="db48cd0e4072624902cb7e537e2fd64478f18ada2b4a53082068cb20dfa8006a0a729b137ec1b8504925bb0056f719494a9385485bee634d993af6a49625d22ada74506a749f6c478d5bac82acf19f55"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000280)=[@acquire_done, @acquire, @acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x1}, @clear_death, @dead_binder_done], 0x50, 0x0, &(0x7f00000005c0)="505947389919cee88171d519018a95ccebbabfc66dc862e9536f0270604a00b0d98053c54fdc688efa8e51c3554ec1e3f8504d48a1e7eedef35f84f524932d73d434fee5323d6f3ef0a108b842c9ec9c"}) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa3c2) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 2.014320123s ago: executing program 35 (id=1323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000000000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000045b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66bad104edc4c2a191647f00f20f1b9fa9d92b4b66b82a008ee82e650fc75927c4c34579bd5583ffff0a0f79cac744240019000000c744240200000080c7442406000000000f011c240fc7320f01c5", 0x4f}], 0x1, 0x29, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r4, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) getxattr(&(0x7f0000000240)='./file1/file2\x00', &(0x7f00000002c0)=@known='trusted.syz\x00', &(0x7f0000000300)=""/192, 0xc0) 0s ago: executing program 36 (id=1325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x80003, 0x0) recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r1, 0x0, 0x0, 0x2042, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000260e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000200000044000500"], 0x174}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x80000000, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x4a9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}}, 0x40000) r7 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0xb, 0x1}, 0xb2d, 0x86, &(0x7f0000000240)={0x0, 0x16, 0x7ecd, 0x0, 0x53f}, 0x8, 0x1, 0x1000, 0x0, 0x4, 0xd, &(0x7f0000000640)="8111cf0ff2bacec4821fd8105cf5d84998f2f01b22d8ae5065f25c381149fdf8449dc44590275953f8f0f8121d54b81ade67d151921520f8752b6347455a83d8702d63363015c5044637fd4d94c12b65b78c17ea61b303e49c274b5b257d16e99fe0c249dc0d0eec0ef9b5bd8daa"}) recvfrom(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000280)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80) kernel console output (not intermixed with test programs): core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.979493][ T2603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.986393][ T575] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 132.137448][ T575] usb 4-1: config index 0 descriptor too short (expected 1314, got 34) [ 132.145876][ T575] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 132.154013][ T575] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 132.162941][ T575] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.173671][ T575] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 132.185102][ T575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 132.196033][ T575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 132.205735][ T575] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.220388][ T575] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 132.229497][ T575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.229985][ T2577] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.237662][ T575] usb 4-1: Product: syz [ 132.245932][ T2577] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.249173][ T575] usb 4-1: Manufacturer: syz [ 132.260527][ T575] usb 4-1: SerialNumber: syz [ 132.266005][ T575] usb 4-1: config 0 descriptor?? [ 132.459601][ T385] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 132.470368][ T385] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 132.479371][ T575] usb 4-1: USB disconnect, device number 49 [ 132.503189][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.511804][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.033761][ T2610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.042396][ T2610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.069122][ T2614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.077756][ T2614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.086560][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 133.086575][ T36] audit: type=1326 audit(1771907008.740:37531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2613 comm="syz.0.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aa3f9c629 code=0x0 [ 133.257239][ T36] audit: type=1400 audit(1771907008.910:37532): avc: denied { read } for pid=2613 comm="syz.0.722" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.259781][ T2616] rust_binder: Write failure EFAULT in pid:709 [ 133.280804][ T36] audit: type=1400 audit(1771907008.910:37533): avc: denied { open } for pid=2613 comm="syz.0.722" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.310966][ T36] audit: type=1400 audit(1771907008.910:37534): avc: denied { ioctl } for pid=2613 comm="syz.0.722" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.568386][ T2621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.577877][ T2621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.640387][ T36] audit: type=1400 audit(1771907009.290:37535): avc: denied { create } for pid=2620 comm="syz.1.724" name="#15" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.661492][ T36] audit: type=1400 audit(1771907009.290:37536): avc: denied { link } for pid=2620 comm="syz.1.724" name="#15" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.179027][ T2629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2629 comm=syz.1.727 [ 134.180036][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.204954][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.217825][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.230676][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.243485][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.256645][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.269440][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.282396][ T2630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=2630 comm=syz.1.727 [ 134.351943][ T389] usb 5-1: USB disconnect, device number 4 [ 134.383953][ T36] audit: type=1400 audit(1771907010.030:37537): avc: denied { lock } for pid=2634 comm="syz.1.729" path="socket:[20083]" dev="sockfs" ino=20083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.408870][ T36] audit: type=1400 audit(1771907010.030:37538): avc: denied { lock } for pid=2634 comm="syz.1.729" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.522093][ T2649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.531096][ T2649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.605933][ T2658] FAULT_INJECTION: forcing a failure. [ 134.605933][ T2658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.619218][ T2658] CPU: 0 UID: 0 PID: 2658 Comm: syz.1.736 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 134.619250][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.619263][ T2658] Call Trace: [ 134.619270][ T2658] [ 134.619278][ T2658] __dump_stack+0x21/0x30 [ 134.619309][ T2658] dump_stack_lvl+0x140/0x1c0 [ 134.619334][ T2658] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.619359][ T2658] ? check_stack_object+0x12b/0x150 [ 134.619385][ T2658] dump_stack+0x19/0x20 [ 134.619409][ T2658] should_fail_ex+0x3d7/0x530 [ 134.619431][ T2658] should_fail+0xf/0x20 [ 134.619451][ T2658] should_fail_usercopy+0x1e/0x30 [ 134.619475][ T2658] _copy_to_user+0x24/0xa0 [ 134.619501][ T2658] simple_read_from_buffer+0xed/0x160 [ 134.619525][ T2658] proc_fail_nth_read+0x1aa/0x220 [ 134.619541][ T2658] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 134.619555][ T2658] ? bpf_lsm_file_permission+0xd/0x20 [ 134.619570][ T2658] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 134.619584][ T2658] vfs_read+0x289/0xcb0 [ 134.619601][ T2658] ? __cfi_vfs_read+0x10/0x10 [ 134.619618][ T2658] ? __kasan_check_write+0x18/0x20 [ 134.619635][ T2658] ? mutex_lock+0x97/0x1d0 [ 134.619652][ T2658] ? __cfi_mutex_lock+0x10/0x10 [ 134.619669][ T2658] ? __fget_files+0x2c5/0x340 [ 134.619691][ T2658] ksys_read+0x145/0x260 [ 134.619707][ T2658] ? __cfi_ksys_read+0x10/0x10 [ 134.619725][ T2658] ? __kasan_check_read+0x15/0x20 [ 134.619742][ T2658] __x64_sys_read+0x7f/0x90 [ 134.619759][ T2658] x64_sys_call+0x2638/0x2ee0 [ 134.619780][ T2658] do_syscall_64+0x57/0xf0 [ 134.619793][ T2658] ? clear_bhb_loop+0x50/0xa0 [ 134.619807][ T2658] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.619830][ T2658] RIP: 0033:0x7f8a3375cece [ 134.619842][ T2658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.619854][ T2658] RSP: 002b:00007f8a321e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.619870][ T2658] RAX: ffffffffffffffda RBX: 00007f8a321e36c0 RCX: 00007f8a3375cece [ 134.619882][ T2658] RDX: 000000000000000f RSI: 00007f8a321e30a0 RDI: 0000000000000003 [ 134.619891][ T2658] RBP: 00007f8a321e3090 R08: 0000000000000000 R09: 0000000000000000 [ 134.619903][ T2658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.619912][ T2658] R13: 00007f8a33a16038 R14: 00007f8a33a15fa0 R15: 00007ffecdf201c8 [ 134.619925][ T2658] [ 134.868299][ T2660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.876902][ T2660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.885983][ T2660] netlink: 5 bytes leftover after parsing attributes in process `syz.1.737'. [ 134.986268][ T385] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 135.026259][ T389] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.137388][ T385] usb 4-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 135.146521][ T385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.155159][ T385] usb 4-1: config 0 descriptor?? [ 135.176252][ T389] usb 5-1: Using ep0 maxpacket: 8 [ 135.182350][ T389] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.192331][ T389] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.198994][ T389] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 135.208242][ T389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.216931][ T389] usb 5-1: config 0 descriptor?? [ 135.570060][ T385] wacom 0003:056A:00EF.001C: unknown main item tag 0x0 [ 135.577185][ T385] wacom 0003:056A:00EF.001C: unknown main item tag 0x0 [ 135.584190][ T385] wacom 0003:056A:00EF.001C: unknown main item tag 0x0 [ 135.591532][ T385] wacom 0003:056A:00EF.001C: unknown main item tag 0x0 [ 135.598668][ T385] wacom 0003:056A:00EF.001C: unknown main item tag 0x0 [ 135.605637][ T385] wacom 0003:056A:00EF.001C: unknown main item tag 0x0 [ 135.615859][ T385] wacom 0003:056A:00EF.001C: hidraw1: USB HID v10.00 Device [HID 056a:00ef] on usb-dummy_hcd.3-1/input0 [ 135.634804][ T389] waltop 0003:172F:0502.001D: unknown main item tag 0x0 [ 135.645641][ T389] waltop 0003:172F:0502.001D: hidraw2: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.4-1/input0 [ 135.672791][ T2673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 135.694249][ T2670] usb usb8: usbfs: process 2670 (syz.1.740) did not claim interface 0 before use [ 135.705072][ T2670] netlink: 'syz.1.740': attribute type 27 has an invalid length. [ 135.762115][ T2677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.771384][ T2677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.775037][ T2656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.788013][ T2656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.799878][ T2656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.808487][ T2656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.859038][ T67] usb 4-1: USB disconnect, device number 50 [ 135.877519][ T31] usb 5-1: USB disconnect, device number 5 [ 136.226004][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 136.234080][ T10] hid-generic 0000:0000:0000.001E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 136.309478][ T2688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.318591][ T2688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.400008][ T36] audit: type=1400 audit(1771907012.050:37539): avc: denied { create } for pid=2693 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 136.425989][ T2695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 136.464904][ T36] audit: type=1400 audit(1771907012.110:37540): avc: denied { write } for pid=2698 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.676305][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.754506][ T2709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.763142][ T2709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.827619][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.834370][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 136.843800][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.856289][ T10] usb 5-1: config 0 descriptor?? [ 136.863878][ T2711] SELinux: policydb string length 1836477231 does not match expected length 8 [ 136.872973][ T2711] SELinux: failed to load policy [ 136.900066][ T2714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.908634][ T2714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.276820][ T10] wacom 0003:056A:00F8.001F: unknown main item tag 0x2 [ 137.285339][ T10] wacom 0003:056A:00F8.001F: hidraw1: USB HID v0.02 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0 [ 137.302009][ T2717] 8021q: VLANs not supported on lo [ 137.307408][ T2717] devtmpfs: Unknown parameter 'fuse' [ 137.433945][ T2737] tipc: Started in network mode [ 137.438918][ T2737] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 137.448152][ T2737] tipc: Enabling of bearer rejected, failed to enable media [ 137.626286][ T389] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 137.652863][ T2758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.661478][ T2758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.776298][ T389] usb 4-1: Using ep0 maxpacket: 16 [ 137.784144][ T389] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.793263][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.801291][ T389] usb 4-1: Product: syz [ 137.805452][ T389] usb 4-1: Manufacturer: syz [ 137.810087][ T389] usb 4-1: SerialNumber: syz [ 137.817022][ T389] r8152-cfgselector 4-1: Unknown version 0x0000 [ 137.823291][ T389] r8152-cfgselector 4-1: config 0 descriptor?? [ 137.855661][ T2769] netlink: 3980 bytes leftover after parsing attributes in process `syz.1.777'. [ 137.867076][ T2769] syz.1.777: attempt to access beyond end of device [ 137.867076][ T2769] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 137.879882][ T2769] FAT-fs (loop1): unable to read boot sector [ 138.232824][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 138.232841][ T36] audit: type=1400 audit(1771907013.880:37546): avc: denied { nlmsg_write } for pid=2732 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 138.233515][ T2733] overlayfs: conflicting options: nfs_export=on,index=off [ 138.267530][ T31] r8152-cfgselector 4-1: USB disconnect, device number 51 [ 138.707281][ T2777] /dev/sr0: Can't lookup blockdev [ 138.762251][ T36] audit: type=1400 audit(1771907014.410:37547): avc: denied { ioctl } for pid=2780 comm="syz.1.781" path="socket:[22533]" dev="sockfs" ino=22533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.794355][ T2781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 138.820454][ T2787] kvm: kvm [2786]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006f) [ 138.845932][ T2788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.854498][ T2788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.032684][ T2787] overlayfs: missing 'lowerdir' [ 139.037916][ T36] audit: type=1400 audit(1771907014.690:37548): avc: denied { remount } for pid=2786 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 139.136276][ T389] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 139.266290][ T389] usb 4-1: device descriptor read/64, error -71 [ 139.411060][ T10] usb 5-1: USB disconnect, device number 6 [ 139.434298][ T2798] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 139.481199][ T2804] cgroup: Bad value for 'name' [ 139.506339][ T389] usb 4-1: device descriptor read/64, error -71 [ 139.513357][ T2804] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 139.521262][ T2804] netlink: 17 bytes leftover after parsing attributes in process `syz.1.791'. [ 139.716422][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.761280][ T389] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 139.771677][ T2818] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.793416][ T36] audit: type=1400 audit(1771907015.440:37549): avc: denied { shutdown } for pid=2822 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.901553][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 139.922674][ T389] usb 4-1: device descriptor read/64, error -71 [ 139.929640][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 139.943001][ T10] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 139.952246][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.962600][ T10] usb 5-1: config 0 descriptor?? [ 140.047063][ T36] audit: type=1400 audit(1771907015.700:37550): avc: denied { read append } for pid=2829 comm="syz.1.799" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.071362][ T2830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 140.072126][ T36] audit: type=1400 audit(1771907015.700:37551): avc: denied { open } for pid=2829 comm="syz.1.799" path="/225/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.104956][ T36] audit: type=1400 audit(1771907015.720:37552): avc: denied { ioctl } for pid=2829 comm="syz.1.799" path="/225/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.177829][ T10] betop 0003:8380:1850.0020: item fetching failed at offset 5/7 [ 140.185666][ T10] betop 0003:8380:1850.0020: parse failed [ 140.192668][ T10] betop 0003:8380:1850.0020: probe with driver betop failed with error -22 [ 140.201387][ T389] usb 4-1: device descriptor read/64, error -71 [ 140.233009][ T2838] selinux_netlink_send: 58 callbacks suppressed [ 140.233030][ T2838] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=2838 comm=syz.1.802 [ 140.286394][ T2845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.294982][ T2845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.316377][ T389] usb usb4-port1: attempt power cycle [ 140.358628][ T2846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.367205][ T2846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.378520][ T67] usb 5-1: USB disconnect, device number 7 [ 140.656313][ T389] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 140.677392][ T389] usb 4-1: device descriptor read/8, error -71 [ 140.807407][ T389] usb 4-1: device descriptor read/8, error -71 [ 140.900258][ T2853] rust_binder: Write failure EFAULT in pid:779 [ 140.903756][ T2858] netlink: 'syz.4.808': attribute type 12 has an invalid length. [ 140.980500][ T2860] __vm_enough_memory: pid: 2860, comm: syz.4.809, bytes: 21200097099776 not enough memory for the allocation [ 141.046283][ T389] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 141.067648][ T389] usb 4-1: device descriptor read/8, error -71 [ 141.105778][ T2866] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 141.197367][ T389] usb 4-1: device descriptor read/8, error -71 [ 141.306471][ T389] usb usb4-port1: unable to enumerate USB device [ 141.366290][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.496291][ T10] usb 5-1: device descriptor read/64, error -71 [ 141.736288][ T10] usb 5-1: device descriptor read/64, error -71 [ 141.754943][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.763453][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.772458][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.780982][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.976273][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 142.106374][ T10] usb 5-1: device descriptor read/64, error -71 [ 142.301324][ T2888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.309892][ T2888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.326465][ T389] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 142.346314][ T10] usb 5-1: device descriptor read/64, error -71 [ 142.456448][ T10] usb usb5-port1: attempt power cycle [ 142.476277][ T389] usb 4-1: Using ep0 maxpacket: 16 [ 142.482863][ T389] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x13, changing to 0x3 [ 142.494372][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 142.505220][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57555, setting to 1024 [ 142.516364][ T389] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 142.525456][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.534440][ T389] usb 4-1: config 0 descriptor?? [ 142.541132][ T389] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 142.741891][ T575] usb 4-1: USB disconnect, device number 56 [ 142.796277][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 142.817527][ T10] usb 5-1: device descriptor read/8, error -71 [ 142.913495][ T2902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.922362][ T2902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.947496][ T10] usb 5-1: device descriptor read/8, error -71 [ 143.186304][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.207469][ T10] usb 5-1: device descriptor read/8, error -71 [ 143.317762][ T2908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.326434][ T2908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.337311][ T10] usb 5-1: device descriptor read/8, error -71 [ 143.446449][ T10] usb usb5-port1: unable to enumerate USB device [ 143.453210][ T36] audit: type=1400 audit(1771907019.100:37553): avc: denied { getattr } for pid=2909 comm="syz.0.830" name="KEY" dev="sockfs" ino=23302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.454325][ T2910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.484440][ T2910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.496286][ T389] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 143.647327][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.658277][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.668055][ T389] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 143.677143][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.685739][ T389] usb 4-1: config 0 descriptor?? [ 144.020351][ T36] audit: type=1400 audit(1771907019.670:37554): avc: denied { create } for pid=2923 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.071995][ T2936] netlink: 'syz.0.837': attribute type 46 has an invalid length. [ 144.092814][ T2941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.101516][ T2941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.125333][ T36] audit: type=1400 audit(1771907019.770:37555): avc: denied { map } for pid=2942 comm="syz.1.839" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.151559][ T36] audit: type=1400 audit(1771907019.800:37556): avc: denied { ioctl } for pid=2942 comm="syz.1.839" path="socket:[23345]" dev="sockfs" ino=23345 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.198941][ T2946] netlink: 'syz.1.840': attribute type 21 has an invalid length. [ 144.238461][ T2949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2949 comm=syz.4.841 [ 144.251105][ T2949] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 144.261425][ T2950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.270423][ T2950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.287158][ T36] audit: type=1400 audit(1771907019.940:37557): avc: denied { ioctl } for pid=2951 comm="syz.4.842" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 144.312816][ T2904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.321385][ T2904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.330276][ T389] usbhid 4-1:0.0: can't add hid device: -71 [ 144.336735][ T389] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 144.345706][ T389] usb 4-1: USB disconnect, device number 57 [ 144.635311][ T2960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.644313][ T2960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.655192][ T2961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.663788][ T2961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.696286][ T67] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 144.705308][ T2965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.846'. [ 144.757898][ T2974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.766488][ T2974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.776655][ T36] audit: type=1400 audit(1771907020.430:37558): avc: denied { setopt } for pid=2973 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.878140][ T67] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.886350][ T67] usb 5-1: not running at top speed; connect to a high speed hub [ 144.895170][ T67] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 144.903237][ T67] usb 5-1: can't read configurations, error -22 [ 144.912168][ T2978] kvm: pic: single mode not supported [ 144.912380][ T2978] kvm: pic: single mode not supported [ 144.917824][ T2978] kvm: pic: level sensitive irq not supported [ 144.923778][ T2978] kvm: pic: single mode not supported [ 144.929878][ T2978] kvm: pic: level sensitive irq not supported [ 144.935938][ T2978] kvm: pic: single mode not supported [ 144.942389][ T2978] kvm: pic: single mode not supported [ 144.948067][ T2978] kvm: pic: single mode not supported [ 144.953708][ T2978] kvm: pic: single mode not supported [ 144.959426][ T2978] kvm: pic: single mode not supported [ 144.964929][ T2978] kvm: pic: level sensitive irq not supported [ 145.036488][ T67] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 145.207860][ T67] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.216027][ T67] usb 5-1: not running at top speed; connect to a high speed hub [ 145.224973][ T67] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 145.232959][ T67] usb 5-1: can't read configurations, error -22 [ 145.239373][ T67] usb usb5-port1: attempt power cycle [ 145.256273][ T389] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 145.291150][ T2984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.299706][ T2984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.406266][ T389] usb 4-1: Using ep0 maxpacket: 32 [ 145.412613][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.423546][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.433335][ T389] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.442407][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.450953][ T389] usb 4-1: config 0 descriptor?? [ 145.457280][ T389] hub 4-1:0.0: USB hub found [ 145.576282][ T67] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 145.598184][ T67] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.606374][ T67] usb 5-1: not running at top speed; connect to a high speed hub [ 145.615212][ T67] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 145.623180][ T67] usb 5-1: can't read configurations, error -22 [ 145.658503][ T2982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.667102][ T2982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.675334][ T389] hub 4-1:0.0: 19 ports detected [ 145.680547][ T389] hub 4-1:0.0: insufficient power available to use all downstream ports [ 145.756274][ T67] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 145.778117][ T67] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.786178][ T67] usb 5-1: not running at top speed; connect to a high speed hub [ 145.795052][ T67] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 145.803073][ T67] usb 5-1: can't read configurations, error -22 [ 145.809656][ T67] usb usb5-port1: unable to enumerate USB device [ 145.876803][ T389] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 145.883589][ T389] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 145.893502][ T389] usbhid 4-1:0.0: can't add hid device: -71 [ 145.899605][ T389] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.926674][ T389] usb 4-1: USB disconnect, device number 58 [ 145.948472][ T36] audit: type=1326 audit(1771907021.600:37559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3aa3f9c629 code=0x0 [ 146.000884][ T36] audit: type=1326 audit(1771907021.650:37560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa3f9c629 code=0x7ffc0000 [ 146.024483][ T36] audit: type=1326 audit(1771907021.650:37561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa3f9c629 code=0x7ffc0000 [ 146.027134][ T2992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.048535][ T36] audit: type=1326 audit(1771907021.670:37562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa3f9c629 code=0x7ffc0000 [ 146.080261][ T2992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.257619][ T3000] netlink: 232 bytes leftover after parsing attributes in process `syz.3.858'. [ 147.282185][ T3003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.295188][ T3003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.574507][ T3019] overlayfs: missing 'lowerdir' [ 147.656340][ T67] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 147.691304][ T3023] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 147.700788][ T3023] overlayfs: failed to set uuid (35/file0, err=-13); falling back to uuid=null. [ 147.807304][ T67] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 147.817661][ T67] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.826734][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 147.835819][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.844607][ T67] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 147.856507][ T67] usb 4-1: no configuration chosen from 1 choice [ 147.986301][ T358] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 148.073090][ T3033] overlay: filesystem on ./file0 not supported as upperdir [ 148.082210][ T3033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.091192][ T3033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.136278][ T358] usb 5-1: Using ep0 maxpacket: 16 [ 148.142555][ T358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.152813][ T358] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 148.165745][ T358] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice=80.00 [ 148.174826][ T358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.183782][ T358] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 148.192640][ T358] usb 5-1: no configuration chosen from 1 choice [ 148.456765][ T36] kauditd_printk_skb: 1926 callbacks suppressed [ 148.456788][ T36] audit: type=1326 audit(1771907024.110:39489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.486646][ T36] audit: type=1326 audit(1771907024.110:39490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.510296][ T36] audit: type=1326 audit(1771907024.110:39491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.533734][ T36] audit: type=1326 audit(1771907024.110:39492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.557146][ T36] audit: type=1326 audit(1771907024.110:39493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.580546][ T36] audit: type=1326 audit(1771907024.110:39494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.603928][ T36] audit: type=1326 audit(1771907024.110:39495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.627316][ T36] audit: type=1326 audit(1771907024.110:39496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.650728][ T36] audit: type=1326 audit(1771907024.120:39497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 148.674122][ T36] audit: type=1326 audit(1771907024.120:39498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa3f5cece code=0x7ffc0000 [ 149.741604][ T3051] rust_binder: Write failure EFAULT in pid:876 [ 149.741823][ T3052] rust_binder: Write failure EFAULT in pid:876 [ 149.759860][ T3054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.774597][ T3054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.294459][ T3056] fuse: Bad value for 'fd' [ 150.299547][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.308385][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.424735][ T358] usb 4-1: USB disconnect, device number 59 [ 150.673025][ T3072] netlink: 56 bytes leftover after parsing attributes in process `syz.3.882'. [ 150.748123][ T10] usb 5-1: USB disconnect, device number 16 [ 150.904870][ T3085] netlink: 37 bytes leftover after parsing attributes in process `syz.3.887'. [ 151.107257][ T3120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 151.118026][ T3124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.128398][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 151.136241][ T3123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.138372][ T3124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.153508][ T3123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.164801][ T3123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.175317][ T3123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.228279][ T3134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.246288][ T3135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.246576][ T3134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.264724][ T3135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.297369][ T10] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 151.307768][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.320889][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 151.330135][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.341823][ T10] usb 5-1: config 0 descriptor?? [ 151.350191][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 151.356148][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 151.365094][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 151.564808][ T3145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.574321][ T3145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.801461][ T3149] rust_binder: Write failure EFAULT in pid:710 [ 151.822813][ T3151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.837960][ T3151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.248862][ T3165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 152.366147][ T3173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.376911][ T3173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.756270][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 152.906273][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 152.912499][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 152.921263][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 152.931389][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.945307][ T10] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 152.956331][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 152.970876][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.981418][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.989466][ T10] usb 4-1: Product: syz [ 152.993637][ T10] usb 4-1: Manufacturer: syz [ 152.998454][ T10] usb 4-1: SerialNumber: syz [ 153.237767][ T3182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.246975][ T3182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.310813][ T3196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.319388][ T3196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.352542][ T3202] can0: slcan on ptm0. [ 153.377597][ T3201] can0 (unregistered): slcan off ptm0. [ 153.625521][ T3211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.634130][ T3211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.787783][ T10] usb 4-1: 0:2 : does not exist [ 153.792718][ T10] usb 4-1: unit 4 not found! [ 153.801007][ T10] usb 4-1: USB disconnect, device number 60 [ 153.812849][ T918] udevd[918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.220893][ T3232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.229860][ T3232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.446351][ T10] usb 5-1: USB disconnect, device number 17 [ 154.598396][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.608573][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.836839][ T3253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.845689][ T3253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.859275][ T3253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.868678][ T3253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.879648][ T3253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.888410][ T3253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.966262][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 155.126258][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 155.137298][ T10] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.140480][ T36] kauditd_printk_skb: 278 callbacks suppressed [ 155.140528][ T36] audit: type=1400 audit(1771907030.790:39777): avc: denied { mount } for pid=3254 comm="syz.0.939" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 155.166336][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.180535][ T3255] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.193472][ T3255] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 155.202365][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 155.207167][ T36] audit: type=1400 audit(1771907030.830:39778): avc: denied { mounton } for pid=3254 comm="syz.0.939" path="/296/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.212107][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.244602][ T36] audit: type=1400 audit(1771907030.900:39779): avc: denied { read } for pid=3254 comm="syz.0.939" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.251537][ T10] usb 4-1: config 0 descriptor?? [ 155.266497][ T3255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.280116][ T3255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.289395][ T36] audit: type=1400 audit(1771907030.900:39780): avc: denied { open } for pid=3254 comm="syz.0.939" path="/296/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.526037][ T36] audit: type=1400 audit(1771907031.170:39781): avc: denied { lock } for pid=3266 comm="syz.1.943" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 155.549436][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 155.632965][ T36] audit: type=1326 audit(1771907031.280:39782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3270 comm="syz.1.945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a3379c629 code=0x0 [ 155.702128][ T10] logitech-hidpp-device 0003:046D:C086.0021: collection stack underflow [ 155.718269][ T10] logitech-hidpp-device 0003:046D:C086.0021: item 0 1 0 12 parsing failed [ 155.727398][ T10] logitech-hidpp-device 0003:046D:C086.0021: hidpp_probe:parse failed [ 155.735646][ T9] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 155.746041][ T10] logitech-hidpp-device 0003:046D:C086.0021: probe with driver logitech-hidpp-device failed with error -22 [ 155.757520][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.773061][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 155.782461][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.796952][ T9] usb 5-1: config 0 descriptor?? [ 155.803782][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 155.809878][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 155.817481][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 155.825149][ T36] audit: type=1400 audit(1771907031.470:39783): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 155.918589][ T10] usb 4-1: USB disconnect, device number 61 [ 155.971759][ T36] audit: type=1400 audit(1771907031.620:39784): avc: denied { search } for pid=3296 comm="syz.0.953" name="/" dev="configfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.994742][ T36] audit: type=1400 audit(1771907031.620:39785): avc: denied { write } for pid=3296 comm="syz.0.953" name="/" dev="configfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.017015][ T36] audit: type=1400 audit(1771907031.620:39786): avc: denied { add_name } for pid=3296 comm="syz.0.953" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 156.051502][ T3310] FAULT_INJECTION: forcing a failure. [ 156.051502][ T3310] name failslab, interval 1, probability 0, space 0, times 1 [ 156.155648][ T3310] CPU: 0 UID: 0 PID: 3310 Comm: syz.1.957 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 156.155682][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.155695][ T3310] Call Trace: [ 156.155702][ T3310] [ 156.155710][ T3310] __dump_stack+0x21/0x30 [ 156.155740][ T3310] dump_stack_lvl+0x140/0x1c0 [ 156.155764][ T3310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.155788][ T3310] ? release_sock+0x171/0x1f0 [ 156.155813][ T3310] dump_stack+0x19/0x20 [ 156.155835][ T3310] should_fail_ex+0x3d7/0x530 [ 156.155857][ T3310] should_failslab+0xac/0x100 [ 156.155885][ T3310] kmem_cache_alloc_node_noprof+0x45/0x420 [ 156.155909][ T3310] ? netlink_data_ready+0x20/0x20 [ 156.155936][ T3310] ? __alloc_skb+0x108/0x370 [ 156.155960][ T3310] __alloc_skb+0x108/0x370 [ 156.155984][ T3310] netlink_alloc_large_skb+0xf7/0x1b0 [ 156.156010][ T3310] netlink_sendmsg+0x594/0xb10 [ 156.156041][ T3310] ? __cfi_netlink_sendmsg+0x10/0x10 [ 156.156071][ T3310] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 156.156098][ T3310] ? security_socket_sendmsg+0x3d/0x100 [ 156.156127][ T3310] sock_write_iter+0x4d9/0x530 [ 156.156147][ T3310] ? __cfi_sock_write_iter+0x10/0x10 [ 156.156169][ T3310] ? selinux_file_permission+0x8a4/0xb60 [ 156.156189][ T3310] do_iter_readv_writev+0x62f/0x820 [ 156.156219][ T3310] ? vfs_iter_read+0x5f0/0x5f0 [ 156.156243][ T3310] ? bpf_lsm_file_permission+0xd/0x20 [ 156.156261][ T3310] vfs_writev+0x4a8/0xe50 [ 156.156288][ T3310] ? do_writev+0x2e0/0x2e0 [ 156.156325][ T3310] ? vfs_write+0x9a4/0xf90 [ 156.156368][ T3310] do_writev+0x151/0x2e0 [ 156.156397][ T3310] ? vfs_readv+0xa10/0xa10 [ 156.156425][ T3310] ? __kasan_check_read+0x15/0x20 [ 156.156450][ T3310] __x64_sys_writev+0x81/0x90 [ 156.156477][ T3310] x64_sys_call+0x1fbb/0x2ee0 [ 156.156506][ T3310] do_syscall_64+0x57/0xf0 [ 156.156526][ T3310] ? clear_bhb_loop+0x50/0xa0 [ 156.156547][ T3310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.156580][ T3310] RIP: 0033:0x7f8a3379c629 [ 156.156597][ T3310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.156616][ T3310] RSP: 002b:00007f8a321e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 156.156638][ T3310] RAX: ffffffffffffffda RBX: 00007f8a33a15fa0 RCX: 00007f8a3379c629 [ 156.156655][ T3310] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 156.156669][ T3310] RBP: 00007f8a321e3090 R08: 0000000000000000 R09: 0000000000000000 [ 156.156683][ T3310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.156696][ T3310] R13: 00007f8a33a16038 R14: 00007f8a33a15fa0 R15: 00007ffecdf201c8 [ 156.156715][ T3310] [ 156.464355][ T3318] netlink: 'syz.0.960': attribute type 46 has an invalid length. [ 156.480330][ T3313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.488873][ T3313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.532796][ T3320] kvm: kvm [3319]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 156.541740][ T3320] kvm: kvm [3319]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 156.806264][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 156.957387][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.967619][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.977402][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.986522][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.994589][ T9] usb 4-1: SerialNumber: syz [ 157.208626][ T9] usb 4-1: 0:2 : does not exist [ 157.216949][ T9] usb 4-1: unit 5: unexpected type 0x09 [ 157.225034][ T9] usb 4-1: USB disconnect, device number 62 [ 157.239962][ T918] udevd[918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.403374][ T3334] netlink: 84 bytes leftover after parsing attributes in process `syz.1.964'. [ 157.421955][ T3338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.430543][ T3338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.477370][ T3349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.487508][ T3349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.501489][ T3353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.510374][ T3353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.646116][ T3366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.654688][ T3366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.873417][ T3378] FAULT_INJECTION: forcing a failure. [ 157.873417][ T3378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.886515][ T3378] CPU: 0 UID: 0 PID: 3378 Comm: syz.3.978 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 157.886542][ T3378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.886555][ T3378] Call Trace: [ 157.886561][ T3378] [ 157.886568][ T3378] __dump_stack+0x21/0x30 [ 157.886594][ T3378] dump_stack_lvl+0x140/0x1c0 [ 157.886615][ T3378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.886637][ T3378] dump_stack+0x19/0x20 [ 157.886658][ T3378] should_fail_ex+0x3d7/0x530 [ 157.886676][ T3378] should_fail+0xf/0x20 [ 157.886693][ T3378] should_fail_usercopy+0x1e/0x30 [ 157.886712][ T3378] _copy_from_iter+0x1a9/0x1510 [ 157.886733][ T3378] ? kmalloc_reserve+0xcf/0x4f0 [ 157.886756][ T3378] ? __virt_addr_valid+0x2a6/0x380 [ 157.886774][ T3378] ? __cfi__copy_from_iter+0x10/0x10 [ 157.886794][ T3378] ? __check_object_size+0x527/0x830 [ 157.886817][ T3378] ? __cfi___check_object_size+0x10/0x10 [ 157.886839][ T3378] ? skb_put+0x112/0x1f0 [ 157.886861][ T3378] netlink_sendmsg+0x68e/0xb10 [ 157.886889][ T3378] ? __cfi_netlink_sendmsg+0x10/0x10 [ 157.886915][ T3378] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 157.886938][ T3378] ? security_socket_sendmsg+0x3d/0x100 [ 157.886963][ T3378] sock_write_iter+0x4d9/0x530 [ 157.886981][ T3378] ? __cfi_sock_write_iter+0x10/0x10 [ 157.887001][ T3378] ? selinux_file_permission+0x8a4/0xb60 [ 157.887020][ T3378] do_iter_readv_writev+0x62f/0x820 [ 157.887043][ T3378] ? vfs_iter_read+0x5f0/0x5f0 [ 157.887065][ T3378] ? bpf_lsm_file_permission+0xd/0x20 [ 157.887081][ T3378] vfs_writev+0x4a8/0xe50 [ 157.887107][ T3378] ? do_writev+0x2e0/0x2e0 [ 157.887130][ T3378] ? vfs_write+0x9a4/0xf90 [ 157.887154][ T3378] do_writev+0x151/0x2e0 [ 157.887178][ T3378] ? vfs_readv+0xa10/0xa10 [ 157.887207][ T3378] ? fd_install+0x174/0x2e0 [ 157.887230][ T3378] ? __kasan_check_read+0x15/0x20 [ 157.887251][ T3378] __x64_sys_writev+0x81/0x90 [ 157.887272][ T3378] x64_sys_call+0x1fbb/0x2ee0 [ 157.887295][ T3378] do_syscall_64+0x57/0xf0 [ 157.887312][ T3378] ? clear_bhb_loop+0x50/0xa0 [ 157.887329][ T3378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.887355][ T3378] RIP: 0033:0x7fe462b9c629 [ 157.887370][ T3378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.887385][ T3378] RSP: 002b:00007fe463acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 157.887404][ T3378] RAX: ffffffffffffffda RBX: 00007fe462e15fa0 RCX: 00007fe462b9c629 [ 157.887417][ T3378] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 157.887429][ T3378] RBP: 00007fe463acf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.887441][ T3378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.887452][ T3378] R13: 00007fe462e16038 R14: 00007fe462e15fa0 R15: 00007ffc1de8e608 [ 157.887467][ T3378] [ 158.216295][ T67] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 158.288283][ T3383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=3383 comm=syz.1.980 [ 158.292185][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.309412][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.318862][ T3383] netlink: 1 bytes leftover after parsing attributes in process `syz.1.980'. [ 158.368503][ T67] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 158.376706][ T67] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.390095][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.401595][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.411909][ T67] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.425088][ T67] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.434321][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.444661][ T67] usb 4-1: config 0 descriptor?? [ 158.467832][ T3399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.476639][ T3399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.486252][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.494792][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.956772][ T575] usb 5-1: USB disconnect, device number 18 [ 158.999501][ T3406] FAULT_INJECTION: forcing a failure. [ 158.999501][ T3406] name failslab, interval 1, probability 0, space 0, times 0 [ 159.012274][ T3406] CPU: 1 UID: 0 PID: 3406 Comm: syz.0.988 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 159.012309][ T3406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.012323][ T3406] Call Trace: [ 159.012333][ T3406] [ 159.012354][ T3406] __dump_stack+0x21/0x30 [ 159.012381][ T3406] dump_stack_lvl+0x140/0x1c0 [ 159.012401][ T3406] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.012422][ T3406] dump_stack+0x19/0x20 [ 159.012441][ T3406] should_fail_ex+0x3d7/0x530 [ 159.012459][ T3406] should_failslab+0xac/0x100 [ 159.012482][ T3406] kmem_cache_alloc_node_noprof+0x45/0x420 [ 159.012502][ T3406] ? __alloc_skb+0x108/0x370 [ 159.012523][ T3406] __alloc_skb+0x108/0x370 [ 159.012542][ T3406] ? __kasan_check_read+0x15/0x20 [ 159.012562][ T3406] netlink_ack+0x155/0xa50 [ 159.012584][ T3406] ? avc_has_perm_noaudit+0x28a/0x360 [ 159.012606][ T3406] ? __cfi_inet_diag_handler_cmd+0x10/0x10 [ 159.012628][ T3406] ? sock_diag_rcv_msg+0x179/0x530 [ 159.012651][ T3406] netlink_rcv_skb+0x2dd/0x4f0 [ 159.012673][ T3406] ? __cfi_sock_diag_rcv_msg+0x10/0x10 [ 159.012696][ T3406] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 159.012721][ T3406] ? netlink_autobind+0x1c0/0x1c0 [ 159.012736][ T3406] ? is_vmalloc_addr+0x11/0x40 [ 159.012760][ T3406] sock_diag_rcv+0x20/0x30 [ 159.012780][ T3406] netlink_unicast+0x8c3/0xa60 [ 159.012803][ T3406] netlink_sendmsg+0x7fe/0xb10 [ 159.012828][ T3406] ? __cfi_netlink_sendmsg+0x10/0x10 [ 159.012853][ T3406] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 159.012875][ T3406] ? security_socket_sendmsg+0x3d/0x100 [ 159.012898][ T3406] sock_write_iter+0x4d9/0x530 [ 159.012915][ T3406] ? __cfi_sock_write_iter+0x10/0x10 [ 159.012934][ T3406] ? selinux_file_permission+0x8a4/0xb60 [ 159.012951][ T3406] do_iter_readv_writev+0x62f/0x820 [ 159.012973][ T3406] ? vfs_iter_read+0x5f0/0x5f0 [ 159.012994][ T3406] ? bpf_lsm_file_permission+0xd/0x20 [ 159.013010][ T3406] vfs_writev+0x4a8/0xe50 [ 159.013034][ T3406] ? do_writev+0x2e0/0x2e0 [ 159.013056][ T3406] ? vfs_write+0x9a4/0xf90 [ 159.013079][ T3406] do_writev+0x151/0x2e0 [ 159.013104][ T3406] ? vfs_readv+0xa10/0xa10 [ 159.013126][ T3406] ? fd_install+0x174/0x2e0 [ 159.013147][ T3406] ? __kasan_check_read+0x15/0x20 [ 159.013166][ T3406] __x64_sys_writev+0x81/0x90 [ 159.013187][ T3406] x64_sys_call+0x1fbb/0x2ee0 [ 159.013209][ T3406] do_syscall_64+0x57/0xf0 [ 159.013224][ T3406] ? clear_bhb_loop+0x50/0xa0 [ 159.013240][ T3406] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.013265][ T3406] RIP: 0033:0x7f3aa3f9c629 [ 159.013279][ T3406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.013293][ T3406] RSP: 002b:00007f3aa4de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 159.013310][ T3406] RAX: ffffffffffffffda RBX: 00007f3aa4215fa0 RCX: 00007f3aa3f9c629 [ 159.013323][ T3406] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 159.013334][ T3406] RBP: 00007f3aa4de7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.013349][ T3406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.013360][ T3406] R13: 00007f3aa4216038 R14: 00007f3aa4215fa0 R15: 00007ffe54fef2b8 [ 159.013374][ T3406] [ 159.333455][ T67] usbhid 4-1:0.0: can't add hid device: -71 [ 159.339486][ T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 159.351495][ T67] usb 4-1: USB disconnect, device number 63 [ 159.472333][ T3424] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 159.627984][ T3450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.636569][ T3450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.858614][ T3467] netlink: 'syz.4.1005': attribute type 13 has an invalid length. [ 159.877645][ T3475] FAULT_INJECTION: forcing a failure. [ 159.877645][ T3475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.892110][ T3475] CPU: 1 UID: 0 PID: 3475 Comm: syz.3.1006 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 159.892143][ T3475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.892156][ T3475] Call Trace: [ 159.892163][ T3475] [ 159.892171][ T3475] __dump_stack+0x21/0x30 [ 159.892202][ T3475] dump_stack_lvl+0x140/0x1c0 [ 159.892226][ T3475] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.892252][ T3475] ? check_stack_object+0x12b/0x150 [ 159.892287][ T3475] dump_stack+0x19/0x20 [ 159.892311][ T3475] should_fail_ex+0x3d7/0x530 [ 159.892334][ T3475] should_fail+0xf/0x20 [ 159.892353][ T3475] should_fail_usercopy+0x1e/0x30 [ 159.892375][ T3475] _copy_to_user+0x24/0xa0 [ 159.892401][ T3475] simple_read_from_buffer+0xed/0x160 [ 159.892434][ T3475] proc_fail_nth_read+0x1aa/0x220 [ 159.892454][ T3475] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 159.892474][ T3475] ? vfs_writev+0xacb/0xe50 [ 159.892503][ T3475] ? bpf_lsm_file_permission+0xd/0x20 [ 159.892523][ T3475] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 159.892543][ T3475] vfs_read+0x289/0xcb0 [ 159.892567][ T3475] ? __cfi_vfs_read+0x10/0x10 [ 159.892590][ T3475] ? __kasan_check_write+0x18/0x20 [ 159.892613][ T3475] ? mutex_lock+0x97/0x1d0 [ 159.892637][ T3475] ? __cfi_mutex_lock+0x10/0x10 [ 159.892659][ T3475] ? __fget_files+0x2c5/0x340 [ 159.892689][ T3475] ksys_read+0x145/0x260 [ 159.892713][ T3475] ? __cfi_ksys_read+0x10/0x10 [ 159.892738][ T3475] ? __kasan_check_read+0x15/0x20 [ 159.892762][ T3475] __x64_sys_read+0x7f/0x90 [ 159.892786][ T3475] x64_sys_call+0x2638/0x2ee0 [ 159.892813][ T3475] do_syscall_64+0x57/0xf0 [ 159.892832][ T3475] ? clear_bhb_loop+0x50/0xa0 [ 159.892851][ T3475] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.892882][ T3475] RIP: 0033:0x7fe462b5cece [ 159.892899][ T3475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.892917][ T3475] RSP: 002b:00007fe463acefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.892938][ T3475] RAX: ffffffffffffffda RBX: 00007fe463acf6c0 RCX: 00007fe462b5cece [ 159.892953][ T3475] RDX: 000000000000000f RSI: 00007fe463acf0a0 RDI: 0000000000000005 [ 159.892967][ T3475] RBP: 00007fe463acf090 R08: 0000000000000000 R09: 0000000000000000 [ 159.892980][ T3475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.892992][ T3475] R13: 00007fe462e16038 R14: 00007fe462e15fa0 R15: 00007ffc1de8e608 [ 159.893010][ T3475] [ 160.171926][ T3486] erspan0: default FDB implementation only supports local addresses [ 160.250984][ T3489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.259949][ T3489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.406297][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 160.556248][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 160.562457][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 160.570702][ T31] usb 5-1: config 0 has no interface number 0 [ 160.576840][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 160.584942][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 160.594016][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.602097][ T31] usb 5-1: Product: syz [ 160.606329][ T31] usb 5-1: Manufacturer: syz [ 160.610941][ T31] usb 5-1: SerialNumber: syz [ 160.616191][ T31] usb 5-1: config 0 descriptor?? [ 160.621998][ T31] smsc75xx v1.0.0 [ 160.800903][ T3493] fuse: Bad value for 'group_id' [ 160.802597][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 160.802635][ T36] audit: type=1400 audit(1771907036.450:39874): avc: denied { create } for pid=3492 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 160.805920][ T3493] fuse: Bad value for 'group_id' [ 160.848174][ T36] audit: type=1400 audit(1771907036.500:39875): avc: denied { relabelfrom } for pid=3490 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 160.881065][ T36] audit: type=1400 audit(1771907036.500:39876): avc: denied { relabelto } for pid=3490 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 160.924939][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 161.025068][ T3486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.033666][ T3486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.042174][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 161.053015][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 161.062657][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 161.073496][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 161.083223][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 161.093553][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 161.103100][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 161.206303][ T10] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 161.261620][ T36] audit: type=1400 audit(1771907036.910:39877): avc: denied { setattr } for pid=3509 comm="syz.0.1020" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.291598][ T3515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.300165][ T3515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.320812][ T3516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.331024][ T3516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.349494][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.357961][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 161.359209][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.372777][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.392217][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.400104][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.404383][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.418542][ T10] usb 4-1: config 0 descriptor?? [ 161.424442][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.433737][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 161.444069][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 161.451627][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 161.522000][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 161.608163][ T3534] netlink: 'syz.1.1026': attribute type 46 has an invalid length. [ 161.645313][ T67] usb 5-1: USB disconnect, device number 19 [ 161.683949][ T36] audit: type=1400 audit(1771907037.330:39878): avc: denied { ioctl } for pid=3545 comm="syz.1.1031" path="socket:[28684]" dev="sockfs" ino=28684 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.730112][ T36] audit: type=1400 audit(1771907037.380:39879): avc: denied { append } for pid=3550 comm="syz.1.1032" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 161.765847][ T3556] Invalid argument reading file caps for ./file0 [ 161.774065][ T3557] Invalid argument reading file caps for ./file0 [ 161.831871][ T3556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.840448][ T3556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.996276][ T67] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.146257][ T67] usb 5-1: Using ep0 maxpacket: 32 [ 162.152535][ T67] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.165829][ T67] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.174952][ T67] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.183208][ T67] usb 5-1: Product: syz [ 162.187431][ T67] usb 5-1: Manufacturer: syz [ 162.192033][ T67] usb 5-1: SerialNumber: syz [ 162.197612][ T67] usb 5-1: config 0 descriptor?? [ 162.203249][ T67] hub 5-1:0.0: bad descriptor, ignoring hub [ 162.209247][ T67] hub 5-1:0.0: probe with driver hub failed with error -5 [ 162.376572][ T3568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.385600][ T3568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.393411][ T36] audit: type=1400 audit(1771907038.040:39880): avc: denied { map } for pid=3561 comm="syz.0.1035" path="socket:[29784]" dev="sockfs" ino=29784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 162.424848][ T3568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.438838][ T3568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.706308][ T67] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 162.715326][ T67] usb 5-1: device reset changed ep0 maxpacket size! [ 162.723631][ T67] usb 5-1: USB disconnect, device number 20 [ 162.744819][ T36] audit: type=1400 audit(1771907038.390:39881): avc: denied { write } for pid=3573 comm="syz.0.1038" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.866296][ T67] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 163.000830][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.009710][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.028111][ T67] usb 5-1: config 1 interface 0 altsetting 143 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 163.039768][ T67] usb 5-1: config 1 interface 0 altsetting 143 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.053043][ T67] usb 5-1: config 1 interface 0 has no altsetting 0 [ 163.061450][ T67] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 163.070801][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.079047][ T67] usb 5-1: Product: syz [ 163.083351][ T67] usb 5-1: Manufacturer: syz [ 163.088224][ T67] usb 5-1: SerialNumber: syz [ 163.304478][ T67] usbhid 5-1:1.0: can't add hid device: -71 [ 163.310539][ T67] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 163.320624][ T67] usb 5-1: USB disconnect, device number 21 [ 163.641461][ T3588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.650042][ T3588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.694935][ T3592] rust_binder: Error while translating object. [ 163.694962][ T3592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.701252][ T3592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:842 [ 163.711600][ T36] audit: type=1400 audit(1771907039.370:39882): avc: denied { setattr } for pid=3587 comm="syz.0.1042" name="PING" dev="sockfs" ino=28735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.746939][ T3595] random: crng reseeded on system resumption [ 163.832025][ T3600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.840864][ T3600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.849321][ T3600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'. [ 163.858369][ T3600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 163.910631][ T3603] hub 8-0:1.0: USB hub found [ 163.915339][ T3603] hub 8-0:1.0: 1 port detected [ 164.385828][ T3619] overlayfs: missing 'lowerdir' [ 164.454881][ T36] audit: type=1400 audit(1771907040.100:39883): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.482485][ T3626] syzkaller1: entered promiscuous mode [ 164.488192][ T3626] syzkaller1: entered allmulticast mode [ 164.511282][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 164.537122][ T67] usb 4-1: USB disconnect, device number 64 [ 164.545616][ T3626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.545650][ T3626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:664 [ 164.546034][ T3635] rust_binder: Write failure EFAULT in pid:857 [ 164.582719][ T3637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.597514][ T3637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.662858][ T3639] usb usb7: selecting invalid altsetting 7 [ 164.946282][ T10] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 165.097439][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 165.107969][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.121093][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 165.146278][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.154962][ T10] usb 4-1: config 0 descriptor?? [ 165.161058][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 165.176267][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 165.183734][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 165.256795][ T3650] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.263576][ T1215] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.702801][ T3657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.712516][ T3657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.751707][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.760551][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.316247][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.316249][ T1878] Bluetooth: hci0: command 0x1003 tx timeout [ 167.359806][ T3684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.369372][ T3684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.379130][ T3684] fuse: Unknown parameter '×À³c½0x0000000000000005' [ 167.386659][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 167.386675][ T36] audit: type=1400 audit(1771907043.040:39885): avc: denied { read } for pid=3683 comm="syz.0.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.437715][ T3690] netlink: 'syz.1.1077': attribute type 13 has an invalid length. [ 167.439513][ T3684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.463822][ T3684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.037033][ T3711] fuse: Bad value for 'fd' [ 168.094879][ T3712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2074 sclass=netlink_route_socket pid=3712 comm=syz.0.1084 [ 168.409799][ T67] usb 4-1: USB disconnect, device number 65 [ 168.449838][ T3731] tipc: Cannot configure node identity twice [ 168.504664][ T3739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.513169][ T3739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.706255][ T67] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 168.796390][ T389] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 168.856253][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 168.862819][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.873939][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.883910][ T67] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 168.893265][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.902415][ T67] usb 4-1: config 0 descriptor?? [ 168.926273][ T389] usb 5-1: device descriptor read/64, error -71 [ 169.124064][ T36] audit: type=1400 audit(1771907044.770:39886): avc: denied { map } for pid=3744 comm="syz.1.1096" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 169.166269][ T389] usb 5-1: device descriptor read/64, error -71 [ 169.280342][ T36] audit: type=1400 audit(1771907044.930:39887): avc: denied { relabelfrom } for pid=3752 comm="syz.1.1098" name="UNIX-STREAM" dev="sockfs" ino=30692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 169.280355][ T3753] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 169.314440][ T36] audit: type=1400 audit(1771907044.930:39888): avc: denied { relabelto } for pid=3752 comm="syz.1.1098" name="UNIX-STREAM" dev="sockfs" ino=30692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 169.346516][ T3714] tmpfs: Invalid gid '0x00000000ffffffff' [ 169.355373][ T36] audit: type=1400 audit(1771907045.000:39889): avc: denied { getopt } for pid=3713 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.361500][ T67] hid-multitouch 0003:1FD2:6007.0022: unknown global tag 0xe [ 169.385242][ T67] hid-multitouch 0003:1FD2:6007.0022: item 0 1 1 14 parsing failed [ 169.398721][ T67] hid-multitouch 0003:1FD2:6007.0022: probe with driver hid-multitouch failed with error -22 [ 169.406403][ T389] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 169.430200][ T36] audit: type=1400 audit(1771907045.080:39890): avc: denied { create } for pid=3759 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.457221][ T3762] SELinux: security_context_str_to_sid (syste_uÝGй ‰:) failed with errno=-22 [ 169.489766][ T3766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.498424][ T3766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.546261][ T389] usb 5-1: device descriptor read/64, error -71 [ 169.555741][ T67] usb 4-1: USB disconnect, device number 66 [ 169.769249][ T3770] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1106'. [ 169.796308][ T389] usb 5-1: device descriptor read/64, error -71 [ 169.879087][ T3782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 169.906373][ T389] usb usb5-port1: attempt power cycle [ 169.957771][ T3787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.966429][ T3787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.024506][ T36] audit: type=1400 audit(1771907045.670:39891): avc: denied { accept } for pid=3788 comm="syz.1.1114" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.028549][ T3789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.053495][ T3789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.067764][ T3789] can0: slcan on ttyS3. [ 170.106983][ T3789] can0 (unregistered): slcan off ttyS3. [ 170.135599][ T3793] bpf: Bad value for 'gid' [ 170.135606][ T36] audit: type=1400 audit(1771907045.780:39892): avc: denied { mounton } for pid=3790 comm="syz.3.1115" path="/syzcgroup/unified/syz3" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 170.248602][ T389] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 170.276241][ T3797] cgroup: subsys name conflicts with all [ 170.282648][ T3798] cgroup: subsys name conflicts with all [ 170.283889][ T389] usb 5-1: device descriptor read/8, error -71 [ 170.417367][ T389] usb 5-1: device descriptor read/8, error -71 [ 170.518837][ T3812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.527379][ T3812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.566251][ T67] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 170.650152][ T3814] can0: slcan on ttyS3. [ 170.656417][ T389] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 170.678618][ T389] usb 5-1: device descriptor read/8, error -71 [ 170.691055][ T36] audit: type=1400 audit(1771907046.340:39893): avc: denied { read } for pid=3817 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.697188][ T3813] can0 (unregistered): slcan off ttyS3. [ 170.714565][ T36] audit: type=1400 audit(1771907046.340:39894): avc: denied { open } for pid=3817 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.736349][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 170.758411][ T67] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 170.777407][ T67] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.790443][ T67] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.797174][ T67] usb 4-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 170.806273][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.817220][ T389] usb 5-1: device descriptor read/8, error -71 [ 170.820430][ T67] usb 4-1: config 0 descriptor?? [ 170.926361][ T389] usb usb5-port1: unable to enumerate USB device [ 171.094208][ T3846] rust_binder: Write failure EFAULT in pid:1106 [ 171.107075][ T3848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.122050][ T3848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.232567][ T67] wacom 0003:056A:00B0.0023: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 171.243248][ T67] wacom 0003:056A:00B0.0023: hidraw1: USB HID vf5.ff Device [HID 056a:00b0] on usb-dummy_hcd.3-1/input0 [ 171.255240][ T67] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B0.0023/input/input45 [ 171.434846][ T389] usb 4-1: USB disconnect, device number 67 [ 171.661793][ T3871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.670803][ T3871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.766304][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 171.916265][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 171.922678][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.933856][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.943886][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 171.955112][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.964312][ T9] usb 5-1: config 0 descriptor?? [ 171.973602][ T9] hub 5-1:0.0: USB hub found [ 172.121537][ T3903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=3903 comm=syz.3.1139 [ 172.172535][ T9] hub 5-1:0.0: 1 port detected [ 172.396259][ T67] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 172.486244][ T9] hub 5-1:0.0: activate --> -90 [ 172.536258][ T67] usb 4-1: device descriptor read/64, error -71 [ 172.736549][ T575] usb 5-1: USB disconnect, device number 26 [ 172.761818][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.770624][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.780706][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.786476][ T67] usb 4-1: device descriptor read/64, error -71 [ 172.789587][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.869282][ T3923] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1146'. [ 172.961738][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.973061][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.036254][ T67] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 173.137754][ T3950] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1157'. [ 173.166299][ T67] usb 4-1: device descriptor read/64, error -71 [ 173.337691][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 173.337708][ T36] audit: type=1400 audit(1771907048.990:39903): avc: denied { create } for pid=3962 comm="syz.0.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.389553][ T3964] @0Ù: renamed from bond_slave_1 [ 173.411071][ T3966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.419507][ T67] usb 4-1: device descriptor read/64, error -71 [ 173.419844][ T3966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.486343][ T575] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 173.526366][ T67] usb usb4-port1: attempt power cycle [ 173.556055][ T3976] erofs: dax options not supported [ 173.561384][ T3977] erofs: dax options not supported [ 173.598656][ T3981] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 173.608512][ T3981] SELinux: failed to load policy [ 173.647333][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.658458][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.668652][ T575] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.682219][ T575] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.691454][ T575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.700395][ T575] usb 5-1: config 0 descriptor?? [ 173.706181][ T575] hub 5-1:0.0: USB hub found [ 173.861759][ T3993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.870907][ T3993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.879142][ T67] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 173.906917][ T575] hub 5-1:0.0: 9 ports detected [ 173.912138][ T575] hub 5-1:0.0: insufficient power available to use all downstream ports [ 173.921338][ T67] usb 4-1: device descriptor read/8, error -71 [ 174.041905][ T3997] SELinux: policydb magic number 0x10000 does not match expected magic number 0xf97cff8c [ 174.052015][ T3997] SELinux: failed to load policy [ 174.057683][ T67] usb 4-1: device descriptor read/8, error -71 [ 174.077026][ T3999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.086323][ T3999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.113394][ T3957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.128212][ T3957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.140633][ T4004] 9pnet: Could not find request transport: gd [ 174.171253][ T36] audit: type=1400 audit(1771907049.820:39904): avc: denied { read } for pid=4005 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.198049][ T575] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 174.204438][ T575] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 174.214390][ T4010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.223027][ T4010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.231181][ T575] usb 5-1: USB disconnect, device number 27 [ 174.296340][ T67] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 174.317277][ T67] usb 4-1: device descriptor read/8, error -71 [ 174.447409][ T67] usb 4-1: device descriptor read/8, error -71 [ 174.556407][ T67] usb usb4-port1: unable to enumerate USB device [ 174.768492][ T36] audit: type=1400 audit(1771907050.420:39905): avc: denied { append } for pid=4021 comm="syz.0.1183" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 174.827752][ T4030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.838426][ T4030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.966270][ T67] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 175.117678][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 175.128300][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 175.137673][ T4018] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 175.163958][ T67] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.177608][ T67] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 175.191440][ T67] usb 5-1: can't read configurations, error -71 [ 175.203788][ T4034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.227243][ T4034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.290889][ T4036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.299886][ T4036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.451012][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.459651][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.468261][ T36] audit: type=1400 audit(1771907051.120:39906): avc: denied { read write } for pid=4050 comm="syz.0.1192" name="file1" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.491329][ T36] audit: type=1400 audit(1771907051.120:39907): avc: denied { open } for pid=4050 comm="syz.0.1192" path="/386/file1" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.576283][ T389] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 175.706257][ T389] usb 4-1: device descriptor read/64, error -71 [ 175.946265][ T389] usb 4-1: device descriptor read/64, error -71 [ 175.981923][ T4057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.990846][ T4057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.026266][ T67] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 176.176251][ T67] usb 5-1: Using ep0 maxpacket: 16 [ 176.182893][ T67] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.193851][ T67] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.196336][ T389] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 176.200498][ T67] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 176.217148][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.225778][ T67] usb 5-1: config 0 descriptor?? [ 176.336304][ T389] usb 4-1: device descriptor read/64, error -71 [ 176.522040][ T4061] netlink: 'syz.0.1196': attribute type 27 has an invalid length. [ 176.542710][ T4063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.551334][ T4063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.576279][ T389] usb 4-1: device descriptor read/64, error -71 [ 176.636443][ T67] hid-generic 0003:1E71:2009.0024: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 176.686330][ T389] usb usb4-port1: attempt power cycle [ 176.886868][ T10] usb 5-1: USB disconnect, device number 29 [ 177.026254][ T389] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 177.047388][ T389] usb 4-1: device descriptor read/8, error -71 [ 177.073041][ T4067] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1198'. [ 177.103444][ T4072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.112037][ T4072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.177383][ T389] usb 4-1: device descriptor read/8, error -71 [ 177.416279][ T389] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 177.437354][ T389] usb 4-1: device descriptor read/8, error -71 [ 177.567722][ T389] usb 4-1: device descriptor read/8, error -71 [ 177.676357][ T389] usb usb4-port1: unable to enumerate USB device [ 177.836268][ T575] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 177.849166][ T4081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.857735][ T4081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.987421][ T575] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.999101][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 178.010114][ T575] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 178.019199][ T575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.027870][ T575] usb 5-1: config 0 descriptor?? [ 178.033134][ T4079] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 178.041825][ T575] hub 5-1:0.0: USB hub found [ 178.242644][ T575] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 178.443694][ T4088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.452243][ T4088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.461313][ T575] usbhid 5-1:0.0: can't add hid device: -32 [ 178.467522][ T575] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 178.496530][ T575] usb 5-1: USB disconnect, device number 30 [ 178.596319][ T358] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 178.726254][ T358] usb 4-1: device descriptor read/64, error -71 [ 178.841283][ T36] audit: type=1400 audit(1771907054.490:39908): avc: denied { create } for pid=4091 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 178.880938][ T4097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.889573][ T4097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.898618][ T4097] netlink: 'syz.1.1209': attribute type 4 has an invalid length. [ 178.906421][ T4097] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1209'. [ 178.966260][ T358] usb 4-1: device descriptor read/64, error -71 [ 178.992093][ T4101] netlink: 'syz.0.1211': attribute type 27 has an invalid length. [ 179.073553][ T4115] sock: sock_set_timeout: `syz.4.1214' (pid 4115) tries to set negative timeout [ 179.077680][ T4114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.091232][ T4114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.206286][ T358] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 179.336293][ T358] usb 4-1: device descriptor read/64, error -71 [ 179.470475][ T4123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.479733][ T4123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.576257][ T358] usb 4-1: device descriptor read/64, error -71 [ 179.611348][ T4127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.619942][ T4127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.686332][ T358] usb usb4-port1: attempt power cycle [ 180.026300][ T358] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 180.047365][ T358] usb 4-1: device descriptor read/8, error -71 [ 180.107989][ T36] audit: type=1400 audit(1771907055.760:39909): avc: denied { mounton } for pid=4142 comm="syz.1.1226" path="/352/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 180.108503][ T4143] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.150817][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 180.187409][ T358] usb 4-1: device descriptor read/8, error -71 [ 180.307709][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.318748][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.327983][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.339580][ T10] usb 5-1: config 0 descriptor?? [ 180.340929][ T4156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.353762][ T4156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.362251][ T4156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1232'. [ 180.426278][ T358] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 180.447367][ T358] usb 4-1: device descriptor read/8, error -71 [ 180.547503][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 180.553564][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.562210][ T10] usb 5-1: USB disconnect, device number 31 [ 180.577379][ T358] usb 4-1: device descriptor read/8, error -71 [ 180.686385][ T358] usb usb4-port1: unable to enumerate USB device [ 180.884229][ T4158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4158 comm=syz.0.1233 [ 180.908662][ T4160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.917217][ T4160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.986273][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 181.137386][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.148352][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.157428][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.166085][ T10] usb 5-1: config 0 descriptor?? [ 181.440902][ T4164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1236'. [ 181.450817][ T4164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.459463][ T4164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.467989][ T4164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.476544][ T4164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.574110][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 181.580182][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.588855][ T10] usb 5-1: USB disconnect, device number 32 [ 181.616357][ T67] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 181.767683][ T67] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.779246][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 181.790401][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 181.799608][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.808321][ T67] usb 4-1: config 0 descriptor?? [ 181.813631][ T4162] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 181.821646][ T67] hub 4-1:0.0: USB hub found [ 182.023171][ T67] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 182.123311][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.131912][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.196247][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.196349][ T1878] Bluetooth: hci0: command 0x1003 tx timeout [ 182.233262][ T67] usbhid 4-1:0.0: can't add hid device: -32 [ 182.239272][ T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 182.267366][ T67] usb 4-1: USB disconnect, device number 80 [ 182.287242][ T4177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.295809][ T4177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.658549][ T4179] sit0: entered promiscuous mode [ 182.667001][ T4179] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 182.680309][ T4179] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1242'. [ 182.766750][ T4184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.775285][ T4184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.006251][ T67] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 183.157464][ T67] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 183.168648][ T67] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 183.178516][ T67] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 183.187709][ T575] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 183.195563][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.346228][ T575] usb 5-1: Using ep0 maxpacket: 16 [ 183.352543][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.363524][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.373330][ T575] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 183.382442][ T575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.391144][ T575] usb 5-1: config 0 descriptor?? [ 183.406582][ T67] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 183.414240][ T67] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input51 [ 183.426396][ T67] usb 4-1: USB disconnect, device number 81 [ 183.600846][ T4196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.609490][ T4196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.824910][ T4206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.833760][ T4206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.000438][ T575] usbhid 5-1:0.0: can't add hid device: -71 [ 184.006506][ T575] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 184.015063][ T575] usb 5-1: USB disconnect, device number 33 [ 184.156256][ T10] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 184.203544][ T4210] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 184.211379][ T4210] netlink: 'syz.0.1254': attribute type 2 has an invalid length. [ 184.307437][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.319002][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 184.329996][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.339083][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.351476][ T10] usb 4-1: config 0 descriptor?? [ 184.362953][ T4208] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.372740][ T10] hub 4-1:0.0: USB hub found [ 184.397960][ T4215] input: syz1 as /devices/virtual/input/input52 [ 184.424247][ T4220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.432783][ T4220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.572450][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 184.782556][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 184.788607][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 184.806246][ T575] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 184.816586][ T10] usb 4-1: USB disconnect, device number 82 [ 184.948641][ T36] audit: type=1400 audit(1771907060.600:39910): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 184.968629][ T575] usb 5-1: Using ep0 maxpacket: 32 [ 184.975138][ T575] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.986145][ T575] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.997604][ T575] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.006746][ T575] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 185.015099][ T575] usb 5-1: Product: syz [ 185.019359][ T575] usb 5-1: Manufacturer: syz [ 185.026877][ T575] hub 5-1:4.0: USB hub found [ 185.052079][ T4234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.060718][ T4234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.070330][ T36] audit: type=1400 audit(1771907060.720:39911): avc: denied { create } for pid=4233 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 185.098867][ T4240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.107482][ T4240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.228492][ T575] hub 5-1:4.0: 3 ports detected [ 185.233686][ T575] hub 5-1:4.0: insufficient power available to use all downstream ports [ 185.324218][ T36] audit: type=1400 audit(1771907060.970:39912): avc: denied { create } for pid=4242 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.428971][ T575] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 185.435697][ T575] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 185.456609][ T575] usb 5-1: USB disconnect, device number 34 [ 185.627251][ T36] audit: type=1400 audit(1771907061.280:39913): avc: denied { create } for pid=4245 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 185.665993][ T4256] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 185.676268][ T4256] SELinux: failed to load policy [ 185.682423][ T4256] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 185.692724][ T4256] SELinux: failed to load policy [ 185.709211][ T4260] netlink: 'syz.1.1268': attribute type 3 has an invalid length. [ 185.749185][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.757788][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.943108][ T4268] 9pnet_fd: Insufficient options for proto=fd [ 185.943434][ T4269] 9pnet_fd: Insufficient options for proto=fd [ 186.206287][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 186.359442][ T4285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.368629][ T4285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.370733][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.381260][ T4285] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 186.394907][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 186.402580][ T4285] loop6: detected capacity change from 0 to 7 [ 186.406563][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.414238][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.424158][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.430160][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.441201][ T10] usb 5-1: config 0 descriptor?? [ 186.447125][ T575] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 186.451199][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.467002][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 186.467551][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.486279][ T4285] loop6: unable to read partition table [ 186.490697][ T4271] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 186.492260][ T4285] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 186.500772][ T10] hub 5-1:0.0: USB hub found [ 186.516264][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.525435][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.533611][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.542806][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.551136][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.560305][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.568582][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.577782][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.585904][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.595083][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.614014][ T575] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.624045][ T575] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.630862][ T575] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 186.639973][ T575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.648699][ T575] usb 4-1: config 0 descriptor?? [ 186.723353][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 186.933714][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 186.939851][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 186.967008][ T10] usb 5-1: USB disconnect, device number 35 [ 187.208381][ T4290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.217120][ T4290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.270767][ T4277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.279356][ T4277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.327190][ T575] usbhid 4-1:0.0: can't add hid device: -71 [ 187.333258][ T575] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 187.341978][ T575] usb 4-1: USB disconnect, device number 83 [ 187.465388][ T4295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.474748][ T4295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.706260][ T45] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 187.758233][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.766783][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.776160][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.784768][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.792762][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.801251][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.809315][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.817805][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.825890][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.834710][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.843324][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.852214][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.865810][ T45] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 187.875717][ T45] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 187.893510][ T45] usb 5-1: config 220 has no interface number 2 [ 187.899833][ T45] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 187.909706][ T45] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 187.923605][ T45] usb 5-1: config 220 interface 0 has no altsetting 0 [ 187.930464][ T45] usb 5-1: config 220 interface 76 has no altsetting 0 [ 187.937365][ T45] usb 5-1: config 220 interface 1 has no altsetting 0 [ 187.954677][ T45] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 187.963781][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.971837][ T45] usb 5-1: Product: syz [ 187.976012][ T45] usb 5-1: Manufacturer: syz [ 187.980654][ T45] usb 5-1: SerialNumber: syz [ 188.186303][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 188.195552][ T45] usb 5-1: selecting invalid altsetting 0 [ 188.201393][ T45] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 188.207831][ T45] usb 5-1: No valid video chain found. [ 188.215961][ T45] usb 5-1: USB disconnect, device number 36 [ 188.336249][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 188.342656][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 188.354766][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 188.362334][ T4323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.375694][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.380725][ T4323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.397326][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.412162][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.416307][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.425566][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.440753][ T10] usb 4-1: Product: syz [ 188.444955][ T10] usb 4-1: Manufacturer: syz [ 188.450918][ T10] usb 4-1: SerialNumber: syz [ 188.718105][ T36] audit: type=1400 audit(1771907064.370:39914): avc: denied { shutdown } for pid=4330 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.986281][ T575] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 188.996103][ T10] usb 4-1: 0:2 : does not exist [ 189.003269][ T10] usb 4-1: USB disconnect, device number 84 [ 189.012161][ T918] udevd[918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.029191][ T4347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.029225][ T4347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1266 [ 189.098806][ T4361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.116804][ T4361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.137679][ T575] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.145697][ T575] usb 5-1: not running at top speed; connect to a high speed hub [ 189.154147][ T575] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 189.166611][ T575] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.175672][ T575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.183716][ T575] usb 5-1: Product: syz [ 189.187927][ T575] usb 5-1: Manufacturer: syz [ 189.192521][ T575] usb 5-1: SerialNumber: syz [ 189.401506][ T575] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 189.408474][ T575] usb 5-1: unit 0 not found! [ 189.415219][ T575] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 189.424775][ T575] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 189.434939][ T575] usb 5-1: USB disconnect, device number 37 [ 189.446667][ T918] udevd[918]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.513029][ T1215] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.519501][ T1215] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.653157][ T4369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.661788][ T4369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.671905][ T4369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.680790][ T4369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.146251][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 190.224296][ T4378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.232894][ T4378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.296655][ T10] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 190.310672][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 190.319799][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.329916][ T10] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 190.336840][ T10] usb 5-1: No valid video chain found. [ 190.766115][ T4384] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1313'. [ 190.795984][ T4388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.804649][ T4388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.324867][ T4391] rust_binder: 1131: no such ref 2 [ 191.330635][ T4391] rust_binder: 1131: no such ref 1 [ 191.556334][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.836292][ T67] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 191.996266][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 192.002792][ T67] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 192.010597][ T67] usb 4-1: can't read configurations, error -61 [ 192.146279][ T67] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 192.296256][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 192.302765][ T67] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 192.310591][ T67] usb 4-1: can't read configurations, error -61 [ 192.317098][ T67] usb usb4-port1: attempt power cycle [ 192.656273][ T67] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 192.676617][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 192.683174][ T67] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 192.691003][ T67] usb 4-1: can't read configurations, error -61 [ 192.826297][ T67] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 192.846631][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 192.853047][ T67] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 192.860868][ T67] usb 4-1: can't read configurations, error -61 [ 192.867338][ T67] usb usb4-port1: unable to enumerate USB device [ 192.919228][ T67] usb 5-1: USB disconnect, device number 38 [ 193.266382][ T67] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 193.396281][ T67] usb 5-1: device descriptor read/64, error -71 [ 193.636329][ T67] usb 5-1: device descriptor read/64, error -71 [ 193.876264][ T67] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 194.006265][ T67] usb 5-1: device descriptor read/64, error -71 [ 194.256258][ T67] usb 5-1: device descriptor read/64, error -71 [ 194.366337][ T67] usb usb5-port1: attempt power cycle [ 194.625489][ T36] audit: type=1400 audit(1771907070.260:39915): avc: denied { setattr } for pid=4400 comm="syz.3.1321" name="NETLINK" dev="sockfs" ino=34231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.706437][ T67] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 194.727307][ T67] usb 5-1: device descriptor read/8, error -71 [ 194.857336][ T67] usb 5-1: device descriptor read/8, error -71 [ 194.996275][ T45] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 195.096286][ T67] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 195.117317][ T67] usb 5-1: device descriptor read/8, error -71 [ 195.147356][ T45] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 195.158399][ T45] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 195.171539][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.178662][ T45] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 195.187844][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.197025][ T45] usb 4-1: config 0 descriptor?? [ 195.203909][ T4403] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 195.267243][ T67] usb 5-1: device descriptor read/8, error -71 [ 195.386337][ T67] usb usb5-port1: unable to enumerate USB device [ 195.615392][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 195.621765][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 195.632120][ T45] usb 4-1: USB disconnect, device number 89 [ 196.836269][ T45] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 196.987394][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.998960][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 197.010091][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.019279][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.030421][ T45] usb 5-1: config 0 descriptor?? [ 197.035618][ T4407] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 197.045206][ T45] hub 5-1:0.0: USB hub found [ 197.444740][ T45] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 197.654546][ T45] usbhid 5-1:0.0: can't add hid device: -32 [ 197.660544][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 197.686633][ T45] usb 5-1: USB disconnect, device number 43 [ 198.241299][ T4409] overlayfs: conflicting lowerdir path [ 207.300094][ T45] usb 2-1: USB disconnect, device number 39 [ 329.156305][ T37] INFO: task syz-executor:290 blocked for more than 122 seconds. [ 329.164082][ T37] Not tainted syzkaller #0 [ 329.169579][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.178473][ T37] task:syz-executor state:D stack:0 pid:290 tgid:290 ppid:1 flags:0x00000004 [ 329.188789][ T37] Call Trace: [ 329.192076][ T37] [ 329.195024][ T37] __schedule+0x134f/0x1ea0 [ 329.199737][ T37] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.204774][ T37] ? __kasan_check_write+0x18/0x20 [ 329.216515][ T36] audit: type=1400 audit(1771907204.860:39916): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[767]" dev="pipefs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 329.239597][ T37] ? __mutex_add_waiter+0x184/0x2a0 [ 329.244839][ T37] ? __kasan_check_write+0x18/0x20 [ 329.256259][ T37] ? trace_contention_begin+0xc0/0xc0 [ 329.261688][ T37] schedule+0xc5/0x240 [ 329.265747][ T37] schedule_preempt_disabled+0x14/0x30 [ 329.285897][ T37] __mutex_lock+0x960/0x1bb0 [ 329.316182][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 329.322990][ T37] ? stack_depot_save_flags+0x38/0x800 [ 329.332741][ T37] ? kasan_save_track+0x3e/0x80 [ 329.337781][ T37] ? kasan_save_free_info+0x4a/0x60 [ 329.342993][ T37] ? __kasan_slab_free+0x5f/0x80 [ 329.348466][ T37] ? kfree+0x158/0x440 [ 329.352549][ T37] ? umount_tree+0xe09/0xf90 [ 329.357297][ T37] ? path_umount+0xeb3/0xf50 [ 329.361904][ T37] ? __x64_sys_umount+0x12e/0x180 [ 329.367096][ T37] ? x64_sys_call+0x2ab8/0x2ee0 [ 329.371969][ T37] ? do_syscall_64+0x57/0xf0 [ 329.376702][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 329.382804][ T37] __mutex_lock_slowpath+0xe/0x20 [ 329.387969][ T37] mutex_lock+0x113/0x1d0 [ 329.392305][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 329.397287][ T37] synchronize_rcu_expedited+0x296/0x970 [ 329.402922][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 329.409230][ T37] ? __kasan_slab_free+0x6a/0x80 [ 329.414183][ T37] ? kfree+0x158/0x440 [ 329.418392][ T37] ? __put_mountpoint+0x1c8/0x230 [ 329.423428][ T37] ? shrink_dentry_list+0x4c7/0x4f0 [ 329.428748][ T37] ? __kasan_check_write+0x18/0x20 [ 329.433869][ T37] namespace_unlock+0x248/0x430 [ 329.438858][ T37] ? umount_tree+0xf21/0xf90 [ 329.443457][ T37] ? umount_tree+0xf90/0xf90 [ 329.448190][ T37] ? __detach_mounts+0x610/0x610 [ 329.453139][ T37] path_umount+0xecd/0xf50 [ 329.457686][ T37] ? __cfi_path_umount+0x10/0x10 [ 329.462666][ T37] ? putname+0x113/0x150 [ 329.467043][ T37] __x64_sys_umount+0x12e/0x180 [ 329.471905][ T37] ? __cfi___x64_sys_umount+0x10/0x10 [ 329.477405][ T37] ? __kasan_check_read+0x15/0x20 [ 329.482439][ T37] ? arch_exit_to_user_mode_prepare+0x22/0xa0 [ 329.488663][ T37] x64_sys_call+0x2ab8/0x2ee0 [ 329.493357][ T37] do_syscall_64+0x57/0xf0 [ 329.497900][ T37] ? clear_bhb_loop+0x50/0xa0 [ 329.502586][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 329.508622][ T37] RIP: 0033:0x7f3aa3f9d897 [ 329.513040][ T37] RSP: 002b:00007ffe54fee528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 329.521574][ T37] RAX: ffffffffffffffda RBX: 00007f3aa4031ef0 RCX: 00007f3aa3f9d897 [ 329.529650][ T37] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe54fee5e0 [ 329.537749][ T37] RBP: 00007ffe54fee5e0 R08: 00007ffe54fef5e0 R09: 00000000ffffffff [ 329.545730][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe54fef670 [ 329.553815][ T37] R13: 00007f3aa4031ef0 R14: 0000000000000005 R15: 00007ffe54fef6b0 [ 329.561867][ T37] [ 329.564894][ T37] INFO: task kworker/1:5:575 blocked for more than 123 seconds. [ 329.572636][ T37] Not tainted syzkaller #0 [ 329.577656][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.586486][ T37] task:kworker/1:5 state:D stack:0 pid:575 tgid:575 ppid:2 flags:0x00004000 [ 329.596758][ T37] Workqueue: events _RNSNvXs6_NtCs1ewLyjEZ7Le_6kernel9workqueueINtNtNtB9_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessEINtB7_15WorkItemPointerKy0_E3run11reify_fnptrB15_ [ 329.615365][ T37] Call Trace: [ 329.618740][ T37] [ 329.621696][ T37] __schedule+0x134f/0x1ea0 [ 329.626343][ T37] ? __sched_text_start+0x10/0x10 [ 329.631381][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 329.636628][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 329.642096][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 329.647438][ T37] schedule+0xc5/0x240 [ 329.651520][ T37] synchronize_rcu_expedited+0x6eb/0x970 [ 329.657293][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 329.663456][ T37] ? __kasan_slab_free+0x6a/0x80 [ 329.668532][ T37] ? kfree+0x158/0x440 [ 329.672615][ T37] ? krealloc_noprof+0xfa/0x130 [ 329.677650][ T37] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 329.682958][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 329.689228][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 329.695137][ T37] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xed/0x200 [ 329.708315][ T37] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 329.721837][ T37] synchronize_rcu+0x77/0x2f0 [ 329.726669][ T37] ? __cfi_synchronize_rcu+0x10/0x10 [ 329.731972][ T37] ? __wake_up_pollfree+0x157/0x190 [ 329.737364][ T37] _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtCs1ewLyjEZ7Le_6kernel6rbtree6RBTreelINtNtNtBL_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEEEB1M_+0x466/0x8e0 [ 329.755391][ T37] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtCs1ewLyjEZ7Le_6kernel6rbtree6RBTreelINtNtNtBL_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEEEB1M_+0x10/0x10 [ 329.774025][ T37] ? krealloc_noprof+0xfa/0x130 [ 329.779058][ T37] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 329.787430][ T37] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xed/0x200 [ 329.800811][ T37] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 329.809208][ T37] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 329.822754][ T37] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 329.836298][ T37] ? _RNvXs4_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_11ThreadErrorNtB7_13DeliverToRead6cancel+0xb3/0x1a0 [ 329.848243][ T37] ? _RNvMs4_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtB9_6rbtree4NodeyINtNtNtB9_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1A_4node4NodeEEENtNtB7_9allocator7KmallocE10into_innerB1A_+0xb0/0x290 [ 329.869707][ T37] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtCs1ewLyjEZ7Le_6kernel6rbtree6RBTreemINtNtNtBL_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEEB1Q_+0x16d/0x320 [ 329.890622][ T37] ? _RNvMs4_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtB9_6rbtree4NodeyINtNtNtB9_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1A_4node4NodeEEENtNtB7_9allocator7KmallocE10into_innerB1A_+0xd9/0x290 [ 329.912038][ T37] ? _RNvXs2_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VecINtNtCskDQVOo9v79Q_16rust_binder_main11range_alloc5RangeNtNtBU_10allocation14AllocationInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropBU_+0x22b/0x330 [ 329.934928][ T37] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtCs1ewLyjEZ7Le_6kernel6rbtree6RBTreejmEECskDQVOo9v79Q_16rust_binder_main+0xcb/0x1b0 [ 329.949224][ T37] ? __cfi__RNvXs2_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VecINtNtCskDQVOo9v79Q_16rust_binder_main11range_alloc5RangeNtNtBU_10allocation14AllocationInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropBU_+0x10/0x10 [ 329.972440][ T37] ? __kasan_check_write+0x18/0x20 [ 329.977679][ T37] ? _raw_spin_lock+0x92/0x120 [ 329.982459][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 329.987795][ T37] ? _RNvXs3_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7ProcessNtNtCs1ewLyjEZ7Le_6kernel9workqueue8WorkItem3run+0x2023/0x3310 [ 330.001386][ T37] ? __asan_memcpy+0x5a/0x80 [ 330.005981][ T37] _RNvXs3_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7ProcessNtNtCs1ewLyjEZ7Le_6kernel9workqueue8WorkItem3run+0x2984/0x3310 [ 330.019436][ T37] ? netif_rx_internal+0xab/0x340 [ 330.024480][ T37] ? dev_forward_skb+0x80/0x80 [ 330.029375][ T37] ? __cfi__RNvXs3_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7ProcessNtNtCs1ewLyjEZ7Le_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 330.043142][ T37] ? packet_sock_destruct+0x90/0x170 [ 330.048611][ T37] ? __netif_rx+0x30/0x230 [ 330.053055][ T37] ? loopback_xmit+0x37c/0x4f0 [ 330.058017][ T37] ? __kasan_check_read+0x15/0x20 [ 330.063128][ T37] ? dev_hard_start_xmit+0x6e5/0x760 [ 330.068713][ T37] ? __dev_queue_xmit+0x1a21/0x3690 [ 330.073934][ T37] ? kvm_sched_clock_read+0x15/0x30 [ 330.079297][ T37] ? sched_clock_noinstr+0xd/0x30 [ 330.084343][ T37] ? sched_clock+0x44/0x60 [ 330.088945][ T37] ? sched_clock_cpu+0x75/0x400 [ 330.093812][ T37] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 330.099366][ T37] ? update_irq_load_avg+0xc9/0xee0 [ 330.104579][ T37] ? __kasan_check_read+0x15/0x20 [ 330.109745][ T37] ? kthread_is_per_cpu+0xbe/0xf0 [ 330.114786][ T37] ? can_migrate_task+0x28d/0xf20 [ 330.119955][ T37] ? __pick_eevdf+0x950/0x950 [ 330.124645][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 330.130010][ T37] ? sched_balance_rq+0x4636/0x4ce0 [ 330.135249][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 330.141473][ T37] ? update_curr+0x50c/0x9e0 [ 330.146067][ T37] ? update_load_avg+0x506/0x1990 [ 330.151252][ T37] ? __calc_delta+0x280/0x280 [ 330.155934][ T37] ? dequeue_entity+0x809/0x1380 [ 330.161084][ T37] ? dequeue_entity+0x809/0x1380 [ 330.166034][ T37] ? dequeue_entities+0x1d7/0x1400 [ 330.171279][ T37] ? _RNvMNtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB2_8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessE12container_ofBT_+0xdb/0x380 [ 330.185697][ T37] ? xfd_validate_state+0x68/0x140 [ 330.190904][ T37] ? __kasan_check_write+0x18/0x20 [ 330.196028][ T37] ? __switch_to+0xc4f/0x1300 [ 330.200902][ T37] ? __cfi___switch_to+0x10/0x10 [ 330.205841][ T37] ? kthread_data+0x54/0xc0 [ 330.210428][ T37] _RNSNvXs6_NtCs1ewLyjEZ7Le_6kernel9workqueueINtNtNtB9_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessEINtB7_15WorkItemPointerKy0_E3run11reify_fnptrB15_+0x98/0x170 [ 330.228573][ T37] ? __cfi__RNSNvXs6_NtCs1ewLyjEZ7Le_6kernel9workqueueINtNtNtB9_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessEINtB7_15WorkItemPointerKy0_E3run11reify_fnptrB15_+0x10/0x10 [ 330.247371][ T37] ? __schedule+0x1357/0x1ea0 [ 330.252069][ T37] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 330.257623][ T37] ? kick_pool+0xb9/0x550 [ 330.261962][ T37] process_scheduled_works+0x7d4/0x1020 [ 330.267656][ T37] worker_thread+0xc70/0x10b0 [ 330.272351][ T37] ? __cfi_try_to_wake_up+0x10/0x10 [ 330.277702][ T37] kthread+0x2c9/0x370 [ 330.281781][ T37] ? __cfi_worker_thread+0x10/0x10 [ 330.287016][ T37] ? __cfi_kthread+0x10/0x10 [ 330.291609][ T37] ret_from_fork+0x64/0xa0 [ 330.296041][ T37] ? __cfi_kthread+0x10/0x10 [ 330.300841][ T37] ret_from_fork_asm+0x1a/0x30 [ 330.305613][ T37] [ 330.308798][ T37] INFO: task kworker/u8:24:1215 blocked for more than 124 seconds. [ 330.317124][ T37] Not tainted syzkaller #0 [ 330.322070][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.330907][ T37] task:kworker/u8:24 state:D stack:0 pid:1215 tgid:1215 ppid:2 flags:0x00004000 [ 330.341186][ T37] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 330.348368][ T37] Call Trace: [ 330.351653][ T37] [ 330.354580][ T37] __schedule+0x134f/0x1ea0 [ 330.359280][ T37] ? __sched_text_start+0x10/0x10 [ 330.364314][ T37] ? __sched_text_start+0x10/0x10 [ 330.369504][ T37] ? kthread_data+0x54/0xc0 [ 330.374033][ T37] ? wq_worker_sleeping+0x69/0x260 [ 330.379279][ T37] schedule+0xc5/0x240 [ 330.383377][ T37] schedule_timeout+0xc7/0x3b0 [ 330.388273][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 330.393660][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.399358][ T37] ? queue_delayed_work_on+0x168/0x1f0 [ 330.404829][ T37] ? preempt_schedule_thunk+0x1a/0x40 [ 330.410341][ T37] wait_for_common+0x369/0x650 [ 330.415124][ T37] ? wait_for_completion+0x40/0x40 [ 330.421573][ T37] ? start_poll_synchronize_srcu+0x30/0x30 [ 330.427546][ T37] wait_for_completion+0x1c/0x40 [ 330.432498][ T37] synchronize_srcu_expedited+0x20b/0x290 [ 330.439083][ T37] ? __cfi_synchronize_srcu_expedited+0x10/0x10 [ 330.445354][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 330.451111][ T37] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 330.456662][ T37] ? ktime_get_mono_fast_ns+0x2c3/0x2e0 [ 330.462229][ T37] synchronize_srcu+0x2c3/0x4c0 [ 330.467243][ T37] ? __cfi_synchronize_srcu+0x10/0x10 [ 330.472659][ T37] ? __kasan_check_write+0x18/0x20 [ 330.477911][ T37] ? _raw_spin_lock+0x92/0x120 [ 330.482681][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 330.488009][ T37] ? psi_task_switch+0x59e/0xa10 [ 330.492957][ T37] ? finish_task_switch+0x139/0x760 [ 330.498307][ T37] fsnotify_mark_destroy_workfn+0x10a/0x310 [ 330.504221][ T37] ? __schedule+0x1357/0x1ea0 [ 330.509062][ T37] ? __cfi_fsnotify_mark_destroy_workfn+0x10/0x10 [ 330.515494][ T37] ? kick_pool+0xb9/0x550 [ 330.519963][ T37] process_scheduled_works+0x7d4/0x1020 [ 330.525531][ T37] worker_thread+0xc70/0x10b0 [ 330.530359][ T37] kthread+0x2c9/0x370 [ 330.534435][ T37] ? __cfi_worker_thread+0x10/0x10 [ 330.539688][ T37] ? __cfi_kthread+0x10/0x10 [ 330.544305][ T37] ret_from_fork+0x64/0xa0 [ 330.548879][ T37] ? __cfi_kthread+0x10/0x10 [ 330.553478][ T37] ret_from_fork_asm+0x1a/0x30 [ 330.558408][ T37] [ 330.561438][ T37] INFO: task kworker/u8:31:1222 blocked for more than 124 seconds. [ 330.569458][ T37] Not tainted syzkaller #0 [ 330.574403][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.583422][ T37] task:kworker/u8:31 state:D stack:0 pid:1222 tgid:1222 ppid:2 flags:0x00004000 [ 330.593706][ T37] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 330.601286][ T37] Call Trace: [ 330.604565][ T37] [ 330.607639][ T37] __schedule+0x134f/0x1ea0 [ 330.612152][ T37] ? __sched_text_start+0x10/0x10 [ 330.617308][ T37] ? wake_up_process+0x14/0x20 [ 330.622085][ T37] ? kthread_data+0x54/0xc0 [ 330.626756][ T37] ? wq_worker_sleeping+0x69/0x260 [ 330.631906][ T37] schedule+0xc5/0x240 [ 330.635973][ T37] schedule_timeout+0xc7/0x3b0 [ 330.640936][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 330.646425][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.651975][ T37] ? queue_delayed_work_on+0x168/0x1f0 [ 330.657560][ T37] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 330.663375][ T37] wait_for_common+0x369/0x650 [ 330.668272][ T37] ? wait_for_completion+0x40/0x40 [ 330.673387][ T37] ? start_poll_synchronize_srcu+0x30/0x30 [ 330.679314][ T37] ? dequeue_entities+0x1d7/0x1400 [ 330.684434][ T37] ? xfd_validate_state+0x68/0x140 [ 330.689658][ T37] wait_for_completion+0x1c/0x40 [ 330.694606][ T37] synchronize_srcu_expedited+0x20b/0x290 [ 330.700484][ T37] ? __cfi_synchronize_srcu_expedited+0x10/0x10 [ 330.706955][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 330.712426][ T37] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 330.717966][ T37] ? __cfi___switch_to+0x10/0x10 [ 330.722913][ T37] ? ktime_get_mono_fast_ns+0x2c3/0x2e0 [ 330.728589][ T37] synchronize_srcu+0x2c3/0x4c0 [ 330.733466][ T37] ? __cfi_synchronize_srcu+0x10/0x10 [ 330.738968][ T37] ? __kasan_check_write+0x18/0x20 [ 330.744089][ T37] ? _raw_spin_lock+0x92/0x120 [ 330.748982][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 330.754183][ T37] ? __schedule+0x1357/0x1ea0 [ 330.758997][ T37] fsnotify_connector_destroy_workfn+0x48/0xb0 [ 330.765166][ T37] process_scheduled_works+0x7d4/0x1020 [ 330.770887][ T37] worker_thread+0xc70/0x10b0 [ 330.775584][ T37] kthread+0x2c9/0x370 [ 330.779801][ T37] ? __cfi_worker_thread+0x10/0x10 [ 330.784925][ T37] ? __cfi_kthread+0x10/0x10 [ 330.789656][ T37] ret_from_fork+0x64/0xa0 [ 330.794085][ T37] ? __cfi_kthread+0x10/0x10 [ 330.798835][ T37] ret_from_fork_asm+0x1a/0x30 [ 330.803649][ T37] [ 330.806864][ T37] INFO: task syz.3.1323:4404 blocked for more than 124 seconds. [ 330.814525][ T37] Not tainted syzkaller #0 [ 330.819683][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.828462][ T37] task:syz.3.1323 state:D stack:0 pid:4404 tgid:4404 ppid:293 flags:0x00000004 [ 330.838770][ T37] Call Trace: [ 330.842058][ T37] [ 330.844983][ T37] __schedule+0x134f/0x1ea0 [ 330.849699][ T37] ? __sched_text_start+0x10/0x10 [ 330.854762][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 330.860349][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 330.865901][ T37] ? __call_rcu_common+0xd7/0x720 [ 330.871076][ T37] ? __kasan_check_write+0x18/0x20 [ 330.876370][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 330.882184][ T37] schedule+0xc5/0x240 [ 330.886411][ T37] synchronize_rcu_expedited+0x517/0x970 [ 330.892074][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 330.898393][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 330.904482][ T37] ? __kasan_check_write+0x18/0x20 [ 330.909761][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 330.915928][ T37] ? shrink_dentry_list+0x4c7/0x4f0 [ 330.921309][ T37] ? __kasan_check_write+0x18/0x20 [ 330.926516][ T37] namespace_unlock+0x248/0x430 [ 330.931385][ T37] ? umount_tree+0xf21/0xf90 [ 330.935970][ T37] ? umount_tree+0xf90/0xf90 [ 330.940744][ T37] ? __detach_mounts+0x610/0x610 [ 330.945683][ T37] ? call_rcu+0x14/0x20 [ 330.950003][ T37] dissolve_on_fput+0xcf/0x110 [ 330.954792][ T37] __fput+0x86a/0xa00 [ 330.958984][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.964581][ T37] ____fput+0x20/0x30 [ 330.968808][ T37] task_work_run+0x1e5/0x260 [ 330.973415][ T37] ? __cfi_task_work_run+0x10/0x10 [ 330.978696][ T37] ? __kasan_check_read+0x15/0x20 [ 330.983750][ T37] resume_user_mode_work+0x35/0x50 [ 330.989087][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 330.994577][ T37] do_syscall_64+0x63/0xf0 [ 330.999158][ T37] ? clear_bhb_loop+0x50/0xa0 [ 331.003850][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.009893][ T37] RIP: 0033:0x7fe462b9c629 [ 331.014318][ T37] RSP: 002b:00007ffc1de8e768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 331.022853][ T37] RAX: 0000000000000000 RBX: 00007ffc1de8e850 RCX: 00007fe462b9c629 [ 331.030950][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 331.039042][ T37] RBP: 000000000002fe0b R08: 0000000000000001 R09: 0000000000000000 [ 331.047122][ T37] R10: 0000001b2e120000 R11: 0000000000000246 R12: 00007ffc1de8e890 [ 331.055096][ T37] R13: 00007fe462e15fac R14: 000000000002fe41 R15: 00007fe462e15fa0 [ 331.063186][ T37] [ 331.066329][ T37] INFO: task syz.4.1325:4408 blocked for more than 124 seconds. [ 331.073972][ T37] Not tainted syzkaller #0 [ 331.079117][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.087904][ T37] task:syz.4.1325 state:D stack:0 pid:4408 tgid:4408 ppid:2462 flags:0x00000004 [ 331.098198][ T37] Call Trace: [ 331.101501][ T37] [ 331.104467][ T37] __schedule+0x134f/0x1ea0 [ 331.109213][ T37] ? __sched_text_start+0x10/0x10 [ 331.114276][ T37] ? __cfi_radix_tree_node_rcu_free+0x10/0x10 [ 331.120521][ T37] schedule+0xc5/0x240 [ 331.124607][ T37] schedule_timeout+0xc7/0x3b0 [ 331.129513][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 331.134899][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.140595][ T37] wait_for_common+0x369/0x650 [ 331.145394][ T37] ? delete_node+0x2b3/0xa60 [ 331.150115][ T37] ? __cfi_refcount_dec_not_one+0x10/0x10 [ 331.155847][ T37] ? wait_for_completion+0x40/0x40 [ 331.161116][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 331.166319][ T37] ? __virt_addr_valid+0xc5/0x380 [ 331.171351][ T37] ? kasan_addr_to_slab+0x11/0x80 [ 331.176547][ T37] wait_for_completion+0x1c/0x40 [ 331.181511][ T37] __flush_work+0x712/0xb10 [ 331.186013][ T37] ? flush_work+0x40/0x40 [ 331.190546][ T37] ? __cfi_wq_barrier_func+0x10/0x10 [ 331.195851][ T37] ? __try_to_del_timer_sync+0x2d6/0x440 [ 331.201653][ T37] flush_delayed_work+0x8f/0xb0 [ 331.206629][ T37] fsnotify_wait_marks_destroyed+0x19/0x20 [ 331.212466][ T37] fsnotify_destroy_group+0x21b/0x350 [ 331.218055][ T37] ? __cfi_fsnotify_destroy_group+0x10/0x10 [ 331.223971][ T37] ? call_rcu+0x14/0x20 [ 331.228274][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 331.233922][ T37] ? __fput+0x6ed/0xa00 [ 331.238241][ T37] ? __cfi_inotify_release+0x10/0x10 [ 331.243546][ T37] inotify_release+0x3c/0x50 [ 331.248305][ T37] __fput+0x1fb/0xa00 [ 331.252297][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.258008][ T37] ____fput+0x20/0x30 [ 331.262005][ T37] task_work_run+0x1e5/0x260 [ 331.266736][ T37] ? __cfi_task_work_run+0x10/0x10 [ 331.271857][ T37] ? __kasan_check_read+0x15/0x20 [ 331.277018][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 331.283097][ T37] resume_user_mode_work+0x35/0x50 [ 331.288350][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 331.293829][ T37] do_syscall_64+0x63/0xf0 [ 331.298389][ T37] ? clear_bhb_loop+0x50/0xa0 [ 331.303094][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.309172][ T37] RIP: 0033:0x7f21b279c629 [ 331.313598][ T37] RSP: 002b:00007ffec99b3bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 331.322152][ T37] RAX: 0000000000000000 RBX: 00007f21b2a17da0 RCX: 00007f21b279c629 [ 331.330244][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 331.338316][ T37] RBP: 00007f21b2a17da0 R08: 0000000000000006 R09: 0000000000000000 [ 331.346399][ T37] R10: 00007f21b2a17cb0 R11: 0000000000000246 R12: 0000000000030951 [ 331.354381][ T37] R13: 00007f21b2a1609c R14: 00000000000306ab R15: 00007f21b2a16090 [ 331.362476][ T37] [ 331.365497][ T37] INFO: task syz.4.1325:4409 blocked for more than 125 seconds. [ 331.373233][ T37] Not tainted syzkaller #0 [ 331.378258][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.387028][ T37] task:syz.4.1325 state:D stack:0 pid:4409 tgid:4408 ppid:2462 flags:0x00000006 [ 331.397289][ T37] Call Trace: [ 331.400880][ T37] [ 331.403819][ T37] __schedule+0x134f/0x1ea0 [ 331.408512][ T37] ? __sched_text_start+0x10/0x10 [ 331.413553][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 331.419151][ T37] ? __kasan_check_write+0x18/0x20 [ 331.424275][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 331.430220][ T37] schedule+0xc5/0x240 [ 331.434302][ T37] synchronize_rcu_expedited+0x517/0x970 [ 331.440079][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 331.446370][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 331.452461][ T37] kern_unmount_array+0x2ea/0x420 [ 331.457625][ T37] ovl_free_fs+0x3fe/0x6d0 [ 331.462067][ T37] ovl_fill_super+0x3690/0x38f0 [ 331.467066][ T37] ? __cfi_ovl_fill_super+0x10/0x10 [ 331.472281][ T37] ? __kasan_check_write+0x18/0x20 [ 331.477517][ T37] ? _raw_spin_lock+0x92/0x120 [ 331.482296][ T37] ? sget_fc+0x9ce/0xad0 [ 331.486671][ T37] ? __cfi_set_anon_super_fc+0x10/0x10 [ 331.492158][ T37] get_tree_nodev+0xcb/0x170 [ 331.496889][ T37] ? __cfi_ovl_fill_super+0x10/0x10 [ 331.502104][ T37] ovl_get_tree+0x20/0x30 [ 331.506579][ T37] vfs_get_tree+0x9e/0x290 [ 331.511012][ T37] do_new_mount+0x251/0xb30 [ 331.515511][ T37] ? security_capable+0x44/0x130 [ 331.520633][ T37] path_mount+0x682/0x1010 [ 331.525070][ T37] __se_sys_mount+0x2bf/0x480 [ 331.529878][ T37] ? __x64_sys_mount+0xf0/0xf0 [ 331.534664][ T37] ? __kasan_check_write+0x18/0x20 [ 331.539923][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 331.545569][ T37] __x64_sys_mount+0xc3/0xf0 [ 331.550312][ T37] x64_sys_call+0x2021/0x2ee0 [ 331.555014][ T37] do_syscall_64+0x57/0xf0 [ 331.559562][ T37] ? clear_bhb_loop+0x50/0xa0 [ 331.564251][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.570292][ T37] RIP: 0033:0x7f21b279c629 [ 331.574719][ T37] RSP: 002b:00007f21b36d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.583275][ T37] RAX: ffffffffffffffda RBX: 00007f21b2a15fa0 RCX: 00007f21b279c629 [ 331.591338][ T37] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 331.599396][ T37] RBP: 00007f21b2832b39 R08: 0000200000000180 R09: 0000000000000000 [ 331.607489][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.615468][ T37] R13: 00007f21b2a16038 R14: 00007f21b2a15fa0 R15: 00007ffec99b3a98 [ 331.623556][ T37] [ 331.626681][ T37] NMI backtrace for cpu 1 [ 331.626692][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 331.626715][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.626726][ T37] Call Trace: [ 331.626732][ T37] [ 331.626738][ T37] __dump_stack+0x21/0x30 [ 331.626764][ T37] dump_stack_lvl+0x140/0x1c0 [ 331.626785][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 331.626808][ T37] dump_stack+0x19/0x20 [ 331.626828][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 331.626844][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 331.626866][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 331.626891][ T37] ? sched_show_task+0x371/0x530 [ 331.626912][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 331.626933][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.626954][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.626974][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 331.627001][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 331.627022][ T37] watchdog+0xdad/0xf00 [ 331.627046][ T37] ? __kasan_check_write+0x18/0x20 [ 331.627070][ T37] ? __cfi_watchdog+0x10/0x10 [ 331.627094][ T37] ? __kasan_check_read+0x15/0x20 [ 331.627113][ T37] ? __kthread_parkme+0x137/0x180 [ 331.627138][ T37] ? schedule+0xc5/0x240 [ 331.627156][ T37] kthread+0x2c9/0x370 [ 331.627172][ T37] ? __cfi_watchdog+0x10/0x10 [ 331.627196][ T37] ? __cfi_kthread+0x10/0x10 [ 331.627212][ T37] ret_from_fork+0x64/0xa0 [ 331.627234][ T37] ? __cfi_kthread+0x10/0x10 [ 331.627250][ T37] ret_from_fork_asm+0x1a/0x30 [ 331.627275][ T37] [ 331.627282][ T37] Sending NMI from CPU 1 to CPUs 0: [ 331.747109][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.1.1316:4391] [ 331.747182][ C0] CPU#0 Utilization every 22s during lockup: [ 331.747212][ C0] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 331.747253][ C0] #2: 100% system, 0% softirq, 1% hardirq, 0% idle [ 331.747298][ C0] #3: 100% system, 1% softirq, 1% hardirq, 0% idle [ 331.747344][ C0] #4: 100% system, 1% softirq, 1% hardirq, 0% idle [ 331.747383][ C0] #5: 100% system, 1% softirq, 1% hardirq, 0% idle [ 331.747428][ C0] Modules linked in: [ 331.747459][ C0] CPU: 0 UID: 0 PID: 4391 Comm: syz.1.1316 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 331.747530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.747572][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x7cb/0xe90 [ 331.747682][ C0] Code: ff ff c6 44 16 06 02 66 c7 84 24 90 00 00 00 00 01 48 8b 44 24 48 0f b6 04 10 84 c0 75 5c 80 3f 00 74 0e c6 44 16 06 f8 f3 90 <41> ff c5 75 d3 eb 6d be 02 00 00 00 e8 f4 8a 3e fc 48 8d bc 24 90 [ 331.747709][ C0] RSP: 0018:ffffc9000f234260 EFLAGS: 00000206 [ 331.747757][ C0] RAX: 0000000000000000 RBX: ffffc9000f234300 RCX: ffff88811afa1300 [ 331.747797][ C0] RDX: dffffc0000000000 RSI: 1ffff92001e46858 RDI: ffff88811bb98088 [ 331.747837][ C0] RBP: ffffc9000f234370 R08: ffff88811bb98088 R09: 1ffff11023773011 [ 331.747876][ C0] R10: dffffc0000000000 R11: ffffed1023773012 R12: 0000000000000000 [ 331.747922][ C0] R13: 00000000ffff966a R14: 1ffff11023773011 R15: 1ffffffff0e9cdf9 [ 331.747962][ C0] FS: 00007f8a321c26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 331.748003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.748034][ C0] CR2: 00007f8a321a0ff8 CR3: 000000012be5a000 CR4: 00000000003526b0 [ 331.748079][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000ff40 [ 331.748110][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 331.748140][ C0] Call Trace: [ 331.748166][ C0] [ 331.748187][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 331.748252][ C0] ? _raw_spin_unlock+0x45/0x60 [ 331.748298][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_9NodeDeath11set_cleared+0x533/0x820 [ 331.748394][ C0] _raw_spin_lock+0x115/0x120 [ 331.748435][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.748488][ C0] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread19push_work_if_looper+0x202/0x620 [ 331.748583][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtBL_4node9NodeDeathEKy2_E21remove_internal_innerBL_+0x10/0x10 [ 331.748684][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread19push_work_if_looper+0x10/0x10 [ 331.748764][ C0] ? __kasan_check_write+0x18/0x20 [ 331.748822][ C0] ? _raw_spin_lock+0x92/0x120 [ 331.748860][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.748904][ C0] ? __kasan_check_write+0x18/0x20 [ 331.748987][ C0] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x3aa3/0xa690 [ 331.749114][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 331.749341][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 331.749403][ C0] ? kernel_text_address+0xa9/0xe0 [ 331.749457][ C0] ? __kernel_text_address+0x11/0x40 [ 331.749509][ C0] ? unwind_get_return_address+0x51/0x90 [ 331.749556][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 331.749607][ C0] ? arch_stack_walk+0x10a/0x170 [ 331.749681][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 331.749724][ C0] ? kernel_text_address+0xa9/0xe0 [ 331.749771][ C0] ? __kernel_text_address+0x11/0x40 [ 331.749825][ C0] ? unwind_get_return_address+0x51/0x90 [ 331.749872][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 331.749927][ C0] ? arch_stack_walk+0x10a/0x170 [ 331.749993][ C0] ? stack_depot_save_flags+0x38/0x800 [ 331.750054][ C0] ? kasan_save_track+0x4f/0x80 [ 331.750109][ C0] ? kasan_save_track+0x3e/0x80 [ 331.750164][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 331.750215][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 331.750278][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 331.750353][ C0] ? krealloc_noprof+0x8d/0x130 [ 331.750414][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 331.750504][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x7fb/0x1cf0 [ 331.750576][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x460/0x5da0 [ 331.750635][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 331.750709][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 331.750782][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 331.750851][ C0] ? do_syscall_64+0x57/0xf0 [ 331.750898][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.751005][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 331.751057][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 331.751101][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 331.751124][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 331.751244][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 331.751350][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 331.751446][ C0] ? __kasan_check_write+0x18/0x20 [ 331.751499][ C0] ? _raw_spin_lock+0x92/0x120 [ 331.751543][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.751586][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xe7b/0x1cf0 [ 331.751657][ C0] ? __asan_memcpy+0x5a/0x80 [ 331.751706][ C0] ? _raw_spin_unlock+0x45/0x60 [ 331.751748][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 331.751794][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 331.751875][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 331.752009][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 331.752065][ C0] ? __asan_memcpy+0x5a/0x80 [ 331.752120][ C0] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 331.752190][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 331.752268][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 331.752323][ C0] ? kernel_text_address+0xa9/0xe0 [ 331.752370][ C0] ? __kernel_text_address+0x11/0x40 [ 331.752421][ C0] ? unwind_get_return_address+0x51/0x90 [ 331.752474][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 331.752520][ C0] ? arch_stack_walk+0x10a/0x170 [ 331.752591][ C0] ? stack_depot_save_flags+0x38/0x800 [ 331.752664][ C0] ? kasan_save_track+0x4f/0x80 [ 331.752714][ C0] ? kasan_save_track+0x3e/0x80 [ 331.752775][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 331.752824][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 331.752887][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 331.752945][ C0] ? krealloc_noprof+0x8d/0x130 [ 331.753000][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 331.753083][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0x268/0x18d0 [ 331.753138][ C0] ? do_dentry_open+0x97b/0x1510 [ 331.753182][ C0] ? vfs_open+0x86/0x240 [ 331.753224][ C0] ? path_openat+0x2bb1/0x34f0 [ 331.753289][ C0] ? do_filp_open+0x1f5/0x440 [ 331.753356][ C0] ? do_sys_openat2+0x134/0x1d0 [ 331.753400][ C0] ? __x64_sys_openat+0x13a/0x170 [ 331.753445][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 331.753508][ C0] ? do_syscall_64+0x57/0xf0 [ 331.753546][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.753631][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 331.753678][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 331.753743][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 331.753799][ C0] ? stack_depot_save+0x12/0x20 [ 331.753853][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 331.753932][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 331.754022][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 331.754096][ C0] ? update_curr+0x50c/0x9e0 [ 331.754159][ C0] ? update_load_avg+0x506/0x1990 [ 331.754212][ C0] ? __calc_delta+0x280/0x280 [ 331.754283][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 331.754339][ C0] ? update_curr+0x50c/0x9e0 [ 331.754402][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 331.754453][ C0] ? __cfi_min_vruntime_cb_rotate+0x1/0x10 [ 331.754519][ C0] ? __enqueue_entity+0x58a/0x630 [ 331.754588][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 331.754643][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 331.754700][ C0] ? update_curr+0xf8/0x9e0 [ 331.754762][ C0] ? xfd_validate_state+0x68/0x140 [ 331.754818][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 331.754863][ C0] ? __kasan_check_write+0x18/0x20 [ 331.754911][ C0] ? __switch_to+0xc4f/0x1300 [ 331.754983][ C0] ? __cfi___switch_to+0x10/0x10 [ 331.755044][ C0] ? psi_task_switch+0x59e/0xa10 [ 331.755096][ C0] ? _raw_spin_unlock+0x45/0x60 [ 331.755141][ C0] ? finish_task_switch+0x139/0x760 [ 331.755218][ C0] ? __switch_to_asm+0x3d/0x70 [ 331.755279][ C0] ? __schedule+0x1357/0x1ea0 [ 331.755332][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 331.755381][ C0] ? __asan_memcpy+0x5a/0x80 [ 331.755463][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 331.755542][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 331.755597][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 331.755664][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 331.755728][ C0] ? schedule+0xc5/0x240 [ 331.755775][ C0] ? futex_unqueue+0x136/0x160 [ 331.755837][ C0] ? ioctl_has_perm+0x39a/0x500 [ 331.755893][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 331.755944][ C0] ? futex_wait+0x2ac/0x7b0 [ 331.756009][ C0] ? __cfi_futex_wait+0x10/0x10 [ 331.756082][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 331.756132][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 331.756182][ C0] ? do_futex+0x32a/0x510 [ 331.756237][ C0] ? __cfi_do_futex+0x10/0x10 [ 331.756285][ C0] ? expand_files+0xd5/0x6e0 [ 331.756359][ C0] ? __fget_files+0x2c5/0x340 [ 331.756437][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 331.756482][ C0] ? security_file_ioctl+0x3e/0x110 [ 331.756521][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 331.756576][ C0] __se_sys_ioctl+0x135/0x1b0 [ 331.756640][ C0] __x64_sys_ioctl+0x7f/0xa0 [ 331.756697][ C0] x64_sys_call+0x1878/0x2ee0 [ 331.756759][ C0] do_syscall_64+0x57/0xf0 [ 331.756806][ C0] ? clear_bhb_loop+0x50/0xa0 [ 331.756869][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.756956][ C0] RIP: 0033:0x7f8a3379c629 [ 331.756993][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.757030][ C0] RSP: 002b:00007f8a321c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.757083][ C0] RAX: ffffffffffffffda RBX: 00007f8a33a16090 RCX: 00007f8a3379c629 [ 331.757118][ C0] RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000004 [ 331.757147][ C0] RBP: 00007f8a33832b39 R08: 0000000000000000 R09: 0000000000000000 [ 331.757175][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.757216][ C0] R13: 00007f8a33a16128 R14: 00007f8a33a16090 R15: 00007ffecdf201c8 [ 331.757255][ C0] [ 332.898689][ C0] NMI backtrace for cpu 0 [ 332.898705][ C0] CPU: 0 UID: 0 PID: 4391 Comm: syz.1.1316 Tainted: G L syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 332.898730][ C0] Tainted: [L]=SOFTLOCKUP [ 332.898736][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.898746][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x7cb/0xe90 [ 332.898771][ C0] Code: ff ff c6 44 16 06 02 66 c7 84 24 90 00 00 00 00 01 48 8b 44 24 48 0f b6 04 10 84 c0 75 5c 80 3f 00 74 0e c6 44 16 06 f8 f3 90 <41> ff c5 75 d3 eb 6d be 02 00 00 00 e8 f4 8a 3e fc 48 8d bc 24 90 [ 332.898784][ C0] RSP: 0018:ffffc9000f234260 EFLAGS: 00000206 [ 332.898798][ C0] RAX: 0000000000000000 RBX: ffffc9000f234300 RCX: ffff88811afa1300 [ 332.898810][ C0] RDX: dffffc0000000000 RSI: 1ffff92001e46858 RDI: ffff88811bb98088 [ 332.898822][ C0] RBP: ffffc9000f234370 R08: ffff88811bb98088 R09: 1ffff11023773011 [ 332.898834][ C0] R10: dffffc0000000000 R11: ffffed1023773012 R12: 0000000000000000 [ 332.898850][ C0] R13: 00000000ffffbf18 R14: 1ffff11023773011 R15: 1ffffffff0e9cdf9 [ 332.898862][ C0] FS: 00007f8a321c26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 332.898875][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.898886][ C0] CR2: 00007f8a321a0ff8 CR3: 000000012be5a000 CR4: 00000000003526b0 [ 332.898900][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000ff40 [ 332.898909][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 332.898919][ C0] Call Trace: [ 332.898926][ C0] [ 332.898935][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 332.898954][ C0] ? _raw_spin_unlock+0x45/0x60 [ 332.898968][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_9NodeDeath11set_cleared+0x533/0x820 [ 332.899002][ C0] _raw_spin_lock+0x115/0x120 [ 332.899016][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 332.899031][ C0] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread19push_work_if_looper+0x202/0x620 [ 332.899062][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtBL_4node9NodeDeathEKy2_E21remove_internal_innerBL_+0x10/0x10 [ 332.899096][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread19push_work_if_looper+0x10/0x10 [ 332.899123][ C0] ? __kasan_check_write+0x18/0x20 [ 332.899142][ C0] ? _raw_spin_lock+0x92/0x120 [ 332.899155][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 332.899169][ C0] ? __kasan_check_write+0x18/0x20 [ 332.899186][ C0] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x3aa3/0xa690 [ 332.899224][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 332.899301][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 332.899320][ C0] ? kernel_text_address+0xa9/0xe0 [ 332.899337][ C0] ? __kernel_text_address+0x11/0x40 [ 332.899354][ C0] ? unwind_get_return_address+0x51/0x90 [ 332.899371][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 332.899386][ C0] ? arch_stack_walk+0x10a/0x170 [ 332.899411][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 332.899429][ C0] ? kernel_text_address+0xa9/0xe0 [ 332.899446][ C0] ? __kernel_text_address+0x11/0x40 [ 332.899463][ C0] ? unwind_get_return_address+0x51/0x90 [ 332.899479][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 332.899493][ C0] ? arch_stack_walk+0x10a/0x170 [ 332.899515][ C0] ? stack_depot_save_flags+0x38/0x800 [ 332.899533][ C0] ? kasan_save_track+0x4f/0x80 [ 332.899552][ C0] ? kasan_save_track+0x3e/0x80 [ 332.899571][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 332.899587][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 332.899608][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 332.899629][ C0] ? krealloc_noprof+0x8d/0x130 [ 332.899648][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 332.899676][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x7fb/0x1cf0 [ 332.899701][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x460/0x5da0 [ 332.899718][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 332.899739][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 332.899758][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 332.899780][ C0] ? do_syscall_64+0x57/0xf0 [ 332.899793][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 332.899822][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 332.899844][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 332.899864][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 332.899884][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 332.899914][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 332.899964][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 332.899998][ C0] ? __kasan_check_write+0x18/0x20 [ 332.900017][ C0] ? _raw_spin_lock+0x92/0x120 [ 332.900031][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 332.900045][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xe7b/0x1cf0 [ 332.900072][ C0] ? __asan_memcpy+0x5a/0x80 [ 332.900090][ C0] ? _raw_spin_unlock+0x45/0x60 [ 332.900105][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 332.900121][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 332.900149][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 332.900197][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 332.900216][ C0] ? __asan_memcpy+0x5a/0x80 [ 332.900234][ C0] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 332.900257][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 332.900284][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 332.900303][ C0] ? kernel_text_address+0xa9/0xe0 [ 332.900322][ C0] ? __kernel_text_address+0x11/0x40 [ 332.900339][ C0] ? unwind_get_return_address+0x51/0x90 [ 332.900357][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 332.900383][ C0] ? arch_stack_walk+0x10a/0x170 [ 332.900406][ C0] ? stack_depot_save_flags+0x38/0x800 [ 332.900424][ C0] ? kasan_save_track+0x4f/0x80 [ 332.900443][ C0] ? kasan_save_track+0x3e/0x80 [ 332.900462][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 332.900477][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 332.900497][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 332.900517][ C0] ? krealloc_noprof+0x8d/0x130 [ 332.900535][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 332.900564][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0x268/0x18d0 [ 332.900581][ C0] ? do_dentry_open+0x97b/0x1510 [ 332.900596][ C0] ? vfs_open+0x86/0x240 [ 332.900608][ C0] ? path_openat+0x2bb1/0x34f0 [ 332.900630][ C0] ? do_filp_open+0x1f5/0x440 [ 332.900651][ C0] ? do_sys_openat2+0x134/0x1d0 [ 332.900666][ C0] ? __x64_sys_openat+0x13a/0x170 [ 332.900680][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 332.900700][ C0] ? do_syscall_64+0x57/0xf0 [ 332.900713][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 332.900741][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 332.900757][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 332.900779][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 332.900798][ C0] ? stack_depot_save+0x12/0x20 [ 332.900815][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 332.900842][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 332.900866][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 332.900884][ C0] ? update_curr+0x50c/0x9e0 [ 332.900905][ C0] ? update_load_avg+0x506/0x1990 [ 332.900921][ C0] ? __calc_delta+0x280/0x280 [ 332.900943][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 332.900960][ C0] ? update_curr+0x50c/0x9e0 [ 332.900981][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 332.900997][ C0] ? __cfi_min_vruntime_cb_rotate+0x1/0x10 [ 332.901019][ C0] ? __enqueue_entity+0x58a/0x630 [ 332.901041][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 332.901058][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 332.901076][ C0] ? update_curr+0xf8/0x9e0 [ 332.901096][ C0] ? xfd_validate_state+0x68/0x140 [ 332.901114][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 332.901129][ C0] ? __kasan_check_write+0x18/0x20 [ 332.901146][ C0] ? __switch_to+0xc4f/0x1300 [ 332.901166][ C0] ? __cfi___switch_to+0x10/0x10 [ 332.901185][ C0] ? psi_task_switch+0x59e/0xa10 [ 332.901202][ C0] ? _raw_spin_unlock+0x45/0x60 [ 332.901215][ C0] ? finish_task_switch+0x139/0x760 [ 332.901231][ C0] ? __switch_to_asm+0x3d/0x70 [ 332.901251][ C0] ? __schedule+0x1357/0x1ea0 [ 332.901266][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 332.901285][ C0] ? __asan_memcpy+0x5a/0x80 [ 332.901303][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 332.901322][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 332.901337][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 332.901358][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 332.901379][ C0] ? schedule+0xc5/0x240 [ 332.901395][ C0] ? futex_unqueue+0x136/0x160 [ 332.901414][ C0] ? ioctl_has_perm+0x39a/0x500 [ 332.901430][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 332.901445][ C0] ? futex_wait+0x2ac/0x7b0 [ 332.901465][ C0] ? __cfi_futex_wait+0x10/0x10 [ 332.901484][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 332.901500][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 332.901516][ C0] ? do_futex+0x32a/0x510 [ 332.901532][ C0] ? __cfi_do_futex+0x10/0x10 [ 332.901548][ C0] ? expand_files+0xd5/0x6e0 [ 332.901570][ C0] ? __fget_files+0x2c5/0x340 [ 332.901592][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 332.901605][ C0] ? security_file_ioctl+0x3e/0x110 [ 332.901619][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 332.901637][ C0] __se_sys_ioctl+0x135/0x1b0 [ 332.901658][ C0] __x64_sys_ioctl+0x7f/0xa0 [ 332.901678][ C0] x64_sys_call+0x1878/0x2ee0 [ 332.901698][ C0] do_syscall_64+0x57/0xf0 [ 332.901711][ C0] ? clear_bhb_loop+0x50/0xa0 [ 332.901725][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 332.901747][ C0] RIP: 0033:0x7f8a3379c629 [ 332.901760][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.901772][ C0] RSP: 002b:00007f8a321c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.901787][ C0] RAX: ffffffffffffffda RBX: 00007f8a33a16090 RCX: 00007f8a3379c629 [ 332.901799][ C0] RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000004 [ 332.901809][ C0] RBP: 00007f8a33832b39 R08: 0000000000000000 R09: 0000000000000000 [ 332.901818][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.901827][ C0] R13: 00007f8a33a16128 R14: 00007f8a33a16090 R15: 00007ffecdf201c8 [ 332.901845][ C0] [ 332.910877][ T36] audit: type=1400 audit(1771907208.550:39917): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 334.002646][ T36] audit: type=1400 audit(1771907208.550:39918): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.024325][ T36] audit: type=1400 audit(1771907208.550:39919): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.046200][ T36] audit: type=1400 audit(1771907208.550:39920): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.067222][ T36] audit: type=1400 audit(1771907208.550:39921): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 334.087946][ T36] audit: type=1400 audit(1771907208.550:39922): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 334.111181][ T36] audit: type=1400 audit(1771907208.550:39923): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1