last executing test programs: 5m22.163873775s ago: executing program 1 (id=106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x4e24, 0x0, 0x1, 0x4, 0xa, 0x0, 0x20}, {0xbd1, 0x0, 0x40000003, 0x0, 0x0, 0x4}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="020e28090700000029bd7000fedbdf2505000500ffa000000a004e230000000556e69bab0000000000000000000000aa040000000839872397f92c6a69bc0e6c5f8e53c70a280143db93257e4099597f090eab4881a8787313fa50155559dba9e8c57b99ea7cb058e959a71fd76c556e143c07b0be63e2bb9157a5"], 0x38}}, 0x8000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @remote}, 0x3}}, 0x2e) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3}}, 0x2e) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8010}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000400)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000001c0)=0xc, 0x12) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@exit_looper, @exit_looper], 0x1f, 0x0, &(0x7f0000000100)="497f645117bb67320bc735884759eb111bde5da2e828e5064a4e061f83f372"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000580)={@flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @fda={0x66646185, 0x2, 0x2, 0x27}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 5m22.100386976s ago: executing program 1 (id=108): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="04032dbd7000ffdbdf256200000008000300", @ANYRES32=r1, @ANYBLOB="0600b400a90b0000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000014000103000000000000000000"], 0x14}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/118, 0x76, 0x1000002, 0x20}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x28, 0x92}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/reserved_size', 0x208201, 0x118) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = dup(r4) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xd5) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, r6, 0xa3fa2000) 5m22.059583056s ago: executing program 1 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4008}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x1000}, {r0, 0x661}, {r0, 0x7094}, {0xffffffffffffffff, 0x2}], 0x6, &(0x7f0000000180), &(0x7f00000001c0)={[0x2]}, 0x8) 5m22.037686267s ago: executing program 1 (id=110): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) chroot(0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 5m22.037312737s ago: executing program 1 (id=111): creat(&(0x7f0000000000)='./file0\x00', 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)) 5m21.880266869s ago: executing program 1 (id=113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007213500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1, 0x0, 0x0, 0xf0ff}, 0x0) 5m21.880198329s ago: executing program 32 (id=113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007213500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1, 0x0, 0x0, 0xf0ff}, 0x0) 4m30.92261759s ago: executing program 4 (id=918): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="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", 0x2d9}, {&(0x7f0000000bc0)="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", 0x1de}, {&(0x7f0000000540)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4130d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9dffcbd6120262f89f77e1810fbbd86ae21f58af3bd7b012f706baf6532e483ed110", 0xc1}], 0x3, 0x0, 0x0, 0x900}, 0xe0}], 0x1, 0x0) 4m30.92189467s ago: executing program 4 (id=919): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="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", 0x2d9}, {&(0x7f0000000bc0)="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", 0x1de}, {&(0x7f0000000540)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4130d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9dffcbd6120262f89f77e1810fbbd86ae21f58af3bd7b012f706baf6532e483ed1106f9b9204", 0xc5}], 0x3, 0x0, 0x0, 0x900}, 0xb00}], 0x1, 0x0) 4m30.92142924s ago: executing program 4 (id=920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x7}) (async) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x2d}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x9, 0x0, 0xe}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x33}}, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) 4m30.860292201s ago: executing program 4 (id=922): r0 = syz_open_dev$evdev(&(0x7f0000001a40), 0x2, 0xa040) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001a80)=0x800) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timer_create(0x3, 0x0, &(0x7f0000000200)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000017200)) sync() move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @a}}) 4m30.853562701s ago: executing program 4 (id=924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c277"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {0x6, 0xabd4, 0x7f, 0x4624}, 0x29, [0x800, 0x0, 0x5, 0x80000001, 0x2, 0x101, 0x7, 0xa, 0x3, 0x6, 0x7fffffff, 0x725, 0x9, 0x5, 0x1, 0x80, 0xa00000, 0x3, 0x7, 0x0, 0x1, 0x7f, 0xffffffff, 0x401, 0x3, 0x10, 0x5, 0x5, 0x54e, 0x3, 0xfff, 0xd664, 0xfffffffd, 0x2, 0x3, 0x8, 0x7fffffff, 0x3, 0x1406, 0x6, 0x3, 0xffffab79, 0x486b, 0x9, 0x400, 0xa, 0x1ff, 0xd478, 0x0, 0x1918, 0x1, 0x26ed, 0xfffffff8, 0x1, 0x80000000, 0x1, 0x4976faed, 0x5, 0x300000, 0x3, 0xff, 0xa8, 0x8, 0x16], [0x4, 0x7f, 0x2, 0x6, 0x6, 0xfffffff7, 0x401, 0x800, 0x4, 0x5, 0x1, 0x7, 0xffffc661, 0x2003, 0x80000001, 0x396, 0x9559, 0xe, 0x8, 0x40, 0x6, 0xfffffff9, 0x3, 0x7, 0x5, 0x400, 0x3, 0x79b, 0x6, 0x3, 0x6, 0x2, 0x8, 0x100, 0x56, 0x5, 0xf99c, 0x6731fe12, 0xb5b, 0xf1a0, 0xb, 0xffff7fff, 0x6b, 0x6, 0x4, 0x3, 0x0, 0xe3, 0xc, 0x7b6, 0xa, 0xb, 0xffff, 0x1, 0xa7, 0x7, 0xffff, 0x100000, 0x7, 0x0, 0xf5, 0x0, 0x9f, 0x10000], [0x40, 0x9, 0x9, 0x3, 0x8, 0x80000000, 0x80000001, 0xc, 0x3, 0x6, 0x80000001, 0x3, 0x8001, 0x80, 0xc, 0x7fff, 0x1, 0x71, 0x401, 0x2, 0x5db30db7, 0xfffff801, 0x5, 0x40, 0x9, 0x20000, 0x1, 0x2, 0xfff, 0x4, 0xf9dc, 0x2, 0x0, 0x3ff, 0x7, 0x69, 0x1ff, 0x2, 0x101, 0x9c, 0x5, 0x9, 0x3, 0x0, 0x6, 0xc3f, 0xffffffff, 0x2, 0x5, 0x100, 0x3, 0x200, 0xd0e, 0x3ff, 0x12, 0x3, 0x5, 0x4, 0x2, 0xb0000, 0x101, 0x3, 0x2, 0x2], [0x0, 0x1, 0x10000, 0x2, 0x0, 0xcda, 0x2, 0x4, 0x10000, 0x3, 0x7, 0x6, 0x9, 0x1000, 0x101, 0x9, 0x311a245e, 0x2, 0x80000001, 0x7, 0x10, 0xd4, 0xff, 0x4, 0x8, 0x6, 0x6, 0x0, 0x8, 0x81, 0x5, 0x6, 0x1, 0x8, 0xffffffff, 0xaa7c, 0xfffffffe, 0x4, 0x97, 0x0, 0x0, 0xb, 0x575df1c3, 0x0, 0x4, 0xe, 0x3, 0x6, 0xfffffff7, 0x9, 0x3, 0x5, 0x28, 0x0, 0xfffffffc, 0x7, 0x8, 0x1000, 0x66, 0x401, 0x2, 0x2, 0x5, 0xfffffffa]}, 0x45c) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m30.780291132s ago: executing program 4 (id=930): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)=0x1) setns(r1, 0x24020000) getcwd(&(0x7f0000000000)=""/133, 0x85) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x2, &(0x7f00000000c0)=[0xee00, 0x0]) setregid(0x0, r3) setresgid(0xee00, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9) lseek(r2, 0xbe0, 0x3) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000044}, 0x10) tgkill(r4, r4, 0x21) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x400000000000151, 0x122, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 4m30.746489292s ago: executing program 33 (id=930): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)=0x1) setns(r1, 0x24020000) getcwd(&(0x7f0000000000)=""/133, 0x85) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x2, &(0x7f00000000c0)=[0xee00, 0x0]) setregid(0x0, r3) setresgid(0xee00, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9) lseek(r2, 0xbe0, 0x3) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000044}, 0x10) tgkill(r4, r4, 0x21) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x400000000000151, 0x122, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1m19.850823857s ago: executing program 5 (id=3540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181041, 0x0) readv(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x0, 0x6, 0x9, '\x00', 0x1001}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020f00000a000000000000000000000005000500000000000a000000001e0000fc0100000000000000000000000000010000000000000000030006000000000002004e24640101010000000000000000b8a4305199db4db539f78b940e305fc953a5785b2170e073b9487585aa0780379f7954fbc26be6a7c04d2444a6f05ab771590a772793a16d71bdf6dbab810d7a339e63e883140a0632ccae3d4b43a56d063f93fb57dd3d20b1e70d1ba107cf90787674b850c4ccd4bc18d9f3d12d2310bc1da07ec5b460495062ffd20e1f19bef6180742b26ddc2f927b097d1e29911f71e0c1"], 0x50}}, 0x20090) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x1, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x40) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000280)={0x9}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)) r8 = syz_open_pts(r7, 0x101000) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xd84922c34241052b, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xe02, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r12, 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000e) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000080)={0x7}) 1m18.884124564s ago: executing program 5 (id=3550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r2, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/102, 0x66}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/158, 0x9e}, 0xffffff01}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000160001000000000000000000e0000002000000400000000000000000ac01aa000000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="67acb0715191b676a78d52f5cd5fb74acff563ed39cde08624d2f6be4b356abc901ecd33f9b1226a8e30a43fb7d0e8be16820b63d667220a42bba5f5dfc11dd10ef16b5a556538ce842c4ee516a68728f76928ad7f11f4d18dd4dbeadace8aa6b085f3048d27e035825e626c17510c014c42bc2433d18baff57e4711b7d55affe50e9457e2dea8e72741b69566162b480783f3193faff3cebc4e718c86d181b01b0c9d90b63db8df", @ANYRES8=r0, @ANYRES64=r4, @ANYRES64=r5, @ANYBLOB="36a0e8dda52fd2fa16b866fe32aaeb8815b407b3565d25", @ANYRESDEC, @ANYRESHEX=r6, @ANYRES16=r6]) 1m18.436779781s ago: executing program 5 (id=3552): bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xa50f}, {0x6}]}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES16], 0x0) 1m15.413488162s ago: executing program 5 (id=3604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000004909000000000000000000000a00806e817e99e240"], 0x14}, 0x1, 0x0, 0x0, 0xc094}, 0x26048000) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x8) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async) open(&(0x7f0000000280)='./file0/file0/file0\x00', 0x303000, 0x0) (async) creat(&(0x7f0000000180)='./file0\x00', 0x8b) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.321880243s ago: executing program 5 (id=3605): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m15.216436765s ago: executing program 5 (id=3606): socket$inet(0x2, 0x4000000000000001, 0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.216208165s ago: executing program 34 (id=3606): socket$inet(0x2, 0x4000000000000001, 0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 10.244488979s ago: executing program 6 (id=4731): symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='.\x00') r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, 0x0, &(0x7f0000000080)) 10.19215749s ago: executing program 6 (id=4732): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xf648a000) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000b89000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x22b1f000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x189003, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000400)="0c76d22d48e57f42d2f12a09585ba95962d9e7210822031d184c04123c4e78ed628eb7232d9d38c1dd229b269403d3ac796a4f9edb61a43033427f44d6a16d6c05ab90c6c8", 0x45}], 0x1}}], 0x1, 0xc8040) (async) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.15887032s ago: executing program 6 (id=4733): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="c0", 0x1}], 0x1}}], 0x1, 0x200400c1) 10.064155432s ago: executing program 6 (id=4736): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000180000000000000004dbdf251d01190047"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000180)) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x3, 0x4, 0x4, 0xb, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bb9, 0x0, {0x6, 0x2b, 0x1, 0x2, 0x0, 0x9, 0x0, @in6=@empty, @in6=@mcast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x58}}, 0x0) (async, rerun: 64) timerfd_create(0x9, 0x80000) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) (async) getsockopt$inet_udp_int(r3, 0x11, 0x65, 0x0, 0x0) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async, rerun: 64) r6 = userfaultfd(0x80000) close_range(r6, r2, 0x0) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 10.002459463s ago: executing program 6 (id=4738): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) read(0xffffffffffffffff, &(0x7f0000002600)=""/4096, 0x1000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 9.948058944s ago: executing program 6 (id=4739): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x4048841) sendmmsg$inet(r0, &(0x7f00000083c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001040)="a02e", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1802}}], 0x2, 0x44) 4.341379948s ago: executing program 2 (id=4795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup3(r1, r0, 0x0) connect$inet(r2, &(0x7f0000005340)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) chroot(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x1, "ff00f7000000000000000200af88009300"}) r5 = syz_open_pts(r4, 0x141601) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r6 = eventfd2(0x3, 0x1) write$eventfd(r6, &(0x7f0000000000)=0x8, 0x8) ioctl$TCSETSF(r5, 0x541d, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0xfffffffffffffff8) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x4a, 0x0, 0x101}}) ioctl$TIOCCONS(r5, 0x541d) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 4.272057098s ago: executing program 2 (id=4796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) creat(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x808c0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f3de9a1f8f646eabcfff132eaeb8fef54f81186ccb38ce0b75862e2bdaed5674f35f245ddb770ce05e68188d7a9ded7b5345f253a3208e7a0391b16804322280fb83c10cf12bd04362c66bd4b9168abbb10e1fa2ac6a5b91533229027642555cac639499b91a9d55b", @ANYRESOCT=r5, @ANYBLOB=',aname=wfdno,\x00']) stat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)) r6 = userfaultfd(0x80000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="008482"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, &(0x7f0000000080)=0x7ffb, 0x4) syz_usb_disconnect(r7) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000649000/0x400000)=nil) ppoll(&(0x7f00000001c0)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x8000000, 0x9, 0x9, 0x6, 0x2, 0xd, 0xffff}}) 3.889495955s ago: executing program 0 (id=4801): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xffffffffffffffea, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0xfffffffffffffffd, 0xe}, @fda={0x66646185, 0x8, 0x3, 0x3d}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 3.864413565s ago: executing program 0 (id=4802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a0002000000000002000a000500010001"], 0x28}}, 0x0) 3.800167956s ago: executing program 0 (id=4803): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, 0x0, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x0, 0x0, 0x0, 0x0, 0x14e1, 0x6000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xfb, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0xb, {0x9, 0x21, 0xc, 0x9, 0x1, {0x22, 0xf91}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x20, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x6, 0x9}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x6, 0xa, 0x6e5007e6c45df47e, 0x3}, 0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="050f27000314100c08c1087b1d2c0b10010c143c740000000703100b0000000000000000130000"], 0x1, [{0xd4, &(0x7f0000000200)=@string={0xd4, 0x3, "78b42eba3adc625aa8bfb91f3291b790ea647c180077c40a09bfdec378234860aa5cf58dd86a36d918d10d8724df48f4c6782e6716090ec2b90ef2c45d9432381fc1b509a924111cf46ef913b437c023cc6d1b9105e447ba02c7647ad89cb55652e2015b1a97e50c459fc8a3f13c94935ad50bdb82afdb3dbd3eb2891d400379d31b03c3f18a7e1c50d93a85172141404703ae73321d0eef66137aae0faf984ad1ef3f57cda197bec78376323507ddfdfe3ca3169948335ab9854c2e958487572fc68ac34dd20fac5ae7e97f8b7c9469e1d8"}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a020400) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r3, 0x401, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x5, 0x0, 0x27}, @fda={0x66646185, 0x7, 0x1, 0x15}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65bbd1d22977e7621f78003975be8a982d5135e4b1a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85"}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0x475, [0x5, 0x3, 0x1, 0x61fc, 0x6ea9, 0x1]}) 1.305982118s ago: executing program 2 (id=4814): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x4804, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) 1.248068359s ago: executing program 2 (id=4815): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x5, 0x6, @remote}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000100)=0x1, 0x4) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140)=0x5, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4, 0x204200) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f00000001c0)=0x2) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000200)=0x7, 0x4) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "6f4b3cbed6241ced", "e075bbcdb115f0c78d4f75df20840d2d", "2fc88fe6", "a5496475c48f8c33"}, 0x28) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000280)=@ccm_128={{0x303}, "281f0c5131a8b64e", "f9c77d1f941dc9aeb88d85b36be0856a", "146d6f64", "c48838cc550d430f"}, 0x28) lgetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)=""/174, 0xae) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000480)=0x1, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000004c0)={0x3, 0x0, [{0x917, 0x0, 0x9}, {0x2b9, 0x0, 0x1}, {0x9fc, 0x0, 0x4}]}) r6 = accept$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000002640)={0x60, 0x0, r7, {{0x4, 0xffffffffffff90af, 0x6, 0x8000000000000001, 0xd0b, 0xfff, 0x9, 0x1}}}, 0x60) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) fcntl$addseals(r8, 0x409, 0x8) bind$xdp(r0, &(0x7f0000002700)={0x2c, 0xd, r1, 0x8, r5}, 0x10) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000002740)={'ip6gretap0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000002940)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002900)={&(0x7f00000027c0)={0x10c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x10c}, 0x1, 0x0, 0x0, 0x477e7040833335e8}, 0x440) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000002a00)={0x73622a85, 0x0, 0x2}) 1.230571169s ago: executing program 2 (id=4816): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x80010) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) fchdir(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x154) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x154) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f0000000240)='.log\x00', 0x2a000, 0x12c) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000100)={0x4, 0x6000, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)={0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f00000000c0)='ns\x00') 1.054577642s ago: executing program 3 (id=4818): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="11000000", @ANYRES16=r1, @ANYBLOB="b510b1"], 0x20}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000027c0)={0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x2000}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002800), &(0x7f0000002840)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x6f631b4376e74f1e, {0x2, 0x0, @rand_addr=0x64010100}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f0000001040), 0x282d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = getpid() sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)={0x10, 0x21, 0x2, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, r4, r5}}}], 0x20, 0x4}, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002880)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f0000002980)=0xe8) getgroups(0x5, &(0x7f00000029c0)=[0xee00, 0x0, 0xee00, 0xee01, 0x0]) sendmsg$unix(r2, &(0x7f0000002a80)={&(0x7f0000001000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000001180)="df03a79e05491c6760722da8f32728438703a0505fd9d0e2c780d7d82e85ea57f15ff178cb7f0447d33ced5a6a943c95a0a1c0af1047e82f69d83733f325db70b4072d6780415037c7c6b8e0e5b37595ff74b73dfa27444824467f4d36063e50b3d1e9b0535ad56c96065715ee9b7d793c302a01ee94d6811f5b87119ae22c9d2caac8a40e85c1a28dd2052da38ab06c32aac31de726d46892f97901bdfbf2afc43982844d3af5cd181070058d0e", 0xae}, {&(0x7f0000001240)="71c8edb8cf5c32b45c8b5428a33290defd4340079981bca47c648482fbdf5dbf02cc330f797952b5632c828653d2dbdd37483f6a24a16ef6e562a4d878c385cdb13c00b9b8058567365423620c223938b332c563004b21b90bb6f4f7689031750d56a88b98f84946d5ee2f2a3293a1819a6861964b3a6326c78d6fc134d85c83cf149a45d1e6bb1fa836d3f6c787", 0x8e}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="418838939034083e605e775b594817e43f4df1fb9a16a98af3f3100843263a411f08bad46aac68ce1b85389c06514bf48b63ea2e73fba61940344d4c12c225671a35245dfdbc58d62cce73641adefd0a58e39489f5d01186c53061d610e473d608", 0x61}, {&(0x7f0000002380)="29a14ed12015cb05b9716d21a4f0e5a6f0ce864e8a2fd3d1241aa6776a07917ffa97fe01e3e7e01b3324d9335572620c52e44fbb5369d660a6a8f84a6a511296b5587463444ed11735d3b114b5c836923dee54a9fab1e2c4e7260bbf8bcba6ad088bc86afc7b1595fa40553c54fc8a9f3f96fd73018d04b1ef9b8537e80b9b26a63cd048af206bc4ec87ba3cf5d5ab6c61446d2a9eb02b3e8b4f3479478d22d3016ff7ec54ce37f6cafb1191903f10b339a6388b10e9e1901c6e66ff799807d4fa3b396836a9ede2747c74e516c4b287df225d35ff4bb913ae1105d8c135f1e5cef80247617fb619933ad04fceefd1266eb3", 0xf2}, {&(0x7f0000002480)="bceb18d130cc4ab8f01fa5cbd3e29d4fd225bfb91e6f02cea3fff19130c93853634d444af2f51a4ef2ef0ea5f03ad2d94591c15a6291f7cc791c8afce3cf308cc5", 0x41}, {&(0x7f0000002500)="6dc482eabff2b45c339fca0565571f1616ffeb101c51d5dd06f554c590a6ed78b8b199f6f982df96f9ed455d5a2b7278d7a967205d868571498120db829775c4a9e401cbccf2237220f19e4948ca91bea44e4037b91f983c61e8f6675cfcd1ec3ca37bb961d262777f909be4a944b0c5fee8f63b6c3e7235651e23ed72f347", 0x7f}, {&(0x7f0000000500)="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", 0xfffe}, {&(0x7f0000002600)="7f51f12bd4d0183775001e5b1af6b2bf4e14977b28c2cc21212d26c7625c4e1435224c131d782365fbabb00b861e924834bb1e9b11d80683615a77f1a052b8184561e8140b97a9ebb9bb745ed69060db68e6f45f8e0b8978699ef9fee5be8cff539696e7817d3920630a4b0a7a062691a48480c9ac2df0d6194754b9fcfe002a5d1480771c657f49e7846eba64fb663c67048aed0748810f7b762bd8156a90965f5ee6d9568adb9f73ae1c477775302c4f8d1e4f136eb1dd801c704a6407bc9dcb999ddc", 0xffffffffffffff16}], 0x9, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x18}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x58, 0x40800}, 0x80) 1.053547132s ago: executing program 2 (id=4819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xa, 0x13, r1, 0x46f65000) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0xfcc8) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a027000000e4b3"], 0x0}, 0x0) recvmmsg(r2, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x3}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "fc5e70939b387ea5", "4958169a61df181f1151ea46237bb12e", "d2edc82a", "0d21c98e4da1fcea"}, 0x28) 1.050358212s ago: executing program 3 (id=4820): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x60000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 968.280554ms ago: executing program 3 (id=4821): ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x40045402) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x31f804b, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b03feffe2ff141202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14) 960.078394ms ago: executing program 3 (id=4822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x83) readahead(r2, 0x7fffffff, 0x10000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)}, 0x10023) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000080)='id_legacy\x00', 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x5a, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa7"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r8, 0x11, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f00000004c0)={[0x2, 0x1000, 0x4, 0xf000], 0x50, 0x41, 0x10}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 813.969966ms ago: executing program 0 (id=4823): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000000), &(0x7f0000000040)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 715.925978ms ago: executing program 0 (id=4824): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000002100)={'fscrypt:', @desc1}, &(0x7f0000002140)={0x0, "9a075c94554e9fbfb8c4b9f49d397a58e25f893447611eb9d551bac19c36c26138ee8a3cf6c921a6ce3ed1ee548201c1e635bd9c472c13aff9187ff8ddd52823", 0x2d}, 0x48, 0xffffffffffffffff) keyctl$clear(0x7, r1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x13) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r4, &(0x7f0000000040)=@random={'btrfs.', 'clear_refs\x00'}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x701, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000180)=0x14) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000d6c0d63f3eb33c2d2f42064c3694311f816615325f831ed61c3f04d8d78c8af593e556f88455164664b161250fda5addb387b120d39d0f4ed63b6dbf7294541532c9d0c55ddd22759a2dfdfd09474301f6a862b53dcbaf8049db89fe6faa8c96e0973d5684841e8a2877f4de44ba3919ecc9a5883bbea813a6f1c1fb46f8fb3815683cb9", @ANYRES16=r2, @ANYBLOB="000229bd7000fbdbdf250300000008000b00", @ANYRES32=r7, @ANYBLOB="14000700fc010000000000000000000000000001050004000200000004000500050003005e000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8010) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000180)={0x0, 'veth1_virt_wifi\x00', {0x3}, 0x3ff}) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r9, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 705.559168ms ago: executing program 0 (id=4825): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401000000"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="0007670000004a03575c1a65383e5cdf569a543ec224a4a74431d12c271b7728fdcbc545f1f78806a18d09da1115963543073fb05af665ad78aab099b7d44d394fc084343bab2c49e8ee431a25fbc9928c40fba4f7143770019fac2bf9c16444e3a1f9ce9fc5654ff144320590"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "5febe6"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "1a"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "6f800b"}, &(0x7f0000000480)={0x20, 0x84, 0x3, "decee9"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "2f7805"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 74.031748ms ago: executing program 3 (id=4826): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x7) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @pic={0x9b, 0x1, 0x7f, 0x9, 0x0, 0xff, 0x1, 0x50, 0x9, 0x2, 0x1, 0x6, 0x8, 0x4, 0xb0, 0x2}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000002c0)="7db8d7388c22f40a05b2226c50101a8e4a46771accb0a5298204483b79c15b9228ad8197d877ccac54af32ed9c6231739ca7ae3e6cc88746270b542447a28dfa44f07243293b42ec8d11f4375de10617f9e80eee0587d7c921e60fc8f3df2febfdc2817ff119bd25a4c132955b83647b3db2e85db403eb06c7ca6b15cf6f16de550ef4340d2a0c7a2136283085730088768a71dfab68322e089878db4f8225fbc65e37b77b5f508c227f554a53") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000380)={0x8}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x9, 0x5, 0x7, 0x2, 0x0, "aefa42855fd3813d9bf7400532ee48b31b7423", 0x81, 0x9d936e9}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x80010, r1, 0xda348000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000440)={0xffff, 0x54727059, 0x8c, 0x40, 0x4, "ecec44efef065c06257c302a3be4e00f403e47", 0x8, 0x40}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0x200401, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x400) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f0000000500), 0x3, 0x80) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) fstat(r0, &(0x7f0000000540)) timer_create(0x7, &(0x7f0000000780)={0x0, 0x26, 0x4, @thr={&(0x7f00000005c0)="20a8345f8bf2d81f1c58ae4bbf9744621e0772b1a46db768641d08359864923487d0ee452f23925e2e6f040098eff9e0a4e78c6b1912cd6df10c757ea2657fee3fab3f1a607d4f75e452990fbc75611367529ae86c1c0d0faec94795db0954b01dd481998faeb2e61c19b9b3ede786a96ad3a74e8db01e89a7fff735276e11ba012e3889512ee050e733e86299e678ca6960cb9826a292b872da74eba69d36a295e66a52310baf0993ef04616e176f6b4033699c29d0e91477becc0689c6585a41ab93877cb6ee1aa76df536c2aa32a3c0ee90423d38e915cec92675c27f7290bf9ad623a37d9ac7", &(0x7f00000006c0)="dd8b2ea59fcbbe4e8b2c00e236ccf8f8a2e6f9fa9629da878b279a22c1000c72a73adfdc08132d235596b3225d921ce125d63077efca50357b491c4907eb8918cf94d01b0d93d85c10c4846ee5184408c70c2979beb138decea0e161fe649ae09820fceb43b40f56aef5338dda844a28913ed12f40dc4501952bf17ce191eb643ed6e13b42f8d1f0f5bd05c99cf2f6cb70144aa0841505647d829314936ff81b4ca8ef3bb6c50c"}}, &(0x7f00000007c0)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x80801) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000840)={0x2}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1, 0x10000, 0x14, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x18458, 0x3, 0xe}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000a80)={'gretap0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x5, 0x7f, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x65, 0x0, 0xd, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @generic={0x86, 0x3, "b4"}, @rr={0x7, 0x7, 0x9f, [@multicast1]}, @rr={0x7, 0x13, 0x52, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback]}, @timestamp_prespec={0x44, 0x34, 0xb2, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xf59}, {@remote, 0x6}, {@local, 0x81}, {@loopback, 0x2}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0x800}]}]}}}}}) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x84, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x84}}, 0x1845) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r6) 0s ago: executing program 3 (id=4827): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)}], 0x1}}], 0x1, 0xc0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x800000000007, 0x2, 0x0, 0x1, 0x11, 0xc, "fafd8317e0a114998a1a030000015bdcfd1c4fb4f0047b3fe37d58e7a44017099cebdc25f5ab60c9e6d680f985891a7beda9d69098c8b534464c516bdd8e0735", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a0b2f7b6aa54cc50a1fcaed1e831fa79a00", "67523760fd40f78d2c0000000400", [0x101, 0xb]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250600000046d727ec5b248808003a0001f8ffff"], 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x40000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xb1) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x8500017e) inotify_add_watch(r7, &(0x7f0000000340)='./file0\x00', 0x100024f) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="2e749e8cc85e6b0ee5df5723d688df544b556c55827971aac8755cf20fb368f051592f0f11cded477b6e2cccf88f63b6b9a785545c9ad2e3f802634ea9be5a9422a3e3a4fb5a31f9f1370b9b2ed84de8ed3434130a8e4a2a43da16c9ccb794ef54d69b6bbbc22f760968086c5015f2ea4a3c2b3ffb6c6f496728caf07383f8c92c266b5fd8737820d4109bb0d222215bba6ff978da9da26b0e58e3ebc39d3e4240585581b5ef46c07d31f59fddc66bcac21c633bf2d4a2035b29a8a7b5e88007827579c3abb9db30a25cd264de86a793d03c9e3fdfd8f30342d07764a52991a8280925eee8c387df8b3e0bb1d19110937271822237540ac0a56c940e966a21059bed07f4f72e2d39a9d660ec5825a14da750cbeee159dbef9449abdcc021df8e64785e78b41eb0ab9d7498cb2d5fa800d9fc0f44a6fe0be3a024d48cda95fddbcee3e5f6289cc2b184cf80b714a13922545dd9c14fc771f6ce08557b9ca99a4de6193155cda1164752707b78fa0e241dcdc7a70debb7ef136279e5e5aff42ed8eac8c46ac4471a056508b6bbe70d05530c906206780901bf45aa23d128956397d35329370cd248693285f86ffa28495721c1bfc49916c6e8daf36c18307f1997e7061e9763b79115f433bab381a84bf99031dca8d3f6354cbb6ef7de9609f36a41eff8894ce84a4baa53a1a75727005e1004f21cf6fce6f36821a10dc53fafb17a8be2d7f856b3bf746c8f3d0807c3f526f533fc5ccb7632f77e5652153477c120b2b93fef9b387a6bcd13f8805ffdb4112820a864188dfcbe67028caf8d267dae2c479ffd0415ce9756d268902c8f41c23734cdce58fbabcbefd7673f678c6796f2eaa21fbad557d5262b2b037cfde6a3536eb3cf3f4bdebcae638a2c63fe7677fcd7b8dbd9fe6b828f46dd7513abe880701c2005972b1208c8575f7a42a227f7ef355e61aa03f2f6514552aa767e50cb086633c556fd8c43494fc5278e179d2ebc2d7a86c88dd051e360bc2e226a64d412451904d301f93ebf232e367972781ffc91b51b4b160a5c571fca00b764add93a67d227ef5359a38d3e6444956940b66586a80b3dbd63255dc07ed3300a71cedec6d5ab9a5a0fe81c134426890f456a9fb9deb638fc188ec9e235d8bdc848febff19817e29f7a4be331b822110725bd3617096becf7193bc918d31dc02198ef314e7ff408c5bb3a2c6469d2b2312b2eca2b2bfbfc92a5822bdb308de0b533b762e1ccfcfbaa69a08102eb4de20b625f01cb22d27febe953547990ead464d87286407db7e7bc9e8f561c217273ee7acc656645bdc749afe289806c01b365f685d1b18425d3a0d1fa4ccce2fb44c46469fd5d34d4db9d4ffdbfc249d34cabe564d5ca193276dcf04a36c90fb15dfa552c987c0a611ed96602f47a0b3c3bcd7e0981020abf1c0b5cb48029485f644f3801037173a46f5886de9cfd388c8dec8a02762a1fbfd22698579176f1feecc8f177ed762a8d3daf4f43a3cf94ec7282a07747478cd5eb84b88786a8793fcc270937f6483e80612d4acdec8a88df226f172aaf530d0552df5f3adcd6dd13cc719c24d20847d6a7c73927c9696c7095a7582062c688f7712e8924d97df16405a2d5e571a1d06734761537b479824b4b961c8a7fa92f3a5f7ca95155e1291e10521204ba253e82ccb553f562bead4d02b5b1b10132349eb973149eb9f0bfd48d1bfce86f73d13ffa2b76f72677cf5ef92b67b8d8b02d7320ba5afe6049eeacd2c223e13c8ea5f231e25e8090143e235c457bc549b981a18c30e12f5954f54ede63c56e3edf63b4c20f01aefad3d3bfddb41b40673636caa2fc9ccf2e6124c7a32a1b472ff1b0e74da2777bb84ea51468519d03bd077afd8e36ed0e67d1060e5feba19c09fc63d8ecf5e10fa650a931a47a00439fc96f2ed4bad1d70c50cf1d4963267db0585e4ac3b605bdfa5aa90e1d3e407beba7b4e131b6af563b0e90f57fdb11f7da417cc0f38abd53060f56ae2d4da094d709b9b207aec1f9686c9c9352705453a189151c3278b7736929ffe93fa94143533919464888f08059cb915f7f2ee37bdc2c2d30305ef6407aea7d9f89c0d35ec93c6fcce964cbf7f912c5b2695b8a6983fa83ac5e0a0eaf78f134c211aa34a922b9458cafd072b49cb187b211d612e02b8f7749eb3b136bafc655a8b3d4e9961fc3043754930a4e7bdcce1883421e189e9c0b1268f1f95b9177347073898ff011482427c43decad44c8ff020fbe7d3680c76898d7f538e189720d42dbdef4229e13bb7fe448aa6238eeaf0d81dc7b03b5136edf865a996ed545dc5c0ad4659da7d01731705b0d9733ec5996d70eb62ef11534f19080f95226d0fa02771f53583f67166845ab1143fc804e23d6368597dd168a1ae0517cad84f04bbf036a9a04a7af8f67fb91b2934a473ccc5bdcce134c9a10c10d81afbaeac63c2706d74e464164249f5fba82d0be6b4e82415ea644009aa4a443fe9b80717b5d104986e60a13b335e228085b6390a110451523aeefcf603b124202c5d47349ff8a67c3871312602e30bd00dacd5b6e9ae2c4afbd590af002ff62cb8a30c64a3bc843ebfaf6c9cb102ccdc2f05aa57f240632966bcc7fb73b550922bd7dc183eb5b488a83c7ef0269f4c9b92592357ec0eca5a14c330202c87d8fe6f7a4350bad8dc29d1de33aecdd10dc2329c7cff90c8087251b948f58b864d4e7d6c5e5d800c2e7741273356b13c3277e8f60242cde5aee19bc5c55a240025e26bbb893a5b2f39dd77a24604d445ed5b22988fe530e952229e84b5c05f9521e014eadeef4565a0a9c57b9bb007b4177bdd8ebc87abcbc0317cf2988be2518291c0d89e0141a7cd0e2f37e4db94cab5204f804ec0d0fb0819dda879328cf675be07cc58d8f8b50ee56670229e8a7839a33831ea005a87eb84b3e644040915e8eb44055b7d90e23a3970e87957abceb632ec284438bfda423cd547ef14d786f36db71684cda4235b067408d85c544ea257bd75a2e4935fd325a6aaf57664c5430dd24d4588b2774c08f376bf606391d1199347281042431d0e1b6bb7f46fe4502d67ebb3f0469800a17162dddb37f7ca2c1951b8de5da108065aa933a9e04eab95f6018d3326fba38e33b5a701022244b0888f4a643b333cf18db2f37cf2dcbb86f20fecddbaf186987c7901b74376aad2b99829a478a2d68c0ca48cfeff10cc27110febbc37d33db56700f909e266ac33b60090a2f38f0b3557ad094d7d42dfdcfb27cf538cc121b1ca181362290cbf90e73c60cca5ce62cbd6ab49c39aab5054aee6de4dc2caf56079180c964dff0191185fec1065c508249db0e21391e00eaffae3300a19c462b09d76831262fa177923f02095c1f57595f560feec1d786edea504ba32dd39dc0b96d7d0f859709540baa8043f26deb237ee8425bf8069be89bcafabdbccc671ccad77f878f73cc08f230243a640a9c1675e395e41908899e5f3e579f7940239a042d9a95a392cea4def19696941e155b84163e5d398eb10a43adbd0054d175d0ecfc151c15df09eee236f0f8da5c373e851c56e8d3d80b5284f17f5a9b0a72a27a3400b4e2b3188a51d2352b991d6b4d97b3c6b2d0a184907ff3f4afbc22d5c72d79db1dd936a9df2757b1cf03cdef3c0367fe873074aecd48bc62ba63246682837625b4187b2273de35b6e7a0982fc62630193eee7c090d279b6513db822c3375c829c86ee57104e2049a410f521de405916b90018e8b81f457cd9294ac0eaec1627ff8954572ba7009f0504cac8be8fe1eaebda0e426be956061595216108332067ebc18e46ac9aa200d85ba60f0357148c9cdfffea9a7795a7dfe7d99bb045602685a28032e0475b96da0d576737e05b38401e1f8c3abc8b34a21bd08dfa492ef0d4496569f4a3eb52fc12486a15786a87b5c1b5ae2df6d9d75f4615a664e54b2fa0968507acde7a07f6435ab8bd84d0e6e9eb8cd6c78ea69a6679a53564f88f224d7d4f4ec8d19739a3863f0f1eea35db1aa4ba4ef180025258c7f1c377603948372be9a22da66ca56a945908c274dcc4515a6253d9383dcf17a65d474863735c1b8655840446d31a5954bcc3581ad465d019c9ce240b75ff9d20e226d398687c78d21cc8899f5ba6397ee7bd8cb1875feb9a24b4abca8ddeecc7dfb03927a7fe7129d91fd3743932167b5a2995a5e4128b7db18cf6978de20af22018cfa0dd97af0fca0763be77b64d91dd5f31b5a65f12a32aef11954c05d9a7372362cec82c30a98eb4dce5548f73d8fa92c5e8dd44b054b323e3b153872eb8e8ba36c2f062f0bcfe762d41091d8dafffe71db31e9961312f1eeda0c3f3ff8a558468f05e8a3123086714b6980003a85afaeda65c6505d6586fe2f3ad773ef09d8c0deeab879c6895492d14ff01dffe8b65abc935a7c574acaeda6cbe624f1b4b733075b4d8028c9bfaf8f66b8078b98d1210c3afee89159e9e9c03861e062b7219462fb88643637467c0998682ffca0fd5f71a1840ef802d09ad0555774c7bb54fe5c413e2a1734c4be29f25fc58f65adc22ac294bed58fa69e24d3a9a6fce9e2d60f238809979d4c1db26d121f2f013fe5918b786a7b7f88226b92b40df9852b83b47dda5e876fa46961224511a947ff5b354a9a4064eebea9e22eb7a24953a02c5f640b9163eab5fce85b23be2d4c7ec014b5f8d32e0a798fdc2f8e905673bb02c7dd9a44be1741f6649379df146f18d64b428ae9840bf3323afeb3a2be43645341ca720be7b305d13de56a999875ab304786661594216c34ff6fc5e47f5a4e05ae6f8d64e5a7c598d4464b4a5a9d3f908015caeb39f635379af90c20a2dfee20aaff5ed5bc8646770333d29a4352a90f37c0ad33afda265f7c2fbdf4ae19d774620525f6cd9324aa009aac01ba58487c4b298753d03c72584205e3d92b64d933fa5f844d242ed0eb0b55793ef2c91e6483558089a533808dd41167e52e526f786b1953068c4807211725f64bfc745ef79c2a7c9400d2ba61113f10118fa54a91d6b531adddf5ecf6ec764f1e58ecedfa8ba08dc36c7cb91f74c77bd2e02ed878cdee30e8d0cf81b476589367ae2b67d65d2dcec5776d095a4b25f1145387a545c2ce0694827058c18783f6f0316770c2e01615785719f140e6765855272318175f4eb572e47c83404591489fe37ecb29379805a176d7969fa4148644f0b3e3ce9669b9dd1cc06881a11bf947a5518dc985714fbb3b428576b2daa7c1a31c1388faf03a73bd046df8ae6c4dbddd65739407bd827c419880cb76e7bf9db5718b50d899a9b01c8fec01befb0d6e72fc86e56df84716a70e1790246d36dbf6135d815f0cbab6c1ecaf89253d4063852cb1e11aef274b085ce2d7776e9abe075072bb39da5494c8c490e3547005a0763c6774546a73073d849310ca961c4c083ac2fc1e13a92460b8996b8d87e6abd420146a044658ac6859f2ec472b668dedd9af1b54388b55341bd66b7c90379a5b52e2db905d0e6a8341193af03f254044d194cf27eca879630c16da9c093586a1a6e42dcd5722e47c5e0c6070d3229e139e809307d2ddc4b9b7cdfb331df49ab3098a2e1121523ee810f2a28055beb88b0aa5cf93f87d366f4013c35c1c743f374e4c5b0e6005cf9429386d687450cd172b6a22049521682407315511c1311a3af4020c66a385e3a652c787fbcb1baf4e611d31e4cccd049cee851ac4f6077a2e9f2395420c3f6991e84b2cb9e331ef7d5da014e73fe6f5de2d07e372236f541650cdbee4c02d25d03b1cd3e9384a3004507061d4d8b897350d709f6643d40f16279e46529e9d4f58e0466e7df46c15fd43997f83574ce4f46f7a09123e7762014bd14b45d1cc8b28ef7de8aa8da2c63fa6e4b990c10aec5f6f3806b03f5e7d2c32cc206fb4af14f61c2b8ba117db15b57a1fb21bfd40f3b4fe1383b8043bd0ca7a75ddc0d6975432c211192024314722584e4dfd17b5d5ae40d27a257646ef20fbcd86e6a970d4506181f939b4719c634f66aba9c4d3ea4b18697dffb113344be354a1ba0a37973fbba6d569980522cd1dc398751f80a1a30ed368a2f513c101dc2aa3a233880847226437f56bb8ab9642281d867c80fc6dffe1f99807a00e55f0f2a8d16abb288e5ff87dca32c024c6a1a0a5588e704ab4bc3ddbcef6a7bc2d8a35de5a1cee5fa64d9e940d9c1fca2273a9fe520c555e3b076a6bacbe58f241ae24b36faba35541d747f277acfc7fb374070a259a659550b9d2d158b02d1902a71b382304c94771f380029ccd8c66b8ef2eea3319d810cd9088b81288c2af36c9e423f974a9a84ca6ea5aae1e9128aa7996ca154c2bcb70082d8eaa57bf8d9a0534deaa0b823916c87bc2b94bb68bc1b4cbf4728e23d4e1663c1d036e3a1342477d3303cba94f495778da51214f26d3cb765c7398cef04f0db6daf25d33b92b574cd4b9c85d69b296b153be60ad9ecba6abbd9b206af7495be5c1536aabeffae39d377e8b4c1425a66c496de9d4b83abf12f63ef2d2e02fbfb40a3ffc4cfb19c8ae0649dd71179c7c4338a6eaa6f51d4abb1aaa27218b4d2b68638b15174e6a4509eb0b9275e7468633244fddaed550e1c20cf256a0828348bbb915e70113cf8033ebca53bf35d06c8cbb09a3e1326a7209f011dc9cff55e192e64670dca28e57358089d06830f113fe06ac7f9dc0f3cf49687b45599d18c6affd99268192747bc4dc9be2d854baedf0d81b4d1eff347fbec4a0b4f8e2a94ece2c0217c9e3bd8dd43ba922a219f00cf2de35de84ef8e62fa983044bf5d4e5cdb31de8cf11aa148a936320bec00b26127d7ff24a555117aa449ec6f9d0ba98410d7ca0450cd99992d92670cf5ba59cb551f76c5060e3f618f46fb5176982d8f246cfa811d209b8f61cd00758a129bd6941da2451f1a19dd612425c97f152570e4e62db9aba7d148ed5e4e333068aeb2625ecf43c0ad9092638f688b8ee3e62780cc2befec03c5428a9376ae7e2ee17bc585ecd60cc8b46f268b793b9d74f20d475ab1b05f0ebda051630d003b424cf376a083663bff163756888dde2fa3385c7faac40472de6e1882b9131f9b9a755fb827a996a534077b85ea760077280d8dbf4988496720a64fb8e2c96afb69d529516bfa8f7e81d2eb780854823370a979c50566f88ebab97385f30ddaed0b0438b689506fb49c943713bf835ed75d09dfefd12ebeb2405a46594f556fa8b3d32547c922808f1182658ea0208ae0d62095e9588db1d94956bc959212a5a1bff0a669758d4aa8f1eb11ebd566cf65d92051b1877bd6fe4b7266b21bec833331abd7c4a347da57774e7c05897fb82b7ac39473b6c87a33bb912dc9e11bb5a0b4895371eeb500a827c3d839c885488faeee9586058238d2259163756f69eb533af03646ee4558a67d5978bafb8b2e8c896db55601b59ab4a5451f23611a02c6752a6c80ce8872dac2c03024750fb4a11ee23018ce0faba974b43a67503d353647959948c9ec697cd193b040c9be6569514b681097dcd6310dd9086c01d9bcb22483a880728504b8818902db0139667805d1b43550afd10229175813aea15bb2924afab70b1e4dbde6bf180bf9034e515102a25149e1eb634c9e56a037c2c3a3d1e213731e3611a167ab5155c6d7d103ef1ccbd748017f65493a95481de052d0183a4728b0ac202b10c517b09e8a8a8fdcb6bbae8fa797a8f1107b0f6d957472844518b3ea7cce89731c2074c533924dce44adbf6b6fd32044b624a63a3e0f5b2a8482b3294aa153eb03f2879b39e80078abd51d73a7f0ff77c546d7092ebb973a3bd013254576484538a8af8ceda9e6ac9daa38acbd7576a0054bc49a248ee2839aa8b604a41b735ee3dbc6e08cdaa92955dcf4fa7a4c783971e4134dcaf9a8b644c20894fd17d648452f90f9e00860eb8102534477f7e3279a0cbcee20d500ed648adcdfe6540509a49d438aaf1884bf1f0a434055866e643577fad463ffb8267b530d4bd8606d3638165ff4b9f6334c4ba818da17c5cc5ada304462a0c4dc0728d25428b7b61bf9804d54cc7bb7b0daf82a19576e5e6085561e66050e333e6302fd85d00f36a82a569e1b2ff7764a931a2e70409b5517df2fb1b3876ad4523d74ae224db617c40c55a2fa0c0aa3e97b7c350a2eff49ecc551b50d741f6c1aac4f6f78644eff674df4cbcf56c259355bceaf87dca07931d973018aca418e5e6f000e98eead669c39783e144ae3b43cd01920ad383d774105c1594a2fccdf159a5f9bcb395220cad1b22ce09e7c5683166b9bc4bd2fb2bd1b676890abfca67d8a5702d0dcb751b9a457be82cba2c2f3e31e7d59eb8b8fc8ba440bed80bfe560195968d430a9d15701147541b83acd50038f8beae9220a6e473ea41838b16c1bb6f5cb1a9dded046565db6327ec818c9aebc5e2304f9bae0325294fbf6282e49fad4af3538a52c44209e611869535f854005534767bc73834780f6d6ddf29b472da78d4ca7523cbcc33085778a596dc46e084cf624cc1b61fea19ebfdb5fdabc24c3a5e6b64f2a59b1dc015398feae49d167fdfe1ffcf6f078c8033965ca34de7a74819903aa29ec4efae8c7bd5d8e5da21cc07a08c1cdaa535e1f79525a3fdfc153cc4af8d9906244f749f58418cd58c06f7d0f722a52978f1889350f5a1390bee67ec1093377f7f5c417f47e54e2531a3590ae8e512df1beef1c58a75985468e8cd481fe07ffeeac960bec795a690eb6f64d634e7c220ac8e628c30bb2e28395c69720e801f952b376cf9ef84011589cb9480f9194c2f7e06319a45253c9052e39983e0a59ffc484d0951eaa0eaced690518f08abe1390799799367c690c860193139f20c82aaabb5ee0eb8fd426e792d5bf68646c1e9697f375e7184f3675ec415d74aedbe814e24bf66a3b930fb4b44edcfd5414afb0b0d0420762cc3c124bceedce0e56a5204717e33230db15c8f8a9e5c23458c2091bffad6f3292afccd1513f0d302086da00f5582c83f643ba5bf75dfb4941c656b4f905be14f13379a830e7e15e71919f8b5be8e0f769906e5f6e6e5a618365516af74ee2360db3525329cd7e5cf4ee666afd04663c5b96565fae390cbf754804af05e03bb9596f036e52c187b66e46f3bcf4c7c73f6135f8ee308a544f9abe14ba1b077a9b9ebe9cb09e8924c7e24e664f9fe5e5471546ad23ab9384c99921ba0990bd15de906fc647d1d9489a5c1515a5efd8517049b910158c7efdc22a3671e86076189cfcefdddd5def5c4634b374f34d25f3b03018e5324b64626e69bb1b667647ec926add0a89648414a28058d04f12e9ac5bc2527d189f16558a82daeca13eedc125cb23436f86f68c147015853aa07738c99f571dd51e486401dd134a749b7832b64d9ebcc33a04e1a62f07de55620a688e944daa2c480be3e00871058a6fb34b52bf0c3fc46a556f13a3d6402a9f42c48a7756c07b3a58aa2cf932e650d88dfcf9fa655386b13073eb6134b10806d60b4529d72153f2f4df6df19488c792b4d8d11086cf7ef2d9d1404d1876f4d30d566bf88d3fcd5bd439f82d918bc988cd50147d3770489e25bd953428c5bc66ddfbcdb2e40452cd4fd6adac67febb7de9e8b8ff6f59ad548b96256d80f1092c94d70df278477a36461fca896ebb6d2d40ebfb95f2fb3f584610a1540fd2b511d267e8486615674853112b3f371db52d954b81297d954bb3b5182fee5af93307ad79af888f87ff15445e3292f640c26063d17209f1c79c1267b55afe3228fa254c4875beaf6bf9d586d3ce743d5e8376aa214bc1c529c0f440b4c8a33dcac8938bb2f8c2f19fee903ba7af21d3f6c7049f371db6fa4d0436964f07274274ada68c8601b70f56860059605bcdc0a643a79132f3252141b2c151634dc85217ed18fdac27b3479382d045029fbfa90d655b3e0b5ad134e8d524ba837304ec07d3cd37d3314f3690e04c0c777f1cea960baf23d2c394f245394bbb7f6101fc02bdcf3705ef329a0e1749042a204a3463406f7b34bdf23a8d8e2759f1b24f5308dc2736d1a81173826b059f18eae9ee6be8cab6c24039b8afcf775ee08f290161532715f6c19ac57985299013088c358fada7fbfb9fa339bf9fe5478fc394005ffcddc7da185f9c5ba4a79bcb3a6fa1b280ca745e32211971bd76ed26e923ffc0387017e80e0de6904c0364c7aa54b7aee04ece2c2a318b91f60c6559ef13fb1f774c803fed514358ff6bb4972d1b71b71025d943d4a074d2918be1008f63ab15094d1020c641d04d89bda5326bbfcedd86a064506b33f20bfdd83f59a57500d4aca720c882b192b0232ecee67da5eb3cdf61c931ce96a3bd4210bff8d9b3cef39de2bb68fc9bb645382e2a2971f58ac39471a8091676011900f01a457838c129374dc6e72c4a3107e96361511e44da1c90aa784b4ee081bc2090c3344d12aeabd1c6c68475243e0b7c1e4e0b8df728bcdf3d0fcef630f372ce11bfb680897d3ebb427f08ee18ebb3f5e604121831506e8d3cc9c3700a5bdcb3ebb73d1f494257c353325ca7983781ba108819652041b5edcebb99118ba33244011c93b5044eeab58ec77eb4b9b88ba63a6b98ece554be80db1df349de18df6b66210e965f436cdc5c6e4e01840b6da8175eb074cdc22f8bb36f5ce18c6a9142ca726dd5a889967112535d125cd2e19c397fee7a786cc7d84cdf3d7e7cfe96e6b97ed50ec01a98e36ce7cbe8dded29bd9b701bc59a5a119b2f14af8e1ddc6907899178f1c40d78db921ed0bc5d0984e945f2ba0422452685755820b86133072ba4e6d4560b4baee9c87ea99a857061082d08425038a8ba5bf4988a19676a7757389eaf0d89f9e58c1642ff00913f0abcd23cdf01b5ecbdae37763dfb28a679db4fd8b7616b3a2d96c30e71d4e48dc6e25203a1260eb42a217a157296604806f919f11842668294dc03c57c33d605285bd5142420eb94fc92b1896722ee795871eec92e2dec45509c47b63653e539bc8607325b7d3712c43651bba0701bf6c8e4963d48d4748dfa9fa39c7d69c81cb794a7911cc18d576ae43f3e7d8e9eedc9ed02936e027698e413598bcc8ec1d5fd029b51abf080772abebdafbc6b5db07fb49e9bff7e71af635fab4fdbf15f6a6526acbcfc37bfa294183fe28903af69075c299f972f05f6f2cea53ddad14b115635fa8a637a42482b0fb3fa4c403d43b272c726e1f51f2b469c165d9525d0ada2a582610fa4974c8e57351f587502aa3ffad717b418c2de230b741ea3872d308fdc3ca1f7fb3c87cbd70e0e5d5255a0ae56a58650b3d5b986f0e8fe8b97d46bc52447247e0f6a2361d1ebd1bbad2649d33a1b8c95ad9d294f3e12ba777f0da16f3e7501e2607d5ad28d650b2641aec2eca83e4452a4bf8ed51768ad6238a79cb0d96dafa36915297bc95a3cad090dfb61b8b13b462110780df8acbdf337462a9403599b7f54563418bf314dd4aaa7a1406423a9e70b34ec54872c0cb14077cb5996134f10cd40a13b17cf0731675cf0ad2f981992a5c15613a66c9cf5e6d6910540dc1700", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xa8, 0x6bf5, 0xfffffffffffffffe, 0x6, 0xf, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x6}, [{}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1}, {}, {0x2, 0x6}], {0x4, 0x1}, [{}, {0x8, 0x5}, {0x8, 0x3, 0xee00}, {}, {0x8, 0x1}, {}, {0x8, 0x7, 0xee01}, {0x8, 0x2}, {0x8, 0x3}], {}, {0x20, 0x5}}, 0x94, 0x3) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000300)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.618691][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.626740][ T31] usb 6-1: SerialNumber: syz [ 551.797635][ T36] audit: type=1400 audit(1753818464.459:5783): avc: denied { mount } for pid=9402 comm="syz.2.3439" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 551.822210][ T36] audit: type=1400 audit(1753818464.459:5784): avc: denied { search } for pid=9402 comm="syz.2.3439" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 551.846516][ T31] usb 6-1: 0:2 : does not exist [ 551.854583][ T31] usb 6-1: USB disconnect, device number 70 [ 551.862865][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 551.937628][ T329] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 552.036745][ T9441] netlink: 'syz.2.3454': attribute type 16 has an invalid length. [ 552.089113][ T329] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.100236][ T329] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.110393][ T329] usb 1-1: config 0 interface 0 has no altsetting 0 [ 552.117008][ T329] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 552.126179][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.135106][ T329] usb 1-1: config 0 descriptor?? [ 552.532322][ T9447] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 552.583341][ T36] audit: type=1326 audit(1753818465.249:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.3.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a90f8e9a9 code=0x0 [ 552.606343][ T362] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 552.737630][ T362] usb 6-1: device descriptor read/64, error -71 [ 552.944915][ T329] usb 1-1: language id specifier not provided by device, defaulting to English [ 552.977630][ T362] usb 6-1: device descriptor read/64, error -71 [ 553.145470][ T329] uclogic 0003:256C:006D.002F: failed retrieving Huion firmware version: -71 [ 553.154440][ T329] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 553.162020][ T329] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71 [ 553.172292][ T329] usb 1-1: USB disconnect, device number 104 [ 553.217606][ T362] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 553.295523][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3464'. [ 553.347598][ T362] usb 6-1: device descriptor read/64, error -71 [ 553.587639][ T362] usb 6-1: device descriptor read/64, error -71 [ 553.657599][ T329] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 553.672022][ T414] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 553.687785][ T414] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 553.697980][ T362] usb usb6-port1: attempt power cycle [ 553.768998][ T36] audit: type=1400 audit(1753818466.439:5786): avc: denied { ioctl } for pid=9477 comm="syz.0.3468" path="socket:[53209]" dev="sockfs" ino=53209 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 553.795050][ T36] audit: type=1400 audit(1753818466.439:5787): avc: denied { map } for pid=9477 comm="syz.0.3468" path="socket:[53209]" dev="sockfs" ino=53209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 553.821501][ T36] audit: type=1400 audit(1753818466.439:5788): avc: denied { read } for pid=9477 comm="syz.0.3468" path="socket:[53209]" dev="sockfs" ino=53209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 553.826245][ T9480] binder: Unknown parameter 'contextÀ' [ 553.852642][ T329] usb 4-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.864130][ T329] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 553.871375][ T9484] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 553.873670][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.881065][ T9482] lo: entered promiscuous mode [ 553.890904][ T9484] FAT-fs (rnullb0): bogus number of reserved sectors [ 553.896425][ T9482] lo: left promiscuous mode [ 553.901266][ T9484] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 553.912758][ T329] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 553.934982][ T36] audit: type=1400 audit(1753818466.599:5789): avc: denied { map } for pid=9487 comm="syz.0.3473" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 554.057672][ T362] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 554.078775][ T362] usb 6-1: device descriptor read/8, error -71 [ 554.209078][ T362] usb 6-1: device descriptor read/8, error -71 [ 554.447920][ T362] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 554.469325][ T362] usb 6-1: device descriptor read/8, error -71 [ 554.503142][ T9512] 9pnet_fd: Insufficient options for proto=fd [ 554.510319][ T36] audit: type=1400 audit(1753818467.179:5790): avc: denied { remount } for pid=9511 comm="syz.2.3483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 554.545405][ T36] audit: type=1400 audit(1753818467.209:5791): avc: denied { create } for pid=9515 comm="syz.2.3485" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 554.567353][ T36] audit: type=1400 audit(1753818467.209:5792): avc: denied { link } for pid=9515 comm="syz.2.3485" name="file1" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 554.608924][ T362] usb 6-1: device descriptor read/8, error -71 [ 554.717709][ T362] usb usb6-port1: unable to enumerate USB device [ 555.167632][ T31] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 555.317672][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 555.324661][ T31] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 56, changing to 9 [ 555.335781][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 555.343919][ T31] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.40 [ 555.353116][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.361138][ T31] usb 1-1: Product: à  [ 555.365282][ T31] usb 1-1: Manufacturer: 朥㡦䒀긼칡ê®é¢›ï™­ï•´æŽï»¤ã”¼ìŒºæˆ€ï”´æ¾“๦ꃆ嶮侚ﷂ銱⿪魨åªçƒ«ì¾ëƒä˜¯à¯‘뢖姾咳ꪯ쉚à¦êšªï¨¹éŒî­±á¢§î ¹Ì§ãˆØ穧蘈äƒå¢”ዿ쯲⒈Ġ玮ꮣá©ï´žë„†ì©™ëŸ±æ¢®æ¢ â€¿å ¨ã•å¹–ﾜᆡ秶æžã¹»ã¤ªçœï¹—ه䫈ꆮ芋ì±é°†èº±á™ç îŽœï³„鯫蹗캆桷຺翢☽á‘å¸í…¥á–‡ï¬ƒì„鋃ì橮囼㧑溴áŠì™‹é«ç¿»ã®Ž [ 555.398826][ T31] usb 1-1: SerialNumber: ㋭㾸郩ົä†îŸêœ¡æ…²á’悷픻垆è°æª€ï£—㰒裑á…à«¡áˆáŸ–ﳦáﺞꃗ଼辋桜ᴦ㗎á¡âŸ§å¼¸ï­–৓ç±ã”Ÿã€…ি芲泳ë„뉟࿟痄ç­à¬µë‚覒 [ 555.509022][ T9546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=9546 comm=syz.5.3495 [ 555.553588][ T9553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 555.553627][ T9553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:116 [ 555.826707][ T31] usbhid 1-1:1.0: can't add hid device: -71 [ 555.842752][ T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 555.852666][ T31] usb 1-1: USB disconnect, device number 105 [ 556.142047][ T9584] tipc: Started in network mode [ 556.146956][ T9584] tipc: Node identity 3c, cluster identity 4711 [ 556.153353][ T9584] tipc: Node number set to 60 [ 556.246566][ T9591] veth1_macvtap: left promiscuous mode [ 556.252205][ T9591] macsec0: entered promiscuous mode [ 556.257575][ T9591] macsec0: entered allmulticast mode [ 556.423866][ T9] usb 4-1: USB disconnect, device number 81 [ 557.032464][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 557.032483][ T36] audit: type=1400 audit(1753818469.699:5798): avc: denied { accept } for pid=9617 comm="syz.5.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 557.033929][ T9618] rust_binder: 150: no such ref 0 [ 557.284251][ T36] audit: type=1400 audit(1753818469.949:5799): avc: denied { read } for pid=9636 comm="syz.0.3528" dev="sockfs" ino=54863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 557.318609][ T9] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 557.398661][ T9649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 557.471566][ T36] audit: type=1400 audit(1753818470.139:5800): avc: denied { lock } for pid=9648 comm="syz.3.3532" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 557.477563][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 557.556570][ T9657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 557.562609][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 557.580706][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 557.588572][ T9] usb 6-1: can't read configurations, error -71 [ 557.687643][ T31] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 557.817621][ T31] usb 1-1: device descriptor read/64, error -71 [ 558.057587][ T31] usb 1-1: device descriptor read/64, error -71 [ 558.108975][ T9664] rust_binder: 158: no such ref 3 [ 558.114148][ T9664] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 558.174121][ T9667] 9pnet_fd: Insufficient options for proto=fd [ 558.299388][ T9675] lo: entered promiscuous mode [ 558.300774][ T31] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 558.304778][ T9675] lo: left promiscuous mode [ 558.429029][ T36] audit: type=1400 audit(1753818471.099:5801): avc: denied { map } for pid=9676 comm="syz.5.3540" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 558.452677][ T31] usb 1-1: device descriptor read/64, error -71 [ 558.587570][ T362] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 558.697623][ T31] usb 1-1: device descriptor read/64, error -71 [ 558.738878][ T362] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.750667][ T362] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.760696][ T362] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.767331][ T362] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 558.776505][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.785082][ T362] usb 4-1: config 0 descriptor?? [ 558.807758][ T31] usb usb1-port1: attempt power cycle [ 559.147596][ T31] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 559.168675][ T31] usb 1-1: device descriptor read/8, error -71 [ 559.298556][ T31] usb 1-1: device descriptor read/8, error -71 [ 559.303442][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3550'. [ 559.537602][ T31] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 559.558842][ T31] usb 1-1: device descriptor read/8, error -71 [ 559.593048][ T362] usb 4-1: language id specifier not provided by device, defaulting to English [ 559.688736][ T31] usb 1-1: device descriptor read/8, error -71 [ 559.793938][ T362] uclogic 0003:256C:006D.0031: failed retrieving Huion firmware version: -71 [ 559.803037][ T362] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 559.810730][ T31] usb usb1-port1: unable to enumerate USB device [ 559.818306][ T362] uclogic 0003:256C:006D.0031: probe with driver uclogic failed with error -71 [ 559.828715][ T362] usb 4-1: USB disconnect, device number 82 [ 559.987610][ T9] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 560.060113][ T9708] /dev/loop0: Can't lookup blockdev [ 560.061427][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3553'. [ 560.117589][ T9] usb 6-1: device descriptor read/64, error -71 [ 560.357604][ T9] usb 6-1: device descriptor read/64, error -71 [ 560.374375][ T9733] rust_binder: 1048: no such ref 3 [ 560.379563][ T9733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1048 [ 560.379832][ T9733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1048 [ 560.389252][ T9733] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 560.398653][ T9733] rust_binder: Read failure Err(EFAULT) in pid:1048 [ 560.511402][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3563'. [ 560.597589][ T9] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 560.695374][ T9753] tmpfs: Unknown parameter 'noinode32' [ 560.737571][ T9] usb 6-1: device descriptor read/64, error -71 [ 560.760341][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 560.977581][ T9] usb 6-1: device descriptor read/64, error -71 [ 561.078191][ T9769] IPv6: Can't replace route, no match found [ 561.084717][ T9769] IPv6: Can't replace route, no match found [ 561.090970][ T9] usb usb6-port1: attempt power cycle [ 561.196350][ T9791] netlink: 'syz.2.3584': attribute type 21 has an invalid length. [ 561.204338][ T9791] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3584'. [ 561.427636][ T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 561.448768][ T9] usb 6-1: device descriptor read/8, error -71 [ 561.578774][ T9] usb 6-1: device descriptor read/8, error -71 [ 561.597686][ T374] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 561.747623][ T374] usb 4-1: Using ep0 maxpacket: 16 [ 561.754726][ T374] usb 4-1: config 4 has an invalid interface number: 216 but max is 0 [ 561.763019][ T374] usb 4-1: config 4 has no interface number 0 [ 561.769676][ T374] usb 4-1: config 4 interface 216 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 561.782344][ T374] usb 4-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=c8.54 [ 561.791460][ T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.799566][ T374] usb 4-1: Product: syz [ 561.803710][ T374] usb 4-1: Manufacturer: syz [ 561.808344][ T374] usb 4-1: SerialNumber: syz [ 561.837573][ T9] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 561.858620][ T9] usb 6-1: device descriptor read/8, error -71 [ 561.917598][ T362] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 561.988683][ T9] usb 6-1: device descriptor read/8, error -71 [ 562.015744][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.024537][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.036641][ T374] usbhid 4-1:4.216: couldn't find an input interrupt endpoint [ 562.047065][ T374] usb 4-1: USB disconnect, device number 83 [ 562.078691][ T362] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.090096][ T362] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.100240][ T362] usb 1-1: config 0 interface 0 has no altsetting 0 [ 562.106912][ T362] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 562.107679][ T9] usb usb6-port1: unable to enumerate USB device [ 562.116123][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.131011][ T362] usb 1-1: config 0 descriptor?? [ 562.694288][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3602'. [ 562.742063][ T362] usb 1-1: string descriptor 0 read error: -22 [ 562.764503][ T9843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2377 sclass=netlink_route_socket pid=9843 comm=syz.5.3604 [ 562.797600][ T374] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 562.944893][ T362] uclogic 0003:256C:006D.0032: failed retrieving string descriptor #100: -71 [ 562.950112][ T374] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.954557][ T362] uclogic 0003:256C:006D.0032: failed retrieving pen parameters: -71 [ 562.972625][ T362] uclogic 0003:256C:006D.0032: failed probing pen v1 parameters: -71 [ 562.980813][ T362] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 562.980954][ T374] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.988478][ T362] uclogic 0003:256C:006D.0032: probe with driver uclogic failed with error -71 [ 563.006963][ T374] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 563.013068][ T362] usb 1-1: USB disconnect, device number 110 [ 563.017534][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 563.030404][ T374] usb 4-1: SerialNumber: syz [ 563.099489][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.106638][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.113955][ T9849] bridge_slave_0: entered allmulticast mode [ 563.120372][ T9849] bridge_slave_0: entered promiscuous mode [ 563.126768][ T12] bridge_slave_1: left allmulticast mode [ 563.133033][ T12] bridge_slave_1: left promiscuous mode [ 563.138848][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.146834][ T12] bridge_slave_0: left allmulticast mode [ 563.152722][ T12] bridge_slave_0: left promiscuous mode [ 563.158770][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.242702][ T374] usb 4-1: 0:2 : does not exist [ 563.250552][ T374] usb 4-1: USB disconnect, device number 84 [ 563.260364][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.267542][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.274625][ T9849] bridge_slave_1: entered allmulticast mode [ 563.281047][ T9849] bridge_slave_1: entered promiscuous mode [ 563.300442][ T12] tipc: Left network mode [ 563.305975][ T12] veth0_vlan: left promiscuous mode [ 563.367389][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.374492][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.381870][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.389122][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.414452][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.421923][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.431568][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.438642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.447856][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.454929][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.482951][ T9849] veth0_vlan: entered promiscuous mode [ 563.496314][ T9849] veth1_macvtap: entered promiscuous mode [ 563.534885][ T9864] fuse: Unknown parameter '' [ 563.937649][ T374] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 564.047638][ T31] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 564.098623][ T374] usb 7-1: config 0 has no interfaces? [ 564.106070][ T374] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.115219][ T374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.123270][ T374] usb 7-1: Product: syz [ 564.127430][ T374] usb 7-1: Manufacturer: syz [ 564.132218][ T374] usb 7-1: SerialNumber: syz [ 564.137292][ T374] usb 7-1: config 0 descriptor?? [ 564.198902][ T31] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.210191][ T31] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.220166][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 564.226778][ T31] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 564.235841][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.244497][ T31] usb 4-1: config 0 descriptor?? [ 564.345271][ T374] usb 7-1: USB disconnect, device number 2 [ 564.852151][ T31] usb 4-1: string descriptor 0 read error: -22 [ 564.938522][ T9911] cgroup: Invalid name [ 565.054095][ T31] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #100: -71 [ 565.063380][ T31] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 565.071746][ T31] uclogic 0003:256C:006D.0033: failed probing pen v1 parameters: -71 [ 565.080487][ T31] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 565.088455][ T31] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 565.104026][ T31] usb 4-1: USB disconnect, device number 85 [ 565.253892][ T9915] overlayfs: failed to clone upperpath [ 565.337613][ T329] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 565.488767][ T329] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.498926][ T329] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 565.507873][ T329] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.522752][ T329] usb 7-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 565.531915][ T329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.540049][ T329] usb 7-1: Product: syz [ 565.544191][ T329] usb 7-1: Manufacturer: syz [ 565.548830][ T329] usb 7-1: SerialNumber: syz [ 565.554044][ T329] usb 7-1: config 0 descriptor?? [ 565.579803][ T9927] rust_binder: Write failure EFAULT in pid:1077 [ 565.793650][ T9905] rust_binder: Error in use_page_slow: ESRCH [ 565.800029][ T9905] rust_binder: use_range failure ESRCH [ 565.806070][ T36] audit: type=1400 audit(1753818478.469:5802): avc: denied { getopt } for pid=9940 comm="syz.2.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 565.822056][ T9905] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 565.832351][ T9905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 565.840680][ T9905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:20 [ 565.866839][ T329] usb 7-1: USB disconnect, device number 3 [ 565.947599][ T31] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 566.087607][ T31] usb 4-1: device descriptor read/64, error -71 [ 566.327646][ T31] usb 4-1: device descriptor read/64, error -71 [ 566.567630][ T31] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 566.697569][ T31] usb 4-1: device descriptor read/64, error -71 [ 566.903939][ T36] audit: type=1326 audit(1753818479.569:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9972 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970a98e9a9 code=0x7fc00000 [ 566.937749][ T31] usb 4-1: device descriptor read/64, error -71 [ 567.048065][ T31] usb usb4-port1: attempt power cycle [ 567.371220][ T36] audit: type=1326 audit(1753818480.039:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9678e9a9 code=0x7fc00000 [ 567.394792][ T31] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 567.394945][ T36] audit: type=1326 audit(1753818480.039:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a9678e9a9 code=0x7fc00000 [ 567.411140][ T45] rust_binder: 0: removing orphan mapping 0:1048 [ 567.427530][ T36] audit: type=1326 audit(1753818480.039:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9678e9a9 code=0x7fc00000 [ 567.438178][ T31] usb 4-1: device descriptor read/8, error -71 [ 567.456853][ T36] audit: type=1326 audit(1753818480.039:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9678e9a9 code=0x7fc00000 [ 567.486540][ T36] audit: type=1326 audit(1753818480.039:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9678e9a9 code=0x7fc00000 [ 567.510296][ T36] audit: type=1326 audit(1753818480.039:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9678e9a9 code=0x7fc00000 [ 567.555965][T10023] /dev/rnullb0: Can't open blockdev [ 567.565134][ T36] audit: type=1400 audit(1753818480.229:5810): avc: denied { unmount } for pid=9849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 567.609261][ T31] usb 4-1: device descriptor read/8, error -71 [ 567.736914][T10030] rust_binder: Write failure EINVAL in pid:45 [ 567.847682][ T31] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 567.878728][ T31] usb 4-1: device descriptor read/8, error -71 [ 568.008856][ T31] usb 4-1: device descriptor read/8, error -71 [ 568.117765][ T31] usb usb4-port1: unable to enumerate USB device [ 568.917582][ T374] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 569.047985][ T374] usb 7-1: device descriptor read/64, error -71 [ 569.287640][ T374] usb 7-1: device descriptor read/64, error -71 [ 569.527726][ T374] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 569.580601][T10092] x_tables: duplicate entry at hook 1 [ 569.589811][T10092] x_tables: duplicate entry at hook 1 [ 569.657629][ T374] usb 7-1: device descriptor read/64, error -71 [ 569.877683][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 569.897595][ T374] usb 7-1: device descriptor read/64, error -71 [ 570.007798][ T374] usb usb7-port1: attempt power cycle [ 570.029003][ T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 570.039572][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.049307][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 570.058587][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 570.066596][ T10] usb 4-1: SerialNumber: syz [ 570.089345][T10111] netlink: 'syz.0.3707': attribute type 64 has an invalid length. [ 570.224587][T10129] netlink: 'syz.2.3714': attribute type 4 has an invalid length. [ 570.234461][T10129] netlink: 'syz.2.3714': attribute type 4 has an invalid length. [ 570.245235][T10129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10129 comm=syz.2.3714 [ 570.267442][ T36] audit: type=1400 audit(1753818482.929:5811): avc: denied { name_bind } for pid=10131 comm="syz.2.3716" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 570.293529][ T10] usb 4-1: 0:2 : does not exist [ 570.306141][ T10] usb 4-1: USB disconnect, device number 90 [ 570.347570][ T374] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 570.368651][ T374] usb 7-1: device descriptor read/8, error -71 [ 570.386519][T10139] overlay: Unknown parameter 'uid>00000000000000000000' [ 570.508806][ T374] usb 7-1: device descriptor read/8, error -71 [ 570.747584][ T374] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 570.768623][ T374] usb 7-1: device descriptor read/8, error -71 [ 570.892940][T10170] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 570.898340][T10179] fuse: Unknown parameter '1844674407370955161501777777777777777777777ÿ' [ 570.901886][T10170] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 570.912420][ T374] usb 7-1: device descriptor read/8, error -71 [ 570.924573][T10170] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 571.047872][ T374] usb usb7-port1: unable to enumerate USB device [ 571.261543][ T333] Bluetooth: hci0: Frame reassembly failed (-84) [ 571.268068][ T333] Bluetooth: hci0: Frame reassembly failed (-84) [ 571.497591][ T31] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 571.648733][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.658985][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.668603][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 571.677784][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 571.687107][ T31] usb 4-1: SerialNumber: syz [ 571.761434][T10228] rust_binder: 10227 RLIMIT_NICE not set [ 571.765400][T10227] rust_binder: Error while translating object. [ 571.771164][T10227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 571.777352][T10227] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 571.787843][T10227] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:63 [ 571.807487][ T362] rust_binder: 10226: removing orphan mapping 0:1048 [ 571.830034][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 571.830054][ T36] audit: type=1400 audit(1753818484.499:5813): avc: denied { append } for pid=10236 comm="syz.6.3759" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 571.860051][ T36] audit: type=1400 audit(1753818484.499:5814): avc: denied { open } for pid=10236 comm="syz.6.3759" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 571.901285][T10223] Bluetooth: hci0: Frame reassembly failed (-84) [ 571.912316][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.921923][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.984038][ T36] audit: type=1400 audit(1753818484.649:5815): avc: denied { associate } for pid=10254 comm="syz.6.3766" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 572.011583][ T31] usb 4-1: 0:2 : does not exist [ 572.023551][ T31] usb 4-1: USB disconnect, device number 91 [ 572.034559][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 572.349554][T10270] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 572.607441][ T36] audit: type=1400 audit(1753818485.269:5816): avc: denied { setattr } for pid=10287 comm="syz.6.3780" name="/" dev="incremental-fs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.639983][T10290] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 572.660032][T10292] binder: Bad value for 'max' [ 572.683142][T10297] input: syz0 as /devices/virtual/input/input72 [ 572.756434][T10300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 573.013278][ T36] audit: type=1400 audit(1753818485.679:5817): avc: denied { mount } for pid=10315 comm="syz.0.3792" name="/" dev="ramfs" ino=59006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 573.287643][ T562] Bluetooth: hci0: command 0x1003 tx timeout [ 573.287638][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 573.334460][T10323] overlayfs: failed to clone upperpath [ 573.797607][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 573.928068][ T45] usb 7-1: device descriptor read/64, error -71 [ 574.057629][ T31] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 574.167635][ T45] usb 7-1: device descriptor read/64, error -71 [ 574.208852][ T31] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.220435][ T31] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.230389][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 574.237301][ T31] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 574.246375][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.255084][ T31] usb 4-1: config 0 descriptor?? [ 574.407648][ T45] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 574.537582][ T45] usb 7-1: device descriptor read/64, error -71 [ 574.777618][ T45] usb 7-1: device descriptor read/64, error -71 [ 574.862856][ T31] usb 4-1: string descriptor 0 read error: -22 [ 574.872608][T10376] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3819'. [ 574.887746][ T45] usb usb7-port1: attempt power cycle [ 575.237581][ T45] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 575.258840][ T45] usb 7-1: device descriptor read/8, error -71 [ 575.265248][ T31] uclogic 0003:256C:006D.0034: failed retrieving string descriptor #100: -71 [ 575.274153][ T31] uclogic 0003:256C:006D.0034: failed retrieving pen parameters: -71 [ 575.282371][ T31] uclogic 0003:256C:006D.0034: failed probing pen v1 parameters: -71 [ 575.291566][ T31] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 575.299246][ T31] uclogic 0003:256C:006D.0034: probe with driver uclogic failed with error -71 [ 575.309656][ T31] usb 4-1: USB disconnect, device number 92 [ 575.388801][ T45] usb 7-1: device descriptor read/8, error -71 [ 575.627648][ T45] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 575.648606][ T45] usb 7-1: device descriptor read/8, error -71 [ 575.779650][ T45] usb 7-1: device descriptor read/8, error -71 [ 575.887731][ T45] usb usb7-port1: unable to enumerate USB device [ 576.017572][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 576.168800][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.179200][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.188925][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 576.198202][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 576.206740][ T10] usb 4-1: SerialNumber: syz [ 576.414484][ T10] usb 4-1: 0:2 : does not exist [ 576.421372][ T10] usb 4-1: USB disconnect, device number 93 [ 576.957602][ T45] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 577.108863][ T45] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.120525][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 577.131509][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 577.141289][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.154341][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.163588][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.171639][ T354] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 577.179887][ T45] usb 7-1: config 0 descriptor?? [ 577.328684][ T354] usb 4-1: config 0 has no interfaces? [ 577.335693][ T354] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.344817][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.353254][ T354] usb 4-1: Product: syz [ 577.357437][ T354] usb 4-1: Manufacturer: syz [ 577.362083][ T354] usb 4-1: SerialNumber: syz [ 577.367435][ T354] usb 4-1: config 0 descriptor?? [ 577.587962][ T45] plantronics 0003:047F:FFFF.0035: ignoring exceeding usage max [ 577.597223][ T45] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 577.606318][ T45] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 577.900487][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.909240][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.923407][ T36] audit: type=1400 audit(1753818491.589:5818): avc: denied { mount } for pid=10440 comm="syz.0.3845" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 579.403919][ T36] audit: type=1400 audit(1753818492.069:5819): avc: denied { create } for pid=10443 comm="syz.6.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 579.433085][ T36] audit: type=1400 audit(1753818492.069:5820): avc: denied { sys_admin } for pid=10443 comm="syz.6.3846" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 579.608882][ T374] usb 4-1: USB disconnect, device number 94 [ 579.677666][ T45] usb 7-1: USB disconnect, device number 12 [ 579.799846][ T36] audit: type=1400 audit(1753818492.469:5821): avc: denied { write } for pid=10458 comm="syz.0.3853" path="socket:[57962]" dev="sockfs" ino=57962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 580.121983][ T36] audit: type=1400 audit(1753818492.789:5822): avc: denied { setopt } for pid=10469 comm="syz.6.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 580.223761][T10491] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3859'. [ 580.232801][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3859'. [ 580.242551][T10491] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3859'. [ 580.252156][T10491] rust_binder: Error while translating object. [ 580.252192][T10491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 580.259037][T10491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 580.306760][T10501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:131 [ 580.340509][T10507] tmpfs: Unknown parameter 'Ù2ö»Ù [ 580.340509][T10507] ¦eŠúS£b«¢¸ÐÃmóXæ' [ 580.414333][T10513] FAULT_INJECTION: forcing a failure. [ 580.414333][T10513] name failslab, interval 1, probability 0, space 0, times 0 [ 580.427296][T10513] CPU: 0 UID: 0 PID: 10513 Comm: syz.6.3873 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 580.427330][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.427341][T10513] Call Trace: [ 580.427348][T10513] [ 580.427357][T10513] __dump_stack+0x21/0x30 [ 580.427384][T10513] dump_stack_lvl+0x10c/0x190 [ 580.427396][T10513] ? __cfi_dump_stack_lvl+0x10/0x10 [ 580.427408][T10513] ? __asan_memcpy+0x5a/0x80 [ 580.427422][T10513] dump_stack+0x19/0x20 [ 580.427433][T10513] should_fail_ex+0x3d9/0x530 [ 580.427446][T10513] should_failslab+0xac/0x100 [ 580.427459][T10513] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 580.427472][T10513] ? __alloc_skb+0x10c/0x370 [ 580.427484][T10513] __alloc_skb+0x10c/0x370 [ 580.427495][T10513] alloc_skb_with_frags+0xce/0x8b0 [ 580.427517][T10513] ? __cfi_selinux_file_open+0x10/0x10 [ 580.427537][T10513] sock_alloc_send_pskb+0x858/0x990 [ 580.427560][T10513] ? __kasan_check_write+0x18/0x20 [ 580.427581][T10513] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 580.427605][T10513] ? __kasan_check_read+0x15/0x20 [ 580.427625][T10513] ? resched_curr+0xaa/0x430 [ 580.427642][T10513] ? unwind_get_return_address+0x51/0x90 [ 580.427654][T10513] packet_sendmsg+0x39bf/0x56e0 [ 580.427667][T10513] ? avc_has_perm_noaudit+0x268/0x360 [ 580.427681][T10513] ? security_tun_dev_attach_queue+0x40/0xb0 [ 580.427697][T10513] ? selinux_socket_sendmsg+0x284/0x380 [ 580.427711][T10513] ? __cfi_sched_clock_cpu+0x10/0x10 [ 580.427724][T10513] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 580.427737][T10513] ? pick_task_fair+0x2ae/0x4e0 [ 580.427748][T10513] ? __cfi_packet_sendmsg+0x10/0x10 [ 580.427759][T10513] ? inode_set_ctime_current+0x170/0x2e0 [ 580.427793][T10513] ? check_stack_object+0x107/0x140 [ 580.427810][T10513] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 580.427822][T10513] ? security_socket_sendmsg+0x33/0xd0 [ 580.427834][T10513] __sys_sendto+0x66a/0x6f0 [ 580.427847][T10513] ? __cfi___sys_sendto+0x10/0x10 [ 580.427860][T10513] ? __sched_text_start+0x10/0x10 [ 580.427876][T10513] ? __cfi_ksys_write+0x10/0x10 [ 580.427889][T10513] __x64_sys_sendto+0xe9/0x100 [ 580.427901][T10513] x64_sys_call+0x2c2c/0x2ee0 [ 580.427914][T10513] do_syscall_64+0x58/0xf0 [ 580.427926][T10513] ? clear_bhb_loop+0x50/0xa0 [ 580.427942][T10513] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 580.427955][T10513] RIP: 0033:0x7f4a9678e9a9 [ 580.427967][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.427978][T10513] RSP: 002b:00007f4a97624038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 580.427999][T10513] RAX: ffffffffffffffda RBX: 00007f4a969b5fa0 RCX: 00007f4a9678e9a9 [ 580.428011][T10513] RDX: 0000000000000023 RSI: 00002000000000c0 RDI: 0000000000000004 [ 580.428023][T10513] RBP: 00007f4a97624090 R08: 0000200000000540 R09: 0000000000000014 [ 580.428034][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.428041][T10513] R13: 0000000000000000 R14: 00007f4a969b5fa0 R15: 00007ffd9b6ba678 [ 580.428049][T10513] [ 580.467698][ T45] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 580.808272][ T10] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 580.816471][ T10] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 580.899151][ T45] usb 4-1: config 0 has no interfaces? [ 580.906281][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.915608][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.923935][ T45] usb 4-1: Product: syz [ 580.928643][ T45] usb 4-1: Manufacturer: syz [ 580.933253][ T45] usb 4-1: SerialNumber: syz [ 580.938857][ T45] usb 4-1: config 0 descriptor?? [ 580.989653][T10541] __vm_enough_memory: pid: 10541, comm: syz.6.3884, bytes: 18014402804453376 not enough memory for the allocation [ 581.048029][ T36] audit: type=1400 audit(1753818493.709:5823): avc: denied { execute } for pid=10546 comm="syz.6.3887" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 581.080846][T10553] FAULT_INJECTION: forcing a failure. [ 581.080846][T10553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.094169][T10553] CPU: 0 UID: 0 PID: 10553 Comm: syz.6.3888 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 581.094203][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.094211][T10553] Call Trace: [ 581.094217][T10553] [ 581.094224][T10553] __dump_stack+0x21/0x30 [ 581.094246][T10553] dump_stack_lvl+0x10c/0x190 [ 581.094257][T10553] ? __cfi_dump_stack_lvl+0x10/0x10 [ 581.094270][T10553] ? kernel_text_address+0xa9/0xe0 [ 581.094284][T10553] dump_stack+0x19/0x20 [ 581.094294][T10553] should_fail_ex+0x3d9/0x530 [ 581.094308][T10553] should_fail+0xf/0x20 [ 581.094320][T10553] should_fail_usercopy+0x1e/0x30 [ 581.094333][T10553] _copy_from_user+0x22/0xb0 [ 581.094343][T10553] ___sys_sendmsg+0x159/0x2a0 [ 581.094358][T10553] ? __sys_sendmsg+0x280/0x280 [ 581.094372][T10553] ? kstrtouint+0x78/0xf0 [ 581.094387][T10553] __sys_sendmmsg+0x271/0x470 [ 581.094406][T10553] ? __cfi___sys_sendmmsg+0x10/0x10 [ 581.094422][T10553] ? __cfi_ksys_write+0x10/0x10 [ 581.094436][T10553] __x64_sys_sendmmsg+0xa4/0xc0 [ 581.094450][T10553] x64_sys_call+0xfec/0x2ee0 [ 581.094462][T10553] do_syscall_64+0x58/0xf0 [ 581.094474][T10553] ? clear_bhb_loop+0x50/0xa0 [ 581.094490][T10553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 581.094503][T10553] RIP: 0033:0x7f4a9678e9a9 [ 581.094514][T10553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.094524][T10553] RSP: 002b:00007f4a97624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 581.094538][T10553] RAX: ffffffffffffffda RBX: 00007f4a969b5fa0 RCX: 00007f4a9678e9a9 [ 581.094546][T10553] RDX: 0000000000000002 RSI: 00002000000083c0 RDI: 0000000000000003 [ 581.094554][T10553] RBP: 00007f4a97624090 R08: 0000000000000000 R09: 0000000000000000 [ 581.094561][T10553] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001 [ 581.094568][T10553] R13: 0000000000000000 R14: 00007f4a969b5fa0 R15: 00007ffd9b6ba678 [ 581.094577][T10553] [ 581.356229][T10558] usb usb8: usbfs: process 10558 (syz.6.3890) did not claim interface 0 before use [ 581.438462][T10563] rust_binder: 10562 RLIMIT_NICE not set [ 581.438672][T10562] rust_binder: Error while translating object. [ 581.444505][T10562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 581.451028][T10562] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 581.460567][T10562] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:181 [ 581.476353][ T45] rust_binder: 10561: removing orphan mapping 0:1048 [ 581.579250][ T36] audit: type=1326 audit(1753818494.249:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f862318e9a9 code=0x7fc00000 [ 581.603093][ T36] audit: type=1326 audit(1753818494.249:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f862318e9a9 code=0x7fc00000 [ 581.627112][ T36] audit: type=1326 audit(1753818494.249:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f862318e9a9 code=0x7fc00000 [ 581.658608][T10575] overlayfs: failed to clone upperpath [ 582.241103][T10606] >: renamed from veth0_vlan (while UP) [ 582.248156][T10606] netlink: 'syz.0.3912': attribute type 35 has an invalid length. [ 582.313145][T10618] 9pnet_fd: Insufficient options for proto=fd [ 582.597623][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 582.747639][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 582.754185][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.764591][ T10] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 582.775069][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.784195][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.792337][ T10] usb 7-1: Product: syz [ 582.796664][ T10] usb 7-1: Manufacturer: syz [ 582.801287][ T10] usb 7-1: SerialNumber: syz [ 582.950328][T10639] overlayfs: failed to clone upperpath [ 583.227851][ T31] usb 4-1: USB disconnect, device number 95 [ 583.299852][ T36] audit: type=1400 audit(1753818495.972:5827): avc: denied { ioctl } for pid=10646 comm="syz.3.3931" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 584.173765][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 584.173785][ T36] audit: type=1400 audit(1753818496.842:5829): avc: denied { write } for pid=10676 comm="syz.3.3942" name="file0" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 584.220221][T10683] input input73: cannot allocate more than FF_MAX_EFFECTS effects [ 584.486502][T10693] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 584.496712][ T36] audit: type=1400 audit(1753818497.162:5830): avc: denied { relabelto } for pid=10692 comm="syz.0.3948" name="file0" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 584.534899][ T36] audit: type=1400 audit(1753818497.162:5831): avc: denied { associate } for pid=10692 comm="syz.0.3948" name="file0" dev="tmpfs" ino=2538 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 584.562856][ T36] audit: type=1400 audit(1753818497.202:5832): avc: denied { unlink } for pid=4979 comm="syz-executor" name="file0" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 585.265713][T10706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 585.265739][T10706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1166 [ 585.360858][ T9] usb 7-1: USB disconnect, device number 13 [ 585.822462][T10729] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 586.097602][ T354] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 586.257631][ T354] usb 4-1: Using ep0 maxpacket: 16 [ 586.264001][ T354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.274316][ T354] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 586.285594][ T354] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.295036][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.303588][ T354] usb 4-1: Product: syz [ 586.308478][ T354] usb 4-1: Manufacturer: syz [ 586.313090][ T354] usb 4-1: SerialNumber: syz [ 587.699307][ T36] audit: type=1400 audit(1753818500.372:5833): avc: denied { create } for pid=10783 comm="syz.0.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 587.954151][ T36] audit: type=1400 audit(1753818500.622:5834): avc: denied { map } for pid=10788 comm="syz.2.3987" path="pipe:[45921]" dev="pipefs" ino=45921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 588.197233][ T36] audit: type=1400 audit(1753818500.862:5835): avc: denied { create } for pid=10812 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 588.223638][T10815] fuse: Bad value for 'user_id' [ 588.228595][T10815] fuse: Bad value for 'user_id' [ 588.850263][ T36] audit: type=1326 audit(1753818501.522:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.4022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f862318e9a9 code=0x0 [ 588.881681][ T10] usb 4-1: USB disconnect, device number 96 [ 588.898301][ T36] audit: type=1400 audit(1753818501.572:5837): avc: denied { read } for pid=10871 comm="syz.3.4023" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 588.921888][T10872] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 588.956706][ T36] audit: type=1400 audit(1753818501.622:5838): avc: denied { append } for pid=10871 comm="syz.3.4023" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 588.997191][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4027'. [ 591.103538][ T36] audit: type=1400 audit(1753818503.772:5839): avc: denied { getattr } for pid=10947 comm="syz.2.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 591.294916][T10968] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 591.303014][T10968] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 591.311582][T10968] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 591.319749][T10968] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 591.786597][T11005] incfs: Options parsing error. -22 [ 591.792033][T11005] incfs: mount failed -22 [ 591.887630][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 592.038796][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.049008][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.058671][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 592.067834][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 592.075896][ T10] usb 7-1: SerialNumber: syz [ 592.283258][ T10] usb 7-1: 0:2 : does not exist [ 592.303109][ T10] usb 7-1: USB disconnect, device number 14 [ 592.360888][ T36] audit: type=1400 audit(1753818505.032:5840): avc: denied { shutdown } for pid=11029 comm="syz.0.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.397716][ T36] audit: type=1400 audit(1753818505.052:5841): avc: denied { bind } for pid=11029 comm="syz.0.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 592.483662][ T36] audit: type=1400 audit(1753818505.152:5842): avc: denied { setattr } for pid=11040 comm="syz.2.4092" name="/" dev="configfs" ino=2415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 592.559563][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 592.717577][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 592.724087][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 592.733432][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.744692][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.755577][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 592.765106][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.773350][ T9] usb 4-1: Product: syz [ 592.777775][ T9] usb 4-1: Manufacturer: syz [ 592.782390][ T9] usb 4-1: SerialNumber: syz [ 592.978318][T11095] netlink: 'syz.2.4115': attribute type 2 has an invalid length. [ 592.986114][T11095] netlink: 'syz.2.4115': attribute type 1 has an invalid length. [ 592.995304][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.004560][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.024488][T11099] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.4117'. [ 593.057583][ T329] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 593.070501][ T36] audit: type=1400 audit(1753818505.742:5843): avc: denied { create } for pid=11106 comm="syz.2.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 593.187558][ T329] usb 7-1: device descriptor read/64, error -71 [ 593.213777][ T9] usb 4-1: 0:2 : does not exist [ 593.427614][ T329] usb 7-1: device descriptor read/64, error -71 [ 593.667591][ T329] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 593.797613][ T329] usb 7-1: device descriptor read/64, error -71 [ 594.047591][ T329] usb 7-1: device descriptor read/64, error -71 [ 594.157691][ T329] usb usb7-port1: attempt power cycle [ 594.497600][ T329] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 594.518664][ T329] usb 7-1: device descriptor read/8, error -71 [ 594.581232][ T36] audit: type=1400 audit(1753818507.252:5844): avc: denied { create } for pid=11134 comm="syz.0.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 594.648554][ T329] usb 7-1: device descriptor read/8, error -71 [ 594.887604][ T329] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 594.908641][ T329] usb 7-1: device descriptor read/8, error -71 [ 595.038659][ T329] usb 7-1: device descriptor read/8, error -71 [ 595.147740][ T329] usb usb7-port1: unable to enumerate USB device [ 595.330064][ T329] usb 4-1: USB disconnect, device number 97 [ 595.341663][T11149] netlink: 'syz.3.4137': attribute type 7 has an invalid length. [ 595.349990][T11149] netlink: 'syz.3.4137': attribute type 5 has an invalid length. [ 595.358147][T11149] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4137'. [ 595.469921][T11157] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 595.876463][T11167] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4145'. [ 595.947735][ T36] audit: type=1400 audit(1753818508.622:5845): avc: denied { remount } for pid=11170 comm="syz.6.4147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 595.985878][ T329] hid-generic 0000:0D17:0000.0037: unknown main item tag 0x0 [ 595.993420][ T329] hid-generic 0000:0D17:0000.0037: unknown main item tag 0x0 [ 596.001463][ T329] hid-generic 0000:0D17:0000.0037: hidraw0: HID v0.00 Device [syz0] on syz1 [ 596.447570][ T329] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 596.597557][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 596.606168][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.620836][ T329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.638048][ T329] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.647420][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.659991][ T329] usb 4-1: Product: syz [ 596.664342][ T329] usb 4-1: Manufacturer: syz [ 596.669115][ T329] usb 4-1: SerialNumber: syz [ 597.057639][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 597.077129][ T329] usb 4-1: 0:2 : does not exist [ 597.207603][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 597.214090][ T31] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 597.222968][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.233148][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.243562][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.252825][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.260895][ T31] usb 7-1: Product: syz [ 597.265077][ T31] usb 7-1: Manufacturer: syz [ 597.269714][ T31] usb 7-1: SerialNumber: syz [ 597.476920][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.485580][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.697671][ T31] usb 7-1: 0:2 : does not exist [ 598.008329][ T36] audit: type=1400 audit(1753818510.682:5846): avc: denied { mount } for pid=11262 comm="syz.2.4182" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 598.527334][ T36] audit: type=1326 audit(1753818511.192:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.2.4184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f970a98e9a9 code=0x0 [ 598.627695][ T36] audit: type=1400 audit(1753818511.302:5848): avc: denied { ioctl } for pid=11268 comm="syz.2.4184" path="socket:[61677]" dev="sockfs" ino=61677 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 598.653041][ T36] audit: type=1400 audit(1753818511.302:5849): avc: denied { create } for pid=11268 comm="syz.2.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 598.886684][ T36] audit: type=1400 audit(1753818511.552:5850): avc: denied { ioctl } for pid=11290 comm="syz.0.4193" path="socket:[61720]" dev="sockfs" ino=61720 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 598.888655][T11291] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4193'. [ 599.220119][ T31] usb 4-1: USB disconnect, device number 98 [ 599.389042][T11307] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4200'. [ 599.399107][ T36] audit: type=1326 audit(1753818512.072:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.2.4200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f970a98e9a9 code=0x0 [ 599.832135][ T31] usb 7-1: USB disconnect, device number 19 [ 599.912836][T11321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 599.912884][T11321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 600.000329][T11327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11327 comm=syz.6.4209 [ 600.347581][ T329] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 600.497599][ T329] usb 7-1: Using ep0 maxpacket: 16 [ 600.503781][ T329] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.514062][ T329] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.524447][ T329] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.533858][ T329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.542070][ T329] usb 7-1: Product: syz [ 600.546252][ T329] usb 7-1: Manufacturer: syz [ 600.550909][ T329] usb 7-1: SerialNumber: syz [ 600.597606][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 600.660277][ T36] audit: type=1400 audit(1753818513.332:5852): avc: denied { lock } for pid=11397 comm="syz.0.4239" path="socket:[62715]" dev="sockfs" ino=62715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 600.737631][ T9] usb 4-1: device descriptor read/64, error -71 [ 600.784869][ T36] audit: type=1400 audit(1753818513.452:5853): avc: denied { read } for pid=11407 comm="syz.0.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 600.959427][ T329] usb 7-1: skipping empty audio interface (v1) [ 600.968514][ T329] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 600.977929][ T9] usb 4-1: device descriptor read/64, error -71 [ 600.991510][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 601.027414][T11442] overlayfs: failed to clone lowerpath [ 601.217466][T11450] tipc: Failed to remove unknown binding: 66,1,1/0:2157313379/2157313381 [ 601.217581][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 601.357612][ T9] usb 4-1: device descriptor read/64, error -71 [ 601.597577][ T9] usb 4-1: device descriptor read/64, error -71 [ 601.707710][ T9] usb usb4-port1: attempt power cycle [ 602.047611][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 602.068612][ T9] usb 4-1: device descriptor read/8, error -71 [ 602.198741][ T9] usb 4-1: device descriptor read/8, error -71 [ 602.437610][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 602.458663][ T9] usb 4-1: device descriptor read/8, error -71 [ 602.588836][ T9] usb 4-1: device descriptor read/8, error -71 [ 602.700278][ T9] usb usb4-port1: unable to enumerate USB device [ 603.015726][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.022907][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.030123][T11534] bridge_slave_0: entered allmulticast mode [ 603.036471][T11534] bridge_slave_0: entered promiscuous mode [ 603.043035][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.050131][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.057299][T11534] bridge_slave_1: entered allmulticast mode [ 603.063551][T11534] bridge_slave_1: entered promiscuous mode [ 603.108353][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.115429][T11534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.122035][ T31] usb 7-1: USB disconnect, device number 20 [ 603.122857][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.135693][T11534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.163177][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.170716][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.176068][T11549] bpf: Bad value for 'mode' [ 603.185332][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.192457][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.200346][ T36] audit: type=1400 audit(1753818515.852:5854): avc: denied { getopt } for pid=11548 comm="syz.6.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 603.214398][T11553] netlink: 392 bytes leftover after parsing attributes in process `syz.6.4298'. [ 603.223287][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.233356][T11553] rust_binder: Write failure EFAULT in pid:314 [ 603.236877][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.275163][T11534] veth0_vlan: entered promiscuous mode [ 603.290709][T11534] veth1_macvtap: entered promiscuous mode [ 603.331029][T11557] fuse: Bad value for 'fd' [ 603.397098][T11562] x_tables: duplicate underflow at hook 1 [ 603.413558][T11563] rust_binder: 11559 RLIMIT_NICE not set [ 603.413814][T11559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 603.419637][T11559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1233 [ 603.490636][T11566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1236 [ 603.506417][ T6549] rust_binder: 11564: removing orphan mapping 0:1048 [ 603.607604][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 603.647735][ T31] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 603.707208][T11590] fuse: Bad value for 'rootmode' [ 603.768889][ T9] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.790161][ T9] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.809572][ T31] usb 1-1: config 0 has an invalid interface number: 83 but max is 1 [ 603.817563][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 603.827604][ T31] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 603.834491][ T9] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 603.836222][ T31] usb 1-1: config 0 has no interface number 0 [ 603.855199][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.867695][ T31] usb 1-1: config 0 has no interface number 1 [ 603.876098][ T9] usb 7-1: config 0 descriptor?? [ 603.884136][ T31] usb 1-1: config 0 interface 83 has no altsetting 0 [ 603.903794][ T31] usb 1-1: config 0 interface 144 has no altsetting 0 [ 603.918977][ T31] usb 1-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=28.b0 [ 603.937571][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.947599][ T31] usb 1-1: Product: syz [ 603.951838][ T31] usb 1-1: Manufacturer: syz [ 603.966692][ T31] usb 1-1: SerialNumber: syz [ 603.980429][ T31] usb 1-1: config 0 descriptor?? [ 604.201622][ T31] usb 1-1: USB disconnect, device number 111 [ 604.327577][ T329] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 604.494554][ T9] usb 7-1: string descriptor 0 read error: -22 [ 604.502334][ T329] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 604.512838][ T329] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.525915][ T329] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 604.535272][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.548558][ T329] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 604.711576][ T9] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #100: -71 [ 604.724126][ T9] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71 [ 604.733172][ T9] uclogic 0003:256C:006D.0038: failed probing pen v1 parameters: -71 [ 604.741983][ T9] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 604.749699][ T9] uclogic 0003:256C:006D.0038: probe with driver uclogic failed with error -71 [ 604.765218][ T9] usb 7-1: USB disconnect, device number 21 [ 604.906466][T11627] rust_binder: Error while translating object. [ 604.906498][T11627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 604.913021][T11627] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 604.922729][T11627] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:17 [ 604.939402][ T9] rust_binder: 11626: removing orphan mapping 0:1048 [ 605.237679][ T36] audit: type=1400 audit(1753818517.912:5855): avc: denied { write } for pid=11643 comm="syz.6.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 605.267660][ T354] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 605.418715][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.429827][ T354] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 605.439082][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.447802][ T354] usb 1-1: config 0 descriptor?? [ 605.654688][ T354] usbhid 1-1:0.0: can't add hid device: -71 [ 605.660738][ T354] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 605.669573][ T354] usb 1-1: USB disconnect, device number 112 [ 605.696056][ T36] audit: type=1400 audit(1753818518.362:5856): avc: denied { append } for pid=11658 comm="syz.6.4340" name="pfkey" dev="proc" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 606.087780][ T354] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 606.238727][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.249775][ T354] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 606.258887][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.267415][ T354] usb 1-1: config 0 descriptor?? [ 606.675332][ T354] usbhid 1-1:0.0: can't add hid device: -71 [ 606.681415][ T354] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 606.693264][ T354] usb 1-1: USB disconnect, device number 113 [ 607.082619][ T354] usb 4-1: USB disconnect, device number 103 [ 607.299202][T11714] tipc: Can't bind to reserved service type 1 [ 607.306614][T11714] tipc: Started in network mode [ 607.314479][T11714] tipc: Node identity 3c, cluster identity 4711 [ 607.323129][T11714] tipc: Node number set to 60 [ 607.372128][ T36] audit: type=1400 audit(1753818520.042:5857): avc: denied { nlmsg_read } for pid=11704 comm="syz.0.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 607.647585][ T45] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 607.777619][ T45] usb 1-1: device descriptor read/64, error -71 [ 608.017651][ T45] usb 1-1: device descriptor read/64, error -71 [ 608.277593][ T45] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 608.407863][ T45] usb 1-1: device descriptor read/64, error -71 [ 608.647957][ T45] usb 1-1: device descriptor read/64, error -71 [ 608.658916][T11730] rust_binder: Error while translating object. [ 608.658951][T11730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 608.665119][T11730] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 608.674711][T11730] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1251 [ 608.687084][ T9] rust_binder: 11729: removing orphan mapping 0:1048 [ 608.757741][ T45] usb usb1-port1: attempt power cycle [ 609.097604][ T45] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 609.118612][ T45] usb 1-1: device descriptor read/8, error -71 [ 609.191139][T11765] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 609.248606][ T45] usb 1-1: device descriptor read/8, error -71 [ 609.497655][ T45] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 609.518593][ T45] usb 1-1: device descriptor read/8, error -71 [ 609.596693][T11788] FAULT_INJECTION: forcing a failure. [ 609.596693][T11788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.609848][T11788] CPU: 1 UID: 0 PID: 11788 Comm: syz.3.4385 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 609.609877][T11788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.609889][T11788] Call Trace: [ 609.609895][T11788] [ 609.609901][T11788] __dump_stack+0x21/0x30 [ 609.609937][T11788] dump_stack_lvl+0x10c/0x190 [ 609.609955][T11788] ? __cfi_dump_stack_lvl+0x10/0x10 [ 609.609976][T11788] dump_stack+0x19/0x20 [ 609.609995][T11788] should_fail_ex+0x3d9/0x530 [ 609.610019][T11788] should_fail+0xf/0x20 [ 609.610039][T11788] should_fail_usercopy+0x1e/0x30 [ 609.610061][T11788] _copy_to_user+0x24/0xa0 [ 609.610074][T11788] simple_read_from_buffer+0xed/0x160 [ 609.610086][T11788] proc_fail_nth_read+0x19e/0x210 [ 609.610099][T11788] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 609.610110][T11788] ? bpf_lsm_file_permission+0xd/0x20 [ 609.610125][T11788] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 609.610135][T11788] vfs_read+0x278/0xb60 [ 609.610148][T11788] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 609.610160][T11788] ? __cfi_vfs_read+0x10/0x10 [ 609.610171][T11788] ? __kasan_check_write+0x18/0x20 [ 609.610185][T11788] ? mutex_lock+0x92/0x1c0 [ 609.610200][T11788] ? __cfi_mutex_lock+0x10/0x10 [ 609.610212][T11788] ? __fget_files+0x2c5/0x340 [ 609.610228][T11788] ksys_read+0x141/0x250 [ 609.610240][T11788] ? __cfi_ksys_read+0x10/0x10 [ 609.610252][T11788] ? __kasan_check_read+0x15/0x20 [ 609.610263][T11788] __x64_sys_read+0x7f/0x90 [ 609.610275][T11788] x64_sys_call+0x2638/0x2ee0 [ 609.610292][T11788] do_syscall_64+0x58/0xf0 [ 609.610304][T11788] ? clear_bhb_loop+0x50/0xa0 [ 609.610320][T11788] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 609.610334][T11788] RIP: 0033:0x7f3a90f8d3bc [ 609.610344][T11788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 609.610353][T11788] RSP: 002b:00007f3a91dcc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.610366][T11788] RAX: ffffffffffffffda RBX: 00007f3a911b5fa0 RCX: 00007f3a90f8d3bc [ 609.610374][T11788] RDX: 000000000000000f RSI: 00007f3a91dcc0a0 RDI: 0000000000000005 [ 609.610381][T11788] RBP: 00007f3a91dcc090 R08: 0000000000000000 R09: 0000000000000000 [ 609.610388][T11788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.610395][T11788] R13: 0000000000000000 R14: 00007f3a911b5fa0 R15: 00007ffc4accb0c8 [ 609.610404][T11788] [ 609.869894][ T36] audit: type=1400 audit(1753818522.542:5858): avc: granted { setsecparam } for pid=11792 comm="syz.3.4387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 609.898932][ T45] usb 1-1: device descriptor read/8, error -71 [ 610.007751][ T45] usb usb1-port1: unable to enumerate USB device [ 610.337864][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 610.487915][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 610.494543][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 610.503355][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.513680][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.524209][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.533337][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.541587][ T9] usb 4-1: Product: syz [ 610.545759][ T9] usb 4-1: Manufacturer: syz [ 610.550431][ T9] usb 4-1: SerialNumber: syz [ 610.576114][ T36] audit: type=1400 audit(1753818523.242:5859): avc: denied { accept } for pid=11843 comm="syz.0.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 610.958942][ T9] usb 4-1: 0:2 : does not exist [ 611.088311][ T36] audit: type=1400 audit(1753818523.762:5860): avc: denied { mounton } for pid=11848 comm="syz.0.4408" path="/22/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 611.276682][T11857] rust_binder: Write failure EINVAL in pid:71 [ 611.287637][ T354] rust_binder: 11856: removing orphan mapping 0:1024 [ 611.324031][T11866] netlink: 'syz.0.4414': attribute type 12 has an invalid length. [ 611.433716][T11872] rust_binder: Write failure EFAULT in pid:85 [ 611.571382][ T9] usb 4-1: USB disconnect, device number 104 [ 612.419878][T11938] binder: Bad value for 'max' [ 612.443845][T11942] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4443'. [ 612.455292][ T36] audit: type=1326 audit(1753818525.122:5861): auid=4294967295 uid=49663 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11941 comm="syz.6.4443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a9678e9a9 code=0x0 [ 612.647762][ T45] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 612.797574][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 612.804048][ T45] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 612.813022][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.823135][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.833548][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.842816][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.851445][ T45] usb 1-1: Product: syz [ 612.855697][ T45] usb 1-1: Manufacturer: syz [ 612.860371][ T45] usb 1-1: SerialNumber: syz [ 613.267953][ T45] usb 1-1: 0:2 : does not exist [ 613.732537][T12013] fuse: Unknown parameter 'fdÁ' [ 613.881645][ T45] usb 1-1: USB disconnect, device number 118 [ 614.047462][T12038] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4477'. [ 614.105966][ T36] audit: type=1400 audit(1753818526.772:5862): avc: denied { audit_write } for pid=12039 comm="syz.3.4478" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 614.127365][ T36] audit: type=1107 audit(1753818526.772:5863): pid=12039 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 614.433911][T12092] random: crng reseeded on system resumption [ 614.592467][ T36] audit: type=1400 audit(1753818527.262:5864): avc: denied { create } for pid=12101 comm="syz.0.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 614.854832][T12141] input: syz0 as /devices/virtual/input/input75 [ 614.867687][ T329] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 614.940295][T12157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12157 comm=syz.3.4525 [ 614.954126][ T36] audit: type=1400 audit(1753818527.622:5865): avc: denied { create } for pid=12156 comm="syz.3.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 614.957600][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 614.988475][T12159] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 614.997960][T12159] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 615.009654][T12159] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 615.027566][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 615.033975][ T329] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 615.042808][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.053370][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.067911][ T329] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.073195][T12167] fuse: Bad value for 'user_id' [ 615.077069][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.081943][T12167] fuse: Bad value for 'user_id' [ 615.090231][ T329] usb 1-1: Product: syz [ 615.099107][ T329] usb 1-1: Manufacturer: syz [ 615.103802][ T329] usb 1-1: SerialNumber: syz [ 615.108812][ T9] usb 7-1: device descriptor read/64, error -71 [ 615.137602][T12174] binder: Bad value for 'stats' [ 615.347608][ T9] usb 7-1: device descriptor read/64, error -71 [ 615.497601][ T354] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 615.518833][ T329] usb 1-1: 0:2 : does not exist [ 615.587578][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 615.647573][ T354] usb 4-1: Using ep0 maxpacket: 16 [ 615.653893][ T354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.664083][ T354] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.674867][ T354] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.684020][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.692372][ T354] usb 4-1: Product: syz [ 615.696799][ T354] usb 4-1: Manufacturer: syz [ 615.701720][ T354] usb 4-1: SerialNumber: syz [ 615.727675][ T9] usb 7-1: device descriptor read/64, error -71 [ 615.922954][ T329] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 615.935801][ T329] usb 1-1: USB disconnect, device number 119 [ 615.967635][ T9] usb 7-1: device descriptor read/64, error -71 [ 616.077766][ T9] usb usb7-port1: attempt power cycle [ 616.135992][ T354] usb 4-1: skipping empty audio interface (v1) [ 616.144293][ T354] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 616.146375][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 616.154645][ T354] usb 4-1: USB disconnect, device number 105 [ 616.176152][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 616.437624][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 616.458832][ T9] usb 7-1: device descriptor read/8, error -71 [ 616.588790][ T9] usb 7-1: device descriptor read/8, error -71 [ 616.755100][T12216] netlink: 'syz.2.4550': attribute type 1 has an invalid length. [ 616.827606][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 616.848706][ T9] usb 7-1: device descriptor read/8, error -71 [ 616.957603][ T329] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 616.978891][ T9] usb 7-1: device descriptor read/8, error -71 [ 617.087798][ T9] usb usb7-port1: unable to enumerate USB device [ 617.107589][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 617.114360][ T329] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 617.123161][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.133304][ T329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.143665][ T329] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.152760][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.160833][ T329] usb 4-1: Product: syz [ 617.165003][ T329] usb 4-1: Manufacturer: syz [ 617.169647][ T329] usb 4-1: SerialNumber: syz [ 617.281470][T12221] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4552'. [ 617.290584][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4552'. [ 617.578895][ T329] usb 4-1: 0:2 : does not exist [ 617.884710][T12263] sock: sock_timestamping_bind_phc: sock not bind to device [ 617.892361][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 617.900250][T12262] sock: sock_timestamping_bind_phc: sock not bind to device [ 617.982397][ T329] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 617.994115][ T329] usb 4-1: USB disconnect, device number 106 [ 618.002894][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 618.057618][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 618.064085][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.074240][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.085312][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.094610][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.102664][ T9] usb 1-1: Product: syz [ 618.106983][ T9] usb 1-1: Manufacturer: syz [ 618.111879][ T9] usb 1-1: SerialNumber: syz [ 618.167937][ T414] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 618.172509][ T36] audit: type=1400 audit(1753818530.842:5866): avc: denied { read } for pid=12278 comm="syz.2.4574" lport=15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 618.328506][ T414] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.339824][ T414] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.349826][ T414] usb 7-1: config 0 interface 0 has no altsetting 0 [ 618.356698][ T414] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 618.365950][ T414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.377797][ T414] usb 7-1: config 0 descriptor?? [ 618.530106][ T9] usb 1-1: skipping empty audio interface (v1) [ 618.538105][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 618.548279][ T9] usb 1-1: USB disconnect, device number 120 [ 618.554298][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 618.986719][ T414] usb 7-1: string descriptor 0 read error: -22 [ 619.092915][T12301] 9pnet_fd: Insufficient options for proto=fd [ 619.110979][T12305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 619.111016][T12305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 619.232585][ T36] audit: type=1400 audit(1753818531.902:5867): avc: denied { ioctl } for pid=12308 comm="syz.0.4585" path="socket:[65533]" dev="sockfs" ino=65533 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 619.280134][T12314] fuse: Bad value for 'fd' [ 619.344773][ T36] audit: type=1400 audit(1753818532.012:5868): avc: denied { getopt } for pid=12330 comm="syz.0.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 619.380727][T12334] rust_binder: Write failure EINVAL in pid:171 [ 619.398412][T12336] fuse: Invalid rootmode [ 619.414148][ T414] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #100: -71 [ 619.425751][ T414] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71 [ 619.433923][ T414] uclogic 0003:256C:006D.0039: failed probing pen v1 parameters: -71 [ 619.442449][ T414] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 619.450498][ T414] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71 [ 619.462525][ T414] usb 7-1: USB disconnect, device number 26 [ 619.523245][T12359] veth1_macvtap: left promiscuous mode [ 619.647673][ T6549] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 619.798061][ T6549] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 619.812849][ T6549] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 619.822051][ T6549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 619.830248][ T6549] usb 1-1: Product: syz [ 619.834423][ T6549] usb 1-1: Manufacturer: syz [ 619.839160][ T6549] usb 1-1: SerialNumber: syz [ 619.844527][ T6549] usb 1-1: config 0 descriptor?? [ 620.121493][T12378] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 620.567564][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 620.645712][ T6549] usb 1-1: bad CDC descriptors [ 620.653145][ T6549] usb 1-1: USB disconnect, device number 121 [ 620.788087][T12401] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 620.795406][T12401] rust_binder: Write failure EINVAL in pid:478 [ 620.957590][ T354] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 621.118769][ T354] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.129904][ T354] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.139833][ T354] usb 4-1: config 0 interface 0 has no altsetting 0 [ 621.146447][ T354] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 621.155507][ T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.164221][ T354] usb 4-1: config 0 descriptor?? [ 621.429200][ T36] audit: type=1400 audit(1753818534.102:5869): avc: denied { module_load } for pid=12419 comm="syz.0.4629" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 621.429222][T12420] Invalid ELF header len 16 [ 621.461911][ T36] audit: type=1400 audit(1753818534.102:5870): avc: denied { shutdown } for pid=12419 comm="syz.0.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 621.638403][ T36] audit: type=1400 audit(1753818534.312:5871): avc: denied { read append } for pid=12437 comm="syz.0.4637" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 621.663889][ T36] audit: type=1400 audit(1753818534.312:5872): avc: denied { open } for pid=12437 comm="syz.0.4637" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 621.689076][ T36] audit: type=1400 audit(1753818534.312:5873): avc: denied { ioctl } for pid=12437 comm="syz.0.4637" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 621.771850][ T354] usb 4-1: string descriptor 0 read error: -22 [ 621.947571][ T6549] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 622.077564][ T6549] usb 1-1: device descriptor read/64, error -71 [ 622.173243][ T354] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #100: -71 [ 622.182132][ T354] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71 [ 622.190663][ T354] uclogic 0003:256C:006D.003A: failed probing pen v1 parameters: -71 [ 622.198987][ T354] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 622.206603][ T354] uclogic 0003:256C:006D.003A: probe with driver uclogic failed with error -71 [ 622.217708][ T354] usb 4-1: USB disconnect, device number 107 [ 622.329410][T12441] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=12441 comm=syz.2.4638 [ 622.347731][ T6549] usb 1-1: device descriptor read/64, error -71 [ 622.587600][ T6549] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 622.717650][ T6549] usb 1-1: device descriptor read/64, error -71 [ 622.728775][ T36] audit: type=1400 audit(1753818535.402:5874): avc: denied { connect } for pid=12457 comm="syz.3.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 622.782896][T12465] rust_binder: 1449: no such ref 2 [ 622.834100][T12466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 622.834639][T12466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1449 [ 622.957616][ T6549] usb 1-1: device descriptor read/64, error -71 [ 622.973189][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 622.977564][ T562] Bluetooth: hci0: command 0x1003 tx timeout [ 622.994295][T12469] FAULT_INJECTION: forcing a failure. [ 622.994295][T12469] name failslab, interval 1, probability 0, space 0, times 0 [ 623.007120][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.6.4647 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 623.007152][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 623.007163][T12469] Call Trace: [ 623.007169][T12469] [ 623.007177][T12469] __dump_stack+0x21/0x30 [ 623.007204][T12469] dump_stack_lvl+0x10c/0x190 [ 623.007224][T12469] ? __cfi_dump_stack_lvl+0x10/0x10 [ 623.007246][T12469] dump_stack+0x19/0x20 [ 623.007265][T12469] should_fail_ex+0x3d9/0x530 [ 623.007286][T12469] should_failslab+0xac/0x100 [ 623.007312][T12469] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 623.007336][T12469] ? rust_helper_krealloc+0x33/0xd0 [ 623.007362][T12469] krealloc_noprof+0x8d/0x130 [ 623.007387][T12469] rust_helper_krealloc+0x33/0xd0 [ 623.007406][T12469] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 623.007439][T12469] _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 623.007467][T12469] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 623.007506][T12469] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 623.007526][T12469] ? security_inode_alloc+0x51/0x200 [ 623.007546][T12469] ? inode_init_always_gfp+0x756/0x9e0 [ 623.007572][T12469] ? proc_pid_make_inode+0x25/0x140 [ 623.007618][T12469] ? proc_tid_base_lookup+0x2f/0x40 [ 623.007640][T12469] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 623.007671][T12469] ? avc_has_perm_noaudit+0x268/0x360 [ 623.007692][T12469] ? __asan_memcpy+0x5a/0x80 [ 623.007713][T12469] ? avc_has_perm_noaudit+0x286/0x360 [ 623.007734][T12469] ? avc_has_perm+0x144/0x220 [ 623.007753][T12469] ? __cfi_avc_has_perm+0x10/0x10 [ 623.007774][T12469] ? selinux_file_open+0x457/0x610 [ 623.007791][T12469] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0 [ 623.007826][T12469] ? avc_has_extended_perms+0x7c7/0xdd0 [ 623.007846][T12469] ? __asan_memcpy+0x5a/0x80 [ 623.007867][T12469] ? avc_has_extended_perms+0x921/0xdd0 [ 623.007887][T12469] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 623.007918][T12469] ? do_vfs_ioctl+0xeda/0x1e30 [ 623.007934][T12469] ? arch_stack_walk+0x10b/0x170 [ 623.007959][T12469] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 623.007977][T12469] ? _parse_integer+0x2e/0x40 [ 623.008001][T12469] ? ioctl_has_perm+0x384/0x4d0 [ 623.008018][T12469] ? has_cap_mac_admin+0xd0/0xd0 [ 623.008035][T12469] ? proc_fail_nth_write+0x17e/0x210 [ 623.008054][T12469] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 623.008075][T12469] ? selinux_file_ioctl+0x6e0/0x1360 [ 623.008092][T12469] ? vfs_write+0x8ba/0xe80 [ 623.008113][T12469] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 623.008130][T12469] ? __cfi_vfs_write+0x10/0x10 [ 623.008152][T12469] ? __kasan_check_write+0x18/0x20 [ 623.008173][T12469] ? mutex_unlock+0x8b/0x240 [ 623.008197][T12469] ? __cfi_mutex_unlock+0x10/0x10 [ 623.008220][T12469] ? __fget_files+0x2c5/0x340 [ 623.008245][T12469] ? __fget_files+0x2c5/0x340 [ 623.008269][T12469] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 623.008294][T12469] ? __se_sys_ioctl+0x114/0x1b0 [ 623.008310][T12469] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 623.008332][T12469] __se_sys_ioctl+0x132/0x1b0 [ 623.008349][T12469] __x64_sys_ioctl+0x7f/0xa0 [ 623.008364][T12469] x64_sys_call+0x1878/0x2ee0 [ 623.008387][T12469] do_syscall_64+0x58/0xf0 [ 623.008407][T12469] ? clear_bhb_loop+0x50/0xa0 [ 623.008431][T12469] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 623.008454][T12469] RIP: 0033:0x7f4a9678e9a9 [ 623.008471][T12469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.008486][T12469] RSP: 002b:00007f4a97624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.008507][T12469] RAX: ffffffffffffffda RBX: 00007f4a969b5fa0 RCX: 00007f4a9678e9a9 [ 623.008521][T12469] RDX: 0000200000000180 RSI: 00000000c00c620f RDI: 0000000000000003 [ 623.008534][T12469] RBP: 00007f4a97624090 R08: 0000000000000000 R09: 0000000000000000 [ 623.008546][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.008558][T12469] R13: 0000000000000000 R14: 00007f4a969b5fa0 R15: 00007ffd9b6ba678 [ 623.008573][T12469] [ 623.097732][ T6549] usb usb1-port1: attempt power cycle [ 623.247601][ T36] audit: type=1400 audit(1753818535.792:5875): avc: denied { accept } for pid=12472 comm="syz.6.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 623.597622][ T6549] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 623.618697][ T6549] usb 1-1: device descriptor read/8, error -71 [ 623.749458][ T6549] usb 1-1: device descriptor read/8, error -71 [ 623.975308][ T36] audit: type=1400 audit(1753818536.642:5876): avc: denied { write } for pid=12522 comm="syz.6.4666" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 623.977932][T12523] /dev/rnullb0: Can't open blockdev [ 624.008429][ T6549] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 624.038581][ T6549] usb 1-1: device descriptor read/8, error -71 [ 624.120344][T12530] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.127579][T12530] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.134785][T12530] bridge_slave_0: entered allmulticast mode [ 624.141198][T12530] bridge_slave_0: entered promiscuous mode [ 624.147812][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.154855][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.162154][T12530] bridge_slave_1: entered allmulticast mode [ 624.168717][T12530] bridge_slave_1: entered promiscuous mode [ 624.178635][ T6549] usb 1-1: device descriptor read/8, error -71 [ 624.219029][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.226173][T12530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.233483][T12530] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.240533][T12530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.259286][T12541] rust_binder: Write failure EINVAL in pid:1463 [ 624.267487][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.281877][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.287767][ T6549] usb usb1-port1: unable to enumerate USB device [ 624.309699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.316765][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.324687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.329170][ T329] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 624.331757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.363121][T12530] veth0_vlan: entered promiscuous mode [ 624.376022][T12530] veth1_macvtap: entered promiscuous mode [ 624.497664][ T329] usb 7-1: Using ep0 maxpacket: 16 [ 624.504699][ T329] usb 7-1: unable to get BOS descriptor or descriptor too short [ 624.513199][ T329] usb 7-1: config 1 has an invalid interface descriptor of length 4, skipping [ 624.522141][ T329] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.532602][ T329] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.532981][T12556] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 624.541502][ T329] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 624.565659][ T329] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.575596][ T329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.583809][ T329] usb 7-1: Product: syz [ 624.590446][ T329] usb 7-1: Manufacturer: syz [ 624.590636][ T36] audit: type=1326 audit(1753818537.262:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12554 comm="syz.2.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d918e9a9 code=0x7fc00000 [ 624.595059][ T329] usb 7-1: SerialNumber: syz [ 624.664325][T12567] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 624.672296][T12567] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 624.697988][T12571] random: crng reseeded on system resumption [ 624.705457][T12572] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 624.713471][ T36] audit: type=1400 audit(1753818537.372:5878): avc: denied { mounton } for pid=12570 comm="syz.3.4681" path="/syzcgroup/unified/syz3" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 624.729298][T12572] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 624.745426][T12572] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 624.753918][T12572] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 624.848572][T12583] rust_binder: 12529 RLIMIT_NICE not set [ 624.848688][T12583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:514 [ 624.856378][ T329] usb 7-1: 0:2 : does not exist [ 624.876892][ T329] usb 7-1: USB disconnect, device number 27 [ 624.889203][T12586] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 624.952619][T12600] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.137600][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 625.257590][ T6549] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 625.288083][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 625.294479][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 625.303281][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.313571][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.323854][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.332945][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.341050][ T9] usb 3-1: Product: syz [ 625.345217][ T9] usb 3-1: Manufacturer: syz [ 625.350027][ T9] usb 3-1: SerialNumber: syz [ 625.370467][ T329] rust_binder: 12528: removing orphan mapping 0:1048 [ 625.408156][ T6549] usb 4-1: Using ep0 maxpacket: 16 [ 625.414769][ T6549] usb 4-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.427996][ T6549] usb 4-1: config 0 interface 0 has no altsetting 0 [ 625.435497][ T333] Bluetooth: hci0: Frame reassembly failed (-84) [ 625.435895][ T6549] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 625.451088][ T6549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.459994][ T6549] usb 4-1: config 0 descriptor?? [ 625.758460][ T9] usb 3-1: 0:2 : does not exist [ 625.766981][T12612] rust_binder: Error while translating object. [ 625.767112][T12612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 625.773499][T12612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:206 [ 626.161961][ T9] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 626.183524][ T9] usb 3-1: USB disconnect, device number 108 [ 626.196550][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 626.463663][T12619] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 626.471674][T12619] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 626.480306][T12619] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 626.488820][T12619] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 626.691873][T12634] /dev/rnullb0: Can't open blockdev [ 626.860388][T12642] rust_binder: Got transaction with invalid offset. [ 626.860430][T12642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 626.867303][T12642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1520 [ 626.947594][ T329] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 627.109004][ T329] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.120791][ T329] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.132508][ T329] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 627.143921][ T329] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 627.153241][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.162477][T12636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 627.204205][T12650] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 627.204235][T12650] rust_binder: Error while translating object. [ 627.213135][T12650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 627.219436][T12650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1528 [ 627.447599][ T562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 627.463378][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 627.539644][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4715'. [ 627.624319][T12659] binder: Unknown parameter 'defcontext01777777777777777777777' [ 627.703301][T12675] rust_binder: 1541: no such ref 3 [ 627.717033][T12683] input: syz1 as /devices/virtual/input/input77 [ 627.747224][T12685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4725'. [ 627.794004][T12692] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4728'. [ 627.804824][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4728'. [ 627.826931][T12694] syz.6.4729 (12694) used obsolete PPPIOCDETACH ioctl [ 627.977842][ T329] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 627.985493][ T329] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input76 [ 628.018725][ T329] usb 3-1: USB disconnect, device number 109 [ 628.018743][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 628.084051][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 628.084073][ T36] audit: type=1326 audit(1753818540.752:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12716 comm="syz.6.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4a9678e9a9 code=0x7fc00000 [ 628.246409][T12726] rust_binder: 1559: no such ref 0 [ 628.257986][T12728] rust_binder: 1559: no such ref 3 [ 628.273383][T12727] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 628.287628][T12728] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 628.305998][T12727] rust_binder: Write failure EINVAL in pid:1559 [ 628.537578][ T10] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 628.697556][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 628.704941][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.716016][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.738815][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.749094][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.767887][ T10] usb 3-1: Product: syz [ 628.774337][ T10] usb 3-1: Manufacturer: syz [ 628.784452][ T10] usb 3-1: SerialNumber: syz [ 629.128209][ T354] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 629.150475][ T354] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 629.203092][ T10] usb 3-1: skipping empty audio interface (v1) [ 629.237399][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 629.257561][ T36] audit: type=1400 audit(1753818541.902:5881): avc: denied { mounton } for pid=12745 comm="syz.3.4748" path="/proc/1569/cgroup" dev="proc" ino=68659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 629.289391][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 629.305263][ T10] usb 3-1: USB disconnect, device number 110 [ 629.313751][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.335176][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.344129][ T36] audit: type=1400 audit(1753818542.012:5882): avc: denied { getopt } for pid=12753 comm="syz.3.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 629.733732][T12769] IPv6: NLM_F_CREATE should be specified when creating new route [ 629.742730][T12769] IPv6: NLM_F_REPLACE set, but no existing node found! [ 629.992993][T12787] rust_binder: inc_ref_done called when no active inc_refs [ 629.993030][T12787] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 630.077623][ T362] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 630.128023][T12801] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 630.136015][T12801] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 630.146650][T12801] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 630.156204][T12801] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 630.207594][ T362] usb 1-1: device descriptor read/64, error -71 [ 630.215374][ T36] audit: type=1400 audit(1753818542.882:5883): avc: denied { connect } for pid=12811 comm="syz.3.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 630.334485][T12820] rust_binder: 12815 RLIMIT_NICE not set [ 630.414983][ T354] rust_binder: 12814: removing orphan mapping 0:4248 [ 630.428424][T12819] rust_binder: Write failure EFAULT in pid:1600 [ 630.447412][T12824] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 630.457611][ T362] usb 1-1: device descriptor read/64, error -71 [ 630.490744][ T36] audit: type=1400 audit(1753818543.162:5884): avc: denied { getopt } for pid=12827 comm="syz.2.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 630.717717][ T362] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 630.727777][ T354] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 630.736515][ T6549] usb 4-1: string descriptor 0 read error: -32 [ 630.748650][ T6549] usbhid 4-1:0.0: can't add hid device: -32 [ 630.754812][ T6549] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 630.776722][T12840] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 630.784873][T12840] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 630.793675][T12840] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 630.801722][T12840] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 630.857625][ T362] usb 1-1: device descriptor read/64, error -71 [ 630.887620][ T354] usb 3-1: device descriptor read/64, error -71 [ 630.918646][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.927217][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.988730][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.007654][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.097593][ T362] usb 1-1: device descriptor read/64, error -71 [ 631.147592][ T354] usb 3-1: device descriptor read/64, error -71 [ 631.207895][ T362] usb usb1-port1: attempt power cycle [ 631.397583][ T354] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 631.527582][ T354] usb 3-1: device descriptor read/64, error -71 [ 631.547609][ T362] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 631.568734][ T362] usb 1-1: device descriptor read/8, error -71 [ 631.698672][ T362] usb 1-1: device descriptor read/8, error -71 [ 631.777584][ T354] usb 3-1: device descriptor read/64, error -71 [ 631.887690][ T354] usb usb3-port1: attempt power cycle [ 631.937622][ T362] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 631.958629][ T362] usb 1-1: device descriptor read/8, error -71 [ 632.088719][ T362] usb 1-1: device descriptor read/8, error -71 [ 632.197711][ T362] usb usb1-port1: unable to enumerate USB device [ 632.227582][ T354] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 632.249563][ T354] usb 3-1: device descriptor read/8, error -71 [ 632.378683][ T354] usb 3-1: device descriptor read/8, error -71 [ 632.627621][ T354] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 632.668738][ T354] usb 3-1: device descriptor read/8, error -71 [ 632.798652][ T354] usb 3-1: device descriptor read/8, error -71 [ 632.907830][ T354] usb usb3-port1: unable to enumerate USB device [ 632.967579][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 633.128354][ T31] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 633.139007][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 633.161913][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 633.178369][ T31] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 633.187715][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.195892][ T31] usb 1-1: Product: syz [ 633.200520][ T31] usb 1-1: Manufacturer: syz [ 633.205203][ T31] usb 1-1: SerialNumber: syz [ 633.213973][ T31] usb 1-1: config 0 descriptor?? [ 633.421911][T12852] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 633.431297][ T354] usb 1-1: USB disconnect, device number 4 [ 633.672454][T12859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.672800][T12858] rust_binder: Got transaction with invalid offset. [ 633.680093][T12858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 633.686765][T12858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 633.856077][T12871] 9pnet_fd: Insufficient options for proto=fd [ 633.936641][ T36] audit: type=1400 audit(1753818546.602:5885): avc: denied { unmount } for pid=12872 comm="syz.3.4797" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 633.977702][ T36] audit: type=1400 audit(1753818546.602:5886): avc: denied { watch watch_reads } for pid=12872 comm="syz.3.4797" path="/581/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 634.008819][T12879] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true [ 634.008854][T12879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 634.016797][T12879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:267 [ 634.107618][ T31] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 634.249042][ T31] usb 3-1: device descriptor read/64, error -71 [ 634.282268][T12889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 634.282304][T12889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:274 [ 634.487660][ T31] usb 3-1: device descriptor read/64, error -71 [ 634.567571][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 634.697584][ T10] usb 1-1: device descriptor read/64, error -71 [ 634.737583][ T31] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 634.867629][ T31] usb 3-1: device descriptor read/64, error -71 [ 634.937575][ T10] usb 1-1: device descriptor read/64, error -71 [ 635.010312][T12898] netlink: 'syz.3.4805': attribute type 4 has an invalid length. [ 635.027612][T12898] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4805'. [ 635.117580][ T31] usb 3-1: device descriptor read/64, error -71 [ 635.187580][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 635.227671][ T31] usb usb3-port1: attempt power cycle [ 635.327578][ T10] usb 1-1: device descriptor read/64, error -71 [ 635.359011][ T36] audit: type=1400 audit(1753818548.032:5887): avc: denied { execute } for pid=12906 comm="syz.3.4808" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.577575][ T31] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 635.577575][ T10] usb 1-1: device descriptor read/64, error -71 [ 635.598640][ T31] usb 3-1: device descriptor read/8, error -71 [ 635.658715][ T36] audit: type=1326 audit(1753818548.332:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12914 comm="syz.3.4812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a90f8e9a9 code=0x0 [ 635.717669][ T10] usb usb1-port1: attempt power cycle [ 635.728871][ T31] usb 3-1: device descriptor read/8, error -71 [ 635.967606][ T31] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 635.988715][ T31] usb 3-1: device descriptor read/8, error -71 [ 636.067607][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 636.119309][ T10] usb 1-1: device descriptor read/8, error -71 [ 636.119618][ T31] usb 3-1: device descriptor read/8, error -71 [ 636.237706][ T31] usb usb3-port1: unable to enumerate USB device [ 636.248705][ T10] usb 1-1: device descriptor read/8, error -71 [ 636.497587][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 636.504911][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.516976][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.528575][ T10] usb 1-1: device descriptor read/8, error -71 [ 636.658546][ T10] usb 1-1: device descriptor read/8, error -71 [ 636.777589][ T10] usb usb1-port1: unable to enumerate USB device [ 636.871771][ T36] audit: type=1400 audit(1753818549.542:5889): avc: denied { unmount } for pid=12530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 636.940414][ T36] audit: type=1400 audit(1753818549.612:5890): avc: denied { getopt } for pid=12924 comm="syz.2.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 636.969484][ T36] audit: type=1400 audit(1753818549.632:5891): avc: denied { read } for pid=12924 comm="syz.2.4816" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 636.994545][ T36] audit: type=1400 audit(1753818549.632:5892): avc: denied { open } for pid=12924 comm="syz.2.4816" path="/31/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 637.018563][ T36] audit: type=1400 audit(1753818549.632:5893): avc: denied { ioctl } for pid=12924 comm="syz.2.4816" path="/31/file0/.log" dev="incremental-fs" ino=3 ioctlcmd=0xae68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 637.337587][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 637.416299][ T36] audit: type=1400 audit(1753818550.082:5894): avc: denied { mounton } for pid=12948 comm="syz.0.4824" path="/sys/power/wake_lock" dev="sysfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 637.507558][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 637.518146][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.529284][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.547605][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.571914][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 637.591395][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.608175][ T10] usb 3-1: config 0 descriptor?? [ 637.697579][ T414] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 637.847856][ T414] usb 1-1: Using ep0 maxpacket: 16 [ 637.854106][ T414] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.877564][ T414] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.898657][ T414] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.917568][ T414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.925585][ T414] usb 1-1: Product: syz [ 637.937559][ T414] usb 1-1: Manufacturer: syz [ 637.947562][ T414] usb 1-1: SerialNumber: syz [ 638.037268][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.057586][ T10] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 638.066411][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.087599][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.095014][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.117580][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.124877][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.147572][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.154821][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.177603][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.178724][T12956] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4827'. [ 638.184950][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.226330][ T10] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 638.233725][ T10] microsoft 0003:045E:07DA.003C: unsupported Resolution Multiplier 0 [ 638.258326][ T10] ================================================================== [ 638.266427][ T10] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 638.274061][ T10] Read of size 1920 at addr ffff88811025d6e1 by task kworker/0:1/10 [ 638.282032][ T10] [ 638.284346][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 638.284373][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 638.284384][ T10] Workqueue: usb_hub_wq hub_event [ 638.284407][ T10] Call Trace: [ 638.284413][ T10] [ 638.284419][ T10] __dump_stack+0x21/0x30 [ 638.284436][ T10] dump_stack_lvl+0x10c/0x190 [ 638.284448][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 638.284461][ T10] ? __cfi__printk+0x10/0x10 [ 638.284477][ T10] print_address_description+0x71/0x220 [ 638.284490][ T10] print_report+0x4a/0x70 [ 638.284501][ T10] kasan_report+0x163/0x1a0 [ 638.284512][ T10] ? mon_bin_event+0x12c1/0x23e0 [ 638.284526][ T10] ? mon_bin_event+0x12c1/0x23e0 [ 638.284539][ T10] kasan_check_range+0x299/0x2a0 [ 638.284549][ T10] ? mon_bin_event+0x12c1/0x23e0 [ 638.284561][ T10] __asan_memcpy+0x31/0x80 [ 638.284574][ T10] mon_bin_event+0x12c1/0x23e0 [ 638.284588][ T10] ? mon_bin_complete+0x50/0x50 [ 638.284609][ T10] ? __kmalloc_noprof+0x1b1/0x450 [ 638.284633][ T10] ? __hid_request+0x1e5/0x410 [ 638.284657][ T10] ? hid_connect+0x49a/0x1a20 [ 638.284675][ T10] ? hid_hw_start+0xcb/0x160 [ 638.284688][ T10] ? ms_probe+0x194/0x460 [ 638.284700][ T10] ? __cfi_mon_bin_submit+0x10/0x10 [ 638.284713][ T10] mon_bin_submit+0x2b/0x40 [ 638.284725][ T10] mon_submit+0x1b9/0x230 [ 638.284736][ T10] usb_hcd_submit_urb+0x12d/0x1a20 [ 638.284747][ T10] ? bus_probe_device+0x18b/0x270 [ 638.284760][ T10] ? usb_probe_device+0x1d4/0x380 [ 638.284770][ T10] ? really_probe+0x2d6/0x890 [ 638.284780][ T10] ? __driver_probe_device+0x198/0x280 [ 638.284794][ T10] ? driver_probe_device+0x54/0x3f0 [ 638.284803][ T10] ? __device_attach_driver+0x2f1/0x4b0 [ 638.284813][ T10] usb_submit_urb+0x111b/0x1800 [ 638.284826][ T10] usb_start_wait_urb+0x11b/0x2f0 [ 638.284839][ T10] ? usb_api_blocking_completion+0xd0/0xd0 [ 638.284852][ T10] ? __kasan_kmalloc+0x96/0xb0 [ 638.284866][ T10] ? __kasan_check_write+0x18/0x20 [ 638.284879][ T10] ? usb_alloc_urb+0x9b/0x200 [ 638.284890][ T10] usb_control_msg+0x25a/0x490 [ 638.284903][ T10] usbhid_raw_request+0x457/0x590 [ 638.284917][ T10] __hid_request+0x1e5/0x410 [ 638.284930][ T10] hidinput_connect+0x241b/0x3340 [ 638.284943][ T10] hid_connect+0x49a/0x1a20 [ 638.284957][ T10] ? usbhid_start+0x1a67/0x2530 [ 638.284968][ T10] ? __cfi_hid_connect+0x10/0x10 [ 638.284982][ T10] hid_hw_start+0xcb/0x160 [ 638.284995][ T10] ms_probe+0x194/0x460 [ 638.285007][ T10] hid_device_probe+0x2c4/0x5d0 [ 638.285022][ T10] ? __cfi_hid_device_probe+0x10/0x10 [ 638.285035][ T10] really_probe+0x2d6/0x890 [ 638.285045][ T10] __driver_probe_device+0x198/0x280 [ 638.285060][ T10] driver_probe_device+0x54/0x3f0 [ 638.285069][ T10] ? __device_attach_driver+0x2db/0x4b0 [ 638.285079][ T10] __device_attach_driver+0x2f1/0x4b0 [ 638.285089][ T10] bus_for_each_drv+0x260/0x2f0 [ 638.285103][ T10] ? __cfi___device_attach_driver+0x10/0x10 [ 638.285114][ T10] ? __cfi_bus_for_each_drv+0x10/0x10 [ 638.285126][ T10] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 638.285140][ T10] __device_attach+0x2bd/0x3a0 [ 638.285154][ T10] ? device_attach+0x40/0x40 [ 638.285167][ T10] ? _raw_spin_lock+0x8c/0x120 [ 638.285178][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 638.285190][ T10] device_initial_probe+0x1e/0x30 [ 638.285204][ T10] bus_probe_device+0x18b/0x270 [ 638.285216][ T10] device_add+0x80c/0xc00 [ 638.285233][ T10] hid_add_device+0x39b/0x560 [ 638.285249][ T10] usbhid_probe+0xde3/0x12b0 [ 638.285263][ T10] usb_probe_interface+0x696/0xc00 [ 638.285274][ T10] ? __cfi_usb_probe_interface+0x10/0x10 [ 638.285284][ T10] really_probe+0x2d6/0x890 [ 638.285294][ T10] __driver_probe_device+0x198/0x280 [ 638.285308][ T10] driver_probe_device+0x54/0x3f0 [ 638.285318][ T10] ? __device_attach_driver+0x2db/0x4b0 [ 638.285328][ T10] __device_attach_driver+0x2f1/0x4b0 [ 638.285338][ T10] bus_for_each_drv+0x260/0x2f0 [ 638.285357][ T10] ? __cfi___device_attach_driver+0x10/0x10 [ 638.285370][ T10] ? __cfi_bus_for_each_drv+0x10/0x10 [ 638.285383][ T10] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 638.285398][ T10] __device_attach+0x2bd/0x3a0 [ 638.285414][ T10] ? device_attach+0x40/0x40 [ 638.285428][ T10] ? _raw_spin_lock+0x8c/0x120 [ 638.285441][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 638.285455][ T10] device_initial_probe+0x1e/0x30 [ 638.285470][ T10] bus_probe_device+0x18b/0x270 [ 638.285484][ T10] device_add+0x80c/0xc00 [ 638.285500][ T10] usb_set_configuration+0x1ad4/0x20b0 [ 638.285517][ T10] usb_generic_driver_probe+0x95/0x160 [ 638.285531][ T10] usb_probe_device+0x1d4/0x380 [ 638.285541][ T10] ? __cfi_usb_probe_device+0x10/0x10 [ 638.285550][ T10] really_probe+0x2d6/0x890 [ 638.285560][ T10] __driver_probe_device+0x198/0x280 [ 638.285574][ T10] driver_probe_device+0x54/0x3f0 [ 638.285584][ T10] ? __device_attach_driver+0x2db/0x4b0 [ 638.285594][ T10] __device_attach_driver+0x2f1/0x4b0 [ 638.285604][ T10] bus_for_each_drv+0x260/0x2f0 [ 638.285616][ T10] ? __cfi___device_attach_driver+0x10/0x10 [ 638.285626][ T10] ? __cfi_bus_for_each_drv+0x10/0x10 [ 638.285637][ T10] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 638.285650][ T10] __device_attach+0x2bd/0x3a0 [ 638.285663][ T10] ? device_attach+0x40/0x40 [ 638.285677][ T10] ? _raw_spin_lock+0x8c/0x120 [ 638.285695][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 638.285715][ T10] device_initial_probe+0x1e/0x30 [ 638.285743][ T10] bus_probe_device+0x18b/0x270 [ 638.285767][ T10] device_add+0x80c/0xc00 [ 638.285784][ T10] usb_new_device+0x9ed/0x1590 [ 638.285798][ T10] ? __cfi_usb_new_device+0x10/0x10 [ 638.285811][ T10] hub_event+0x2c81/0x4270 [ 638.285828][ T10] ? __cfi_hub_event+0x10/0x10 [ 638.285842][ T10] ? __kasan_check_write+0x18/0x20 [ 638.285855][ T10] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 638.285870][ T10] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 638.285882][ T10] ? kick_pool+0xb9/0x550 [ 638.285891][ T10] process_scheduled_works+0x7d2/0x1020 [ 638.285906][ T10] worker_thread+0xc58/0x1250 [ 638.285921][ T10] kthread+0x2ca/0x370 [ 638.285931][ T10] ? __cfi_worker_thread+0x10/0x10 [ 638.285944][ T10] ? __cfi_kthread+0x10/0x10 [ 638.285953][ T10] ret_from_fork+0x67/0xa0 [ 638.285966][ T10] ? __cfi_kthread+0x10/0x10 [ 638.285975][ T10] ret_from_fork_asm+0x1a/0x30 [ 638.285990][ T10] [ 638.285995][ T10] [ 638.911425][ T10] Allocated by task 10: [ 638.915559][ T10] kasan_save_track+0x3e/0x80 [ 638.920228][ T10] kasan_save_alloc_info+0x40/0x50 [ 638.925324][ T10] __kasan_kmalloc+0x96/0xb0 [ 638.929984][ T10] __kmalloc_noprof+0x1b1/0x450 [ 638.934870][ T10] __hid_request+0xa9/0x410 [ 638.939407][ T10] hidinput_connect+0x241b/0x3340 [ 638.944420][ T10] hid_connect+0x49a/0x1a20 [ 638.948914][ T10] hid_hw_start+0xcb/0x160 [ 638.953335][ T10] ms_probe+0x194/0x460 [ 638.957478][ T10] hid_device_probe+0x2c4/0x5d0 [ 638.962328][ T10] really_probe+0x2d6/0x890 [ 638.966822][ T10] __driver_probe_device+0x198/0x280 [ 638.972116][ T10] driver_probe_device+0x54/0x3f0 [ 638.977176][ T10] __device_attach_driver+0x2f1/0x4b0 [ 638.982549][ T10] bus_for_each_drv+0x260/0x2f0 [ 638.987391][ T10] __device_attach+0x2bd/0x3a0 [ 638.992154][ T10] device_initial_probe+0x1e/0x30 [ 638.997179][ T10] bus_probe_device+0x18b/0x270 [ 639.002027][ T10] device_add+0x80c/0xc00 [ 639.006365][ T10] hid_add_device+0x39b/0x560 [ 639.011055][ T10] usbhid_probe+0xde3/0x12b0 [ 639.016025][ T10] usb_probe_interface+0x696/0xc00 [ 639.021488][ T10] really_probe+0x2d6/0x890 [ 639.026068][ T10] __driver_probe_device+0x198/0x280 [ 639.031521][ T10] driver_probe_device+0x54/0x3f0 [ 639.036533][ T10] __device_attach_driver+0x2f1/0x4b0 [ 639.041907][ T10] bus_for_each_drv+0x260/0x2f0 [ 639.046772][ T10] __device_attach+0x2bd/0x3a0 [ 639.051541][ T10] device_initial_probe+0x1e/0x30 [ 639.056558][ T10] bus_probe_device+0x18b/0x270 [ 639.061405][ T10] device_add+0x80c/0xc00 [ 639.065730][ T10] usb_set_configuration+0x1ad4/0x20b0 [ 639.071308][ T10] usb_generic_driver_probe+0x95/0x160 [ 639.076758][ T10] usb_probe_device+0x1d4/0x380 [ 639.081608][ T10] really_probe+0x2d6/0x890 [ 639.086105][ T10] __driver_probe_device+0x198/0x280 [ 639.091385][ T10] driver_probe_device+0x54/0x3f0 [ 639.096776][ T10] __device_attach_driver+0x2f1/0x4b0 [ 639.102158][ T10] bus_for_each_drv+0x260/0x2f0 [ 639.107012][ T10] __device_attach+0x2bd/0x3a0 [ 639.111794][ T10] device_initial_probe+0x1e/0x30 [ 639.116816][ T10] bus_probe_device+0x18b/0x270 [ 639.121679][ T10] device_add+0x80c/0xc00 [ 639.126010][ T10] usb_new_device+0x9ed/0x1590 [ 639.130772][ T10] hub_event+0x2c81/0x4270 [ 639.135281][ T10] process_scheduled_works+0x7d2/0x1020 [ 639.140824][ T10] worker_thread+0xc58/0x1250 [ 639.145498][ T10] kthread+0x2ca/0x370 [ 639.149564][ T10] ret_from_fork+0x67/0xa0 [ 639.153994][ T10] ret_from_fork_asm+0x1a/0x30 [ 639.158769][ T10] [ 639.161083][ T10] The buggy address belongs to the object at ffff88811025d6e0 [ 639.161083][ T10] which belongs to the cache kmalloc-8 of size 8 [ 639.174882][ T10] The buggy address is located 1 bytes inside of [ 639.174882][ T10] allocated 7-byte region [ffff88811025d6e0, ffff88811025d6e7) [ 639.188717][ T10] [ 639.191034][ T10] The buggy address belongs to the physical page: [ 639.197625][ T10] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11025d [ 639.206726][ T10] anon flags: 0x4000000000000000(zone=1) [ 639.212350][ T10] page_type: f5(slab) [ 639.216332][ T10] raw: 4000000000000000 ffff888100041500 0000000000000000 dead000000000001 [ 639.225006][ T10] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 639.233579][ T10] page dumped because: kasan: bad access detected [ 639.240007][ T10] page_owner tracks the page as allocated [ 639.245733][ T10] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 289, tgid 289 (syz-executor), ts 321093893923, free_ts 321093822940 [ 639.265111][ T10] post_alloc_hook+0x3b9/0x3f0 [ 639.269893][ T10] prep_new_page+0x1c/0x120 [ 639.274419][ T10] get_page_from_freelist+0x46bb/0x4750 [ 639.280123][ T10] __alloc_pages_noprof+0x30d/0x6c0 [ 639.285371][ T10] alloc_slab_page+0x6b/0x1f0 [ 639.290060][ T10] allocate_slab+0x69/0x440 [ 639.294747][ T10] ___slab_alloc+0x59a/0x8b0 [ 639.299348][ T10] __kmalloc_node_noprof+0x23e/0x450 [ 639.304649][ T10] __vmalloc_node_range_noprof+0x544/0x1420 [ 639.310553][ T10] vzalloc_noprof+0xfd/0x1d0 [ 639.315155][ T10] xt_counters_alloc+0x6c/0xe0 [ 639.319912][ T10] __do_replace+0xa8/0x970 [ 639.324331][ T10] do_ip6t_set_ctl+0x752/0x8b0 [ 639.329166][ T10] nf_setsockopt+0x28d/0x2b0 [ 639.333747][ T10] ipv6_setsockopt+0x130/0x170 [ 639.338499][ T10] tcp_setsockopt+0xf2/0x110 [ 639.343099][ T10] page last free pid 289 tgid 289 stack trace: [ 639.349230][ T10] free_unref_page+0xae5/0xdd0 [ 639.354216][ T10] __free_pages+0x6b/0x3b0 [ 639.358672][ T10] vfree+0x3bf/0x580 [ 639.362588][ T10] do_ip6t_get_ctl+0xe86/0x1180 [ 639.367615][ T10] nf_getsockopt+0x288/0x2b0 [ 639.372314][ T10] ipv6_getsockopt+0x1dd/0x280 [ 639.377095][ T10] tcp_getsockopt+0x106/0x130 [ 639.381834][ T10] sock_common_getsockopt+0xb2/0xd0 [ 639.387395][ T10] do_sock_getsockopt+0x3a3/0x6d0 [ 639.392424][ T10] __x64_sys_getsockopt+0x1d5/0x280 [ 639.397703][ T10] x64_sys_call+0x10db/0x2ee0 [ 639.402378][ T10] do_syscall_64+0x58/0xf0 [ 639.406784][ T10] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 639.412669][ T10] [ 639.414973][ T10] Memory state around the buggy address: [ 639.420855][ T10] ffff88811025d580: 05 fc fc fc fa fc fc fc 06 fc fc fc 05 fc fc fc [ 639.428906][ T10] ffff88811025d600: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 639.436951][ T10] >ffff88811025d680: 03 fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 639.445081][ T10] ^ [ 639.452266][ T10] ffff88811025d700: 04 fc fc fc fa fc fc fc 05 fc fc fc 00 fc fc fc [ 639.460312][ T10] ffff88811025d780: fa fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 639.468360][ T10] ================================================================== [ 639.476482][ T10] Disabling lock debugging due to kernel taint [ 639.496341][ T36] audit: type=1400 audit(1753818552.162:5895): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 639.538037][ T36] audit: type=1400 audit(1753818552.162:5896): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.562328][ T36] audit: type=1400 audit(1753818552.162:5897): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.584034][ T36] audit: type=1400 audit(1753818552.162:5898): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.605179][ T36] audit: type=1400 audit(1753818552.162:5899): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 639.626100][ T36] audit: type=1400 audit(1753818552.162:5900): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 639.649830][ T36] audit: type=1400 audit(1753818552.162:5901): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 639.907622][ T414] usb 1-1: skipping empty audio interface (v1) [ 640.328130][ T414] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 640.354391][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 640.700451][ T362] usb 1-1: USB disconnect, device number 9 [ 640.737942][ T10] microsoft 0003:045E:07DA.003C: No inputs registered, leaving [ 640.747717][ T10] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 640.777566][ T10] microsoft 0003:045E:07DA.003C: no inputs found [ 640.783920][ T10] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 640.810908][ T10] usb 3-1: USB disconnect, device number 119