last executing test programs: 1.424142572s ago: executing program 2 (id=2014): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$PPPIOCSPASS(r1, 0x1263, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x0) r4 = socket(0x10, 0x2, 0x0) (async) dup(r0) sendmsg$nl_generic(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="12000000180001002bbd7000fbdbdf251d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000000)='veth0\x00') (async) readahead(r0, 0x8000000008, 0x0) 1.423075912s ago: executing program 2 (id=2015): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xd) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x317002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 1.422170402s ago: executing program 2 (id=2016): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100}, @flat, @flat=@weak_handle={0x77682a85, 0x230a, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 1.421422932s ago: executing program 2 (id=2017): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io'], 0xc) (async) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='unlock io'], 0xe) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) (async) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000006, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000922000/0x2000)=nil, 0x2000}}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x85b83000) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffc) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$char_usb(r6, &(0x7f00000000c0)="bf792787a18e0a6428ca925413ad81f2b61206214b411c363c5de3c85f02cf1f6a6eeb4dff3ab9dfc475ae83a832959341994c6a34eba7787126a5afff3407306f16f7086b139cf1b02786ee36e0a740c04b0ebcc890d25ed11483453e8dab9703", 0x6b) 1.128575858s ago: executing program 0 (id=2023): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ffffffe000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xbc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000040) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82801, 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 578.100729ms ago: executing program 2 (id=2032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f00000001c0)="6ff7b22d1f1782b1d6a3825c55a42f22e2aab26f1371eab7dd40e3364d383f075a957dbe13f641ce1834b771ad9af87b8d5b6e22d3a099cca36b3ad0e8b9aae6480beeb9cf1202d59e0839ef21d45d60daaa7e162d954818a57faacf9fd7480fa5d046e597008fcab183f41e50fbddcf423a4b4ac668df986b0c5cc1c4c3475900193c7194017a05238340e6f970a9e3c842c8efa14d10e7204197a68656e7") ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x94, &(0x7f00000009c0)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902820003010600290904000000010100000a2401090008020102052405061409040100000102000009040101010102000007240102050500072401017f01000905010908000708000725014106a700090402000001020000090402010101020101092402020000c176010724010b08021009058209ff"], 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x4241, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000280)=0xc69d) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 465.878691ms ago: executing program 1 (id=2033): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) syz_open_dev$loop(0x0, 0x7, 0x180862) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) syz_open_dev$loop(&(0x7f0000000040), 0xb944, 0x600000) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000) (async) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000001400)={'\x00', 0x4, 0x9, 0x89, 0x0, 0x0, 0x8080000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000200005022cbd7000fcdbdf25040000000c1604800800d0000157f961a45c7ac9553b34a6820914eae157ce10bf87e29ddb975d4a9d469f062fa7ecab139217a3c5f41e81ba4d5da00788d6d99111a6e7005952924e3eed537fa5b182a9a1831abcbb2dfc81beae3f32f6c83633ee0ca86902000000000000005bd2336839346fb7b1bbd53b07d0192fa1491c268933bbad38a0850c123a9c4a0ae5b07b3fa9150669e6f300"/184], 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000010) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000080)) 465.650951ms ago: executing program 1 (id=2034): open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x100) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x3, 0x0, 0x1000, &(0x7f00003ac000/0x1000)=nil}) open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x100) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x3, 0x0, 0x1000, &(0x7f00003ac000/0x1000)=nil}) (async) 462.932821ms ago: executing program 3 (id=2035): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$setperm(0x5, r5, 0x70505) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) 417.771172ms ago: executing program 1 (id=2036): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x420e, r1) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0xffff8013, 0x4, 0x8, 0x7, r1}) (async) timer_create(0x1, &(0x7f0000000200)={0x0, 0xfffffffd, 0x2, @thr={&(0x7f0000000000)="87bfbf91f4198d049a7b103ba2", &(0x7f0000000100)}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 417.239442ms ago: executing program 1 (id=2037): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000042, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @pic={0x6, 0x2, 0xfd, 0x25, 0x7f, 0x1, 0xf7, 0x8, 0x8, 0x4, 0x80, 0xc, 0x6, 0x7f, 0x6, 0xdd}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000080), 0x1180000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0/../file0/file0'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x9) write(r3, &(0x7f0000000000)="05", 0x1) getgroups(0x2, &(0x7f0000000300)=[0xee00, 0xffffffffffffffff]) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) utime(&(0x7f0000000200)='.\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r5) geteuid() 416.119712ms ago: executing program 3 (id=2038): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x3, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0x9, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0xc, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0x1}, @exit_looper], 0x0, 0x0, 0x0}) 415.762782ms ago: executing program 1 (id=2039): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x100000b, 0x30, r0, 0xb935c000) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x200000e, 0x4000010, r0, 0x5fbf000) 349.796703ms ago: executing program 0 (id=2040): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x40) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x200, 0x2002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x3}) r3 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000003c0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 348.850214ms ago: executing program 1 (id=2041): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 345.365523ms ago: executing program 0 (id=2042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x802, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) (async) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @empty}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="81c81b9a7c56271506e47a7ba4d3ffd35c67618cf50c18d261057edfe333b366e3a6116b3a4e4ec6ae8a048c39a9dfbfacb72bf4652aa87a08ad4f", 0x3b}, {&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07", 0x24}, {&(0x7f0000000500)="575ea382b9a16bc9825441aaf07ef1c0428f4b7b69ddf489403dd2a1eba568986ae9bb11", 0x24}, {&(0x7f0000002280)="42fcd9fe19201ddf64559806cd323da67fe16faa009a56eed81e2e6cb52e913555dbab9388fb8bdd350f69bd31da9567d4eb6e7a8c464f8ea174254ede34582a13f1b4943912b54fd7ad67a9c57c47b00fe8ffb2258378f07aebee33d58fc8eee41ac822ec1bbee3fb2dc04b17cef57e1290c5ce76de3e9bae20f5ae66065e09d43f7f5acb6fcf9ba8ccaaae0dc90516d8b2a43e5e75fe291370258b1d366564f6d122f88d627bffd3ddf230fb4ff6ee313d18969c86936179ad2bc3cec62e21671d13b2f5d67e64c576165938c1ee47474b4d2460637b83585892fe59bb947d4a05f122313e0491a58b3fecaa6824f9a2149f7d309ac85ada754d2857c72f401ff64087be5c99007491d3f601aaea46dcd654f3a7b6b1de40f55034becce1577649b3b734d6114ab5367ac67bdb36b71fa0242a6f0d33c4df6f1b5194c59046afd31dc9baf22d6c3aed2f22ba8a049b31b03ada64583246615e722d4c26b6f56f054f00079a23c663c127b8923c5cc1ec30c8297595199702a445b39c999710198fe6ece47dc3b81753f3f582c26dc096ca4b982d2d754e7a8bff5d15f07017821201f3050d0003b54d19054acaee91585cfccb739510ca10c48e9f04fbdc6160177846ce3749ab387b021c254d3e55beb71d471fcc6048a8fb9475924ae8374e019c89413a297b958102ccb9bf90144fea41f81a5005dd9708e39e902d22c5646c96f4beda8b474b9ab8dd73d2310d35a9377d5a60483e690cfbbdb2120ac743cc3a95824b6c99610658e7148fbd0725b6f40e0df9c8faec14d2d745e37ed39ba223e691cca52a0bb1c39503f267a110b830a8cc14cc56cfbd9d4e49a67246980baf54fb8237969cf9643f5f8acc36d7deaf4f9a5d89fce4922edde62471b29d97c4512500734ea76b61778d31006bfc870a7332330b652d3ca1d229daed80b14a5e85abe27c4dfce234c5da5ca17fff82c426777dfd7beea380ee9413b8d2ab217ee8e631790cf8d110a66ef97aeff125e5ef250dd2f7cc2d2a6922845712953d12e9b7ee68081553aaa13e9761c0e9f33ffbff40633cebba0d20031e2487e572e3ce5b954fd8bb8a38deee871c53037d02337a523c04f4775e87a3a2f4982a485b2c54d9c50db58065347ea05a521291f09af8fecec5f2f304b2a2a90c070d16d8254d128b6e862b017d406add20e73a1f53815a26809f59da1a5c323386975140ee05661541e7a3b39ff833ec4e1cedfe560bac61788cec2e220b40e2427f8b95e326aba73f325f59aab91ddb9152c1c1345e58c552bdc2bdf53c1e78af3e1a51c56560a046535c5f5c5c2d761e31ec24c3dedd29deac6f0f81eb905210844f82cbc19a44613c165b132bf1d4a403744bf47e00c87bb03d84ac3f0509947fd711ca6ce8c6ea4abf23ac2b9044eddce1d63f162c3de29414b0bf92aeafe3d3eae645080044198a05c058eaf1af7ce3e13e56636c5f609c4a2a3ddacae87c6a7bc3d16ac3fe7480f79483d4e2f8b250478f7bf9b4216d0849f6f87f66d8a853af1a32d521796447f5bfbe7233bd5cf24e0ff27652ef23766aca92aa632f428c7e2ede2e0ca2721b58364eed8e3f682fcece9a4f4da47f4de36166b203fa2f1b568281a17746c27ee5d443b2c94807f87499a2ddeea6945304379f8d37f0773375a853000482d1048158c0e8a3bf89686fc21dd932b77003f0aaa802cf730f2ae04120451674c5d811ae6f0bb8c629ee349f1d294a9729f46bf442379ca3723cc8c570f5f14e6fe711b512de3f71061c894a44fe784ef327ec914c871911f6373b67812293793ac5c9da8b1c332eaf6598115dc3057b33bd0af4546ba3c45b9d62ca2587dc785831adf0983655b9d9a1506be8de3dbbcaa2aa60b6072bf48df06231466961bd36c1b2ea3590e027c19b93aa1a73395e651f5415c3dd96baa2cfd51d6a87c52babadaf49b819c6b632bf8fb1a9306a1197ea79dfdaf0e1266ab18bfb2373145b5affb318df060c550dc10bf17b7f703c39b5839776ecbfd0561ed099e6b5685d2dc0558277096a58d7b153c929ae2784222ade9bb4f21b2a57daa85dc883ee739f13b78fa3dcee1e90fc28364ccca68f00b20634bab0edfa46b48418c5c9d18aca894d15ad5f132ef533fdfc24c8bb440b32a406f23057efb0206d4eb0a59ebfa24f8649ee7afd3842e25cfe455f4b7125a9d44ac61c6e44b3ffe864d2f80767b84a191e1f454047c8cfe956482550582996b659309e40e938b1b31bd7d1a5270689c5568c474b19d16fc6a24773a744514b71727de33fc3fbac82d8b21ab753e96bdfac00b48d139d840d2b80d7e726c7f5d8ec2382014321ae83611c6c2edf928e7efcb4bce99377b24106f4d7958164a3f6ab9746deb4a9bcdb3ec79df9d4832e75410aa9a91cc2a52dc20f39a48bd3988ae72cda39ace456e031f83650999f7b612c884332845a25a943ac15286dc183741d42a6d71e39e77faad8c413680ee6864ae683f9f5f3ba4e26f5b46f65decfc0eca3e4508a616bdb51fc284b8c488c8a64ef96f0e0581fe28a27e35c0fc392fa2e4cbdee0d6222237c435cd4114a365743567ee29733e79e058d1d90315b233e5c56bce9b2849095594b3973c0403a4bc8386f0f4605c1fbf71a5020984ef31b12dea55842500dd648c4daece10a1a26fd8eb012ee2993bddf9bb896ea10f45f3318a379e8b1ff4e33b35d4f405775e67123793cdbe472196b405a27f8813cee3504dfb17684d9e387705694cc42178e2b3b776ea0503c67f6b100fc5ef3d844381fa0634cec98c2984ad564503982e14200f3916c6c740889616247e783185a3b1d6a699c35e620ccb7c170826d759b54244efce5df45d8fa2948014c1e917dfd36a5534f13c35435db5d119d25335138f60d3c283cb43504ff23ad6eb727283f570ac047ba017daa0e1657fc227b229d0b3adb7e0a8a597049e9ebd5c3516a11f34478294cb7ff64ce5ea75bbaa839ebbb6aeadee6828db922067d7ff2e5413df98f5fbf667310ac9cb90fc2e8d43c098cdbdd9b24ad0b1ca7104c128ade65ec19fcf5c5ed11f790d8a31f4f342a127e7959eb41b89a56965803b678d60dce160f6362748c978ef13de5812e8246937b7c50f883e54a7b2afb189be617b4890b0f7b3b694dd21519106953e5c9d28544edacb301d1fac4436f32fb2c45116f05c50236b31aefd524f59041d97601150ef806fde14e76ed15a44c42d5256321329b0303a5a2bb839f98231d857b94d387a7e0c216f44186646e80e9e535b01a7e132fba217e1ce52d3b4fbd4de91953b1838a8e1b6c64442ac03683188097986444e2591465893531345c52f9bb499b5195ec396ce49adef4193ec3852a7b95dcd00bf44c4ac1d389e26d93c60c7d4930d3e96fb7df49fd3790f9c8d254e20388c77ae93fbd48294f787b219748e222bc6afc9428ad8c1785ad68d57a727286693b620c6fd24df3a1d0cbc3f6b321d607851faa6836888fa8415d7dd0219d597120d5924990bc924005e7faa5013db217bc216a64fd0bb2b0d2a75364d929069de8669464011f2d77a0bf7253a12b82927e01dd1b26345a167e1d89c31664361aeea97d81ba32fe5e6c391885ecb48e5daa09a453e109b135a09481105dc0cdf2280a2daeafb7dad13ad2d1226816f21b71a49b279686a5478f833741654354711bed27c3028d30fceb31b9f18d1becbdb340c738593e845e7a36a9718b3847d2f7e93c4d3038d0ba522bdbe9b97cb38bea0c3331017fc6d2ad90db4aed34bda13a94312ab85cf40c4ee7f6eb4d77800ec3a2f9f3ca17b973396450e4e8b3f41600e325e0e0acf1e5e355c38f23ac5e42d32641f2f15f0716a84e4ab6dcf45fcf96e5df11db47342b61511f65a55ea7e54dfd70b7f69cd83a5152f98584672acb14b1e75876f59b8a54f1f6888eeba880f7d4a84cff57b6857a57384861704192f6e07669b2b42597fb004c0b0aaae0b36ae72d62cc365df976081f303a75bf9dd8e672f126f622c29ef3794be3e305ba9edc0cfea873fa490336ff1634d71bb81da858b5166cab9bd7d15cad437b524d7719ce753af0a3d5492e06df55af4e87c1b6e569f4ddde1c8297bb24055ec0eeb2b9ff318fb69d3e3b3b101099d3fac6baa42eb24de6ac02226bddc46340e5402bc9b09e8ffd86b543d2ff7683e6dcc4f11cb75f7dff48edcf8b5e0b2e830489033a4f097bbea10b23a7dbee0ab9882e4ec8728cb4c5e9e9833c145633262533b9069dbe5bd97fc4252a247448a9e66e60363d2eff20eb50b672e94267a62394c7a8da94e58d7a49f3296c69fb1555e3e203437a9af2f987513d4eeb6a3777c7b1a049adf1425d67f579d16da9631c0088fd30bd1f5f7763e071ae216eec8d7cbf424b70fcd8a7f569f2585275ea81ed2133410d1ed5ea9b097689a042b7699ab9fbc37eea718229b9609573127a9540f7f49b88a8384e0f0e62b4f293e30cf990650ac772a5137eb104a819e4d251e9f9e067afe86988d7110c5e78278cef6c6b55cbc538f32e3c855aac4308b8b1012d538db22bc0f972e7fcc38d916fa48f05b955119d025ec22379fde9447556fb723f887f424b79f436ff91946abe44723b81f9730b7b98967a5f87018bf1c760c7ea31551a4fe5cdac1b1572ecc9b8aa115a2a0745b89324b50757d2f65cbc2378ed89bb40d6735e9eb7b990155957280a24f635d9a108a1d59bf32ae0ca070eac90b225f4266dbfb914df77cb514969fef8b42759f79ac8b5daf6328898b8a12da69bc1659763fbe6607ae73e1d6a78c1c97f4064d55b64f241beeb118349607a306476330f097e2a056c9f1df22d0028245767bf0531c5172d92ee685281e4df035630be9567b1722a4f8bfce98defc505de1022e3b38c0d1023925043440c14c40be231e38e060ee108f0be5a06291afbc8c7a2cf9543a0eddb183de0f76545eb2249ee7c1fe05adf9e0248056309b572711736df8ab43047102a686584ff176934465ab87dbb025724ea427132f3297789c053a105299fac919859c88ea9c6c8b9a7068ea663b013138655fbe5bf5ec8f60579e2e196067aa5c4499e87a5f07cb0aafbc28b8cdde9f2275005fdc0144a4e0dfe73eb93e9dd892720b2bfa9a03b26b4474448503b9f1d5ed8ab2d7f4a083a804fe0e1562553c975fc93014d7b054419335d5caca2412c2922884bfa00c4dd56b89077fef7fb72150239f2b6fd59e176c636681236c54e01dbf5cf41272a735309658bd1a4ca7dc5767dd7af230612fde60c7ebc0297b16549baddfe07d842f553b40d4867a3551a6a549bfd1db58471fff1dea3a554e06efc49d988cb50b295ef02fad0e402f882d599ee5ce91c215a80beb79bc18ec037b657d2f055e32e6d3989f50215ae9a2ca3f4725f46b62ab5804d13ec2563392308fd5793621cd957a96551cadcadfc58fcabf658ffe6473951f3d61895970e10828e10c227e9f0bc25935905eb65eb7e181865c4ab469f695ce44197aefe4f75f0d85cd104cb426c6dda69fd57937113ba95cfa56cd4c37b57c23e7f0edfe4dfce54bc0b72713b1dbb3cff3148956b0cf32a97f88bb2e9", 0xf7e}], 0x4, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}], 0x18}}], 0x1, 0x80) (async) pidfd_send_signal(r1, 0x0, &(0x7f0000000080)={0x1f, 0xff, 0x5b}, 0x0) 342.823853ms ago: executing program 0 (id=2043): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x25dfdc01, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xffffffffffffffde, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x4d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x0, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x0, 0x9, 0x1}]}]}]}, 0x38}}, 0x44000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) (async) readv(r4, &(0x7f0000000300)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1) 340.077963ms ago: executing program 0 (id=2044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FILTER={0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x40) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) close_range(r0, 0xffffffffffffffff, 0x0) 328.354214ms ago: executing program 0 (id=2045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 214.314066ms ago: executing program 3 (id=2046): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'macsec0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3a, 0x3, 0x800, 0x0, 0x91, 0x6, 0x8, 0x0, 0x4, 0xff, 0xfffffffe, 0x6, 0x10, 0x3, 0x2, 0x9}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'macsec0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3a, 0x3, 0x800, 0x0, 0x91, 0x6, 0x8, 0x0, 0x4, 0xff, 0xfffffffe, 0x6, 0x10, 0x3, 0x2, 0x9}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 213.789506ms ago: executing program 3 (id=2047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 200.929696ms ago: executing program 3 (id=2048): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x2000000, 0x28010, r0, 0xdab38000) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x100000a, 0x810, r1, 0xffffc000) (async) write(r0, &(0x7f0000000000)="64627620b864b060dbd3bbb3dbb5806169a3612177c53086e1fa50215660e81b042fb1b35f06000a7c2eaadd1ba474f85e0e9a707281a8e848", 0x39) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x200000f, 0x20031, 0xffffffffffffffff, 0x43bc7000) madvise(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x17) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6378, @none, 0x416}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1}) 159.412647ms ago: executing program 3 (id=2049): r0 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x30, 0x7e, {0x7e, 0xf, "bdac7b805894350c22cc9aa1073787ac1d4275681ffc575616d0d040a0a274e4020168c5ff1237118bdc2a62ad8742a02e7936c297750d9a4dcde0e8f7751534c830d7409180ea259a6d99e80c0d38e922bea4a6241ac52679a3d763fc5310badd2cb90273f126739d57775cd94eb06fb4b70cf6044959f96622f9ef"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x8, 0xae, "5684da417fe95188b8c5b491ee4247d610b1f0d7bfa0164136ea66a67b9c6fe3ba5f41e1d45647e4a3fe5d0e0c4c679d6d96813a1b7969c3b6014884d3ff7713b7aa6db59c8fcbcce47e1abe221374d634c43856102d8e8fac83ca28a160c0e71f01740dec482a311b9390c79b3f4720488fb04fe19173c93f5253713d80d75a55b8b6fd15e690efa3e1044e6f68d8bab22cbafd454717361aad4d3fef514eca4f7a6c408ec96e31a1e7b5934e49"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0xc0, 0x5, 0x4, "a24de137"}, &(0x7f0000000300)}) (async) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x401) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000600)={0x14, &(0x7f0000000400)={0x40, 0x7, 0xbc, {0xbc, 0xd, "6e656ffabaf5ee0d14c7dc6aeaee1dd6393859cd3ac703c2ed2033366e82cc7ee4af194b8a931c7ffdc3b057f87d2581d38f2603dbc1dde38ba547ad13bd72948b6b53bc87c3c5588eb4d9e10a855b49c759799788a1b6eb130fa7bea9b30cfd6a29c6a370be05a4be9f2158b6062f87b3721b1fbfc1169ddde66491cf67a59a517bb05e4dc85d080076f601aaab51e198684ee4a15067c5543461c3104f22299a57eb1a34a79878fb2c857fa360838e4a5746d5632f645f36c1"}}, &(0x7f0000000500)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "01fe46b7ce5ea4760479f4f56dafcf5972efd681a782960904729cab83a4478ed70886547922f9da3a90ffe77c7f57b77ea897f3120980d6313598205b002967d6b26bb95c30e3bc17bd78cd0b2b1a2e73a508d208e3c70226f6368680100e09e2fdb3db3131371b137dca4ced39e274f3f2820791a763e1cdeeb17bbc4dfcc77e7b3ab11ff2e12686aacd0239e21a37327ab55f08371b6571ae138f1b61f4d6e4028d0e0b85cae88cfbc5007f7d49c94e34558f6c1e0d2de95f1ee0032c0c4d142ab2cf"}}}, &(0x7f0000000800)={0x34, &(0x7f0000000640)={0x0, 0x14, 0x7a, "5053c334324d3f71bfaae4ab9e3a771ec516820c07b4c53dfa186db7d43eddb1d51d2214bc95678097fca0926cec8ab4a9dee80d70a27785a8c572a252698c8741509a280cde7cd05a32abf28296604915d1dbd016eb6ec4b79e56a8c9eb5ec5f2b6d393697448a4890a6c280b48c6e91f8f4d866053ba39cee4"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000780)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000007c0)={0xc0, 0xa2, 0x2f, "da608d818f0572ad1290c17967a5953569f7e317f99285a49280787f09d929dadf96f84c7414ef0cae1715e56af682"}}) (async, rerun: 64) capget(&(0x7f0000000840)={0x20071026, r1}, &(0x7f0000000880)={0x4, 0x100, 0x0, 0x5, 0x2, 0x4}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000940)={0x14, &(0x7f00000008c0)={0x20, 0xe, 0xb, {0xb, 0x24, "0aefb55853217b5c1f"}}, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x20, 0x15, 0x30, "30f9843e773fad0aaebda0d84da1d7166ae13b48da9bc193d2c23a251fb95557989b743e26c5fea8ce8640556b0c5741"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x80, 0x1c, {0xf, 0x0, 0x2, 0x0, 0x1, 0x5, 0x5, 0x400, 0x540, 0x400, 0xfff, 0x8}}, &(0x7f0000000a80)={0x20, 0x85, 0x4, 0x42c6}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b00)={0x20, 0x87, 0x2, 0x8001}, &(0x7f0000000b40)={0x20, 0x89, 0x2, 0x1}}) (async) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000001c00)={&(0x7f0000000c00)=""/4096, 0x1000}) (async) capset(&(0x7f0000001c40)={0x20080522, r1}, &(0x7f0000001c80)={0x7, 0x8, 0x54, 0x2, 0xffffffff, 0x6}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001d40)=""/48, 0x30}], 0x1}, 0x0) (async, rerun: 64) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001e00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0xa, {0x9, 0x21, 0x7, 0x53, 0x1, {0x22, 0x524}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x2, 0x1c}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x201, 0x7, 0x0, 0x5, 0xff, 0x9}, 0x4e, &(0x7f0000001e80)={0x5, 0xf, 0x4e, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x1000, 0xf000, 0x9, [0xc1bf, 0xff00ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x7, 0xd9, 0x80, 0xa1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x6, 0x0, 0x2, 0x32}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0xe8, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d3f20753f0a7a1db35a3ad929eea4e07"}]}, 0x1, [{0xc0, &(0x7f0000001f00)=@string={0xc0, 0x3, "42121ed9dbfe013fb41a2dcb14536a7cbe3f1e7bd2bd084cb27c3b18e01d7787d8d2c44ed9c8a33d95c93a9270516a45edd2425b9383b5670eaecea1d816e25ee091c5c63dbe8d2da5eae774656e245274139aee0928a23500dbdb3d184d843950dd8a8b18babacb099392a823d4748415153b123a06ebb868e3d16248faec8f9ae109c6b385fec3f44f49e4238fb3af4c07c1b1586ea016ad3a61bf87148c858d0f5c3cb6d71c77ac2a9cf9b4eb0c45818d3a75a6a3131100bd6b92c8b2"}}]}) (rerun: 64) syz_usb_control_io(r3, &(0x7f0000002300)={0x2c, &(0x7f0000002000)={0x40, 0xc, 0x3c, {0x3c, 0xe, "abb8af8a61eaedb8d0d076daf270b24f0b596e0df2e8cf0d98dee312329c8601eb24a90881757cae86a4fb63a860502eedc63d2fed2bede49b75"}}, &(0x7f0000002080)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "7a7d422fdfb6f4a2fd34aa9b1ff0c6f214b5c56e5b566c08dd6f4750bae190b873c5fa720ba3f9172c21420f42603418863a95df4c88131338a9032d48aa84c2c6f5a1e3e6b929777afc67a27e58c331457fa9b40308053781b1da0464c42cdd7b2c0e9cfa2c6dff8fa5eca3c39ef8eb68695c95be587d11b80941b52b9563f6374b0c8ff6920c943dbe58134e4929bc5f265a740c14faff3db427e39560d5163bd32572559f80c6775f2cd39c71c9ce144f653cb68b370ad98470abfce7a4a5c1bb0f17f72eda1e672e835164841d00489e2d94d4aece080c025d9ae4321f6836b211ef0b33929885d78d26776c"}}, &(0x7f0000002180)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x1, [@generic={0xc8, 0x10, 0x1, "5799b3e0fc419b37ee25d57ab66ad39f5a16d65ffd0bb852f60a56e50f3ee6b210ab4ba47e45bfe3ae7821be3af5138fa80552750ef8659ad4a1f0521cc57c37ea1e2896ffe902104e2ae8287d36d61a379ee13a268bbda39ba2f4a2239bd356438f50d21e3c97e2ac173db201b685404f61ce518c3d96f12c55f4b1d990f5a89200f756e8b1703a46fbed11fdcc074cb3911f24140c2629bd750a9abc9b7cf309a22d7c65c25cc3ab694ffca90df0d63c5501ab1ce53e5fa2548edf3e5e32136f9b34a058"}]}}, &(0x7f0000002280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x5, 0x1, "74400eda", "038bbe37"}}, &(0x7f00000022c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x7, 0x2, 0xc, 0x5, 0x4}}}, &(0x7f0000002800)={0x84, &(0x7f0000002340)={0x0, 0x18, 0xe3, "831f4c314050d2103198450d201a875f29a688c0b23160e8fdafb9e146f92b9e83e1222596eff80fee08e62fb123c4212786e865a7aa7f6685f84bf9d492422bbd8f1a8c3e603930fd14671816a924bbb6ac5a2aa4cd153721ded2d359173ed18bed2a70c2e52eac97728699096ebe62b097b289331cf50ab626c80055d3a721c9d40f39b61dcaf675dcda3a9910df3ff6b6be67cf99ceed1f5e58f053e613f7f07045acd529f3a143541e5304af447187165a667048c3ba8cb1f0890bab5ec2b95b3ef83e509cee6e3de414a872302712aed7aaf29e8d00f9790437a0e681bae35b9e"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000024c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000002500)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000002540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000002580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000025c0)={0x40, 0xb, 0x2, "f8f1"}, &(0x7f0000002600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000002640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002680)={0x40, 0x17, 0x6, @local}, &(0x7f00000026c0)={0x40, 0x19, 0x2, "85cd"}, &(0x7f0000002700)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000002740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000002780)={0x40, 0x1e, 0x1}, &(0x7f00000027c0)={0x40, 0x21, 0x1, 0x7}}) r4 = syz_usb_connect$cdc_ncm(0x4, 0x149, &(0x7f00000028c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x137, 0x2, 0x1, 0x40, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d20a"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x5, 0x7, 0xe5}, {0x6, 0x24, 0x1a, 0x100, 0x34}, [@mdlm_detail={0xd9, 0x24, 0x13, 0xfc, "26a9ae8be3ea5b4fe2e1afbee3b832d2ebb619c74b760313c1d31cda8a5d10d804ceddee19545409bf27d37cbd7ce69b939288542ad1dea89d3e00fbed6fc25f6510923aa75df3863cee26f2b18d265105e0e29262090b4e8a29b81f3c794ce4f99ed1afe44894f9ef107944cbccb9ca9b789932fb1c4b2e5fa9bf724d84bb4f1858cb06d6eff6cb4abf60ad06b812a3b066a0eac8c09be0af39094971255a4dbf8996451dbcfb590adb3dde4c309ffc2898ae92b7e60be8e1e5533e24ed5067b46b01ff3cc2f7a04e7608fdc8215b7ea96f5ce92b"}]}, {{0x9, 0x5, 0x81, 0x3, 0x240, 0x5, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x6d, 0x9}}}}}}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x201, 0x80, 0xb, 0xf3, 0x20, 0x9}, 0xbe, &(0x7f0000002a80)={0x5, 0xf, 0xbe, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0x0, 0x1, 0x12, 0x8}, @generic={0x99, 0x10, 0x1, "bd945c35b50970d71caa72f8d81e1d47938fbb3ecc480089e91fde75802caba654dfefdd53b6defd4a25a09d37d99ab0396e71e6dcda5b7c6ed9f9a2c33992714b8306843effbda7f8054914fd6fd09038f2d11405d70d43f8995d18769fd659678812f63f5d4201a82d8a3054a339466233ba63bd9791bb488aa852620f30e00d21718cc55fc61e07591ed8cc8c8a5d8d2ec2f096fa"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x7, 0x800}]}, 0x4, [{0xee, &(0x7f0000002b40)=@string={0xee, 0x3, "81b49d8d8564fad5634d41916b043425e9df6e0306373250865d6bb9598eeed0160b4a35d0136f1c28431325110afa1cd6af124e1d0e56d7f89de42be9616e1969fd421504c26bf62bef88c738969374b4a927b55a7b4c883c9f26be3fc158fa01d4c9ae72240317e5643fa0876142f0996363a94139f6471eee12ebf99fe53da70a97ee21f229b309057448d6d2a5a63cce87005ad5dd42d8ec6dcf45d9df6de0024fbb3958bd8f19ce38eed00030171f3678a948169bfff1151ac9dc4b4524e6fc6baf1da40aedb26433f625b437df3251887074bd8dd94f6a0a9cb94ed5e11f9c85009c048e200f95f121"}}, {0x79, &(0x7f0000002c40)=@string={0x79, 0x3, "de4986ad824bbc4351be35dd7479cd861f7a84ff2e9e3ad7c18924065e29e4f72a42d6ba52574f6219d7f2425131991d18abce239d7dd1d4d50c65526329815477fd1f153073d01d4aeac3459483b2088b43f51622f45b62b44fe0c507acc9226305c0f65db27c09acd87031ac7b9ec224d3f62c14bf4b"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4}}, {0xff, &(0x7f0000002d00)=@string={0xff, 0x3, "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"}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000002fc0)={0x14, &(0x7f0000002e80)={0x0, 0x30, 0xce, {0xce, 0x4, "53b6e118dfb6a6a6ad4f1831008c02e7cf9879219abb5c98a9bc4beff61f8e33dec7e4a25a66a9387489f118ade8824cd102f6f55848676d3afdf360e432afb3d0e1016c4ddd6e85b45f7694667ac1247e9aa6ed31cd3bdbdef1cdec0d65f8f09ae276bb95b26a5e49d06c21e277276d743f2c4e21874908c5ca2634237be4d6d03725e9db2dfbae954bd07af7285e5b0f17e5ab13e8599639e62c90bf7fdc61721f59c87cad5598023e721296d5ce177f09430af7575b88c78d271e0676f96e3dfc381f9f3e48eaf4f4b936"}}, &(0x7f0000002f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003200)={0x44, &(0x7f0000003000)={0x40, 0x18, 0x7, "60c076c68f35df"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000030c0)={0x20, 0x80, 0x1c, {0x1, 0x10, 0x318, 0x5, 0xf, 0x0, 0x75a6, 0x80, 0x9, 0x200, 0x7f, 0x6}}, &(0x7f0000003100)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000003140)={0x20, 0x83, 0x2}, &(0x7f0000003180)={0x20, 0x87, 0x2}, &(0x7f00000031c0)={0x20, 0x89, 0x2}}) (async) capset(&(0x7f0000003280)={0x20071026, r1}, &(0x7f00000032c0)={0x8, 0x8d94, 0xfffffff8, 0x5, 0x8, 0x8dad}) (async, rerun: 64) syz_usb_control_io$hid(r3, &(0x7f00000034c0)={0x24, &(0x7f0000003300)={0x40, 0xe, 0xf4, {0xf4, 0xa, "7a7d1a84a250084b81439558bb10bc9fd0d838782c54ac4c081026e90cc1e380d2f2b1bb4d4e4393c77b87437355ee112730b8dfb6d7c395fb44e1d8ed7fa88c34055bcc9deab17d3108b48fad665618aa017e2fe9e39b78f13c43e08afc8cdb924942eec17c6fe3403abf3723e78567d6073e2b1c01d2d35c6f76f0b60c669c55941d7ddb4f38d57bc3bff2542dec8107260c74dd6e8db6cb17347770d220fbc74193db7dbbaa99d50b19f2cce4199adcb7c6457ac1f07f34d44d39f7c59352c376c72c7b9bef15cb04cdd141318efd9d71f4fa900754947b5d69dfc8a3c0c6ce6982d046d47d9def0a2445a3dbd5d718db"}}, &(0x7f0000003400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7c6f}}, &(0x7f0000003440)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0xb, '2'}, @local=@item_012={0x1, 0x2, 0x9, "ff"}, @global=@item_4={0x3, 0x1, 0xb, "611145f8"}, @global=@item_4={0x3, 0x1, 0x2, "82286e30"}, @global=@item_012={0x0, 0x1, 0x3}]}}, &(0x7f0000003480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xac59, 0xc5, 0x1, {0x22, 0x35d}}}}, &(0x7f00000036c0)={0x2c, &(0x7f0000003500)={0x40, 0x31, 0x6c, "645b79a31a5453af623a52783a302a4c8061d41244b257bac97b2edfddc35ececc533a0749cccbac7228d6aba4e440891136124467eace0f28fc1332ca34d45b7ad59de5534500f75861e37ecb323a162ead7117b7d73a9ac7adb182c4557d6f107536cfbe7eee07beef6b40"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x5a}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003600)={0x20, 0x1, 0x3f, "8e02658f3dbc072808882d8e65b8b6e4df510b5299703ddfe144c303e530ac476fec93b117d6e25457e83933b1b8184928d81accbef5b9acb4e8618d722e77"}, &(0x7f0000003680)={0x20, 0x3, 0x1, 0x8}}) (rerun: 64) modify_ldt$write2(0x11, &(0x7f0000003700)={0x4, 0xffffffffffffffff, 0x2000, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) capget(&(0x7f0000003740)={0x19980330, r1}, &(0x7f0000003780)={0x9, 0x2, 0x1, 0x8, 0x9, 0x6}) (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000037c0)={[0x8]}, 0x8, 0x400) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000003800)={'ip6_vti0\x00', 0x800}) (async, rerun: 64) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003840), 0xa0902, 0x0) (rerun: 64) fsync(r6) (async) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000003880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000003a80)={0x2c, &(0x7f00000038c0)={0x0, 0x10, 0x68, {0x68, 0x23, "800c640eb46754a1970bb6a290dfffc6037c8e115453b6bbd3c0be798529931b6fcce91854090f23962b8a8633bde615d0e97ce4beec712c6169437c075bbe59a74fd57c4d33a701924e72cbc089025709848bf4979d2341386d570055251824dac7d6841c61"}}, &(0x7f0000003940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000003980)={0x0, 0xf, 0x5a, {0x5, 0xf, 0x5a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x6, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x6, 0xe100, 0x1, [0xcf, 0x30, 0xff3fc0, 0xf, 0x18000, 0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x6, 0x0, 0x2, [0xff3fc0, 0xff0000, 0xf0, 0xff0000, 0xc0cf]}]}}, &(0x7f0000003a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xe, 0x5, "7053ac64", "18fbe521"}}, &(0x7f0000003a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xfe, 0x7e, 0x7f, 0xacf, 0x5df1}}}, &(0x7f0000003ec0)={0x84, &(0x7f0000003ac0)={0x0, 0x0, 0x5e, "e06f49436d0fc0cf833fa08922f98d2981dd4da242e0dee75c47020d54aa46d76fce6884acb6e467fc0f38a71854d121fbc42f149621404bda7e562b951e59f4200415951d1f849b7559d8f755a32ae10e9846d22527a0494068a3b07d21"}, &(0x7f0000003b40)={0x0, 0xa, 0x1, 0xff}, 0xfffffffffffffffc, &(0x7f0000003b80)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000003bc0)={0x20, 0x0, 0x4, {0xa0, 0x4}}, &(0x7f0000003c00)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000003c40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000003c80)={0x40, 0xb, 0x2, "b339"}, &(0x7f0000003cc0)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000003d00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000003d40)={0x40, 0x17, 0x6}, &(0x7f0000003d80)={0x40, 0x19, 0x2, "3a04"}, &(0x7f0000003dc0)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000003e00)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000003e40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000003e80)={0x40, 0x21, 0x1, 0x7}}) (async) r7 = syz_usb_connect$uac1(0x4, 0xcb, &(0x7f0000003f80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x5, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x0, 0x300, 0x4, 0x2, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x6, 0x1, 0xfd}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x7f, "9a28"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x5, 0x5a, {0x7, 0x25, 0x1, 0x0, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0xf6, 0x2, "f9a159"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x6, 0x5, "1e8cf4"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x8}, @as_header={0x7, 0x24, 0x1, 0x1, 0xf}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xd433, 0x3, 0x9, "0f507a0f"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x40, 0xff, {0x7, 0x25, 0x1, 0x81, 0x7c, 0x11}}}}}}}]}}, &(0x7f0000004280)={0xa, &(0x7f0000004080)={0xa, 0x6, 0x201, 0x5, 0x5, 0x3, 0x20, 0x4}, 0x10, &(0x7f00000040c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0xf0, 0xf2, 0x8, 0x9}]}, 0x3, [{0x4, &(0x7f0000004100)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000004140)=@lang_id={0x4, 0x3, 0xf2dd59669a04630d}}, {0xe1, &(0x7f0000004180)=@string={0xe1, 0x3, "b807f772678ce531f0296c9b4faca5b8688345211d51852d7fdb9a713447f9db6682c27b20beb6237473cd6d65993867563396b9ffb9a04b0f6dd88f015bd5178ad61839aba9f52a29fa956d6b70e140763e5e1766cc3ce759d7bb84d53785322862c79ca1d118aaa2c8e8cda0ccb51409b861d4003b377202977d52fccfb1914ff3a2a9651008402fcbf666c6796f65f693f68692e79fa5a3e866cd83cb06ea837af245db2472c64bc04ad0e03364bad384464b6cdd33ffd8b29c8ad0b8122e5fa70b611886b0067a0583d48bb5b7e2ed59c0c2f619cb5e794c0306a89cda"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000004400)={0x14, &(0x7f00000042c0)={0x20, 0xe, 0xdd, {0xdd, 0xa, "a9798508901df1862ddd4ad91e88f8956b7f5e066968fa70b39b58e54b21c77038e90f5a781734a8f968934b5ac8fc299ed1e04af15049e453d855b2e1cd66b35d0b8d6e1e2d48325b10b4c26779c6641dead103c9eac79413ea1ffa723be5b95913c31044534b719ca9f9d2bb35b408779e1198dd0285f2ca4999e5a7cd6d65147aa16d74bff641678c9064996e0e27134ee6141cd9fefb038f00abe78435d59aa3fe8bf87d565ebbc0f2fbdf4458ac4edb65f827403d0ddda2e9470183e4935cef3ec1ceb781876527f7ee0d145c203d880f597a40e8f38f2435"}}, &(0x7f00000043c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000004680)={0x44, &(0x7f0000004440)={0x20, 0x7, 0x64, "44c5eed4320900afb976e005d9508a13965651b6e9f94349e56ec6dc356159bc95fa4717f34f9297459af377f5e1584282a10b185acd0832eacd7f2f3b1b2bd6ff3739b0594fc367ee2562e385a257aee760ef7f6552e294b89148ddbb77ef9e8b7aa3a9"}, &(0x7f00000044c0)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000004500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000004540)={0x20, 0x81, 0x3, "6e9730"}, &(0x7f0000004580)={0x20, 0x82, 0x3, "01da3b"}, &(0x7f00000045c0)={0x20, 0x83, 0x1, '{'}, &(0x7f0000004600)={0x20, 0x84, 0x1, 'u'}, &(0x7f0000004640)={0x20, 0x85, 0x3, "78739d"}}) (async, rerun: 32) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000004700)=0x9) (async, rerun: 32) r8 = syz_usb_connect$uac1(0x5, 0xbc, &(0x7f0000004740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x3, 0x70, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x44}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0xa, "a3221d14"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, 0x3, [0x5, 0x1, 0xa], 0xc1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x4, 0x67, 0x9, 0x6, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x40, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xa, 0x9, "aee534"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xc892, 0x4, 0x8, "696907e31f54"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0xff, 0xff, {0x7, 0x25, 0x1, 0x0, 0xda, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x10, 0x3, 0x1, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x8, 0x5, {0x7, 0x25, 0x1, 0x83, 0x0, 0x5}}}}}}}]}}, &(0x7f0000004980)={0xa, &(0x7f0000004800)={0xa, 0x6, 0x310, 0x3, 0xfc, 0x80, 0x40, 0xf9}, 0xfb, &(0x7f0000004840)={0x5, 0xf, 0xfb, 0x6, [@generic={0x86, 0x10, 0xa, "a10ef3b2206c8e59e6b43045c6f58a293a08f300865860c6ed91fbcdb085c97c2134cda24fecfe116b84ff1b6c7fa4fbbc20acd1c81ec478cb33d35da72eb69f17d3b12d2a05a722d498c14003b916351393ba7a8ffb1e5c81d7e67d9e5e4bc333a82d4be778438edde75b71c102974ff28b89335a221096543687125b6f470d22d9e5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x45, 0xa1, 0x1, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0xf, 0xa0, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x9, 0x3d3}, @generic={0x49, 0x10, 0x1, "b208db0c0cfabbd8a0cc0d0799f4b10baee3bf274f6226aa056f6532cf381959f452a19ef3fb7d92bde6c2bed68263ec909532d92038012e967529ec9936b6df2b9a7ceb54eb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1f, 0xf1}]}, 0x1, [{0x4, &(0x7f0000004940)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000004a80)={0x14, &(0x7f00000049c0)={0x0, 0x5, 0x22, {0x22, 0x11, "4487dbcc4d4255d17cd2e083a32a0d3c907aeaad8592186a1b7a8e95811d3061"}}, &(0x7f0000004a00)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "f68be36eb303ec59c9a7035326c233751b71bf6de3b1eb8cf9a9b79d204b4e7a1708ebb62a295c8e6906277e1fe4ff4602e9f870d1a3af9e3383"}}}, &(0x7f0000004d40)={0x44, &(0x7f0000004ac0)={0x0, 0x30, 0xaf, "15ebf66692b4902d20cf98c8da2194d0ca9258080951ad65a46374bf021362f041de8cbc925c14a6ed06f65a016d365814865b9f5659e0d9dcd4fd579643605295640295e20e02c6f8a7dc35cb9a1f06d0be0ad39afb676e45fa1955cfd898a1e49de9c9c0be5ae8a48c192837a1af92229d9402a5bc3c6552d24a95c02462a96d6454baedf540030383469422f038adcdca675afef08a595d6bb33f9eed011429b46d5316a22f0a83ec592883a9fd"}, &(0x7f0000004b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004bc0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000004c00)={0x20, 0x81, 0x3, "b4dd9f"}, &(0x7f0000004c40)={0x20, 0x82, 0x3, "92efbf"}, &(0x7f0000004c80)={0x20, 0x83, 0x3, "9a7b2f"}, &(0x7f0000004cc0)={0x20, 0x84, 0x4, "c4e8c4ca"}, &(0x7f0000004d00)={0x20, 0x85, 0x3, "a13dd4"}}) 0s ago: executing program 2 (id=2050): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) (async) mount$incfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getflags(r4, 0xb) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x40007, @private2, 0x7fffffff}, 0x1c) (async) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYRES16, @ANYRES8=r0, @ANYRES64=r2]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) link(0x0, 0x0) (async) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='./bus\x00', &(0x7f0000000440), 0x200402, &(0x7f0000000480)={[{@rlog_pages={'rlog_pages', 0x3d, 0xff7f}}]}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) r9 = gettid() write$cgroup_pid(r8, &(0x7f00000005c0)=r9, 0x12) (async) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000002c0)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x1035464, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="9361e2bcb7681ffc9e3c95695836680d8324ea1e9464e5eedc49e22ebedd06504a9f9201136cd7d550b2f939e6e4a060c5f656f7e72d3946561b544a971343e68f7fe16e3b6a55692a7394b57d59793a79809046f10a84b036a749364b2132271ec15a9ab06c28f0fc529e0ced0fc9bc75122f30f6bbdd707f8a9778ac75dad93a8bb39aa0bc9099a81fb5ae188a30104ff8a4af2a7294f989f93f309f29b95104bcead512e77c63ff7de80c4579bf98bbd5"]) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r10, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) (async) ioctl$EVIOCGKEY(r10, 0x80404518, &(0x7f00000000c0)=""/31) kernel console output (not intermixed with test programs): :false [ 54.876617][ T1368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.884794][ T1368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:209 [ 54.959541][ T1370] random: crng reseeded on system resumption [ 55.015246][ T1382] tipc: Enabling of bearer rejected, failed to enable media [ 55.344268][ T473] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.344661][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 55.603825][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 55.717825][ T1420] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 55.733232][ T1422] /dev/rnullb0: Can't open blockdev [ 55.765053][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 55.776050][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 55.789153][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 55.798236][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.813280][ T10] usb 4-1: config 0 descriptor?? [ 55.870435][ T1436] overlayfs: failed to resolve '/000000': -2 [ 56.053835][ T1445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 56.062901][ T1445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 56.072273][ T1445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 56.133792][ T397] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 56.226038][ T10] wacom 0003:056A:0315.0004: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 56.236182][ T10] wacom 0003:056A:0315.0004: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0 [ 56.248273][ T10] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.0004/input/input12 [ 56.284904][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 56.295943][ T397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 56.308785][ T397] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 56.317867][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.326911][ T397] usb 3-1: config 0 descriptor?? [ 56.332155][ T1438] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 56.340347][ T397] usbhid 3-1:0.0: can't add hid device: -22 [ 56.346401][ T397] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 56.496937][ T397] usb 4-1: USB disconnect, device number 7 [ 56.546640][ T924] usb 3-1: USB disconnect, device number 8 [ 56.622210][ T1459] netlink: 188 bytes leftover after parsing attributes in process `syz.1.351'. [ 56.758807][ T1479] overlayfs: failed to clone lowerpath [ 56.890987][ T1496] sit0: entered promiscuous mode [ 56.893794][ T924] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 56.897875][ T1496] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 56.911344][ T1496] netlink: 9 bytes leftover after parsing attributes in process `syz.0.365'. [ 57.063757][ T924] usb 3-1: Using ep0 maxpacket: 16 [ 57.081994][ T924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.091222][ T924] usb 3-1: config 9 has an invalid interface number: 63 but max is 1 [ 57.099445][ T924] usb 3-1: config 9 has an invalid interface number: 159 but max is 1 [ 57.113769][ T924] usb 3-1: config 9 has no interface number 0 [ 57.120044][ T924] usb 3-1: config 9 has no interface number 1 [ 57.127674][ T924] usb 3-1: config 9 interface 63 has no altsetting 0 [ 57.136061][ T924] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 57.145424][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.153597][ T924] usb 3-1: Product: syz [ 57.157930][ T924] usb 3-1: Manufacturer: syz [ 57.162564][ T924] usb 3-1: SerialNumber: syz [ 57.266191][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 57.266210][ T36] audit: type=1400 audit(1759008224.380:390): avc: denied { setattr } for pid=1512 comm="syz.3.372" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.310529][ T36] audit: type=1326 audit(1759008224.420:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.1.371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x0 [ 57.376279][ T1457] loop7: detected capacity change from 0 to 16384 [ 57.385275][ T1457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.410484][ T1457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.465201][ T1521] /dev/loop0: Can't lookup blockdev [ 57.491159][ T1524] netlink: 'syz.0.375': attribute type 3 has an invalid length. [ 57.519895][ T924] usb 3-1: USB disconnect, device number 9 [ 57.533826][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 57.551825][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.659602][ T1534] bpf: Bad value for 'mode' [ 57.736078][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.745247][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.753249][ T10] usb 4-1: Product: syz [ 57.757585][ T10] usb 4-1: Manufacturer: syz [ 57.762210][ T10] usb 4-1: SerialNumber: syz [ 58.160544][ T1538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.381'. [ 58.443807][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 58.573829][ T10] usb 3-1: device descriptor read/64, error -71 [ 58.652205][ T1556] bridge0: port 3(syz_tun) entered blocking state [ 58.653115][ T36] audit: type=1400 audit(1759008225.760:392): avc: denied { read } for pid=1555 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.658854][ T1556] bridge0: port 3(syz_tun) entered disabled state [ 58.684577][ T1556] syz_tun: entered allmulticast mode [ 58.690596][ T1556] syz_tun: entered promiscuous mode [ 58.695959][ T1556] bridge0: port 3(syz_tun) entered blocking state [ 58.702419][ T1556] bridge0: port 3(syz_tun) entered forwarding state [ 58.747852][ T36] audit: type=1400 audit(1759008225.860:393): avc: denied { mounton } for pid=1563 comm="syz.0.392" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.823777][ T10] usb 3-1: device descriptor read/64, error -71 [ 58.828281][ T1578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 58.851344][ T1580] netlink: 76 bytes leftover after parsing attributes in process `syz.0.397'. [ 58.860348][ T1580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 58.906682][ T1589] netlink: 'syz.0.400': attribute type 16 has an invalid length. [ 58.962423][ T36] audit: type=1326 audit(1759008226.070:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1598 comm="syz.0.404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05a5b8eec9 code=0x0 [ 59.015288][ T1600] virtiofs: Unknown parameter 'always' [ 59.063795][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 59.193783][ T10] usb 3-1: device descriptor read/64, error -71 [ 59.433805][ T10] usb 3-1: device descriptor read/64, error -71 [ 59.543862][ T10] usb usb3-port1: attempt power cycle [ 59.887486][ T36] audit: type=1400 audit(1759008227.000:395): avc: denied { bind } for pid=1609 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.906795][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 59.906850][ T36] audit: type=1400 audit(1759008227.000:396): avc: denied { connect } for pid=1609 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.934765][ T10] usb 3-1: device descriptor read/8, error -71 [ 59.955960][ T36] audit: type=1400 audit(1759008227.070:397): avc: denied { getopt } for pid=1612 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.975494][ T36] audit: type=1400 audit(1759008227.070:398): avc: denied { getopt } for pid=1612 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.064781][ T10] usb 3-1: device descriptor read/8, error -71 [ 60.303789][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 60.316807][ T399] usb 4-1: USB disconnect, device number 8 [ 60.328317][ T1628] rust_binder: Write failure EFAULT in pid:266 [ 60.336635][ T10] usb 3-1: device descriptor read/8, error -71 [ 60.355700][ T1630] overlayfs: failed to clone upperpath [ 60.484981][ T10] usb 3-1: device descriptor read/8, error -71 [ 60.593895][ T10] usb usb3-port1: unable to enumerate USB device [ 60.936095][ T1658] rust_binder: Error while translating object. [ 60.936125][ T1658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.942321][ T1658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277 [ 61.018255][ T400] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 61.035682][ T400] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.053571][ T1662] fido_id[1662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.091236][ T1665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.092551][ T1666] rust_binder: 282: no such ref 3 [ 61.186129][ T36] audit: type=1400 audit(1759008228.300:399): avc: denied { setcurrent } for pid=1671 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.221535][ T1677] overlayfs: failed to clone upperpath [ 61.232042][ T1679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.284130][ T1691] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 61.291935][ T1691] rust_binder: 242: no such ref 0 [ 61.403808][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 61.533835][ T10] usb 4-1: device descriptor read/64, error -71 [ 61.671325][ T1715] 9pnet_fd: Insufficient options for proto=fd [ 61.677885][ T1715] 9pnet_fd: Insufficient options for proto=fd [ 61.783783][ T10] usb 4-1: device descriptor read/64, error -71 [ 61.840476][ T1730] netlink: 'syz.0.442': attribute type 39 has an invalid length. [ 61.888948][ T1734] capability: warning: `syz.0.444' uses 32-bit capabilities (legacy support in use) [ 62.023781][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.129432][ T1757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.131479][ T1757] rust_binder: pid 1757 performed invalid decrement on ref [ 62.162638][ T1763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.163843][ T10] usb 4-1: device descriptor read/64, error -71 [ 62.335518][ T1780] tmpfs: Unknown parameter '00000000000000000003' [ 62.390006][ T1784] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 62.399963][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 62.399982][ T36] audit: type=1400 audit(1759008229.520:407): avc: denied { relabelto } for pid=1783 comm="syz.1.461" name="file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 62.432852][ T10] usb 4-1: device descriptor read/64, error -71 [ 62.439201][ T36] audit: type=1400 audit(1759008229.520:408): avc: denied { associate } for pid=1783 comm="syz.1.461" name="file0" dev="tmpfs" ino=647 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 62.467549][ T36] audit: type=1400 audit(1759008229.520:409): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 62.509049][ T1798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 62.543855][ T10] usb usb4-port1: attempt power cycle [ 62.883807][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 62.904780][ T10] usb 4-1: device descriptor read/8, error -71 [ 63.035177][ T10] usb 4-1: device descriptor read/8, error -71 [ 63.107592][ T1815] netlink: 'syz.2.473': attribute type 6 has an invalid length. [ 63.115438][ T1815] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 63.123105][ T1815] netlink: 'syz.2.473': attribute type 6 has an invalid length. [ 63.133783][ T1815] netlink: 'syz.2.473': attribute type 13 has an invalid length. [ 63.150476][ T1815] netlink: 'syz.2.473': attribute type 15 has an invalid length. [ 63.166436][ T36] audit: type=1400 audit(1759008230.280:410): avc: denied { map } for pid=1820 comm="syz.1.474" path="socket:[11481]" dev="sockfs" ino=11481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 63.168646][ T1815] netlink: 'syz.2.473': attribute type 19 has an invalid length. [ 63.200870][ T1815] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.473'. [ 63.216103][ T36] audit: type=1400 audit(1759008230.330:411): avc: denied { getopt } for pid=1822 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.273792][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 63.304781][ T10] usb 4-1: device descriptor read/8, error -71 [ 63.434740][ T10] usb 4-1: device descriptor read/8, error -71 [ 63.483798][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 63.543894][ T10] usb usb4-port1: unable to enumerate USB device [ 63.633764][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 63.645463][ T9] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 32 [ 63.663048][ T9] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.683762][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 63.691995][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 63.701407][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.709670][ T9] usb 3-1: Product: 렒꼴䄢⧒甊ྲྀ淼G䡹첅켴膗஧랗厜惶䪋æ¶ìŸ•è€²ï©ƒÊ„ⱈ첄ꕦ惖Ứᜦ낰ҕ䩸碲㆚想잣æ”͞䌟Ⴄê©åŽ±é‰€â±Ÿé¢­ã©žáž²à ¢äŠ†è€žç¨´ë„·ï¶îºªâ´¢ì¨˜ì·²ì†¹ä©±ã„˜èœ¤ã˜¯à´Žìƒ¿á‰„㢧腘ᡋ [ 63.737151][ T9] usb 3-1: Manufacturer: 㖪⿋ê¶ç°œ×¸Hà¡ã®—瀂㗿녓嫽ç¢ãŠá½†âŒæŸ›ï‡˜ä°”쭕嶰Ì㖥㣸ᗪDŽî¾àµŽäŠ¦ã¹¿ë·•á˜†ï—™æ—¦ç¸œå•‹æ ¦à¤·ê¿¦ì¡¥ï·íŽ¬í‘Œá¡¢ëº†ë«Šê†¾æ˜–⼹樂â¹â®«ìˆ®î€¯éŸ¿æ‚욄邚섇旂事팦ê¡à­ë‡ ï¹’㨙꣑餡霫弿ᓋê²à¢ªâ¸²è¡³á‘¶è¦€æƒ±ë†»×€âŽ­í‰¿ê¼‹ç¥ªè‰¢åŸ­é¢Žê˜‘躖ﾗ䤙芀ょ련嵧í¸í‰Œâ©©é§Žä–‹à´¬á¢žÓ˜å‘½ë«ƒå€é¶¿ [ 63.771710][ T9] usb 3-1: SerialNumber: Щ [ 63.781417][ T1828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.788854][ T1828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.998109][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.006752][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.170380][ T1865] raw_sendmsg: syz.3.492 forgot to set AF_INET. Fix it! [ 64.197536][ T1868] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 64.218304][ T1870] binder: Unknown parameter 'm{k3kax' [ 64.244222][ T36] audit: type=1400 audit(1759008231.357:412): avc: denied { read } for pid=1827 comm="syz.2.477" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.245614][ T400] usb 3-1: USB disconnect, device number 14 [ 64.268669][ T36] audit: type=1400 audit(1759008231.357:413): avc: denied { open } for pid=1827 comm="syz.2.477" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.298902][ T36] audit: type=1400 audit(1759008231.357:414): avc: denied { ioctl } for pid=1827 comm="syz.2.477" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.321571][ T1881] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 64.332138][ T1881] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 64.339251][ T1881] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 64.346378][ T1881] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 64.353800][ T1881] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 64.360962][ T1881] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 64.368026][ T1881] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 64.500923][ T1891] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 64.668602][ T1903] overlayfs: failed to clone lowerpath [ 64.682093][ T36] audit: type=1400 audit(1759008231.787:415): avc: denied { watch } for pid=1904 comm="syz.3.505" path="/104/file0" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.933752][ T1932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.985654][ T1933] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 64.992426][ T1933] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 65.130593][ T1939] overlayfs: failed to clone lowerpath [ 65.163787][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 65.313792][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 65.320013][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.328552][ T9] usb 4-1: config 179 has no interface number 0 [ 65.334900][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 65.346492][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 65.346566][ T1953] netlink: 'syz.0.524': attribute type 4 has an invalid length. [ 65.358227][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.377189][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 65.383575][ T1956] overlayfs: failed to resolve './file0': -2 [ 65.387860][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.406697][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 65.413598][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 65.423097][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.436326][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 65.533284][ T36] audit: type=1400 audit(1759008232.637:416): avc: denied { map } for pid=1957 comm="syz.0.526" path="socket:[11951]" dev="sockfs" ino=11951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.991901][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.275140][ T1989] 9pnet_fd: Insufficient options for proto=fd [ 66.414658][ T2021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'. [ 66.587687][ T2037] 9pnet_fd: Insufficient options for proto=fd [ 66.592309][ T2038] 9pnet_fd: Insufficient options for proto=fd [ 66.923780][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 67.075171][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.083234][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 67.091723][ T10] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 67.100171][ T10] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 67.108410][ T10] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 67.117580][ T10] usb 3-1: config 129 has no interface number 0 [ 67.123872][ T10] usb 3-1: config 129 has no interface number 1 [ 67.130184][ T10] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.143427][ T10] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 67.154345][ T10] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 67.167562][ T10] usb 3-1: config 129 interface 135 has no altsetting 0 [ 67.174556][ T10] usb 3-1: config 129 interface 5 has no altsetting 0 [ 67.182615][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 67.191762][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.199802][ T10] usb 3-1: Product: syz [ 67.204100][ T10] usb 3-1: Manufacturer: syz [ 67.208717][ T10] usb 3-1: SerialNumber: syz [ 67.396684][ T2047] overlayfs: failed to clone upperpath [ 67.433137][ T2051] 9pnet_fd: Insufficient options for proto=fd [ 67.470608][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 67.470631][ T36] audit: type=1400 audit(1759008234.577:422): avc: denied { listen } for pid=2052 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.917292][ T399] usb 4-1: USB disconnect, device number 13 [ 67.923693][ T399] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 68.063781][ T473] Bluetooth: hci0: command 0x1003 tx timeout [ 68.070027][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.083547][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 68.101006][ T10] usb 3-1: USB disconnect, device number 15 [ 68.102999][ T2059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.110325][ T2059] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 68.126841][ T2059] rust_binder: Write failure EINVAL in pid:279 [ 68.131391][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.163845][ T36] audit: type=1400 audit(1759008235.267:423): avc: denied { append } for pid=2060 comm="syz.2.553" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.219643][ T2077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.276191][ T2079] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 69.156273][ T36] audit: type=1400 audit(1759008236.257:424): avc: denied { write } for pid=2091 comm="syz.2.561" name="ptype" dev="proc" ino=4026532424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.223903][ T2094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 69.229212][ T2097] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 69.294827][ T2107] __vm_enough_memory: pid: 2107, comm: syz.2.563, bytes: 18014402804453376 not enough memory for the allocation [ 69.338047][ T36] audit: type=1400 audit(1759008236.447:425): avc: denied { getopt } for pid=2108 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.463855][ T594] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 70.614929][ T594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.626961][ T594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.636989][ T594] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 70.646238][ T594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.655261][ T594] usb 3-1: config 0 descriptor?? [ 70.701899][ T2137] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 70.714296][ T36] audit: type=1400 audit(1759008237.827:426): avc: denied { setopt } for pid=2138 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.728465][ T2137] netlink: 44 bytes leftover after parsing attributes in process `syz.0.577'. [ 70.737378][ T36] audit: type=1400 audit(1759008237.827:427): avc: denied { read } for pid=2136 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.743896][ T2137] netlink: 43 bytes leftover after parsing attributes in process `syz.0.577'. [ 70.770528][ T2137] netlink: 'syz.0.577': attribute type 5 has an invalid length. [ 70.778675][ T2137] netlink: 43 bytes leftover after parsing attributes in process `syz.0.577'. [ 70.840208][ T2140] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 70.848703][ T36] audit: type=1400 audit(1759008237.957:428): avc: denied { search } for pid=2138 comm="syz.3.578" name="/" dev="configfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.870814][ T36] audit: type=1400 audit(1759008237.957:429): avc: denied { read } for pid=2138 comm="syz.3.578" name="/" dev="configfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.892866][ T36] audit: type=1400 audit(1759008237.957:430): avc: denied { open } for pid=2138 comm="syz.3.578" path="/" dev="configfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.267741][ T2122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.276933][ T2122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.290086][ T594] usbhid 3-1:0.0: can't add hid device: -71 [ 71.296328][ T594] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 71.305170][ T594] usb 3-1: USB disconnect, device number 16 [ 71.340287][ T2159] Zero length message leads to an empty skb [ 71.363465][ T2156] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 71.478685][ T2175] 9pnet_fd: Insufficient options for proto=fd [ 71.612562][ T2177] overlayfs: failed to clone upperpath [ 73.027653][ T2216] rust_binder: Error in use_page_slow: ESRCH [ 73.027678][ T2216] rust_binder: use_range failure ESRCH [ 73.029913][ T2217] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 73.033705][ T2216] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 73.033761][ T2216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.055367][ T2216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:318 [ 73.063832][ T2217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 73.074047][ T2217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:318 [ 73.101023][ T2219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 73.122491][ T2219] rust_binder: Write failure EFAULT in pid:321 [ 73.123026][ T2219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.160994][ T36] audit: type=1400 audit(1759008240.267:431): avc: denied { listen } for pid=2224 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.280174][ T36] audit: type=1400 audit(1759008240.387:432): avc: denied { accept } for pid=2231 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.310405][ T2244] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 73.451078][ T2253] can0: slcan on ptm0. [ 73.507077][ T2253] can0 (unregistered): slcan off ptm0. [ 73.605105][ T2275] rust_binder: Write failure EFAULT in pid:354 [ 73.833123][ T2293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 73.991173][ T36] audit: type=1400 audit(1759008241.097:433): avc: denied { name_bind } for pid=2306 comm="syz.3.621" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 74.562902][ T36] audit: type=1400 audit(1759008241.667:434): avc: denied { append } for pid=2317 comm="syz.3.624" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.716633][ T2334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 74.737317][ T36] audit: type=1400 audit(1759008241.847:435): avc: denied { mounton } for pid=2337 comm="syz.1.632" path="/file0" dev="ramfs" ino=13546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 74.737447][ T2338] /dev/loop0: Can't lookup blockdev [ 74.764044][ T36] audit: type=1400 audit(1759008241.877:436): avc: denied { execute } for pid=2337 comm="syz.1.632" name="file0" dev="ramfs" ino=13546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 74.786500][ T36] audit: type=1400 audit(1759008241.887:437): avc: denied { execute_no_trans } for pid=2337 comm="syz.1.632" path="/file0" dev="ramfs" ino=13546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 74.820163][ T36] audit: type=1400 audit(1759008241.927:438): avc: denied { create } for pid=2341 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 74.841158][ T36] audit: type=1400 audit(1759008241.947:439): avc: denied { sys_admin } for pid=2341 comm="syz.0.633" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 74.850659][ T2342] VFS: Mount too revealing [ 74.866508][ T594] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 74.874257][ T36] audit: type=1400 audit(1759008241.947:440): avc: denied { associate } for pid=2345 comm="syz.0.633" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 75.023760][ T594] usb 4-1: Using ep0 maxpacket: 16 [ 75.030147][ T594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.043754][ T594] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.056757][ T594] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.066030][ T594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.084017][ T594] usb 4-1: config 0 descriptor?? [ 75.257860][ T2354] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 75.342127][ T2357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 75.496416][ T594] HID 045e:07da: Invalid code 65791 type 1 [ 75.506578][ T594] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input18 [ 75.525864][ T594] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 76.029003][ T2372] __vm_enough_memory: pid: 2372, comm: syz.2.643, bytes: 18014402804453376 not enough memory for the allocation [ 76.066312][ T2378] GUP no longer grows the stack in syz.2.644 (2378): 200000005000-200000008000 (200000004000) [ 76.076796][ T2378] CPU: 1 UID: 0 PID: 2378 Comm: syz.2.644 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 76.076843][ T2378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.076867][ T2378] Call Trace: [ 76.076877][ T2378] [ 76.076888][ T2378] __dump_stack+0x21/0x30 [ 76.076929][ T2378] dump_stack_lvl+0x10c/0x190 [ 76.076964][ T2378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.076999][ T2378] ? futex_lock_pi_atomic+0xdd/0xc70 [ 76.077032][ T2378] dump_stack+0x19/0x20 [ 76.077063][ T2378] fixup_user_fault+0x63d/0x6d0 [ 76.077095][ T2378] fault_in_user_writeable+0x76/0xe0 [ 76.077119][ T2378] futex_lock_pi+0x258/0xa10 [ 76.077146][ T2378] ? futex_unqueue+0x136/0x160 [ 76.077171][ T2378] ? should_fail+0xf/0x20 [ 76.077195][ T2378] ? __cfi_futex_lock_pi+0x10/0x10 [ 76.077225][ T2378] ? __cfi_futex_wake_mark+0x10/0x10 [ 76.077257][ T2378] ? futex_setup_timer+0xb4/0xd0 [ 76.077281][ T2378] ? __cfi_futex_wake_mark+0x10/0x10 [ 76.077312][ T2378] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 76.077339][ T2378] ? do_futex+0x100/0x500 [ 76.077364][ T2378] do_futex+0x25c/0x500 [ 76.077389][ T2378] ? __cfi_do_futex+0x10/0x10 [ 76.077414][ T2378] ? __vm_munmap+0x2c7/0x370 [ 76.077439][ T2378] __se_sys_futex+0x28f/0x300 [ 76.077466][ T2378] ? __x64_sys_futex+0x110/0x110 [ 76.077501][ T2378] ? __kasan_check_write+0x18/0x20 [ 76.077541][ T2378] __x64_sys_futex+0xe9/0x110 [ 76.077567][ T2378] x64_sys_call+0x227f/0x2ee0 [ 76.077604][ T2378] do_syscall_64+0x58/0xf0 [ 76.077632][ T2378] ? clear_bhb_loop+0x50/0xa0 [ 76.077656][ T2378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.077702][ T2378] RIP: 0033:0x7efc0a58eec9 [ 76.077727][ T2378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.077751][ T2378] RSP: 002b:00007efc0b4f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.077783][ T2378] RAX: ffffffffffffffda RBX: 00007efc0a7e5fa0 RCX: 00007efc0a58eec9 [ 76.077803][ T2378] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 76.077822][ T2378] RBP: 00007efc0a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.077839][ T2378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.077855][ T2378] R13: 00007efc0a7e6038 R14: 00007efc0a7e5fa0 R15: 00007ffe0c868838 [ 76.077878][ T2378] [ 76.298170][ T399] usb 4-1: USB disconnect, device number 14 [ 76.379100][ T2380] rust_binder: Error while translating object. [ 76.379156][ T2380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 76.385583][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:363 [ 76.703169][ T2404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2404 comm=syz.0.653 [ 76.725895][ T2403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.653'. [ 76.836601][ T2418] /dev/rnullb0: Can't open blockdev [ 76.975158][ T2442] netlink: 'syz.3.666': attribute type 4 has an invalid length. [ 77.345089][ T2457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2457 comm=syz.3.670 [ 77.374170][ T2454] netlink: 'syz.2.669': attribute type 16 has an invalid length. [ 77.572242][ T2468] fuse: Unknown parameter 'group_id.šã–°³¹y@ëlSN)zѧÔ(¥R&% @xÙ$AÛ' [ 77.582065][ T2468] tipc: Enabled bearer , priority 0 [ 77.592753][ T2467] tipc: Disabling bearer [ 77.597307][ T2473] overlayfs: failed to clone upperpath [ 77.606373][ T2474] overlayfs: failed to clone upperpath [ 77.623804][ T399] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 77.737663][ T2486] fuse: Bad value for 'user_id' [ 77.742568][ T2486] fuse: Bad value for 'user_id' [ 77.773782][ T399] usb 4-1: Using ep0 maxpacket: 8 [ 77.779907][ T399] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.788937][ T399] usb 4-1: config 1 has no interface number 1 [ 77.795074][ T399] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.807533][ T399] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.816629][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.824702][ T399] usb 4-1: Product: syz [ 77.828897][ T399] usb 4-1: Manufacturer: syz [ 77.833580][ T399] usb 4-1: SerialNumber: syz [ 77.883779][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 78.025531][ T2504] 9pnet_fd: Insufficient options for proto=fd [ 78.040330][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.047294][ T399] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 78.049650][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.049678][ T65] usb 3-1: Product: syz [ 78.070140][ T399] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 78.071790][ T65] usb 3-1: Manufacturer: syz [ 78.077937][ T399] usb 4-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 78.088899][ T65] usb 3-1: SerialNumber: syz [ 78.089858][ T399] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 78.100595][ T399] usb 4-1: 2:1 : invalid channels 0 [ 78.113471][ T2508] 9pnet_fd: Insufficient options for proto=fd [ 78.121664][ T399] usb 4-1: USB disconnect, device number 15 [ 78.256815][ T2524] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 78.314148][ T65] cdc_ncm 3-1:1.0: bind() failure [ 78.320987][ T65] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 78.329998][ T2533] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 78.337764][ T2535] incfs: Error accessing: ./file0. [ 78.338019][ T65] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 78.343142][ T2535] incfs: mount failed -20 [ 78.364132][ T65] usb 3-1: USB disconnect, device number 17 [ 78.589944][ T2551] /dev/rnullb0: Can't open blockdev [ 78.683513][ T2555] rust_binder: Read failure Err(EAGAIN) in pid:400 [ 78.684611][ T2555] rust_binder: Write failure EFAULT in pid:400 [ 78.691437][ T2555] rust_binder: Error in use_page_slow: ESRCH [ 78.697703][ T2555] rust_binder: use_range failure ESRCH [ 78.704356][ T2555] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 78.710271][ T2555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.718064][ T2555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:400 [ 78.790823][ T2569] fuse: Bad value for 'fd' [ 78.960382][ T2596] 9pnet_fd: Insufficient options for proto=fd [ 79.608462][ T2610] fuse: Bad value for 'fd' [ 79.920910][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 79.920930][ T36] audit: type=1400 audit(1759008247.027:446): avc: denied { create } for pid=2644 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 79.954156][ T2648] netlink: 'syz.3.736': attribute type 58 has an invalid length. [ 79.969878][ T2648] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 80.023529][ T2648] tipc: Started in network mode [ 80.028667][ T2648] tipc: Node identity 5adfe1ed9c8a, cluster identity 4711 [ 80.035935][ T2648] tipc: Enabled bearer , priority 0 [ 80.095465][ T2647] tipc: Resetting bearer [ 80.108922][ T2647] tipc: Disabling bearer [ 80.830651][ T2673] netlink: 'syz.2.744': attribute type 4 has an invalid length. [ 80.838454][ T2673] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.744'. [ 81.293772][ T10] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 81.411988][ T36] audit: type=1400 audit(1759008248.521:447): avc: denied { create } for pid=2748 comm="syz.1.769" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.433074][ T36] audit: type=1400 audit(1759008248.531:448): avc: denied { read } for pid=2748 comm="syz.1.769" name="file0" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.455763][ T36] audit: type=1400 audit(1759008248.531:449): avc: denied { open } for pid=2748 comm="syz.1.769" path="/225/file0" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.478561][ T36] audit: type=1400 audit(1759008248.531:450): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.502317][ T10] usb 4-1: No LPM exit latency info found, disabling LPM. [ 81.512496][ T10] usb 4-1: config 188 has an invalid interface number: 42 but max is 0 [ 81.520925][ T10] usb 4-1: config 188 has an invalid interface descriptor of length 5, skipping [ 81.530038][ T10] usb 4-1: config 188 contains an unexpected descriptor of type 0x2, skipping [ 81.539010][ T10] usb 4-1: config 188 contains an unexpected descriptor of type 0x1, skipping [ 81.548132][ T10] usb 4-1: config 188 has no interface number 0 [ 81.554499][ T10] usb 4-1: config 188 interface 42 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 81.567918][ T10] usb 4-1: config 188 interface 42 has no altsetting 0 [ 81.643226][ T2765] tipc: New replicast peer: 255.255.255.255 [ 81.649572][ T2765] tipc: Enabled bearer , priority 10 [ 81.656497][ T2765] 9pnet_fd: Insufficient options for proto=fd [ 81.691192][ T2771] overlay: Unknown parameter 'subj_role' [ 81.697409][ T2771] incfs: Options parsing error. -22 [ 81.702733][ T2771] incfs: mount failed -22 [ 81.727361][ T36] audit: type=1400 audit(1759008248.841:451): avc: denied { accept } for pid=2775 comm="syz.0.780" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.756492][ T2781] veth1: entered allmulticast mode [ 81.768259][ T2781] veth1: left allmulticast mode [ 81.861757][ T2810] netlink: 'syz.1.790': attribute type 4 has an invalid length. [ 81.945774][ T36] audit: type=1400 audit(1759008249.061:452): avc: denied { shutdown } for pid=2826 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.447885][ T2835] bridge0: port 3(erspan0) entered blocking state [ 82.454382][ T2835] bridge0: port 3(erspan0) entered disabled state [ 82.460880][ T2835] erspan0: entered allmulticast mode [ 82.466696][ T2835] erspan0: entered promiscuous mode [ 82.472011][ T2835] bridge0: port 3(erspan0) entered blocking state [ 82.478473][ T2835] bridge0: port 3(erspan0) entered forwarding state [ 82.486241][ T2835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.798'. [ 82.643784][ T65] tipc: Node number set to 1044752059 [ 82.800801][ T36] audit: type=1326 audit(1759008249.911:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2828 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a5b8eec9 code=0x7fc00000 [ 82.862239][ T2873] netlink: 228 bytes leftover after parsing attributes in process `syz.0.815'. [ 82.932345][ T36] audit: type=1400 audit(1759008250.041:454): avc: denied { setattr } for pid=2887 comm="syz.0.819" name="XDP" dev="sockfs" ino=14843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.511417][ T2925] fuse: Bad value for 'fd' [ 84.072892][ T10] usb 4-1: New USB device found, idVendor=0c26, idProduct=0013, bcdDevice=61.2f [ 84.082072][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.129581][ T10] usb 4-1: can't set config #188, error -71 [ 84.136992][ T10] usb 4-1: USB disconnect, device number 16 [ 84.336887][ T2948] rust_binder: Write failure EFAULT in pid:432 [ 84.422388][ T2962] /dev/loop0: Can't lookup blockdev [ 84.479559][ T2966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.551798][ T2972] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 84.787964][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.793367][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.798962][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.804417][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.809700][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.815054][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.820352][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.825757][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.831481][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.836849][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.842202][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.847838][ T2990] fuse: Unknown parameter 'fû¢ÿÿÿÿ' [ 84.889858][ T2995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 84.899526][ T2995] fuse: Bad value for 'user_id' [ 84.904475][ T65] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 84.904755][ T2995] fuse: Bad value for 'user_id' [ 85.006443][ T36] audit: type=1400 audit(1759008252.121:455): avc: denied { execheap } for pid=3010 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.033090][ T3013] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 85.054739][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.064925][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.075410][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.084515][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.092537][ T65] usb 4-1: Product: syz [ 85.096917][ T65] usb 4-1: Manufacturer: syz [ 85.101516][ T65] usb 4-1: SerialNumber: syz [ 85.310153][ T2976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.318804][ T2976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.330766][ T65] usb 4-1: 0:2 : does not exist [ 85.337562][ T65] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 85.348686][ T65] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 85.358179][ T65] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 85.367953][ T65] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 85.377479][ T65] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 85.387004][ T65] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 85.397928][ T65] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 85.407473][ T65] usb 4-1: USB disconnect, device number 17 [ 85.504817][ T3018] netlink: 1 bytes leftover after parsing attributes in process `syz.1.863'. [ 85.513668][ T3019] netlink: 1 bytes leftover after parsing attributes in process `syz.1.863'. [ 85.561899][ T36] audit: type=1400 audit(1759008252.671:456): avc: denied { audit_read } for pid=3024 comm="syz.1.865" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.817310][ T3035] overlay: ./file0 is not a directory [ 85.823024][ T3036] overlay: ./file0 is not a directory [ 85.832953][ T3036] fuse: Bad value for 'fd' [ 86.027578][ T36] audit: type=1400 audit(1759008253.141:457): avc: denied { ioctl } for pid=3061 comm="syz.3.876" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.034723][ T3062] rust_binder: 474: no such ref 3 [ 86.070355][ T3064] rust_binder: Write failure EFAULT in pid:476 [ 87.190640][ T36] audit: type=1400 audit(1759008254.301:458): avc: denied { write } for pid=3102 comm="syz.3.892" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 87.221610][ T3108] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 87.229416][ T36] audit: type=1400 audit(1759008254.341:459): avc: denied { setopt } for pid=3102 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.251937][ T3108] 9pnet_fd: Insufficient options for proto=fd [ 87.252515][ T3112] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 87.261315][ T3114] tipc: Enabling of bearer rejected, failed to enable media [ 87.266029][ T36] audit: type=1400 audit(1759008254.361:460): avc: denied { load_policy } for pid=3111 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.276918][ T3112] SELinux: failed to load policy [ 87.323465][ T10] hid (null): invalid report_count 37064 [ 87.353930][ T10] hid-generic 0000:C0C59D26:45B529A5.0007: collection stack underflow [ 87.364306][ T10] hid-generic 0000:C0C59D26:45B529A5.0007: item 0 1 0 12 parsing failed [ 87.372913][ T10] hid-generic 0000:C0C59D26:45B529A5.0007: probe with driver hid-generic failed with error -22 [ 87.737746][ T3149] rust_binder: Write failure EFAULT in pid:493 [ 87.875199][ T36] audit: type=1400 audit(1759008261.991:461): avc: denied { setopt } for pid=3156 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.907120][ T36] audit: type=1400 audit(1759008262.021:462): avc: denied { setopt } for pid=3160 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.976520][ T3170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.027499][ T3175] rust_binder: Error while translating object. [ 88.034083][ T3175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 88.040302][ T3175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 88.091240][ T3188] overlayfs: failed to clone lowerpath [ 88.555273][ T36] audit: type=1400 audit(1759008262.671:463): avc: denied { getopt } for pid=3231 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.594126][ T3237] tipc: Enabling of bearer rejected, failed to enable media [ 88.929654][ T3267] binder: Bad value for 'defcontext' [ 89.012841][ T3285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3285 comm=syz.2.959 [ 89.025847][ T3285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3285 comm=syz.2.959 [ 89.039238][ T36] audit: type=1400 audit(1759008263.151:464): avc: denied { listen } for pid=3284 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.040727][ T3285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.959'. [ 90.118608][ T3346] netlink: 'syz.0.980': attribute type 16 has an invalid length. [ 90.222629][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 90.222646][ T36] audit: type=1326 audit(1759008264.331:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.0.981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05a5b8eec9 code=0x0 [ 90.521088][ T3351] cgroup: fork rejected by pids controller in /syz1 [ 90.856757][ T36] audit: type=1400 audit(1759008264.971:470): avc: denied { audit_write } for pid=3603 comm="syz.2.990" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.885160][ T36] audit: type=1107 audit(1759008264.971:471): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 90.953781][ T397] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 90.980051][ T36] audit: type=1400 audit(1759008265.091:472): avc: denied { remount } for pid=3613 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 91.114902][ T397] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 91.137662][ T397] usb 4-1: config 0 has no interface number 0 [ 91.143958][ T397] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 91.144120][ T3640] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 91.165155][ T397] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 91.174500][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.182544][ T397] usb 4-1: Product: syz [ 91.193759][ T397] usb 4-1: Manufacturer: syz [ 91.203758][ T397] usb 4-1: SerialNumber: syz [ 91.214615][ T397] usb 4-1: config 0 descriptor?? [ 91.224073][ T3590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.233594][ T397] usb-storage 4-1:0.20: USB Mass Storage device detected [ 91.246382][ T397] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 91.455402][ T397] scsi host1: usb-storage 4-1:0.20 [ 91.470753][ T3661] 9pnet_fd: Insufficient options for proto=fd [ 91.642995][ T3670] netlink: 'syz.2.1008': attribute type 16 has an invalid length. [ 91.661165][ T3670] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1008'. [ 91.692736][ T397] usb 4-1: USB disconnect, device number 18 [ 91.726594][ T36] audit: type=1400 audit(1759008265.841:473): avc: denied { bind } for pid=3673 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.117548][ T3696] cgroup2: Unknown parameter 'ms' [ 92.117738][ T3695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3695 comm=syz.0.1016 [ 92.271743][ T36] audit: type=1400 audit(1759008266.381:474): avc: denied { write } for pid=3699 comm="syz.3.1017" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.673782][ T65] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 92.803780][ T65] usb 4-1: device descriptor read/64, error -71 [ 93.043798][ T65] usb 4-1: device descriptor read/64, error -71 [ 93.098522][ T3724] tipc: Enabling of bearer rejected, failed to enable media [ 93.189600][ T36] audit: type=1400 audit(1759008267.301:475): avc: denied { nlmsg_write } for pid=3738 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.293763][ T65] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 93.398283][ T3759] 9pnet_fd: Insufficient options for proto=fd [ 93.443763][ T65] usb 4-1: device descriptor read/64, error -71 [ 93.563477][ T3786] overlayfs: failed to clone lowerpath [ 93.595701][ T3788] tipc: Enabling of bearer rejected, failed to enable media [ 93.615271][ T3788] fuse: Bad value for 'fd' [ 93.621662][ T3788] netlink: 'syz.2.1048': attribute type 4 has an invalid length. [ 93.683761][ T65] usb 4-1: device descriptor read/64, error -71 [ 93.793861][ T65] usb usb4-port1: attempt power cycle [ 94.143824][ T65] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 94.164866][ T65] usb 4-1: device descriptor read/8, error -71 [ 94.294821][ T65] usb 4-1: device descriptor read/8, error -71 [ 94.452796][ T3813] tipc: Enabling of bearer rejected, failed to enable media [ 94.498347][ T3817] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.544473][ T65] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 94.564822][ T65] usb 4-1: device descriptor read/8, error -71 [ 94.694876][ T65] usb 4-1: device descriptor read/8, error -71 [ 94.810176][ T65] usb usb4-port1: unable to enumerate USB device [ 94.819169][ T3825] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 94.828805][ T3825] 9pnet_fd: Insufficient options for proto=fd [ 95.375183][ T36] audit: type=1400 audit(1759008269.491:476): avc: denied { mounton } for pid=3853 comm="syz.2.1072" path="/file0" dev="ramfs" ino=18116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 95.407956][ T36] audit: type=1326 audit(1759008269.521:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.1.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x0 [ 95.462795][ T36] audit: type=1400 audit(1759008269.571:478): avc: denied { accept } for pid=3857 comm="syz.3.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.482835][ T3858] rust_binder: Error while translating object. [ 95.482873][ T3858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 95.489128][ T3858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:557 [ 95.505047][ T36] audit: type=1400 audit(1759008269.621:479): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.518389][ T3860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.534321][ T3860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559 [ 95.556603][ T3865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.565881][ T3865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 95.584950][ T3867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.594898][ T3870] 9pnet_fd: Insufficient options for proto=fd [ 95.594958][ T3867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565 [ 95.779047][ T3874] overlayfs: failed to clone upperpath [ 95.794555][ T36] audit: type=1400 audit(1759008269.911:480): avc: denied { bind } for pid=3873 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.802737][ T3874] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 95.828583][ T36] audit: type=1400 audit(1759008269.941:481): avc: denied { create } for pid=3873 comm="syz.0.1079" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 95.861962][ T36] audit: type=1400 audit(1759008269.941:482): avc: denied { associate } for pid=3873 comm="syz.0.1079" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 95.896734][ T36] audit: type=1400 audit(1759008269.941:483): avc: denied { read write open } for pid=3873 comm="syz.0.1079" path="/339/bus/file0" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 95.933568][ T36] audit: type=1400 audit(1759008269.951:484): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 96.026410][ T3904] 9pnet_fd: Insufficient options for proto=fd [ 96.078760][ T3908] fuse: Unknown parameter '00000000000000000000' [ 96.123263][ T36] audit: type=1326 audit(1759008270.231:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.2.1096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc0a58eec9 code=0x0 [ 96.300004][ T3933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1101'. [ 96.315521][ T3935] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 96.323407][ T3936] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 96.477818][ T3948] /dev/md0: Can't lookup blockdev [ 96.483224][ T3948] /dev/md0: Can't lookup blockdev [ 96.513637][ T3952] __vm_enough_memory: pid: 3952, comm: syz.3.1110, bytes: 18014402804453376 not enough memory for the allocation [ 96.599880][ T3959] rust_binder: 3958 RLIMIT_NICE not set [ 96.604776][ T397] rust_binder: 3957: removing orphan mapping 0:24 [ 96.681017][ T3969] 9pnet_fd: p9_fd_create_tcp (3969): problem connecting socket to 127.0.0.1 [ 96.691096][ T3969] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1115'. [ 96.808321][ T3972] rust_binder: 3971 RLIMIT_NICE not set [ 96.808471][ T3971] rust_binder: Error while translating object. [ 96.814093][ T3971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 96.820274][ T3971] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 96.829667][ T3971] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:598 [ 96.904346][ T3991] binder: Bad value for 'max' [ 96.941612][ T4000] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.943647][ T4000] rust_binder: Error in use_page_slow: ESRCH [ 96.959272][ T4000] rust_binder: use_range failure ESRCH [ 96.966097][ T4000] rust_binder: Failed to allocate buffer. len:5168, is_oneway:false [ 96.971625][ T4000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 96.984967][ T4000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:610 [ 97.011921][ T4013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 97.103400][ T4033] overlayfs: failed to clone lowerpath [ 97.226315][ T4061] netlink: 'syz.0.1149': attribute type 4 has an invalid length. [ 97.234165][ T4061] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.1149'. [ 97.284146][ T4045] /dev/sr0: Can't lookup blockdev [ 97.921218][ T4112] overlayfs: failed to resolve './file1': -2 [ 98.219890][ T4151] overlayfs: failed to clone lowerpath [ 98.573768][ T397] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 98.724959][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.736098][ T397] usb 4-1: New USB device found, idVendor=0443, idProduct=0000, bcdDevice= 0.00 [ 98.745171][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.753932][ T397] usb 4-1: config 0 descriptor?? [ 98.972547][ T397] usbhid 4-1:0.0: can't add hid device: -71 [ 98.980004][ T4177] fuse: Bad value for 'user_id' [ 98.984931][ T397] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 98.992927][ T4177] fuse: Bad value for 'user_id' [ 99.005745][ T397] usb 4-1: USB disconnect, device number 23 [ 99.052310][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'. [ 99.077734][ T4189] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 99.157925][ T4205] kvm: Disabled LAPIC found during irq injection [ 99.174668][ T4205] rust_binder: Error while translating object. [ 99.174701][ T4205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.180947][ T4205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 99.227722][ T4216] veth1: entered allmulticast mode [ 99.232599][ T4218] 9pnet_fd: Insufficient options for proto=fd [ 99.295303][ T4219] veth1: left allmulticast mode [ 99.380210][ T4262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8247 sclass=netlink_route_socket pid=4262 comm=syz.3.1216 [ 99.484052][ T4272] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.830878][ T4282] netlink: 'syz.2.1223': attribute type 5 has an invalid length. [ 99.839512][ T4282] netlink: 'syz.2.1223': attribute type 5 has an invalid length. [ 99.847362][ T4282] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1223'. [ 100.470272][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 100.470300][ T36] audit: type=1400 audit(1759008274.578:497): avc: denied { append } for pid=4290 comm="syz.3.1226" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.478804][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.507193][ T36] audit: type=1400 audit(1759008274.578:498): avc: denied { ioctl } for pid=4290 comm="syz.3.1226" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.509463][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.540340][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.547826][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.555383][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.562802][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.570268][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.577715][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.585146][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.592550][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.599965][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.607375][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.614811][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.622474][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.630431][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.637956][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.645441][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.652863][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.660287][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.667709][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.675139][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.682545][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.689964][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.697439][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.704866][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.712267][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.719700][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.727133][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.734567][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.741974][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.749416][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.756836][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.764255][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.771686][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.779131][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.786803][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.794254][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.801668][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.809116][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.816549][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.823997][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.831418][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.838843][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.846280][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.853671][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.861121][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.868563][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.875994][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.883382][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.890823][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.898262][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.905688][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.913199][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.920696][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.928137][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.935617][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.943020][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.950463][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.957880][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.965408][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.972828][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.980280][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.987700][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 100.995120][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.002523][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.009985][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.017436][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.024858][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.032261][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.039780][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.047205][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.054654][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.062055][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.069480][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.076925][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.084370][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.091869][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.099307][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.106765][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.114314][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.121730][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.129154][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.136574][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.144013][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.151447][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.159047][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.166639][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.175120][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 101.184111][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.186668][ T4299] erspan0: left allmulticast mode [ 101.191557][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.198218][ T4299] erspan0: left promiscuous mode [ 101.209551][ T4299] bridge0: port 3(erspan0) entered disabled state [ 101.214039][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.223437][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.223740][ T4299] bridge_slave_1: left allmulticast mode [ 101.230875][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.237389][ T4299] bridge_slave_1: left promiscuous mode [ 101.244083][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.250195][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.257234][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.271911][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.272082][ T4299] bridge_slave_0: left allmulticast mode [ 101.279565][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.285308][ T4299] bridge_slave_0: left promiscuous mode [ 101.292662][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.298325][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.305662][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.319935][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.327405][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.334935][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.342360][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.350112][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.357587][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.365030][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.372419][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.379857][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.388025][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.395540][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 101.395924][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.413753][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.421186][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.428862][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.436459][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.444061][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.451920][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.462385][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.470675][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.478189][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.485854][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.493381][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.500929][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.513848][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.521307][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.528822][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.536282][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.544028][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.551453][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.559084][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.567236][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.574934][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.582576][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.590165][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.597678][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.605140][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.612820][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.620284][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.627724][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.635181][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.642882][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.650539][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.658431][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.660580][ T36] audit: type=1400 audit(1759008275.778:499): avc: denied { name_bind } for pid=4325 comm="syz.0.1237" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 101.665951][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.694429][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.701953][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.709466][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.716942][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.724399][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.731824][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.739298][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.746906][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.754473][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.761887][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.769354][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.776778][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.784247][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.791692][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.799154][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.806698][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.814148][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.821554][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.829170][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.836628][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.844087][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.851523][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.858964][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.866397][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.873844][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.881274][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.888696][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.896172][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.903604][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.911376][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.919043][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.926919][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.934563][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.942187][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.949942][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.957481][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.964973][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.972433][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.980079][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 101.998044][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.005575][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.013011][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.024364][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.032038][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.040127][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.047708][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.055292][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.062715][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.070189][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.077659][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.085136][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.092581][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.100005][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.107467][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.114942][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.122365][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.129847][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.132464][ T4341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=4341 comm=syz.1.1242 [ 102.137344][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.158764][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.166248][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.173818][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.181518][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.189192][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.196643][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.204215][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.211621][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.219189][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.226997][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.229370][ T36] audit: type=1400 audit(1759008276.338:500): avc: denied { execute } for pid=4344 comm="syz.0.1244" path="/dev/rnullb0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.234739][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.265379][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.272879][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.280758][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.288493][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.296279][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.303978][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.311399][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.319010][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.336009][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.343458][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.352988][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.360975][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.370320][ T4360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.377588][ T4360] IPv6: NLM_F_CREATE should be set when creating new route [ 102.384832][ T4360] IPv6: NLM_F_CREATE should be set when creating new route [ 102.392796][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.401271][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.409174][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.416998][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.432298][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.439915][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.450281][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.457944][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.458396][ T4369] tipc: Enabling of bearer rejected, failed to enable media [ 102.465580][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.482774][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.483736][ T36] audit: type=1400 audit(1759008276.588:501): avc: denied { listen } for pid=4362 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.490763][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.532884][ T397] hid-generic 0009:0D02:0009.0008: unknown main item tag 0x0 [ 102.533282][ T36] audit: type=1400 audit(1759008276.638:502): avc: denied { accept } for pid=4362 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.555389][ T397] hid-generic 0009:0D02:0009.0008: hidraw0: HID vffffff.fe Device [syz0] on syz0 [ 102.614420][ T4374] can0: slcan on ptm0. [ 102.684377][ T4374] can0 (unregistered): slcan off ptm0. [ 102.954676][ T594] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 103.004618][ T4422] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1262'. [ 103.123861][ T594] usb 4-1: Using ep0 maxpacket: 8 [ 103.130478][ T594] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.144439][ T594] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.163800][ T594] usb 4-1: config 1 interface 0 has no altsetting 0 [ 103.178332][ T594] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40 [ 103.189892][ T594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.199392][ T594] usb 4-1: Product: syz [ 103.203847][ T594] usb 4-1: Manufacturer: syz [ 103.208534][ T594] usb 4-1: SerialNumber: syz [ 103.239298][ T4457] overlayfs: failed to clone upperpath [ 103.251090][ T36] audit: type=1400 audit(1759008277.358:503): avc: denied { watch } for pid=4458 comm="syz.1.1275" path="/377/file0" dev="tmpfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.291880][ T4469] overlayfs: failed to resolve './file1': -2 [ 103.528482][ T4483] tipc: Enabling of bearer rejected, failed to enable media [ 103.550192][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 103.559940][ T36] audit: type=1400 audit(1759008277.668:504): avc: denied { create } for pid=4484 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 104.017104][ T4387] rust_binder: Write failure EFAULT in pid:690 [ 104.017854][ T36] audit: type=1400 audit(1759008278.128:505): avc: denied { connect } for pid=4386 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.021275][ T594] usbhid 4-1:1.0: can't add hid device: -71 [ 104.050084][ T594] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 104.060943][ T594] usb 4-1: USB disconnect, device number 24 [ 104.718395][ T4564] rust_binder: 4563 RLIMIT_NICE not set [ 104.767799][ T4572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 104.773450][ T4572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:719 [ 104.907995][ T4581] cgroup: Name too long [ 104.937704][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 104.948555][ T4584] /dev/loop0: Can't lookup blockdev [ 105.033750][ T397] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 105.073340][ T4602] 9pnet_fd: Insufficient options for proto=fd [ 105.183825][ T397] usb 4-1: Using ep0 maxpacket: 16 [ 105.190097][ T397] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.201076][ T397] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.207734][ T397] usb 4-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 105.216804][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.225533][ T397] usb 4-1: config 0 descriptor?? [ 105.634869][ T397] saitek 0003:0738:1705.0009: item fetching failed at offset 2/3 [ 105.645117][ T397] saitek 0003:0738:1705.0009: parse failed [ 105.651015][ T397] saitek 0003:0738:1705.0009: probe with driver saitek failed with error -22 [ 105.835890][ T594] usb 4-1: USB disconnect, device number 25 [ 106.229406][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 106.240320][ T4635] fuse: Unknown parameter 'ÿÿ00000000000000000000' [ 106.327309][ T4645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1336'. [ 106.917405][ T4689] overlayfs: failed to clone upperpath [ 107.007683][ T4700] overlayfs: failed to clone upperpath [ 107.100263][ T4707] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1356'. [ 107.111686][ T4707] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1356'. [ 108.114954][ T36] audit: type=1400 audit(1775785727.232:506): avc: denied { sqpoll } for pid=4731 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.338316][ T4749] 8021q: VLANs not supported on ip_vti0 [ 108.901175][ T4846] bridge0: port 3(syz_tun) entered disabled state [ 108.909101][ T4846] syz_tun (unregistering): left allmulticast mode [ 108.915754][ T4846] syz_tun (unregistering): left promiscuous mode [ 108.922198][ T4846] bridge0: port 3(syz_tun) entered disabled state [ 108.989389][ T4855] rust_binder: Error while translating object. [ 108.989419][ T4855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.995764][ T4855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:731 [ 109.516701][ T4879] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 109.534597][ T4879] netlink: 'syz.2.1418': attribute type 21 has an invalid length. [ 109.542537][ T4879] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1418'. [ 110.123771][ T594] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 110.237752][ T4927] overlayfs: failed to resolve './file0': -2 [ 110.284853][ T594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.295911][ T594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.305998][ T594] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.319172][ T594] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.328450][ T594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.337745][ T594] usb 4-1: config 0 descriptor?? [ 110.376309][ T4942] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 110.750915][ T594] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 110.770296][ T594] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 110.770629][ T4946] 9pnet_fd: p9_fd_create_unix (4946): problem connecting socket: ./file0: -111 [ 110.928467][ T36] audit: type=1400 audit(1775785730.042:507): avc: denied { create } for pid=4950 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.951275][ T4953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1445'. [ 110.951271][ T4896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4896 comm=syz.3.1425 [ 110.973392][ T4953] overlayfs: cannot append lower layer [ 110.979483][ T4953] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1445'. [ 111.067715][ T36] audit: type=1400 audit(1775785730.182:508): avc: denied { setattr } for pid=4962 comm="syz.2.1448" path="socket:[21003]" dev="sockfs" ino=21003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.406760][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.415388][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.423800][ C1] plantronics 0003:047F:FFFF.000A: hid_field_extract() called with n (132) > 32! (swapper/1) [ 111.434887][ T4896] tipc: Enabled bearer , priority 0 [ 111.442549][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.451272][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.459930][ T594] usb 4-1: USB disconnect, device number 26 [ 111.466465][ T4896] tipc: Disabling bearer [ 111.654559][ T36] audit: type=1326 audit(1775785730.772:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a5b8eec9 code=0x7fc00000 [ 111.864474][ T4993] 9pnet_fd: Insufficient options for proto=fd [ 112.329313][ T5072] netlink: 'syz.2.1485': attribute type 1 has an invalid length. [ 112.362431][ T5073] rust_binder: got new transaction with bad transaction stack [ 112.362462][ T5073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753 [ 112.639200][ T5085] 9pnet_fd: Insufficient options for proto=fd [ 112.935540][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 113.168774][ T5101] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 113.195498][ T5109] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 113.503746][ T594] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 113.609863][ T5159] tipc: Enabling of bearer rejected, failed to enable media [ 113.622183][ T5159] overlay: Bad value for 'verity' [ 113.653776][ T594] usb 4-1: device descriptor read/64, error -71 [ 113.733596][ T36] audit: type=1400 audit(1775785732.842:510): avc: denied { watch } for pid=5161 comm="syz.0.1516" path="/" dev="ramfs" ino=22178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 113.775460][ T36] audit: type=1400 audit(1775785732.892:511): avc: denied { create } for pid=5168 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.844465][ T36] audit: type=1326 audit(1775785732.962:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 113.867582][ T36] audit: type=1326 audit(1775785732.962:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 113.890679][ T36] audit: type=1326 audit(1775785732.962:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 113.913779][ T36] audit: type=1326 audit(1775785732.962:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 113.913944][ T594] usb 4-1: device descriptor read/64, error -71 [ 113.937150][ T36] audit: type=1326 audit(1775785732.962:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 113.966539][ T36] audit: type=1326 audit(1775785732.962:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 113.989695][ T36] audit: type=1326 audit(1775785732.962:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 114.012794][ T36] audit: type=1326 audit(1775785732.962:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd8eec9 code=0x50000 [ 114.183764][ T594] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 114.313764][ T594] usb 4-1: device descriptor read/64, error -71 [ 114.575027][ T594] usb 4-1: device descriptor read/64, error -71 [ 114.686134][ T5197] tipc: Enabling of bearer rejected, media not registered [ 114.704936][ T594] usb usb4-port1: attempt power cycle [ 114.912208][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 115.053765][ T594] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 115.077123][ T594] usb 4-1: device descriptor read/8, error -71 [ 115.156138][ T5239] /dev/loop0: Can't lookup blockdev [ 115.204749][ T594] usb 4-1: device descriptor read/8, error -71 [ 115.229070][ T5256] overlayfs: failed to clone upperpath [ 115.274853][ T5266] overlayfs: failed to clone upperpath [ 115.443803][ T594] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 115.474855][ T594] usb 4-1: device descriptor read/8, error -71 [ 115.557625][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 115.614839][ T594] usb 4-1: device descriptor read/8, error -71 [ 115.723880][ T594] usb usb4-port1: unable to enumerate USB device [ 116.056118][ T5325] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 116.064085][ T5325] netlink: 'syz.0.1571': attribute type 3 has an invalid length. [ 116.175540][ T5327] netlink: 'syz.0.1571': attribute type 3 has an invalid length. [ 116.178237][ T5326] netlink: 'syz.0.1571': attribute type 3 has an invalid length. [ 116.183326][ T5327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1571'. [ 116.191513][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1571'. [ 116.200054][ T5327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1571'. [ 116.218052][ T5326] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1571'. [ 116.289908][ T5336] bpf: Bad value for 'gid' [ 116.376011][ T5354] netlink: 'syz.1.1582': attribute type 39 has an invalid length. [ 116.613764][ T397] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 116.765407][ T397] usb 4-1: Using ep0 maxpacket: 8 [ 116.771627][ T397] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 114 [ 116.784417][ T397] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 116.793493][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.802013][ T397] usb 4-1: Product: syz [ 116.806691][ T397] usb 4-1: Manufacturer: syz [ 116.811396][ T397] usb 4-1: SerialNumber: syz [ 116.819160][ T5329] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.020235][ T5400] tipc: Enabling of bearer rejected, failed to enable media [ 117.028788][ T5401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.029049][ T5401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764 [ 117.038698][ T397] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 117.229075][ T400] usb 4-1: USB disconnect, device number 31 [ 117.242935][ T400] usblp0: removed [ 117.819099][ T5448] fuse: Unknown parameter 'ÿÿÿÿ0x000000000000000a' [ 118.074490][ T400] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 118.224938][ T400] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.231702][ T400] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 118.240978][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.249924][ T400] usb 4-1: config 0 descriptor?? [ 118.280673][ T5470] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 118.638899][ T5493] overlayfs: failed to clone upperpath [ 118.661762][ T400] kye 0003:0458:501B.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 118.662371][ T5497] overlayfs: failed to resolve './file0': -2 [ 118.680894][ T400] kye 0003:0458:501B.000B: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 118.703782][ T400] kye 0003:0458:501B.000B: tablet-enabling feature report not found [ 118.712110][ T400] kye 0003:0458:501B.000B: tablet enabling failed [ 118.736691][ T5510] overlayfs: failed to clone upperpath [ 118.776256][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 118.776275][ T36] audit: type=1400 audit(1775785737.892:593): avc: denied { map } for pid=5518 comm="syz.0.1636" path="socket:[23624]" dev="sockfs" ino=23624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.805427][ T36] audit: type=1400 audit(1775785737.892:594): avc: denied { accept } for pid=5518 comm="syz.0.1636" path="socket:[23624]" dev="sockfs" ino=23624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.832219][ T5524] tipc: Enabling of bearer rejected, failed to enable media [ 118.864558][ T10] usb 4-1: USB disconnect, device number 32 [ 118.878154][ T36] audit: type=1400 audit(1775785737.992:595): avc: denied { create } for pid=5527 comm="syz.0.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.006938][ T5562] overlayfs: failed to clone upperpath [ 119.383807][ T5602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.383940][ T5602] rust_binder: 774: no such ref 0 [ 119.395512][ T5602] rust_binder: 774: no such ref 2 [ 119.400571][ T5602] rust_binder: inc_ref_done called when no active inc_refs [ 119.653533][ T36] audit: type=1326 audit(1775785738.762:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.1670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc0a58eec9 code=0x0 [ 119.841702][ T36] audit: type=1400 audit(1775785738.952:597): avc: denied { create } for pid=5621 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.862130][ T36] audit: type=1400 audit(1775785738.952:598): avc: denied { write } for pid=5621 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.882460][ T36] audit: type=1400 audit(1775785738.952:599): avc: denied { nlmsg_write } for pid=5621 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.903355][ T36] audit: type=1400 audit(1775785739.002:600): avc: denied { create } for pid=5627 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.227914][ T5634] rust_binder: 777: no such ref 1 [ 120.233901][ T5635] rust_binder: 777: no such ref 1 [ 120.249982][ T36] audit: type=1326 audit(1775785739.362:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.3.1678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89f8d8eec9 code=0x0 [ 120.351694][ T5639] loop0: Can't mount, would change RO state [ 120.358268][ T36] audit: type=1400 audit(1775785739.472:602): avc: denied { write } for pid=5637 comm="syz.3.1678" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.358359][ T5639] deleting an unspecified loop device is not supported. [ 120.391876][ T5639] binder: Binderfs stats mode cannot be changed during a remount [ 120.457414][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 120.650145][ T5665] overlayfs: failed to clone upperpath [ 120.677668][ T5667] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1689'. [ 120.686839][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 121.095674][ T5693] rust_binder: Error while translating object. [ 121.095720][ T5693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.101953][ T5693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:784 [ 121.193375][ T5698] kvm: kvm [5696]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 121.211136][ T5698] kvm: kvm [5696]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 121.221839][ T5698] kvm: kvm [5696]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 121.232692][ T5698] kvm: kvm [5696]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 121.242629][ T5698] kvm: kvm [5696]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 121.260517][ T5698] kvm_intel: kvm [5696]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 121.363448][ T5717] netlink: 'syz.1.1706': attribute type 4 has an invalid length. [ 121.373760][ T5717] netlink: 'syz.1.1706': attribute type 4 has an invalid length. [ 121.442621][ T5741] tmpfs: Invalid uid '0x00000000ffffffff' [ 121.565121][ T5745] netlink: 'syz.2.1715': attribute type 4 has an invalid length. [ 121.572952][ T5745] netlink: 3649 bytes leftover after parsing attributes in process `syz.2.1715'. [ 121.583906][ T5745] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1715'. [ 121.593579][ T5745] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1715'. [ 121.678956][ T5750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'. [ 122.523755][ T397] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 122.673738][ T397] usb 4-1: Using ep0 maxpacket: 16 [ 122.680069][ T397] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.690242][ T397] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.700121][ T397] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.713137][ T397] usb 4-1: config 1 interface 0 has no altsetting 0 [ 122.721330][ T397] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.730435][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.738491][ T397] usb 4-1: Product: syz [ 122.742667][ T397] usb 4-1: Manufacturer: syz [ 122.747290][ T397] usb 4-1: SerialNumber: syz [ 122.954953][ T397] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 123.155604][ T397] usb 4-1: USB disconnect, device number 33 [ 123.358100][ T5764] __vm_enough_memory: pid: 5764, comm: syz.3.1721, bytes: 18014402804453376 not enough memory for the allocation [ 123.372193][ T5763] usblp0: removed [ 124.123759][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 124.273755][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 124.279390][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 124.288581][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 124.296215][ T10] usb 4-1: can't read configurations, error -61 [ 124.423777][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 124.428068][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 124.428092][ T36] audit: type=1400 audit(1775785743.542:607): avc: denied { write } for pid=5770 comm="syz.1.1723" name="/" dev="configfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.459590][ T36] audit: type=1400 audit(1775785743.542:608): avc: denied { add_name } for pid=5770 comm="syz.1.1723" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.487120][ T36] audit: type=1400 audit(1775785743.542:609): avc: denied { create } for pid=5770 comm="syz.1.1723" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 124.593741][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 124.602440][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 124.614078][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 124.627885][ T10] usb 4-1: can't read configurations, error -61 [ 124.641471][ T10] usb usb4-port1: attempt power cycle [ 124.691858][ T5821] 9pnet_fd: Insufficient options for proto=fd [ 124.750462][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 124.870567][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1750'. [ 124.898644][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1753'. [ 124.909161][ T36] audit: type=1400 audit(1775785744.022:610): avc: denied { ioctl } for pid=5860 comm="syz.2.1753" path="socket:[24035]" dev="sockfs" ino=24035 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.993837][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 125.024137][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 125.030258][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 125.039462][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 125.047372][ T10] usb 4-1: can't read configurations, error -61 [ 125.183792][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 125.221848][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 125.230896][ T10] usb 4-1: too many configurations: 152, using maximum allowed: 8 [ 125.252201][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 125.270013][ T10] usb 4-1: can't read configurations, error -61 [ 125.277821][ T10] usb usb4-port1: unable to enumerate USB device [ 125.372400][ T5916] overlayfs: failed to clone lowerpath [ 125.646981][ T5968] fuse: Bad value for 'rootmode' [ 125.658187][ T5968] fuse: Bad value for 'fd' [ 126.579893][ T6042] 9pnet_fd: Insufficient options for proto=fd [ 126.586831][ T6042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.595766][ T6042] overlayfs: missing 'lowerdir' [ 126.872956][ T6057] bpf: Bad value for 'mode' [ 127.015664][ T36] audit: type=1400 audit(1775785746.132:611): avc: denied { bind } for pid=6085 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.064642][ T6094] tipc: Enabling of bearer rejected, failed to enable media [ 127.084484][ T6093] overlayfs: failed to clone upperpath [ 127.117445][ T6090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:826 [ 127.748441][ T6155] tc_dump_action: action bad kind [ 127.810960][ T6161] overlayfs: failed to clone upperpath [ 128.133774][ T65] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 128.283782][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 128.290104][ T65] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 128.298445][ T65] usb 4-1: config 0 has no interface number 0 [ 128.305947][ T65] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 128.316063][ T65] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 128.326301][ T65] usb 4-1: config 0 interface 41 has no altsetting 0 [ 128.334446][ T65] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 128.346167][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.362939][ T65] usb 4-1: Product: syz [ 128.367363][ T65] usb 4-1: Manufacturer: syz [ 128.371981][ T65] usb 4-1: SerialNumber: syz [ 128.380988][ T65] usb 4-1: config 0 descriptor?? [ 128.386553][ T6190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.394038][ T6190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.476288][ T6201] fuse: Unknown parameter 'ÿ0x0000000000000008' [ 128.540938][ T6204] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 128.550054][ T36] audit: type=1400 audit(1775785747.662:612): avc: denied { accept } for pid=6203 comm="syz.2.1869" path=0000214E000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 128.605732][ T6190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.613019][ T6190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.174795][ T36] audit: type=1400 audit(1775785748.292:613): avc: denied { create } for pid=6223 comm="syz.2.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 129.221605][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 129.435561][ T6190] devpts: called with bogus options [ 129.440870][ T36] audit: type=1400 audit(1775785748.552:614): avc: denied { remount } for pid=6189 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.461258][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 129.472221][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 129.482365][ T65] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 129.492476][ T65] usb 4-1: USB disconnect, device number 38 [ 129.979244][ T36] audit: type=1400 audit(1775785749.092:615): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 130.024300][ T6255] veth1: entered allmulticast mode [ 130.085373][ T6255] veth1: left allmulticast mode [ 130.903765][ T10] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 130.913289][ T6322] fuse: Bad value for 'fd' [ 131.074821][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.093764][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 131.112460][ T10] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 131.122005][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.149315][ T10] usb 4-1: config 0 descriptor?? [ 131.163013][ T6309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.171550][ T10] usbhid 4-1:0.0: can't add hid device: -22 [ 131.180453][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 131.442695][ T6348] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 131.465058][ T6348] 9pnet_fd: Insufficient options for proto=fd [ 131.691937][ T6363] netlink: 'syz.1.1920': attribute type 4 has an invalid length. [ 131.741096][ T36] audit: type=1326 audit(1775785750.852:616): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.1922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc0a58eec9 code=0x0 [ 132.273646][ T6376] tipc: Enabling of bearer rejected, failed to enable media [ 132.283203][ T6376] netlink: 'syz.1.1925': attribute type 17 has an invalid length. [ 132.768408][ T6394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1930'. [ 132.768424][ T36] audit: type=1400 audit(1775785751.882:617): avc: denied { nlmsg_read } for pid=6393 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.598296][ T36] audit: type=1400 audit(1775785752.712:618): avc: denied { create } for pid=6420 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.705836][ T65] usb 4-1: USB disconnect, device number 39 [ 133.716391][ T6423] rust_binder: 872: no such ref 3 [ 133.721573][ T6423] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 133.728816][ T6423] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 133.735968][ T6423] rust_binder: Write failure EFAULT in pid:872 [ 133.748513][ T36] audit: type=1400 audit(1775785752.862:619): avc: denied { connect } for pid=6424 comm="syz.3.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.750844][ T6425] rust_binder: Write failure EFAULT in pid:874 [ 133.787521][ T6427] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1944'. [ 133.817279][ T36] audit: type=1400 audit(1775785752.932:620): avc: denied { execute } for pid=6428 comm="syz.3.1945" path="/proc/878/task/879/mountinfo" dev="proc" ino=25534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 133.946907][ T6436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.946935][ T6436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:885 [ 133.979071][ T6444] batadv_slave_0: mtu less than device minimum [ 133.997490][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.179605][ T36] audit: type=1400 audit(1775785753.292:621): avc: denied { execute_no_trans } for pid=6457 comm="syz.2.1954" path="/522/file1" dev="tmpfs" ino=2803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.206784][ T6458] netlink: 'syz.2.1954': attribute type 13 has an invalid length. [ 134.215259][ T6458] 9pnet_fd: p9_fd_create_unix (6458): problem connecting socket: ./file0: -111 [ 135.112040][ T36] audit: type=1326 audit(1775785754.222:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6468 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0a58eec9 code=0x7fc00000 [ 135.334134][ T6504] tipc: Enabling of bearer rejected, failed to enable media [ 136.063743][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.063750][ T473] Bluetooth: hci0: command 0x1003 tx timeout [ 136.141027][ T6511] /dev/loop0: Can't lookup blockdev [ 136.228913][ T6529] netlink: 928 bytes leftover after parsing attributes in process `syz.1.1980'. [ 136.265133][ T6536] overlayfs: failed to clone lowerpath [ 136.272262][ T6536] overlayfs: failed to clone lowerpath [ 136.279965][ T6536] overlayfs: failed to clone lowerpath [ 136.285670][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 136.294658][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 136.294978][ T6536] overlayfs: failed to clone lowerpath [ 136.310602][ T6536] overlayfs: failed to clone lowerpath [ 136.316973][ T6536] overlayfs: failed to clone lowerpath [ 136.323459][ T6536] overlayfs: failed to clone lowerpath [ 136.330232][ T6536] overlayfs: failed to clone lowerpath [ 136.336283][ T6536] overlayfs: failed to clone lowerpath [ 136.342210][ T6536] overlayfs: failed to clone lowerpath [ 136.348051][ T6536] overlayfs: failed to clone lowerpath [ 136.354048][ T6536] overlayfs: failed to clone lowerpath [ 136.359884][ T6536] overlayfs: failed to clone lowerpath [ 136.365830][ T6536] overlayfs: failed to clone lowerpath [ 136.371652][ T6536] overlayfs: failed to clone lowerpath [ 136.377564][ T6536] overlayfs: failed to clone lowerpath [ 136.383478][ T6536] overlayfs: failed to clone lowerpath [ 136.389741][ T6536] overlayfs: failed to clone lowerpath [ 136.395883][ T6536] overlayfs: failed to clone lowerpath [ 136.401687][ T6536] overlayfs: failed to clone lowerpath [ 136.407522][ T6536] overlayfs: failed to clone lowerpath [ 136.413303][ T6536] overlayfs: failed to clone lowerpath [ 136.419173][ T6536] overlayfs: failed to clone lowerpath [ 136.424983][ T6536] overlayfs: failed to clone lowerpath [ 136.430747][ T6536] overlayfs: failed to clone lowerpath [ 136.436589][ T6536] overlayfs: failed to clone lowerpath [ 136.442362][ T6536] overlayfs: failed to clone lowerpath [ 136.448212][ T6536] overlayfs: failed to clone lowerpath [ 136.454047][ T6536] overlayfs: failed to clone lowerpath [ 136.459830][ T6536] overlayfs: failed to clone lowerpath [ 136.465663][ T6536] overlayfs: failed to clone lowerpath [ 136.471450][ T6536] overlayfs: failed to clone lowerpath [ 136.477277][ T6536] overlayfs: failed to clone lowerpath [ 136.483896][ T6536] overlayfs: failed to clone lowerpath [ 136.489645][ T6536] overlayfs: failed to clone lowerpath [ 136.495510][ T6536] overlayfs: failed to clone lowerpath [ 136.501343][ T6536] overlayfs: failed to clone lowerpath [ 136.507203][ T6536] overlayfs: failed to clone lowerpath [ 136.512958][ T6536] overlayfs: failed to clone lowerpath [ 136.518861][ T6536] overlayfs: failed to clone lowerpath [ 136.524643][ T6536] overlayfs: failed to clone lowerpath [ 136.530377][ T6536] overlayfs: failed to clone lowerpath [ 136.536235][ T6536] overlayfs: failed to clone lowerpath [ 136.542262][ T6536] overlayfs: failed to clone lowerpath [ 136.548089][ T6536] overlayfs: failed to clone lowerpath [ 136.553934][ T6536] overlayfs: failed to clone lowerpath [ 136.559713][ T6536] overlayfs: failed to clone lowerpath [ 136.565502][ T6536] overlayfs: failed to clone lowerpath [ 136.571236][ T6536] overlayfs: failed to clone lowerpath [ 136.577099][ T6536] overlayfs: failed to clone lowerpath [ 136.582828][ T6536] overlayfs: failed to clone lowerpath [ 136.588743][ T6536] overlayfs: failed to clone lowerpath [ 136.594643][ T6536] overlayfs: failed to clone lowerpath [ 136.600473][ T6536] overlayfs: failed to clone lowerpath [ 136.606353][ T6536] overlayfs: failed to clone lowerpath [ 136.612206][ T6536] overlayfs: failed to clone lowerpath [ 136.619014][ T6536] overlayfs: failed to clone lowerpath [ 136.626012][ T6536] overlayfs: failed to clone lowerpath [ 136.631991][ T6536] overlayfs: failed to clone lowerpath [ 136.638081][ T6536] overlayfs: failed to clone lowerpath [ 136.647285][ T6536] overlayfs: failed to clone lowerpath [ 136.653136][ T6536] overlayfs: failed to clone lowerpath [ 136.659531][ T6536] overlayfs: failed to clone lowerpath [ 136.665350][ T6536] overlayfs: failed to clone lowerpath [ 136.671092][ T6536] overlayfs: failed to clone lowerpath [ 136.688425][ T6550] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1989'. [ 136.697927][ T36] audit: type=1400 audit(1775785755.812:623): avc: denied { setopt } for pid=6549 comm="syz.2.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.984965][ T6560] veth1_macvtap: left promiscuous mode [ 136.990468][ T6560] macsec0: entered promiscuous mode [ 137.317041][ T6593] rust_binder: 902: no such ref 0 [ 137.650843][ T6599] /dev/rnullb0: Can't lookup blockdev [ 138.180889][ T6644] 9pnet_fd: Insufficient options for proto=fd [ 138.409770][ T6652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6652 comm=syz.0.2023 [ 138.577430][ T6655] rust_binder: Error while translating object. [ 138.577470][ T6655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 138.583830][ T6655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:917 [ 138.773892][ T6662] rust_binder: 924: no such ref 3 [ 138.800241][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'. [ 138.809889][ T6664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:926 [ 138.886199][ T6666] SELinux: security_context_str_to_sid () failed with errno=-22 [ 138.914966][ T6668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 138.914990][ T6668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:930 [ 138.961591][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 139.101229][ T6691] overlayfs: failed to clone upperpath [ 139.160361][ T36] audit: type=1326 audit(2000000000.340:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.2041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff38cd8eec9 code=0x0 [ 139.187649][ T6693] rust_binder: Write failure EFAULT in pid:940 [ 139.280743][ T6719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:944 [ 139.288254][ T6720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.312219][ T6724] rust_binder: 949: no such ref 0 [ 139.348079][ T6727] SELinux: policydb magic number 0x20766264 does not match expected magic number 0xf97cff8c [ 139.359111][ T6727] SELinux: failed to load policy [ 139.499036][ T6734] ------------[ cut here ]------------ [ 139.504591][ T6734] WARNING: CPU: 1 PID: 6734 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 139.514043][ T6734] Modules linked in: [ 139.517954][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.2.2050 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 139.529536][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.539649][ T6734] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 139.545655][ T6734] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 24 ee 05 00 0f 85 be 00 00 00 c6 05 25 24 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 139.565420][ T6734] RSP: 0018:ffffc9000fcef880 EFLAGS: 00010246 [ 139.571519][ T6734] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 139.579550][ T6734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fcef938 [ 139.587565][ T6734] RBP: ffffc9000fcef9a8 R08: ffffc9000fcef937 R09: 0000000000000000 [ 139.595595][ T6734] R10: ffffc9000fcef920 R11: fffff52001f9df27 R12: ffffc9000fcef8c0 [ 139.603598][ T6734] R13: dffffc0000000000 R14: 1ffff92001f9df14 R15: 0000000000000000 [ 139.611625][ T6734] FS: 00007efc0b4d36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 139.613736][ T397] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 139.620603][ T6734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.620628][ T6734] CR2: 0000200000001000 CR3: 00000001193e8000 CR4: 00000000003526b0 [ 139.642863][ T6734] Call Trace: [ 139.646228][ T6734] [ 139.649179][ T6734] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.655315][ T6734] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 139.661073][ T6734] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 139.666790][ T6734] ___kmalloc_large_node+0x81/0x220 [ 139.672021][ T6734] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 139.677710][ T6734] __kmalloc_large_node_noprof+0x1e/0xe0 [ 139.683364][ T6734] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 139.689051][ T6734] __kmalloc_noprof+0x26d/0x450 [ 139.693961][ T6734] incfs_realloc_mount_info+0xa7/0x4d0 [ 139.699456][ T6734] ? incfs_add_sysfs_node+0x118/0x240 [ 139.704903][ T6734] incfs_alloc_mount_info+0x479/0x600 [ 139.710300][ T6734] incfs_mount_fs+0x3ca/0x960 [ 139.715049][ T6734] ? __cfi_incfs_mount_fs+0x10/0x10 [ 139.720287][ T6734] ? vfs_parse_fs_string+0x102/0x170 [ 139.725653][ T6734] ? selinux_capable+0x38/0x50 [ 139.730457][ T6734] legacy_get_tree+0x106/0x1b0 [ 139.735289][ T6734] ? __cfi_incfs_mount_fs+0x10/0x10 [ 139.740529][ T6734] vfs_get_tree+0x9e/0x290 [ 139.745181][ T6734] do_new_mount+0x251/0xb40 [ 139.749731][ T6734] ? security_capable+0xcf/0xf0 [ 139.754747][ T6734] path_mount+0x688/0x1050 [ 139.759209][ T6734] ? putname+0x113/0x150 [ 139.763475][ T6734] __se_sys_mount+0x2bd/0x480 [ 139.768216][ T6734] ? __x64_sys_mount+0xf0/0xf0 [ 139.773004][ T6734] ? __kasan_check_write+0x18/0x20 [ 139.778184][ T6734] ? fpregs_restore_userregs+0x11d/0x260 [ 139.783868][ T6734] __x64_sys_mount+0xc3/0xf0 [ 139.786293][ T397] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 139.788482][ T6734] x64_sys_call+0x2021/0x2ee0 [ 139.801288][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.802235][ T6734] do_syscall_64+0x58/0xf0 [ 139.814740][ T6734] ? clear_bhb_loop+0x50/0xa0 [ 139.819458][ T6734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.820547][ T397] usb 4-1: Product: syz [ 139.825417][ T6734] RIP: 0033:0x7efc0a58eec9 [ 139.834028][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.835074][ T397] usb 4-1: Manufacturer: syz [ 139.853698][ T6734] RSP: 002b:00007efc0b4d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.853733][ T6734] RAX: ffffffffffffffda RBX: 00007efc0a7e6090 RCX: 00007efc0a58eec9 [ 139.853752][ T6734] RDX: 0000200000000440 RSI: 0000200000000380 RDI: 0000200000000240 [ 139.853769][ T6734] RBP: 00007efc0a611f91 R08: 0000200000000480 R09: 0000000000000000 [ 139.878793][ T397] usb 4-1: SerialNumber: syz [ 139.882775][ T6734] R10: 0000000000200402 R11: 0000000000000246 R12: 0000000000000000 [ 139.882797][ T6734] R13: 00007efc0a7e6128 R14: 00007efc0a7e6090 R15: 00007ffe0c868838 [ 139.882822][ T6734] [ 139.914466][ T6734] ---[ end trace 0000000000000000 ]--- [ 139.921061][ T6734] incfs: Error allocating mount info. -12 [ 139.926894][ T6734] incfs: mount failed -12 [ 140.127970][ T397] usb 4-1: USB disconnect, device number 40