last executing test programs: 28.7748611s ago: executing program 1 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc) (async) rt_tgsigqueueinfo(r2, r2, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = eventfd(0x390) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x1000, 0x4, 0x0, r5, 0xf}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000001900)="900000001c001f4d154a817393278bff0a80a578020000000304840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2a724d6e7d8f2bb079fc14cfc33ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x8090, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r8 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={0x400, 0x2, 0x1}, 0x18) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x22, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000000c0)) 28.76690983s ago: executing program 1 (id=276): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, 0x0) syslog(0x2, &(0x7f0000000000)=""/41, 0x29) socket$igmp6(0xa, 0x3, 0x87) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x880) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x30}}, 0x0) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='\x16([%\x8e\x00\x106\xcd\xe7|\x94\x01bW\xe4\n\xea\x01\x8b\x86-\xa6\x15]\xec\x8bT\x1c\xe84\xb9\xa7&Q\xf6eC/\"\xd6\xa2\xd5\xcd\x9a\xa0\x80\xa0\fW\xb7\xf8\x95:\x91Q^\x9e\x8f\x0f\xf0RE~QT\x95\xcf@\x88', &(0x7f0000000180)='\x11\x84\xf2L%\xcf\x8b\x93\xfd2\xd5J\xaa\xaa3\x1c\x1b\x8d\x11\x87\x16A\x12_>\xa9\xa7Yt`K\xe7\x8e\x0e\xde\x1a%LSY\xc25,\x90\x88hT\xd7E\xc4\xcc\xbbh\x81\x9by&\xd9h\x98Gf\t\x90d\xca\xa3\x973]!G\x06\xea\xa8\x83\"l', 0x0) syslog(0x2, &(0x7f0000000140)=""/243, 0xf3) syz_open_procfs(r1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000240), 0x10) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 28.21458243s ago: executing program 1 (id=286): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800) fspick(0xffffffffffffffff, 0x0, 0xccdd3aaf1369b769) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/221, 0xdd, 0x1, 0x15}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x7b, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000680)={0xb3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "c1ea51a5000aea"}) open$dir(&(0x7f0000000100)='./file0\x00', 0x204000, 0x90) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{r3, 0x1, 0x9, 0x4, 0xc2a2, 0x9, 0x401, 0xa, 0xa, 0x4c, 0xe0000, 0x8, 0x2, 0x63d45f49}, 0x10, [0x0, 0x0]}) 28.071177003s ago: executing program 1 (id=289): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffa544, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000004c0)='.pending_reads\x00', 0x0, 0x26) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000203010200000000000000000000000009000200000000010000000008000340000000070800010001"], 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000303010300000000000000000a000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x200000c4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{@none}, {@fixed}, {@none}, {}, {}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x388) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x6, 0x6, 0x8, 0xffffffffffffffcc, 0x7fc00000000000, r4}) ptrace$ARCH_GET_FS(0x1e, r5, &(0x7f00000000c0), 0x1003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) r7 = openat$rtc(0xffffff9c, &(0x7f0000000500), 0x30200, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e63000/0x1000)=nil, 0x1000}, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) readv(r7, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/133, 0x85}, {&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000800)=""/171, 0xab}], 0x4) close_range(r7, r2, 0x0) 28.063030053s ago: executing program 1 (id=290): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x1, 0x14040804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000001ac1e000100000000000000000000000000000000fffc00000200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000003c000000ac1e0001000000000000000000000000fdffffffffffffff0000000000000000000000000076eb129d2bbdb12c0000000800000000000000000000000000000000004000000000000000000000000000010000000000000000000000000000000200000000000000feffffffffffffff0000000000000000000000080000000000000000020000000000000000000000480002"], 0x140}, 0x1, 0x0, 0x0, 0x4c080}, 0x4048844) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000100)={0x2f, 0x1}) socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 27.971293245s ago: executing program 1 (id=292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0xff, 0x4, 0x5, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x870a}, {r1, 0xa21c}], 0x2, 0x0, 0x0, 0x45) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fchmod(r2, 0x20049549e2a2d659) write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) r3 = signalfd(r1, &(0x7f0000000180)={[0x4]}, 0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x3, 0x0, &(0x7f00000001c0)=""/253, &(0x7f00000002c0)=""/202, &(0x7f00000003c0)=""/130, 0x2000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 27.970190455s ago: executing program 32 (id=292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0xff, 0x4, 0x5, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x870a}, {r1, 0xa21c}], 0x2, 0x0, 0x0, 0x45) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fchmod(r2, 0x20049549e2a2d659) write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) r3 = signalfd(r1, &(0x7f0000000180)={[0x4]}, 0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x3, 0x0, &(0x7f00000001c0)=""/253, &(0x7f00000002c0)=""/202, &(0x7f00000003c0)=""/130, 0x2000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 8.650730157s ago: executing program 0 (id=524): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x58, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x44040) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081008418e00000004fcff", 0x58}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x301, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) unshare(0x62040200) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x58, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x44040) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081008418e00000004fcff", 0x58}], 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x301, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 8.621711588s ago: executing program 0 (id=525): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x161200, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000823bba2fe0a00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200000b0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x41) mkdir(&(0x7f0000000440)='./file1\x00', 0x149) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x91, 0x1}, {0x5, 0xe}, 0x5, 0x1}) 8.56306468s ago: executing program 0 (id=526): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58c6932607ff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4120040, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x0) r5 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000380)=ANY=[@ANYRES16=r3], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x6, @string={0x6, 0x3, "244602dd"}}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x440000, 0x0) fcntl$lock(r7, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff, 0x4}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_procfs(r3, &(0x7f0000000200)='net/ip6_mr_vif\x00') write$P9_RVERSION(r8, 0x0, 0x0) syz_io_uring_setup(0x4f39, &(0x7f0000000040)={0x0, 0xa523, 0x800, 0x2, 0x182, 0x0, r8}, &(0x7f0000000140), &(0x7f00000001c0)) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x1, {0xa, 0x4e24, 0x7, @private2, 0xf}}}, 0x3a) r10 = getpid() sched_rr_get_interval(r10, &(0x7f0000000000)) 5.551067246s ago: executing program 0 (id=577): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0xa8}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x5) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000380)={0x2, 0x0, [{0x1, 0x50, 0xb, 0x6, 0x33, 0x2, 0x2}, {0xc0000001, 0xb, 0x1, 0x4, 0x0, 0xfffffbff, 0x5}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r5, &(0x7f0000000400)="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", 0x1f000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$AUDIT_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfe, "", ["", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x44844) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 5.423153458s ago: executing program 0 (id=578): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000005c0)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x6c, 0x0, &(0x7f0000000400)=[@decrefs, @acquire, @clear_death, @increfs={0x40046304, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0xc}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/215, 0xd7, 0x0, 0x7}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x81}, 0x8) 5.375486729s ago: executing program 0 (id=579): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x161200, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xffffffffffffff44, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="7131beb8e2bd42f2"], 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200000b0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x91, 0x80000001}, {0x5, 0xe}, 0x5, 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xffffffff00000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 5.34161113s ago: executing program 33 (id=579): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x161200, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xffffffffffffff44, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="7131beb8e2bd42f2"], 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200000b0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x91, 0x80000001}, {0x5, 0xe}, 0x5, 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xffffffff00000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 4.750941801s ago: executing program 5 (id=597): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x0, 0x0, 0xfe8c}, 0x2a, [0x3e, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x4, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x7, 0x0, 0x0, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7fe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0xc, 0x0, 0x0, 0xac5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x3b6, 0x0, 0xfffffffe, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffff, 0x0, 0x68, 0x1, 0x4, 0x0, 0x0, 0x1e9, 0xfffffffd, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xba1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x10000, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x2172, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$binder(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000001280)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x5, 0x7, {{0x54, 0x4, 0x0, 0x15, 0x150, 0x68, 0x0, 0xd1, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x20, 0x78, 0x0, 0x0, [0x9, 0x1ff, 0x5, 0x9, 0xb1c8215, 0x4, 0x5]}, @rr={0x7, 0xf, 0xc6, [@loopback, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101]}, @end, @timestamp={0x44, 0x8, 0xa4, 0x0, 0x2, [0x1]}, @rr={0x7, 0xf, 0xba, [@dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @empty]}, @cipso={0x86, 0x49, 0x3, [{0x6, 0xb, "53957457774772628b"}, {0x1, 0xe, "16a7abae5768897dda749651"}, {0x2, 0x12, "d2ec99fb7a7edb163c57a6337663f299"}, {0x1, 0x9, "984e6c9e046d65"}, {0x0, 0xc, "67d558d0ebc77b26239a"}, {0x7, 0x3, "d4"}]}, @noop, @noop, @timestamp_prespec={0x44, 0x24, 0x12, 0x3, 0xb, [{@multicast2, 0x5}, {@private=0xa010102, 0x4}, {@multicast2, 0x4}, {@broadcast, 0x7}]}, @cipso={0x86, 0x85, 0x0, [{0x6, 0x12, "5fd0023edcfe228d8552708cfa6e3bb6"}, {0x6, 0xb, "a43243e620ea82be66"}, {0x5, 0xc, "b3e0493c52e61e1e7749"}, {0x6, 0xb, "5bb32af3b852263408"}, {0x2, 0xf, "5e407f397bbcf5990ee11e8a68"}, {0x7, 0x11, "acf235126572a53f8a01f7d1f540c8"}, {0x4, 0x10, "ad06184ce28b26abc71fa92dae9d"}, {0x7, 0xd, "e9e8741522b4269f73795b"}, {0x2, 0xe, "e3b28be5e6e92275217dd619"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70bd28, 0xfffffffe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40000c0) r6 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2081dc320000d6"], 0x0, 0x0, 0x0, 0x0}) shutdown(r1, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="59a9ffffb89e96a8"], 0x0, 0x0}) r7 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201200001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000d80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000f40)={0xc4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}}, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4008af25, &(0x7f0000000000)) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x64a99b4a8d8305e2, 0xf1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x7, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x39, 0x0, 0x1c}}]}}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x7, 0x2, 0xd, 0x8, 0x4}, 0x72, &(0x7f0000000280)={0x5, 0xf, 0x72, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x4, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d27432db6c6c37291f2a373744676594"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "1eb0cce25737a7da4f8ba5c3f4223624"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7fffffa, 0xf00, 0x5, [0xc140]}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4741, 0x0, 0x5, [0x0, 0xc0, 0xfffff0, 0xf, 0xc000, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x7, 0x2}]}, 0x7, [{0x15, &(0x7f00000003c0)=@string={0x15, 0x3, "fe0e2c3f5260636e029ee945be271589aa6384"}}, {0xf6, &(0x7f0000000500)=@string={0xf6, 0x3, "fb196bf6ad2cd3490a5ea1a97b52fc5f6e5dac524f32ef3e387c6e5e25abc4fef60af6887beef35f779f066518dcc4c12a0f8e59013dc6f3044fd80703aa223acb8eef80954a388da1fb574dec1836ac7b2283055c75e7d039e352071bb48a13a97efbaf0d31ea23bfe74b28ec515012393a2e5243358fd8a97750b7561bc2a7d020ac0a28ef6621db8e4a8289fce0357135d9ca87f4d09ad0d20f352e1d36be3405ff3fc2ce853284fae9785ef835668112d9d6b054b094bd9c1b38b0acc0d599285e22e0205d31de5743566ecbcf3b018a8e5c5a7b9c8622956665010ca230e477e5d4ffdd68d1d5991dd441db70f17f96463c"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4}}, {0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1003f9ffffffc141489b057f231b1c52"]}, {0xb8, &(0x7f0000000e00)=@string={0xb8, 0x3, "bf0110756d660f548ae585c3a768a95cbf30ade9f2f75540926624b8514aa94f0d6f74b43fc92e2b2b0ef7824d5347c061fef82a62aac50a10323f4d16a65f126eed4e16431ca981ce0560fa28c9f0418a75a69611a1ee289f0a1c917badb0aa8ac8dd5ecf109db08b334200202e137feac347d2ccf07c3668877f559939bbd74f9120a2bb539257cbbb64cdbb02bb74d8f4a58f3226c0b3166742d26fac360163a709e88fccf92c8d0669d5a06fe2f72035f385a7a4"}}, {0x9a, &(0x7f00000011c0)=@string={0x9a, 0x3, "8914ef4677738ed170dc1da357d5a3ed7634ccfdd602d39cc2a8175d2fe8c1052a4648ef249586994f6fd000c1edc8accef34e2077c459f7f7b33ec6ad60e1cf32b280bda5a4d6d365ae90469435d2a158208a2882efc32be09d518c7117f56a5bb6f454126bec5be6bc206e5a4eaccdad2173286981137b61c2a242b703d6e9b0e2b3b99b2114b0c2a0895b0eafdc5b4f2bb84a78babb1b"}}, {0x76, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7603651c85fc0254a3b580eee06b4c586ffabc0d99af74a93a09188994ef9d0d10dfd72cb2c55ebb1e6aa7907cd5caf390fca7345e2f1fbee855f7886a7491fdceb0529b8df06dbc6b1e0adb9902ec8b4901670c1ee3231eec62bf2fa852ec14c65e6b481180c0222d26a784c7f5fd62c99b61a62832"]}]}) syz_usb_connect$uac1(0x5, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xe09e2e91bf793d5c, 0x4b, {0x4b, 0x2, "9ae985953943017e47d177daf70a88495d65cb7035c6fcb73a25800620ba1ed85c66580b0778c147df0874f666d4c1f96a6db5ef4f84dbe3f02a0d94632df9e5554335e4083914f6cf"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x8, "facd40e8b78666fb"}, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000080)=ANY=[@ANYBLOB="200004000000000004008f2023cdeeff7436ba1d71122a963cdb4e3e77fd04be31514653d4bea64460cbc415038a7a98c4477e9e7f147c006445d59acba32a8be4c9a1b77526227a0a799e28"], &(0x7f0000000780)={0x40, 0x7, 0x2, 0xd07b}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "9bbc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xc}, 0x0}) 4.512228326s ago: executing program 4 (id=599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3004}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0x70}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x801, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r5, 0xa, 0x1c) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)={[{0x0, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2d, 'blkio'}]}, 0x33) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {r7, r8+10000000}}, &(0x7f00000004c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 4.010784905s ago: executing program 4 (id=605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3.928642266s ago: executing program 4 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) (async) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) (async) write(r2, &(0x7f0000000400)="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", 0x1f000) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/9, 0x9}}, {{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/24, 0x18}], 0x1, &(0x7f0000000440)}, 0x4}, {{&(0x7f0000000500)=@in6, 0x80, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/229, 0xe5}, {&(0x7f0000000580)=""/36, 0x24}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/19, 0x13}], 0x4, &(0x7f0000000740)}, 0x5}, {{&(0x7f0000000100)=@xdp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000640)=""/156, 0x9c}], 0x3, &(0x7f0000000b40)=""/212, 0xd4}, 0x8}], 0x4, 0x40000000, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) (async) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e8006000340000300000c000280050001009300ffff1400018008000100ac1414bb0800020064010102"], 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f00000000c0)={0x7, 0x20}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r6, &(0x7f0000000580), 0x1, 0x400009, 0x9, 0x4) 3.593941753s ago: executing program 4 (id=617): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r1 = epoll_create1(0x80000) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/97, 0x61) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x800) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002d80)=""/254, 0xfe}, {&(0x7f00000004c0)=""/128, 0x80}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r6, r9, 0x0) unshare(0x2020800) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x9, 0x2d, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005a000101000000000000000004000080080002"], 0x1c}], 0x1}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x6) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x240000, 0x1) 3.091458182s ago: executing program 3 (id=622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x2000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r3, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8000}) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)="fdf34bebb7519e0b81dc3fcd9db8b3df4b3d1aba23eb40c131f54f3c2490d955ea6bf2c4f9e273d3cec0d9802a3fab75152c890a7d04", 0x36, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.963900794s ago: executing program 3 (id=624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x78865af6, &(0x7f0000000e80)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000540)="381b0b28cd3f5b150245525385296417a8e3ada7554d3381ae5f44727b637520a74aa3f28c8976ed95f54b308851de225fe21760ed78a654291a0a078611497e0feeb3bd06ba74ef0f3def486f2af4906b99cb253b8be0c521ea2cb4c70e10060bab0f06fd887b8adffd651fda6a5b6422ffdc15a000a25bf26dbdb1e2d029d166e8cc392f0e5e442af6d611ef5f0ad8141a", 0x92}], 0x1, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1], 0x164}}, 0x40014) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000500)={0x7, 0x1, "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"}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x40000000004, 0x8002}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) recvmmsg$unix(r6, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000640)=""/66, 0x42}, {&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000740)=""/94, 0x5e}], 0x4, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000940)=""/71, 0x47}, {&(0x7f00000009c0)=""/97, 0x61}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000a40)=""/80, 0x50}], 0x5, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/75, 0x4b}, {&(0x7f0000000c80)=""/192, 0xc0}, {&(0x7f00000025c0)=""/189, 0xbd}, {&(0x7f0000000e00)=""/225, 0xe1}], 0x4, &(0x7f0000000f40)}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000fc0)=""/168, 0xa8}, {&(0x7f0000001080)=""/49, 0x31}, {&(0x7f00000004c0)=""/25, 0x19}, {&(0x7f0000001100)=""/4, 0x4}, {&(0x7f0000001140)=""/157, 0x9d}, {&(0x7f0000001200)=""/25, 0x19}, {&(0x7f000001b700)=""/4096, 0x1000}, {&(0x7f0000001400)=""/201, 0xc9}, {&(0x7f0000001300)=""/10, 0xa}], 0x9, &(0x7f0000002480)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}], 0x4, 0x18ca22a2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.962730784s ago: executing program 5 (id=626): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x23, 0x10, {0x10, 0x9, "159279879be85fdac91b338803bc"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfffffffffffffee2, @string={0x33, 0x3, "624b05888c69934fcafeb37de79b3a76af8f7986f8dd01e695cacb7d06ecdef6e6a60dc9a2819b16cee887b39ff1086ac3"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0xb, '*w'}, @global=@item_012={0x1, 0x1, 0xa, "d2"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_4={0x3, 0x2, 0x1, "fd2b1bf2"}, @local=@item_012={0x2, 0x2, 0x1, "28b2"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8be4, 0xf, 0x1, {0x22, 0x2b0}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0xc, 0xd4, "3cbec51641cde885cf7ff096882e693d3139ea2f96d37e2ff146846e0b33dfccfe09da26a3c8deec256ad5fb79f90adab1ec82948cc437069526ec26bab976147f069f3b4c1b5b7373ee380eaf0750f80848d1b1fa74482329acf4930d2a2bd5a0762560c474bd68bc1ad15e84e375728bfc21095c9ad53dc0ea5f5549d1f2f2a8f542f99c405f898d08cea2cb07ad86d5b1b4e4ba85d903201b1f30fdd8dc04f71986e6f0433a7fc1011f88089adfbfda37646232f3e5eba16aa6e3638fd41f5c2a22857963cbfa46c3935ce1c6d96938b4f28d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x98}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x1, 0xb6, "f98dc7aa6d5c1628983f10e80f8ebcb65a43002131164d7fd5b52a4eb5b536a1d7d187eaeadb6683f7ac5095980517e756d0f847f65168a9cbe3d6fd1b86be4dec6749f70dd8576484fbaf51eed739d4703dc13ff921898e55e5bb5e91b890cff3a143d3a725198a937648e0d5e878f789a85d34e27dccb5649f3786c2a47126763e8fd92e6eaed3cfa151d87d34b5b7be4ccff87378394dde01a7c34c47c9239e62585582b360b8118f568796f9507cd1a7da399ae3"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}}) 2.755883758s ago: executing program 4 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000002c0)=@chain) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x10000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x30cd5dd677c1f68a, 0x190b3002, 0xd, 0x9, 0x8, 0xff, 0x6, 0x8, 0x5, 0x1, 0x1, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xd000, 0x2000, 0x8, 0xfc, 0x3, 0xf, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x1000, 0x10000, 0xe, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x5, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x8, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xdddd0000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x8001, 0x7, 0x13feb284]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.650865071s ago: executing program 4 (id=628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r5}, 0xf, 0x1, 0xff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.409884163s ago: executing program 5 (id=639): getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) setregid(0xffffffffffffffff, r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000001f00)=""/50, 0x32}], 0x1) clock_gettime(0x766293fdc5a3d1bd, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000006) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x84, 0x100000, 0x9, 0x2004c8, 0x8000000, 0x0, 0xfffffffffffffffb, 0x7, 0x0, 0x5, 0x20000000d51, 0x2, 0xffffffffffffffff], 0xdddd1000, 0x84a92}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x100000000000006, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x80000005, 0x4) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, 0x0) 1.327882225s ago: executing program 5 (id=641): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = timerfd_create(0x1, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x2201}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1.263797396s ago: executing program 5 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8048, &(0x7f00000002c0)=ANY=[]) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0xf000, 0xffff1000, 0x9, 0x0, 0x5ef}) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3", 0x5}], 0x1}}], 0x1, 0x8800) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 1.163210608s ago: executing program 5 (id=643): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x100}, 0x8, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x1000ffec, [0x5, 0xffffffff], 0x5}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) ppoll(&(0x7f0000000100)=[{r2, 0x31}], 0x1, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 587.114169ms ago: executing program 2 (id=651): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x41, 0x0, @multicast2}, 0x20020003, 0x0, 0x1}}, 0x2e) (async) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x4000001, 0x0, 0x4, 0x0, "0022ffffffffffffffffeb2bda00df00000080"}) (async) r2 = syz_open_pts(r0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x8) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 570.648029ms ago: executing program 2 (id=652): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r3, 0x121, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x20048858) 551.60159ms ago: executing program 2 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 495.13378ms ago: executing program 2 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103603, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="66b9200001c00f01cb4f3066b9800000c00f326635008000000f300f01442e363e0f01ca0fbb9d0e0066b9820000c00f324466350d000000440f02c03e3e0f01c4c1ef00", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 495.02276ms ago: executing program 2 (id=655): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab050103000101020301090224000100"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 75.078699ms ago: executing program 3 (id=656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=@acquire={0x134, 0x17, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in=@private=0xa010100, 0x4d3, 0xda}, @in=@rand_addr=0x64010101, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010100, 0x4e20, 0x4, 0x4e20, 0x3, 0x2, 0x20, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {{@in6=@mcast1, @in=@local, 0x4e64, 0x3, 0x4e20, 0x8, 0xa, 0x20, 0x0, 0x3c}, {0x9, 0x1, 0x0, 0x1b6, 0x3, 0x1, 0x8, 0xf2a}, {0x7, 0x7ff, 0x1, 0x6}, 0x3, 0x6e6bb0, 0x0, 0x1, 0x2, 0x2}, 0x4007, 0x3, 0x3, 0x70bd2d}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x4}}]}, 0x134}}, 0x0) 64.785309ms ago: executing program 3 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xb2, 0x4) 11.19794ms ago: executing program 3 (id=658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000640)='cubic', 0x3) 11.11662ms ago: executing program 3 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000500), 0xc802, &(0x7f00000001c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffff}}]}) 0s ago: executing program 2 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000700)={0x2, 0x0, [{0x40000095, 0x0, 0x9}, {0xa9c, 0x0, 0x800}]}) kernel console output (not intermixed with test programs): [ 7.211348][ T36] audit: type=1400 audit(1758541415.040:58): avc: denied { read } for pid=201 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 17.718335][ T36] audit: type=1400 audit(1758541425.560:59): avc: denied { transition } for pid=231 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.722056][ T36] audit: type=1400 audit(1758541425.560:60): avc: denied { noatsecure } for pid=231 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.725204][ T36] audit: type=1400 audit(1758541425.570:61): avc: denied { write } for pid=231 comm="sh" path="pipe:[2302]" dev="pipefs" ino=2302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.728806][ T36] audit: type=1400 audit(1758541425.570:62): avc: denied { rlimitinh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.731947][ T36] audit: type=1400 audit(1758541425.570:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.203' (ED25519) to the list of known hosts. [ 25.188783][ T36] audit: type=1400 audit(1758541433.030:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.189949][ T281] cgroup: Unknown subsys name 'net' [ 25.211836][ T36] audit: type=1400 audit(1758541433.030:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.239177][ T36] audit: type=1400 audit(1758541433.060:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.239356][ T281] cgroup: Unknown subsys name 'devices' [ 25.442924][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.449036][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.621869][ T36] audit: type=1400 audit(1758541433.470:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.645083][ T36] audit: type=1400 audit(1758541433.470:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.669883][ T36] audit: type=1400 audit(1758541433.470:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.678701][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.701839][ T36] audit: type=1400 audit(1758541433.550:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.727331][ T36] audit: type=1400 audit(1758541433.550:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.761785][ T36] audit: type=1400 audit(1758541433.610:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.787435][ T36] audit: type=1400 audit(1758541433.610:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.787472][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.562739][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.569813][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.577219][ T288] bridge_slave_0: entered allmulticast mode [ 26.583616][ T288] bridge_slave_0: entered promiscuous mode [ 26.599261][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.606411][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.613564][ T288] bridge_slave_1: entered allmulticast mode [ 26.619953][ T288] bridge_slave_1: entered promiscuous mode [ 26.714765][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.722131][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.729194][ T291] bridge_slave_0: entered allmulticast mode [ 26.735566][ T291] bridge_slave_0: entered promiscuous mode [ 26.752787][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.759841][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.767055][ T291] bridge_slave_1: entered allmulticast mode [ 26.773360][ T291] bridge_slave_1: entered promiscuous mode [ 26.812471][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.819697][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.827172][ T294] bridge_slave_0: entered allmulticast mode [ 26.833414][ T294] bridge_slave_0: entered promiscuous mode [ 26.848228][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.855309][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.862530][ T294] bridge_slave_1: entered allmulticast mode [ 26.868867][ T294] bridge_slave_1: entered promiscuous mode [ 26.882474][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.889539][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.896752][ T293] bridge_slave_0: entered allmulticast mode [ 26.903065][ T293] bridge_slave_0: entered promiscuous mode [ 26.918550][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.925632][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.932775][ T293] bridge_slave_1: entered allmulticast mode [ 26.939066][ T293] bridge_slave_1: entered promiscuous mode [ 27.017348][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.024468][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.031803][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.039005][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.109894][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.116994][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.124314][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.131370][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.154698][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.161868][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.169156][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.176363][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.188849][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.195938][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.203520][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.210549][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.230019][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.237386][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.245328][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.252826][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.260006][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.267751][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.274985][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.282371][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.296436][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.303526][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.322068][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.329323][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.345580][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.352956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.362459][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.369522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.408775][ T288] veth0_vlan: entered promiscuous mode [ 27.423114][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.430233][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.438100][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.445165][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.461103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.468378][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.476378][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.483432][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.515761][ T293] veth0_vlan: entered promiscuous mode [ 27.533057][ T288] veth1_macvtap: entered promiscuous mode [ 27.541312][ T291] veth0_vlan: entered promiscuous mode [ 27.555191][ T293] veth1_macvtap: entered promiscuous mode [ 27.589600][ T294] veth0_vlan: entered promiscuous mode [ 27.600583][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.603295][ T291] veth1_macvtap: entered promiscuous mode [ 27.651473][ T294] veth1_macvtap: entered promiscuous mode [ 27.733064][ T345] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.758891][ T348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.785753][ T345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 27.797961][ T345] bridge_slave_1: left allmulticast mode [ 27.804009][ T345] bridge_slave_1: left promiscuous mode [ 27.805932][ T360] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.809844][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.836846][ T345] bridge_slave_0: left allmulticast mode [ 27.843897][ T345] bridge_slave_0: left promiscuous mode [ 27.865533][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.951954][ T360] tipc: Enabling of bearer rejected, failed to enable media [ 28.084780][ T377] netlink: 165 bytes leftover after parsing attributes in process `syz.2.14'. [ 28.095544][ T377] 9pnet_fd: Insufficient options for proto=fd [ 28.136419][ T379] __vm_enough_memory: pid: 379, comm: syz.2.15, bytes: 18014402804453376 not enough memory for the allocation [ 28.197989][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.209466][ T397] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 28.209496][ T397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 28.209596][ T398] rust_binder: Error while translating object. [ 28.218126][ T397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:23 [ 28.228578][ T398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.240791][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 28.243464][ T398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:23 [ 28.402510][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.422637][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 28.433711][ T10] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 28.442802][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.452395][ T10] usb 1-1: config 0 descriptor?? [ 28.457632][ T373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.510762][ T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.547065][ T403] tipc: Started in network mode [ 28.552485][ T403] tipc: Node identity de64adeb129, cluster identity 4711 [ 28.559714][ T403] tipc: Enabled bearer , priority 0 [ 28.567103][ T46] tipc: Resetting bearer [ 28.573519][ T402] tipc: Resetting bearer [ 28.586152][ T402] tipc: Disabling bearer [ 28.662037][ T330] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 28.673511][ T373] ======================================================= [ 28.673511][ T373] WARNING: The mand mount option has been deprecated and [ 28.673511][ T373] and is ignored by this kernel. Remove the mand [ 28.673511][ T373] option from the mount to silence this warning. [ 28.673511][ T373] ======================================================= [ 28.673635][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.708824][ T373] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 28.724338][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.740746][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 28.754841][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 28.763464][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 28.779384][ T10] usb 1-1: USB disconnect, device number 2 [ 28.787777][ T330] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 28.796969][ T330] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 28.805193][ T330] usb 4-1: Manufacturer: syz [ 28.810604][ T330] usb 4-1: config 0 descriptor?? [ 29.010772][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.161080][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 29.167652][ T45] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 29.175858][ T45] usb 2-1: config 0 has no interface number 0 [ 29.184573][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.193720][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.201852][ T45] usb 2-1: Product: syz [ 29.206201][ T45] usb 2-1: Manufacturer: syz [ 29.210858][ T45] usb 2-1: SerialNumber: syz [ 29.216250][ T45] usb 2-1: config 0 descriptor?? [ 29.222193][ T45] smsc95xx v2.0.0 [ 29.222758][ T330] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 29.233436][ T330] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 29.242913][ T330] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 29.622555][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 29.633441][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.920779][ T341] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.081892][ T341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.092091][ T341] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.101724][ T341] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.111386][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.119442][ T341] usb 1-1: SerialNumber: syz [ 30.230767][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.230816][ T395] Bluetooth: hci0: command 0x1003 tx timeout [ 30.260632][ T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 30.274180][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 30.274224][ T36] audit: type=1400 audit(1758541438.120:156): avc: denied { execute } for pid=430 comm="syz.2.29" name="file1" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.274230][ T431] process 'syz.2.29' launched './file1' with NULL argv: empty string added [ 30.275675][ T431] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 30.283653][ T36] audit: type=1400 audit(1758541438.120:157): avc: denied { execute_no_trans } for pid=430 comm="syz.2.29" path="/7/file1" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.289542][ T431] rust_binder: Error while translating object. [ 30.355972][ T431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.357081][ T341] usb 1-1: 0:2 : does not exist [ 30.362214][ T431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 30.392310][ T341] usb 1-1: USB disconnect, device number 3 [ 30.412978][ T36] audit: type=1400 audit(1758541438.250:158): avc: denied { getopt } for pid=432 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.447401][ T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.480315][ T436] tipc: Started in network mode [ 30.485320][ T436] tipc: Node identity 1ac5e39a7001, cluster identity 4711 [ 30.492835][ T436] tipc: Enabled bearer , priority 0 [ 30.500493][ T435] tipc: Resetting bearer [ 30.511886][ T435] tipc: Disabling bearer [ 30.648706][ T36] audit: type=1400 audit(1758541438.490:159): avc: denied { create } for pid=437 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.668042][ T36] audit: type=1400 audit(1758541438.490:160): avc: denied { write } for pid=437 comm="syz.2.32" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.782514][ T36] audit: type=1400 audit(1758541438.630:161): avc: denied { mounton } for pid=442 comm="syz.2.33" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 30.782618][ T444] /dev/rnullb0: Can't open blockdev [ 30.819505][ T36] audit: type=1400 audit(1758541438.660:162): avc: denied { read write } for pid=442 comm="syz.2.33" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.842856][ T36] audit: type=1400 audit(1758541438.660:163): avc: denied { ioctl open } for pid=442 comm="syz.2.33" path="/11/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.068853][ T36] audit: type=1400 audit(1758541438.910:164): avc: denied { create } for pid=449 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.088471][ T36] audit: type=1400 audit(1758541438.910:165): avc: denied { setopt } for pid=449 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.285213][ T424] usb 4-1: USB disconnect, device number 2 [ 31.457939][ T462] tipc: Started in network mode [ 31.462986][ T462] tipc: Node identity 8e1c24bbbc5a, cluster identity 4711 [ 31.470296][ T462] tipc: Enabled bearer , priority 0 [ 31.478703][ T461] tipc: Resetting bearer [ 31.491737][ T461] tipc: Disabling bearer [ 31.679165][ T477] capability: warning: `syz.3.46' uses deprecated v2 capabilities in a way that may be insecure [ 31.693982][ T477] capability: warning: `syz.3.46' uses 32-bit capabilities (legacy support in use) [ 31.737577][ T482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 31.737645][ T481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 31.764541][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 31.776071][ T45] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 31.788069][ T481] syzkaller1: entered promiscuous mode [ 31.793974][ T481] syzkaller1: entered allmulticast mode [ 31.794518][ T45] usb 2-1: USB disconnect, device number 2 [ 31.828680][ T491] tipc: Enabled bearer , priority 0 [ 31.851065][ T490] tipc: Resetting bearer [ 31.871198][ T490] tipc: Disabling bearer [ 31.939269][ T503] __vm_enough_memory: pid: 503, comm: syz.1.55, bytes: 18014402804453376 not enough memory for the allocation [ 32.034184][ T515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 32.050957][ T515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 32.067832][ T516] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.067857][ T516] rust_binder: Read failure Err(EFAULT) in pid:55 [ 32.124692][ T523] Zero length message leads to an empty skb [ 32.181232][ T528] rust_binder: Write failure EFAULT in pid:53 [ 32.188576][ T525] tipc: Enabled bearer , priority 0 [ 32.203115][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 32.210738][ T524] tipc: Resetting bearer [ 32.221686][ T45] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.240441][ T524] tipc: Disabling bearer [ 32.326855][ T530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.351436][ T530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.364904][ T530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=530 comm=syz.2.64 [ 32.469701][ T557] SELinux: policydb table sizes (104,0) do not match mine (6,7) [ 32.477690][ T557] SELinux: failed to load policy [ 32.552351][ T401] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.565965][ T564] fuse: Unknown parameter 'rootmode2UB' [ 32.687133][ T557] overlayfs: failed to resolve './file1': -2 [ 32.701914][ T557] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 32.711351][ T401] usb 3-1: Using ep0 maxpacket: 16 [ 32.712003][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 32.717974][ T401] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 32.743178][ T401] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 32.761067][ T557] rust_binder: Write failure EINVAL in pid:33 [ 32.761128][ T401] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 32.775491][ T557] rust_binder: Error while translating object. [ 32.775521][ T557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.781763][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 32.793465][ T557] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.802766][ T401] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 32.819576][ T401] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 32.828600][ T557] rust_binder: Read failure Err(EFAULT) in pid:33 [ 32.828795][ T401] usb 3-1: config 0 has no interface number 0 [ 32.842949][ T401] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 32.854311][ T401] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 32.864464][ T401] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 32.875292][ T401] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.889036][ T401] usb 3-1: config 0 interface 125 has no altsetting 0 [ 32.896014][ T401] usb 3-1: config 0 interface 125 has no altsetting 2 [ 32.900794][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.904477][ T401] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 32.925073][ T401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.933329][ T401] usb 3-1: Product: syz [ 32.937830][ T401] usb 3-1: Manufacturer: syz [ 32.942955][ T401] usb 3-1: SerialNumber: syz [ 32.950966][ T401] usb 3-1: config 0 descriptor?? [ 32.980092][ T570] tipc: Started in network mode [ 32.985076][ T570] tipc: Node identity 3ea70dc3799c, cluster identity 4711 [ 32.992586][ T570] tipc: Enabled bearer , priority 0 [ 32.999958][ T569] tipc: Resetting bearer [ 33.014382][ T569] tipc: Disabling bearer [ 33.052248][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.071516][ T45] usb 4-1: config 1 has no interface number 0 [ 33.077991][ T45] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.089198][ T45] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 33.098542][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 35782, setting to 1024 [ 33.110476][ T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 33.120894][ T572] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 33.128154][ T572] rust_binder: 59: no such ref 1 [ 33.136182][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.145532][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.153633][ T45] usb 4-1: Product: syz [ 33.158530][ T341] usb 3-1: USB disconnect, device number 2 [ 33.169687][ T45] usb 4-1: Manufacturer: syz [ 33.178421][ T45] usb 4-1: SerialNumber: syz [ 33.401094][ T565] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 33.437578][ T582] rust_binder: Error in use_page_slow: ESRCH [ 33.437604][ T582] rust_binder: use_range failure ESRCH [ 33.444613][ T582] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 33.450125][ T582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.459817][ T582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:38 [ 33.471820][ T584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.620749][ T341] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.740976][ T599] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 33.788320][ T598] tipc: Enabled bearer , priority 0 [ 33.791240][ T602] rust_binder: Fixups oob 165 172 361 173 [ 33.796770][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 33.815273][ T596] tipc: Resetting bearer [ 33.820743][ T602] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 33.821074][ T602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.824288][ T341] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 33.831515][ T602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 33.840196][ T341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.877882][ T596] tipc: Disabling bearer [ 33.908296][ T341] usb 1-1: Product: syz [ 33.913159][ T341] usb 1-1: Manufacturer: syz [ 33.917828][ T341] usb 1-1: SerialNumber: syz [ 33.923613][ T341] usb 1-1: config 0 descriptor?? [ 33.930326][ T341] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 33.953149][ T341] usb 1-1: Detected FT-X [ 34.020939][ T565] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 34.030256][ T45] cdc_ncm 4-1:1.1: bind() failure [ 34.136547][ T341] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 34.146308][ T341] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 34.154023][ T341] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 34.161861][ T341] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 34.174174][ T341] usb 1-1: USB disconnect, device number 4 [ 34.183087][ T341] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 34.192542][ T424] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.206920][ T341] ftdi_sio 1-1:0.0: device disconnected [ 34.350763][ T424] usb 3-1: Using ep0 maxpacket: 8 [ 34.357656][ T424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.366458][ T424] usb 3-1: config 6 has an invalid interface number: 248 but max is 0 [ 34.375028][ T424] usb 3-1: config 6 has no interface number 0 [ 34.381643][ T424] usb 3-1: config 6 interface 248 has no altsetting 0 [ 34.390171][ T424] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 34.405106][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.413585][ T424] usb 3-1: Product: syz [ 34.417894][ T424] usb 3-1: Manufacturer: syz [ 34.422874][ T424] usb 3-1: SerialNumber: syz [ 34.633094][ T609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.642080][ T609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.665469][ T424] ums-karma 3-1:6.248: USB Mass Storage device detected [ 34.744738][ T424] usb 3-1: USB disconnect, device number 3 [ 34.754928][ T627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.863730][ T633] rust_binder: Error while translating object. [ 34.870310][ T633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.882078][ T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 34.941467][ T635] tipc: Enabled bearer , priority 0 [ 34.958339][ T634] tipc: Resetting bearer [ 34.975612][ T634] tipc: Disabling bearer [ 35.280760][ T401] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 35.370835][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.430750][ T401] usb 1-1: device descriptor read/64, error -71 [ 35.530735][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 35.545124][ T45] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 35.561308][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.570156][ T45] usb 2-1: Product: syz [ 35.579600][ T45] usb 2-1: Manufacturer: syz [ 35.585331][ T424] usb 4-1: USB disconnect, device number 3 [ 35.593297][ T45] usb 2-1: SerialNumber: syz [ 35.602641][ T45] usb 2-1: config 0 descriptor?? [ 35.609232][ T45] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 35.617632][ T45] usb 2-1: Detected FT-X [ 35.638073][ T648] rust_binder: Write failure EFAULT in pid:64 [ 35.651446][ T650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 35.667132][ T650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.106'. [ 35.676266][ T401] usb 1-1: device descriptor read/64, error -71 [ 35.809384][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 35.817389][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 35.824666][ T45] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 35.832479][ T45] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 35.848104][ T45] usb 2-1: USB disconnect, device number 3 [ 35.861688][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 35.880763][ T45] ftdi_sio 2-1:0.0: device disconnected [ 35.920763][ T401] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 35.930761][ T341] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 36.032454][ T659] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 36.043127][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 36.043145][ T36] audit: type=1400 audit(1758541443.890:222): avc: denied { relabelto } for pid=658 comm="syz.3.109" name="31" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 36.075986][ T401] usb 1-1: device descriptor read/64, error -71 [ 36.082400][ T36] audit: type=1400 audit(1758541443.890:223): avc: denied { associate } for pid=658 comm="syz.3.109" name="31" dev="tmpfs" ino=175 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 36.109452][ T36] audit: type=1400 audit(1758541443.890:224): avc: denied { write } for pid=658 comm="syz.3.109" name="31" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 36.110621][ T341] usb 3-1: config 1 has an invalid interface number: 164 but max is 0 [ 36.135481][ T36] audit: type=1400 audit(1758541443.890:225): avc: denied { add_name } for pid=658 comm="syz.3.109" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 36.144388][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.168193][ T36] audit: type=1400 audit(1758541443.890:226): avc: denied { create } for pid=658 comm="syz.3.109" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.178790][ T341] usb 3-1: config 1 has no interface number 0 [ 36.198645][ T36] audit: type=1400 audit(1758541443.890:227): avc: denied { associate } for pid=658 comm="syz.3.109" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.205332][ T341] usb 3-1: config 1 interface 164 altsetting 2 endpoint 0x82 has invalid maxpacket 1120, setting to 64 [ 36.226121][ T36] audit: type=1400 audit(1758541443.890:228): avc: denied { write } for pid=658 comm="syz.3.109" name="file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.237085][ T341] usb 3-1: config 1 interface 164 has no altsetting 0 [ 36.259262][ T36] audit: type=1400 audit(1758541443.890:229): avc: denied { add_name } for pid=658 comm="syz.3.109" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.267564][ T341] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=42.03 [ 36.295130][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.303324][ T341] usb 3-1: Product: syz [ 36.307667][ T341] usb 3-1: Manufacturer: syz [ 36.312458][ T341] usb 3-1: SerialNumber: syz [ 36.320790][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.397860][ T661] tipc: Enabled bearer , priority 0 [ 36.405445][ T660] tipc: Resetting bearer [ 36.411413][ T401] usb 1-1: device descriptor read/64, error -71 [ 36.423243][ T660] tipc: Disabling bearer [ 36.477648][ T45] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 36.492477][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.499261][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 36.508691][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.519392][ T45] usb 4-1: config 0 descriptor?? [ 36.530887][ T401] usb usb1-port1: attempt power cycle [ 36.760796][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.870797][ T401] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 36.892252][ T401] usb 1-1: device descriptor read/8, error -71 [ 36.910799][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 36.918946][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 36.928273][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.931811][ T45] wacom 0003:056A:030E.0003: ignoring exceeding usage max [ 36.936590][ T10] usb 2-1: Product: syz [ 36.946017][ T45] wacom 0003:056A:030E.0003: Unknown device_type for 'HID 056a:030e'. Assuming pen. [ 36.949703][ T10] usb 2-1: Manufacturer: syz [ 36.963091][ T10] usb 2-1: SerialNumber: syz [ 36.966512][ T45] wacom 0003:056A:030E.0003: hidraw0: USB HID v0.01 Device [HID 056a:030e] on usb-dummy_hcd.3-1/input0 [ 36.989474][ T45] input: Wacom Intuos S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:030E.0003/input/input5 [ 37.002389][ T36] audit: type=1400 audit(1758541444.850:230): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=476 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.024835][ T36] audit: type=1400 audit(1758541444.850:231): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=476 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.049410][ T401] usb 1-1: device descriptor read/8, error -71 [ 37.135005][ T659] netlink: 'syz.3.109': attribute type 12 has an invalid length. [ 37.143848][ T659] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 37.151105][ T659] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 37.151782][ T666] usb 4-1: USB disconnect, device number 4 [ 37.180671][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 37.290795][ T401] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 37.312013][ T401] usb 1-1: device descriptor read/8, error -71 [ 37.388105][ T666] usb 2-1: USB disconnect, device number 4 [ 37.399248][ T666] usblp0: removed [ 37.443789][ T401] usb 1-1: device descriptor read/8, error -71 [ 37.560879][ T401] usb usb1-port1: unable to enumerate USB device [ 37.577121][ T676] __vm_enough_memory: pid: 676, comm: syz.1.113, bytes: 18014402804453376 not enough memory for the allocation [ 38.690736][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.722199][ T45] usb 3-1: USB disconnect, device number 4 [ 38.816740][ T697] tipc: Enabled bearer , priority 0 [ 38.831016][ T696] tipc: Resetting bearer [ 38.855804][ T696] tipc: Disabling bearer [ 38.871754][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 38.883177][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 253, changing to 7 [ 38.895751][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25696, setting to 1024 [ 38.908291][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 38.917902][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.926174][ T10] usb 4-1: Product: syz [ 38.930352][ T10] usb 4-1: Manufacturer: syz [ 38.937291][ T10] usb 4-1: SerialNumber: syz [ 38.947136][ T10] usb 4-1: config 0 descriptor?? [ 38.960107][ T10] usb 4-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 64 [ 39.046529][ T706] rust_binder: Error while translating object. [ 39.046556][ T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 39.056568][ T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 39.067031][ T706] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 39.076620][ T706] rust_binder: Error in use_page_slow: EBUSY [ 39.087275][ T706] rust_binder: use_range failure EBUSY [ 39.093337][ T706] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 39.099225][ T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 39.107094][ T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:86 [ 39.159466][ T690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.177016][ T690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.188792][ T10] usb 4-1: USB disconnect, device number 5 [ 39.200070][ T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.860911][ T710] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 39.870299][ T716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:83 [ 39.953507][ T723] tipc: Enabled bearer , priority 0 [ 39.989146][ T732] rust_binder: Error in use_page_slow: ESRCH [ 39.989171][ T732] rust_binder: use_range failure ESRCH [ 39.995355][ T732] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 39.995409][ T721] tipc: Resetting bearer [ 40.000897][ T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.000921][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:94 [ 40.059454][ T721] tipc: Disabling bearer [ 40.946319][ T754] /dev/sr0: Can't lookup blockdev [ 41.057676][ T764] tipc: Enabled bearer , priority 0 [ 41.065139][ T762] tipc: Resetting bearer [ 41.079048][ T762] tipc: Disabling bearer [ 41.131580][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 41.131600][ T36] audit: type=1400 audit(1758541448.980:252): avc: denied { setopt } for pid=765 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.196406][ T36] audit: type=1400 audit(1758541449.000:253): avc: denied { setattr } for pid=765 comm="syz.3.143" name="PPPOL2TP" dev="sockfs" ino=6086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.266679][ T36] audit: type=1400 audit(1758541449.000:254): avc: denied { getopt } for pid=765 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.292500][ T36] audit: type=1400 audit(1758541449.090:255): avc: denied { name_bind } for pid=767 comm="syz.3.144" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.318369][ T36] audit: type=1400 audit(1758541449.160:256): avc: denied { nlmsg_read } for pid=773 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 41.340744][ T777] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 41.411711][ T36] audit: type=1400 audit(1758541449.260:257): avc: denied { lock } for pid=778 comm="syz.1.148" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.530786][ T424] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.570777][ T666] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.680797][ T424] usb 4-1: Using ep0 maxpacket: 16 [ 41.686059][ T341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.696300][ T424] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 41.705403][ T424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.713519][ T424] usb 4-1: Product: syz [ 41.717703][ T424] usb 4-1: Manufacturer: syz [ 41.722351][ T424] usb 4-1: SerialNumber: syz [ 41.727569][ T424] usb 4-1: config 0 descriptor?? [ 41.730725][ T666] usb 1-1: Using ep0 maxpacket: 8 [ 41.733830][ T424] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 41.739880][ T666] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.745546][ T424] usb 4-1: Detected FT-X [ 41.754198][ T666] usb 1-1: config 4 has an invalid interface number: 156 but max is 0 [ 41.765496][ T666] usb 1-1: config 4 has no interface number 0 [ 41.773999][ T666] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8a.2e [ 41.783236][ T666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.791347][ T666] usb 1-1: Product: syz [ 41.795608][ T666] usb 1-1: Manufacturer: syz [ 41.800223][ T666] usb 1-1: SerialNumber: syz [ 41.841920][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.853032][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.863662][ T341] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 41.873439][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.876004][ T786] tc_dump_action: action bad kind [ 41.887174][ T341] usb 2-1: config 0 descriptor?? [ 41.887339][ T786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.897347][ T786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 41.934148][ T424] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 41.974610][ T798] incfs: mount failed -22 [ 41.979268][ T798] incfs: mount failed -22 [ 41.983933][ T798] incfs: mount failed -22 [ 41.988704][ T798] incfs: mount failed -22 [ 41.993602][ T798] incfs: mount failed -22 [ 41.998265][ T798] incfs: mount failed -22 [ 42.002913][ T798] incfs: mount failed -22 [ 42.011008][ T798] incfs: mount failed -22 [ 42.022386][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.031060][ T798] incfs: mount failed -22 [ 42.036303][ T798] incfs: mount failed -22 [ 42.041530][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.050277][ T798] incfs: mount failed -22 [ 42.054952][ T798] incfs: mount failed -22 [ 42.064124][ T798] incfs: mount failed -22 [ 42.071809][ T798] incfs: mount failed -22 [ 42.078438][ T798] incfs: mount failed -22 [ 42.083408][ T798] incfs: mount failed -22 [ 42.100905][ T798] incfs: mount failed -22 [ 42.103122][ T341] usbhid 2-1:0.0: can't add hid device: -71 [ 42.107090][ T798] incfs: mount failed -22 [ 42.122810][ T798] incfs: mount failed -22 [ 42.130781][ T341] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.140204][ T424] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 42.147957][ T798] incfs: mount failed -22 [ 42.148675][ T341] usb 2-1: USB disconnect, device number 5 [ 42.166611][ T798] incfs: mount failed -22 [ 42.168609][ T424] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 42.187462][ T424] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 42.189376][ T798] incfs: mount failed -22 [ 42.204069][ T424] usb 4-1: USB disconnect, device number 6 [ 42.205994][ T666] snd-usb-audio 1-1:4.156: probe with driver snd-usb-audio failed with error -71 [ 42.222376][ T811] tipc: Enabled bearer , priority 0 [ 42.229469][ T424] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 42.232627][ T798] incfs: mount failed -22 [ 42.249544][ T810] tipc: Resetting bearer [ 42.251735][ T424] ftdi_sio 4-1:0.0: device disconnected [ 42.256033][ T666] usb 1-1: USB disconnect, device number 9 [ 42.263523][ T798] incfs: mount failed -22 [ 42.279659][ T798] incfs: mount failed -22 [ 42.280085][ T810] tipc: Disabling bearer [ 42.289763][ T798] incfs: mount failed -22 [ 42.300633][ T798] incfs: mount failed -22 [ 42.311847][ T798] incfs: mount failed -22 [ 42.329205][ T798] incfs: mount failed -22 [ 42.347388][ T798] incfs: mount failed -22 [ 42.357532][ T798] incfs: mount failed -22 [ 42.369400][ T798] incfs: mount failed -22 [ 42.370815][ T36] audit: type=1400 audit(1758541450.210:258): avc: denied { read } for pid=812 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.381858][ T798] incfs: mount failed -22 [ 42.409725][ T798] incfs: mount failed -22 [ 42.422397][ T798] incfs: mount failed -22 [ 42.434594][ T798] incfs: mount failed -22 [ 42.445915][ T798] incfs: mount failed -22 [ 42.458356][ T798] incfs: mount failed -22 [ 42.470914][ T798] incfs: mount failed -22 [ 42.483729][ T798] incfs: mount failed -22 [ 42.498260][ T798] incfs: mount failed -22 [ 42.512240][ T798] incfs: mount failed -22 [ 42.520897][ T798] incfs: mount failed -22 [ 42.529985][ T798] incfs: mount failed -22 [ 42.540252][ T798] incfs: mount failed -22 [ 42.549285][ T798] incfs: mount failed -22 [ 42.559260][ T798] incfs: mount failed -22 [ 42.568148][ T798] incfs: mount failed -22 [ 42.577329][ T798] incfs: mount failed -22 [ 42.586249][ T798] incfs: mount failed -22 [ 42.596057][ T798] incfs: mount failed -22 [ 42.604925][ T798] incfs: mount failed -22 [ 42.614902][ T798] incfs: mount failed -22 [ 42.623793][ T798] incfs: mount failed -22 [ 42.632853][ T798] incfs: mount failed -22 [ 42.642425][ T798] incfs: mount failed -22 [ 42.650760][ T341] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 42.651399][ T798] incfs: mount failed -22 [ 42.683641][ T798] incfs: mount failed -22 [ 42.695011][ T798] incfs: mount failed -22 [ 42.705184][ T798] incfs: mount failed -22 [ 42.714094][ T798] incfs: mount failed -22 [ 42.723492][ T798] incfs: mount failed -22 [ 42.733478][ T798] incfs: mount failed -22 [ 42.765728][ T36] audit: type=1400 audit(1758541450.610:259): avc: denied { relabelfrom } for pid=818 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.786427][ T36] audit: type=1400 audit(1758541450.610:260): avc: denied { relabelto } for pid=818 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.813518][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.831987][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 42.843245][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 42.867276][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.881514][ T341] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.891031][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.902405][ T341] usb 2-1: config 0 descriptor?? [ 43.310508][ T341] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 43.321233][ T341] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 43.612513][ T666] usb 2-1: USB disconnect, device number 6 [ 43.654904][ T839] tipc: Enabling of bearer rejected, failed to enable media [ 43.692032][ T36] audit: type=1400 audit(1758541451.540:261): avc: denied { bind } for pid=842 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.737449][ T845] fuse: Bad value for 'rootmode' [ 44.100785][ T666] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.148243][ T862] tipc: Enabling of bearer rejected, failed to enable media [ 44.222427][ T866] rust_binder: Error while translating object. [ 44.222474][ T866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 44.228684][ T866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:126 [ 44.250731][ T666] usb 1-1: Using ep0 maxpacket: 8 [ 44.266384][ T666] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.274902][ T666] usb 1-1: config 6 has an invalid interface number: 248 but max is 0 [ 44.283174][ T666] usb 1-1: config 6 has no interface number 0 [ 44.289249][ T666] usb 1-1: config 6 interface 248 has no altsetting 0 [ 44.297380][ T666] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 44.306457][ T666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.312227][ T869] binder: Binderfs stats mode cannot be changed during a remount [ 44.314894][ T666] usb 1-1: Product: syz [ 44.326669][ T666] usb 1-1: Manufacturer: syz [ 44.331355][ T666] usb 1-1: SerialNumber: syz [ 44.541051][ T666] ums-karma 1-1:6.248: USB Mass Storage device detected [ 44.584464][ T666] usb 1-1: USB disconnect, device number 10 [ 44.684720][ T876] syz.3.178 (876): attempted to duplicate a private mapping with mremap. This is not supported. [ 44.870786][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.938158][ T898] syz.2.185: attempt to access beyond end of device [ 44.938158][ T898] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 44.953123][ T900] syz.2.185: attempt to access beyond end of device [ 44.953123][ T900] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 44.980215][ T902] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 45.160843][ T341] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.311966][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.324691][ T341] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 45.334394][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.342534][ T341] usb 4-1: Product: syz [ 45.346710][ T341] usb 4-1: Manufacturer: syz [ 45.351523][ T341] usb 4-1: SerialNumber: syz [ 45.356748][ T341] usb 4-1: config 0 descriptor?? [ 45.362700][ T341] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 45.369084][ T341] usb 4-1: No valid video chain found. [ 45.470803][ T666] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.500748][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.562804][ T891] netlink: 144 bytes leftover after parsing attributes in process `syz.3.183'. [ 45.572185][ T891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 45.581565][ T341] usb 4-1: USB disconnect, device number 7 [ 45.600775][ T666] usb 1-1: device descriptor read/64, error -71 [ 45.650736][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 45.657274][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 45.665548][ T9] usb 2-1: config 0 has no interface number 0 [ 45.671711][ T9] usb 2-1: config 0 interface 41 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 16 [ 45.681611][ T9] usb 2-1: config 0 interface 41 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.694879][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 45.703094][ T9] usb 2-1: New USB device found, idVendor=0f40, idProduct=9800, bcdDevice=d1.9a [ 45.712274][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.720431][ T9] usb 2-1: Product: syz [ 45.724736][ T9] usb 2-1: Manufacturer: syz [ 45.729422][ T9] usb 2-1: SerialNumber: syz [ 45.734928][ T9] usb 2-1: config 0 descriptor?? [ 45.740433][ T922] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.870737][ T666] usb 1-1: device descriptor read/64, error -71 [ 46.120738][ T666] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 46.139723][ T940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.198'. [ 46.250766][ T666] usb 1-1: device descriptor read/64, error -71 [ 46.410761][ T341] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.490739][ T666] usb 1-1: device descriptor read/64, error -71 [ 46.560742][ T341] usb 4-1: Using ep0 maxpacket: 16 [ 46.568917][ T341] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 46.581982][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.600895][ T666] usb usb1-port1: attempt power cycle [ 46.601043][ T341] usb 4-1: Product: syz [ 46.620825][ T341] usb 4-1: Manufacturer: syz [ 46.625867][ T341] usb 4-1: SerialNumber: syz [ 46.634643][ T341] usb 4-1: config 0 descriptor?? [ 46.651709][ T341] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 46.659638][ T341] usb 4-1: Detected FT-X [ 46.766730][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 46.766792][ T36] audit: type=1400 audit(1758541454.610:272): avc: denied { ioctl } for pid=949 comm="syz.2.202" path="socket:[7713]" dev="sockfs" ino=7713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.800969][ T36] audit: type=1400 audit(1758541454.630:273): avc: denied { bind } for pid=949 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.950880][ T666] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 46.972088][ T666] usb 1-1: device descriptor read/8, error -71 [ 47.053402][ T341] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 47.060512][ T341] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 47.067724][ T341] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.078453][ T341] usb 4-1: USB disconnect, device number 8 [ 47.085356][ T341] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.095118][ T341] ftdi_sio 4-1:0.0: device disconnected [ 47.101967][ T666] usb 1-1: device descriptor read/8, error -71 [ 47.340912][ T666] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 47.361797][ T666] usb 1-1: device descriptor read/8, error -71 [ 47.491876][ T666] usb 1-1: device descriptor read/8, error -71 [ 47.559563][ T36] audit: type=1400 audit(1758541455.400:274): avc: denied { create } for pid=961 comm="syz.2.204" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.582463][ T962] /dev/rnullb0: Can't open blockdev [ 47.599210][ T36] audit: type=1400 audit(1758541455.430:275): avc: denied { write } for pid=961 comm="syz.2.204" name="file2" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.602277][ T666] usb usb1-port1: unable to enumerate USB device [ 47.621685][ T36] audit: type=1400 audit(1758541455.430:276): avc: denied { open } for pid=961 comm="syz.2.204" path="/51/file2" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.651319][ T36] audit: type=1400 audit(1758541455.430:277): avc: denied { ioctl } for pid=961 comm="syz.2.204" path="/51/file2" dev="tmpfs" ino=293 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.675334][ T36] audit: type=1400 audit(1758541455.440:278): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.698906][ T966] rust_binder: got new transaction with bad transaction stack [ 47.698933][ T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 47.707123][ T36] audit: type=1400 audit(1758541455.550:279): avc: denied { read } for pid=965 comm="syz.2.206" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.836159][ T36] audit: type=1400 audit(1758541455.680:280): avc: denied { listen } for pid=967 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.876711][ T36] audit: type=1400 audit(1758541455.720:281): avc: denied { associate } for pid=969 comm="syz.3.208" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.899314][ T971] binder: Unknown parameter '000000000000000000000000x000000000000000300000000001461723168' [ 47.921668][ T974] rust_binder: Error while translating object. [ 47.921714][ T974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.921809][ T975] rust_binder: Error while translating object. [ 47.928206][ T974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175 [ 47.937748][ T975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.953064][ T975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175 [ 47.992806][ T979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'. [ 48.056311][ T991] Invalid ELF header magic: != ELF [ 48.075210][ T993] overlayfs: failed to clone upperpath [ 48.274923][ T1004] rust_binder: Error while translating object. [ 48.274974][ T1004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.281275][ T1004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 48.390272][ T666] usb 2-1: USB disconnect, device number 7 [ 48.425675][ T1007] can0: slcan on ptm0. [ 48.503943][ T1017] rust_binder: Write failure EFAULT in pid:172 [ 48.504283][ T1017] rust_binder: Write failure EFAULT in pid:172 [ 48.536116][ T1022] FAT-fs (rnullb0): bogus number of reserved sectors [ 48.549267][ T1022] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 48.559367][ T1006] can0 (unregistered): slcan off ptm0. [ 48.725042][ T1065] overlayfs: failed to clone lowerpath [ 48.820766][ T666] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.880065][ T1078] rust_binder: Write failure EINVAL in pid:139 [ 48.972575][ T666] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 48.990165][ T666] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 49.000370][ T666] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 49.010487][ T666] usb 3-1: config 1 interface 0 has no altsetting 0 [ 49.018894][ T666] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.028251][ T666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.036648][ T666] usb 3-1: Product: ࠬ [ 49.041048][ T666] usb 3-1: Manufacturer: 惒幋䜪뮅ꔲࣿᠣ⥃䠽ⱍ뒳㕸㦛Ƶ䕙ᤡʽ㲗늡纚껰篪䇁榳䜨֢꽚‿⫐⪸歨먋秺쥞ꅉ!ấ艚Ზ鿭ƅ艔陿推쿑辬⸿糓켠诞ᓄꁍ鰋ⓐܶ晀뿄ꗙ﹮飲ᶋ艰챸噌魆啳솬봛ႝ᪎༥빪꒷綼龂໷賓Ȇﮛ是◜䜡懦藎䠋刺㰯ỏೂ꭛귣㳠琢廓 [ 49.072172][ T666] usb 3-1: SerialNumber: 匪ꑜ蓄Ὄ깮⊪梅뱸袰㪞䫽䏈譑뎽삍嶲蠃鱿濛ﭓꪆಕ꠭鮽쨡鄷쁇ﵽ⾼넇ꤾ앓鯦诸䎋없軃왢繶⢀쪳䂶㱆׺漦⒐춀猚㥴츊㮀ᩧ祍Ⴙ㮢᩻洫묁⽝ྃ꽠㿣 [ 49.112989][ T1033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.120349][ T1033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.153431][ T1086] veth1: entered allmulticast mode [ 49.210151][ T1087] veth1: left allmulticast mode [ 49.272540][ T1089] tipc: New replicast peer: 0.0.0.0 [ 49.278204][ T1089] tipc: Enabled bearer , priority 10 [ 49.534377][ T666] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 49.545423][ T666] usb 3-1: USB disconnect, device number 5 [ 49.635006][ T1104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=1104 comm=syz.3.246 [ 50.275860][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.328793][ T1157] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 50.334647][ T1159] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 50.383911][ T1173] netlink: 'syz.1.269': attribute type 16 has an invalid length. [ 50.401014][ T1173] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.269'. [ 50.419216][ T666] tipc: Node number set to 1195052483 [ 50.486379][ T1180] SELinux: policydb version 1003814011 does not match my version range 15-33 [ 50.495327][ T1180] SELinux: failed to load policy [ 50.501110][ T1180] SELinux: policydb version 689494961 does not match my version range 15-33 [ 50.509962][ T1180] SELinux: failed to load policy [ 50.557095][ T1192] netlink: 96 bytes leftover after parsing attributes in process `syz.1.275'. [ 50.874387][ T1201] tipc: Enabled bearer , priority 0 [ 50.881909][ T1200] tipc: Disabling bearer [ 50.971894][ T1205] tipc: Enabled bearer , priority 0 [ 50.979394][ T1204] tipc: Disabling bearer [ 51.038918][ T1207] rust_binder: Write failure EFAULT in pid:192 [ 51.117504][ T1214] netlink: 100 bytes leftover after parsing attributes in process `syz.2.285'. [ 51.158768][ T1220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.158957][ T1218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 51.256783][ T1227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 51.275490][ T1227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 51.429287][ T1234] __vm_enough_memory: pid: 1234, comm: syz.2.291, bytes: 18014402804453376 not enough memory for the allocation [ 51.470725][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.477925][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.485218][ T1233] bridge_slave_0: entered allmulticast mode [ 51.491452][ T1233] bridge_slave_0: entered promiscuous mode [ 51.498214][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.505308][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.512380][ T1233] bridge_slave_1: entered allmulticast mode [ 51.518723][ T1233] bridge_slave_1: entered promiscuous mode [ 51.565396][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.572465][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.580834][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.587896][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.617232][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.625342][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.634821][ T12] tipc: Left network mode [ 51.645516][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.652611][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.660335][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.667430][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.681495][ T12] veth1_macvtap: left promiscuous mode [ 51.687245][ T12] veth0_vlan: left promiscuous mode [ 51.762482][ T1233] veth0_vlan: entered promiscuous mode [ 51.783351][ T1233] veth1_macvtap: entered promiscuous mode [ 51.793865][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 51.793884][ T36] audit: type=1400 audit(1758541459.628:333): avc: denied { getopt } for pid=1253 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.829679][ T36] audit: type=1400 audit(1758541459.658:334): avc: denied { mount } for pid=1233 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.886794][ T36] audit: type=1400 audit(1758541459.658:335): avc: denied { mounton } for pid=1233 comm="syz-executor" path="/root/syzkaller.GcIKIY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.067659][ T1281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 52.091056][ T1281] bridge_slave_1: left allmulticast mode [ 52.107025][ T1281] bridge_slave_1: left promiscuous mode [ 52.123331][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.143555][ T1283] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 52.151701][ T1281] bridge_slave_0: left allmulticast mode [ 52.166045][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.178056][ T1281] bridge_slave_0: left promiscuous mode [ 52.199420][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.905269][ T1294] binder: Unknown parameter '' [ 52.930047][ T36] audit: type=1400 audit(1758541460.758:336): avc: denied { bind } for pid=1295 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.013380][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.164502][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.174886][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 53.184217][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.198888][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.208223][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.216330][ T45] usb 5-1: Product: syz [ 53.220504][ T45] usb 5-1: Manufacturer: syz [ 53.225155][ T45] usb 5-1: SerialNumber: syz [ 53.232328][ T45] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 53.239185][ T45] cdc_ncm 5-1:1.0: bind() failure [ 53.393387][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.544568][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 53.553001][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 53.561904][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 53.572231][ T10] usb 3-1: config 220 has no interface number 2 [ 53.578572][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 53.591825][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 53.598614][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 53.605523][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 53.613968][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 53.623117][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.631381][ T10] usb 3-1: Product: syz [ 53.635588][ T10] usb 3-1: Manufacturer: syz [ 53.640502][ T10] usb 3-1: SerialNumber: syz [ 53.850017][ T10] usb 3-1: selecting invalid altsetting 0 [ 53.855912][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 53.862270][ T10] usb 3-1: No valid video chain found. [ 53.872285][ T10] usb 3-1: USB disconnect, device number 6 [ 54.243386][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 54.243386][ T395] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.406897][ T1330] binder: Bad value for 'stats' [ 54.422964][ T36] audit: type=1400 audit(1758541462.248:337): avc: denied { read } for pid=1331 comm="syz.2.322" path="socket:[9880]" dev="sockfs" ino=9880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.554162][ T1340] rust_binder: Write failure EFAULT in pid:251 [ 54.566170][ T1342] rust_binder: 253: no such ref 0 [ 54.577535][ T1342] rust_binder: 253: no such ref 0 [ 54.582564][ T1342] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 54.589675][ T1342] rust_binder: 253: no such ref 64 [ 54.594897][ T1342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 54.858841][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 54.873348][ T36] audit: type=1400 audit(1758541462.688:338): avc: denied { append } for pid=1358 comm="syz.0.331" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.023335][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 55.029838][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 55.041129][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.054160][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.067185][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.075250][ T10] usb 3-1: Product: syz [ 55.079597][ T10] usb 3-1: Manufacturer: syz [ 55.084341][ T10] usb 3-1: SerialNumber: syz [ 55.120193][ T36] audit: type=1400 audit(1758541462.948:339): avc: denied { map } for pid=1362 comm="syz.3.333" path="socket:[9912]" dev="sockfs" ino=9912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.491413][ T10] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 55.777158][ T45] usb 5-1: USB disconnect, device number 2 [ 55.826283][ T1378] /dev/rnullb0: Can't open blockdev [ 55.842721][ T36] audit: type=1400 audit(1758541463.668:340): avc: denied { getopt } for pid=1379 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.910166][ T1386] overlayfs: failed to clone lowerpath [ 55.974346][ T36] audit: type=1400 audit(1758541463.808:341): avc: denied { ioctl } for pid=1397 comm="syz.3.345" path="socket:[10759]" dev="sockfs" ino=10759 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.093845][ T10] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 56.163354][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.238926][ T36] audit: type=1400 audit(1758541464.068:342): avc: denied { accept } for pid=1405 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.293378][ T45] usb 5-1: device descriptor read/64, error -71 [ 56.452679][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.461223][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.533341][ T45] usb 5-1: device descriptor read/64, error -71 [ 56.619637][ T1425] tipc: Trying to set illegal importance in message [ 56.783341][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.913354][ T45] usb 5-1: device descriptor read/64, error -71 [ 57.153352][ T45] usb 5-1: device descriptor read/64, error -71 [ 57.215289][ T1428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 57.225592][ T1428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 57.253994][ T1433] SELinux: policydb magic number 0x6f727473 does not match expected magic number 0xf97cff8c [ 57.263473][ T45] usb usb5-port1: attempt power cycle [ 57.264575][ T1433] SELinux: failed to load policy [ 57.276630][ T36] audit: type=1400 audit(1758541465.108:343): avc: denied { create } for pid=1432 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 57.278919][ T1433] SELinux: ebitmap start bit (20) is not a multiple of the map unit size (64) [ 57.307590][ T1433] SELinux: failed to load policy [ 57.519668][ T36] audit: type=1400 audit(1758541465.348:344): avc: denied { setopt } for pid=1444 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.603428][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.629354][ T424] usb 3-1: USB disconnect, device number 7 [ 57.636311][ T45] usb 5-1: device descriptor read/8, error -71 [ 57.663870][ T1452] rust_binder: Write failure EFAULT in pid:265 [ 57.692246][ T1454] rust_binder: validate_parent_fixup: new_min_offset=21, sg_entry.length=0 [ 57.699277][ T1454] rust_binder: Error while translating object. [ 57.709512][ T1454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.714596][ T36] audit: type=1400 audit(1758541465.548:345): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.716251][ T1454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 57.767999][ T1462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 57.784427][ T45] usb 5-1: device descriptor read/8, error -71 [ 57.787810][ T1462] bridge_slave_1: left allmulticast mode [ 57.799776][ T1462] bridge_slave_1: left promiscuous mode [ 57.805772][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.813906][ T1462] bridge_slave_0: left allmulticast mode [ 57.819667][ T1462] bridge_slave_0: left promiscuous mode [ 57.825408][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.839605][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.865431][ T1466] overlay: Unknown parameter 'uid' [ 57.871655][ T1466] rust_binder: 1466 RLIMIT_NICE not set [ 57.871747][ T1466] rust_binder: Read failure Err(EFAULT) in pid:221 [ 57.899328][ T1469] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.915200][ T1469] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 57.924543][ T1469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 57.944189][ T1474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 57.953829][ T1474] overlayfs: missing 'workdir' [ 57.959918][ T36] audit: type=1400 audit(1758541465.788:346): avc: denied { search } for pid=1473 comm="syz.0.371" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.982121][ T36] audit: type=1400 audit(1758541465.808:347): avc: denied { setattr } for pid=1473 comm="syz.0.371" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.023345][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.044425][ T45] usb 5-1: device descriptor read/8, error -71 [ 58.092479][ T1476] 9pnet_fd: Insufficient options for proto=fd [ 58.174887][ T45] usb 5-1: device descriptor read/8, error -71 [ 58.283439][ T45] usb usb5-port1: unable to enumerate USB device [ 58.786064][ T36] audit: type=1400 audit(1758541466.618:348): avc: denied { append } for pid=1484 comm="syz.0.375" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.881275][ T1493] rust_binder: 23: no such ref 3 [ 58.886323][ T1493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 58.886623][ T1493] rust_binder: Write failure EINVAL in pid:23 [ 59.253856][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 59.413762][ T10] usb 5-1: too many configurations: 244, using maximum allowed: 8 [ 59.429725][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 59.438917][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.447240][ T10] usb 5-1: Product: syz [ 59.453318][ T10] usb 5-1: Manufacturer: syz [ 59.458007][ T10] usb 5-1: SerialNumber: syz [ 59.614207][ T1510] fuse: blksize only supported for fuseblk [ 59.620601][ T1511] fuse: blksize only supported for fuseblk [ 59.652887][ T36] audit: type=1400 audit(1758541467.478:349): avc: denied { accept } for pid=1515 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 59.685145][ T1497] mmap: syz.4.380 (1497) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.697229][ T1523] __vm_enough_memory: pid: 1523, comm: syz.0.390, bytes: 18014402804453376 not enough memory for the allocation [ 59.698249][ T36] audit: type=1400 audit(1758541467.508:350): avc: denied { getopt } for pid=1517 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.734465][ T1497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 59.734502][ T1497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:27 [ 59.762372][ T10] rtl8150 5-1:1.0: couldn't reset the device [ 59.803514][ T10] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 59.826432][ T10] usb 5-1: USB disconnect, device number 7 [ 59.843319][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.843332][ T395] Bluetooth: hci0: command 0x1003 tx timeout [ 60.083436][ T12] Trying to write to read-only block-device rnullb0 [ 60.109691][ T1535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.394'. [ 60.193737][ T36] audit: type=1400 audit(1758541468.028:351): avc: denied { create } for pid=1537 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 60.225127][ T1542] tipc: Enabled bearer , priority 0 [ 60.232680][ T1542] tipc: Disabling bearer [ 60.289377][ T36] audit: type=1400 audit(1758541468.118:352): avc: denied { getopt } for pid=1547 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.414929][ T1559] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.414954][ T1559] rust_binder: Read failure Err(EFAULT) in pid:275 [ 60.426375][ T1561] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.438834][ T1561] rust_binder: Read failure Err(EFAULT) in pid:275 [ 60.488062][ T1579] rust_binder: Error while translating object. [ 60.494715][ T1579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.500884][ T1579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 60.683389][ T45] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 60.793327][ T424] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 60.823359][ T45] usb 3-1: device descriptor read/64, error -71 [ 60.944415][ T424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.955840][ T424] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.965116][ T424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.974334][ T424] usb 1-1: config 0 descriptor?? [ 61.063377][ T45] usb 3-1: device descriptor read/64, error -71 [ 61.303379][ T45] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 61.384303][ T424] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 61.412397][ T424] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input12 [ 61.464924][ T45] usb 3-1: device descriptor read/64, error -71 [ 61.497984][ T424] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 61.661091][ T1626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 61.670932][ T1626] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 61.703335][ T45] usb 3-1: device descriptor read/64, error -71 [ 61.813522][ T45] usb usb3-port1: attempt power cycle [ 61.983345][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.144874][ T10] usb 5-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config [ 62.153335][ T45] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 62.155167][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.172521][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.174374][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.181668][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.196324][ T10] usb 5-1: SerialNumber: syz [ 62.232847][ T1646] rust_binder: Write failure EFAULT in pid:270 [ 62.314738][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.406799][ T10] usb 5-1: 0:2 : does not exist [ 62.412194][ T10] usb 5-1: unit 5: unexpected type 0x03 [ 62.421468][ T10] usb 5-1: USB disconnect, device number 8 [ 62.433659][ T664] udevd[664]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.573351][ T45] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 62.594298][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.724347][ T45] usb 3-1: device descriptor read/8, error -71 [ 62.833440][ T45] usb usb3-port1: unable to enumerate USB device [ 62.936609][ T1653] tipc: Started in network mode [ 62.941544][ T1653] tipc: Node identity ac14140f, cluster identity 4711 [ 62.948636][ T1653] tipc: New replicast peer: 255.255.255.255 [ 62.954820][ T1653] tipc: Enabled bearer , priority 10 [ 63.564677][ T10] usb 1-1: USB disconnect, device number 15 [ 64.073338][ T10] tipc: Node number set to 2886997007 [ 64.533368][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 64.663322][ T45] usb 3-1: device descriptor read/64, error -71 [ 64.673410][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 64.810866][ T1684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'. [ 64.823350][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 64.829470][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 64.838643][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.847186][ T10] usb 1-1: config 0 descriptor?? [ 64.913330][ T45] usb 3-1: device descriptor read/64, error -71 [ 65.153337][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 65.254729][ T10] magicmouse 0003:05AC:0324.0006: item fetching failed at offset 3/5 [ 65.263034][ T10] magicmouse 0003:05AC:0324.0006: magicmouse hid parse failed [ 65.270661][ T10] magicmouse 0003:05AC:0324.0006: probe with driver magicmouse failed with error -22 [ 65.293376][ T45] usb 3-1: device descriptor read/64, error -71 [ 65.338924][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 65.338944][ T36] audit: type=1400 audit(1758541473.168:361): avc: denied { mount } for pid=1687 comm="syz.3.445" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 65.456724][ T424] usb 1-1: USB disconnect, device number 16 [ 65.533337][ T45] usb 3-1: device descriptor read/64, error -71 [ 65.643461][ T45] usb usb3-port1: attempt power cycle [ 65.843322][ T341] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 65.966677][ T1712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.966703][ T1712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 65.984018][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 65.985007][ T1714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1714 comm=syz.0.456 [ 65.993525][ T341] usb 5-1: Using ep0 maxpacket: 16 [ 66.001000][ T1714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=1714 comm=syz.0.456 [ 66.014818][ T45] usb 3-1: device descriptor read/8, error -71 [ 66.037854][ T341] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.049078][ T341] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 66.058481][ T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.066510][ T341] usb 5-1: Product: syz [ 66.070701][ T341] usb 5-1: Manufacturer: syz [ 66.075334][ T341] usb 5-1: SerialNumber: syz [ 66.080520][ T341] usb 5-1: config 0 descriptor?? [ 66.174747][ T45] usb 3-1: device descriptor read/8, error -71 [ 66.373377][ T1587] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 66.413377][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 66.434347][ T45] usb 3-1: device descriptor read/8, error -71 [ 66.503377][ T1587] usb 1-1: device descriptor read/64, error -71 [ 66.564522][ T45] usb 3-1: device descriptor read/8, error -71 [ 66.673472][ T45] usb usb3-port1: unable to enumerate USB device [ 66.743375][ T1587] usb 1-1: device descriptor read/64, error -71 [ 66.983329][ T1587] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 67.113339][ T1587] usb 1-1: device descriptor read/64, error -71 [ 67.353363][ T1587] usb 1-1: device descriptor read/64, error -71 [ 67.463451][ T1587] usb usb1-port1: attempt power cycle [ 67.650786][ T36] audit: type=1400 audit(1758541475.478:362): avc: denied { create } for pid=1785 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.803362][ T1587] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 67.824824][ T1587] usb 1-1: device descriptor read/8, error -71 [ 67.954388][ T1587] usb 1-1: device descriptor read/8, error -71 [ 68.194336][ T1587] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 68.214437][ T1587] usb 1-1: device descriptor read/8, error -71 [ 68.344636][ T1587] usb 1-1: device descriptor read/8, error -71 [ 68.453422][ T1587] usb usb1-port1: unable to enumerate USB device [ 68.494408][ T36] audit: type=1400 audit(1758541476.328:363): avc: denied { read } for pid=1821 comm="syz.2.493" path="socket:[12596]" dev="sockfs" ino=12596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.615784][ T666] usb 5-1: USB disconnect, device number 9 [ 68.706726][ T36] audit: type=1400 audit(1758541476.538:364): avc: denied { bind } for pid=1828 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.997354][ T36] audit: type=1400 audit(1758541476.828:365): avc: denied { setattr } for pid=1851 comm="syz.4.501" path="socket:[12829]" dev="sockfs" ino=12829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.253346][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 69.378294][ T1863] tipc: Cannot configure node identity twice [ 69.386782][ T1863] tipc: Cannot configure node identity twice [ 69.404356][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 69.414186][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 69.425536][ T45] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 69.434712][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.442750][ T45] usb 5-1: Product: syz [ 69.447003][ T45] usb 5-1: Manufacturer: syz [ 69.451694][ T45] usb 5-1: SerialNumber: syz [ 69.459466][ T45] usb 5-1: config 0 descriptor?? [ 69.465317][ T1852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.472521][ T1852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.543336][ T666] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 69.686409][ T36] audit: type=1400 audit(1758541477.518:366): avc: denied { create } for pid=1851 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 69.686729][ T1852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.705883][ T36] audit: type=1400 audit(1758541477.518:367): avc: denied { write } for pid=1851 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 69.712895][ T1852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.740391][ T666] usb 1-1: config 127 has an invalid interface number: 32 but max is 0 [ 69.748749][ T666] usb 1-1: config 127 has no interface number 0 [ 69.755093][ T666] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 69.764285][ T666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.774492][ T666] ums-freecom 1-1:127.32: USB Mass Storage device detected [ 69.976627][ T1854] rust_binder: Error while translating object. [ 69.976663][ T1854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.982872][ T1854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289 [ 69.993789][ T666] usb 1-1: USB disconnect, device number 21 [ 70.144158][ T45] Error reading MAC address [ 70.220637][ T36] audit: type=1400 audit(1758541478.048:368): avc: denied { accept } for pid=1891 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.272962][ T36] audit: type=1400 audit(1758541478.098:369): avc: denied { accept } for pid=1901 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.552516][ T36] audit: type=1400 audit(1758541478.378:370): avc: denied { read } for pid=1904 comm="syz.0.521" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.575780][ T36] audit: type=1400 audit(1758541478.378:371): avc: denied { open } for pid=1904 comm="syz.0.521" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.599919][ T36] audit: type=1400 audit(1758541478.378:372): avc: denied { map } for pid=1904 comm="syz.0.521" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.640017][ T1913] netlink: 'syz.0.523': attribute type 15 has an invalid length. [ 70.784869][ T1929] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1929 comm=syz.2.527 [ 70.993318][ T45] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 71.009270][ T1961] raw_sendmsg: syz.2.537 forgot to set AF_INET. Fix it! [ 71.123437][ T45] usb 1-1: device descriptor read/64, error -71 [ 71.363341][ T45] usb 1-1: device descriptor read/64, error -71 [ 71.623324][ T45] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 71.668240][ T1982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 71.753323][ T45] usb 1-1: device descriptor read/64, error -71 [ 71.993354][ T45] usb 1-1: device descriptor read/64, error -71 [ 72.008765][ T666] usb 5-1: USB disconnect, device number 10 [ 72.049391][ T1991] tipc: Enabled bearer , priority 0 [ 72.057118][ T1991] tipc: Disabling bearer [ 72.103511][ T45] usb usb1-port1: attempt power cycle [ 72.220959][ T36] audit: type=1400 audit(72.185:373): avc: denied { setcheckreqprot } for pid=1994 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.278363][ T2004] usb usb9: usbfs: process 2004 (syz.4.553) did not claim interface 47 before use [ 72.350067][ T2020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 72.413952][ T2029] overlayfs: failed to clone upperpath [ 72.419613][ T36] audit: type=1400 audit(328.381:374): avc: denied { remount } for pid=2028 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.442366][ T2029] overlayfs: failed to clone upperpath [ 72.451607][ T2032] SELinux: failed to load policy [ 72.451785][ T45] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 72.484446][ T45] usb 1-1: device descriptor read/8, error -71 [ 72.611183][ T36] audit: type=1400 audit(328.571:375): avc: denied { accept } for pid=2046 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.614421][ T45] usb 1-1: device descriptor read/8, error -71 [ 72.703306][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 72.854723][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.864951][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.873342][ T45] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 72.874896][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.890693][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.898752][ T10] usb 5-1: SerialNumber: syz [ 72.899563][ T45] usb 1-1: device descriptor read/8, error -71 [ 73.034568][ T45] usb 1-1: device descriptor read/8, error -71 [ 73.107846][ T10] usb 5-1: 0:2 : does not exist [ 73.115623][ T10] usb 5-1: USB disconnect, device number 11 [ 73.128661][ T664] udevd[664]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.147395][ T45] usb usb1-port1: unable to enumerate USB device [ 73.181499][ T2055] fuse: Bad value for 'group_id' [ 73.186815][ T2055] fuse: Bad value for 'group_id' [ 73.460063][ T2063] overlayfs: failed to clone lowerpath [ 73.468240][ T2063] overlayfs: failed to clone lowerpath [ 73.835587][ T36] audit: type=1400 audit(329.801:376): avc: denied { mount } for pid=2068 comm="syz.0.577" name="/" dev="pstore" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 73.835898][ T2069] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 73.866223][ T2069] rust_binder: Write failure EINVAL in pid:310 [ 73.873341][ T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 73.916039][ T36] audit: type=1400 audit(329.881:377): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 74.034399][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.047497][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.068265][ T45] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.077733][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.088013][ T45] usb 5-1: SerialNumber: syz [ 74.203021][ T2085] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.210253][ T2085] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.223322][ T2085] bridge_slave_0: entered allmulticast mode [ 74.231814][ T2085] bridge_slave_0: entered promiscuous mode [ 74.239231][ T2085] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.246609][ T2085] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.254010][ T2085] bridge_slave_1: entered allmulticast mode [ 74.261374][ T2085] bridge_slave_1: entered promiscuous mode [ 74.304037][ T45] usb 5-1: 0:2 : does not exist [ 74.309409][ T45] usb 5-1: unit 5 not found! [ 74.317965][ T45] usb 5-1: USB disconnect, device number 12 [ 74.342865][ T664] udevd[664]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.378028][ T2085] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.385150][ T2085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.392509][ T2085] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.399587][ T2085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.409880][ T2118] mmap: syz.3.594 (2118): VmData 29208576 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 74.442077][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.449513][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.459888][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.467008][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.478685][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.485774][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.516410][ T2085] veth0_vlan: entered promiscuous mode [ 74.528034][ T2085] veth1_macvtap: entered promiscuous mode [ 74.726027][ T36] audit: type=1400 audit(330.691:378): avc: denied { associate } for pid=2141 comm="syz.3.598" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 74.813523][ T45] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 74.978500][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 74.991722][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 75.003908][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.016797][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.034892][ T2144] rust_binder: Error while translating object. [ 75.034948][ T2144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.035642][ T45] usb 6-1: string descriptor 0 read error: -22 [ 75.060554][ T2144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:129 [ 75.064623][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.095212][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.122526][ T45] usb 6-1: 0:2 : does not exist [ 75.522937][ T2136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.532857][ T36] audit: type=1400 audit(331.481:379): avc: denied { shutdown } for pid=2135 comm="syz.5.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.563597][ T2136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.574418][ T2136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.593370][ T2136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.612676][ T2136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.627871][ T2136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.730256][ T2197] overlayfs: failed to clone upperpath [ 75.765208][ T2200] rust_binder: Write failure EFAULT in pid:140 [ 75.846862][ T45] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 75.863527][ T45] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 75.874112][ T45] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 75.888776][ T45] usb 6-1: USB disconnect, device number 2 [ 76.288980][ T36] audit: type=1400 audit(332.251:380): avc: denied { read } for pid=2215 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.593341][ T341] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.743340][ T341] usb 6-1: Using ep0 maxpacket: 16 [ 76.751059][ T341] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 76.760138][ T341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.768589][ T341] usb 6-1: Product: syz [ 76.772758][ T341] usb 6-1: Manufacturer: syz [ 76.777371][ T341] usb 6-1: SerialNumber: syz [ 76.782486][ T341] usb 6-1: config 0 descriptor?? [ 76.788701][ T341] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 76.796622][ T341] usb 6-1: Detected FT-X [ 76.953350][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 76.976244][ T36] audit: type=1400 audit(332.941:381): avc: denied { read } for pid=2245 comm="syz.2.635" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.999261][ T36] audit: type=1400 audit(332.941:382): avc: denied { open } for pid=2245 comm="syz.2.635" path="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.999389][ T341] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 77.103401][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 77.109706][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.120700][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.133593][ T45] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.142818][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.151806][ T45] usb 5-1: config 0 descriptor?? [ 77.432308][ T341] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 77.439631][ T341] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.449746][ T341] usb 6-1: USB disconnect, device number 3 [ 77.457257][ T341] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.467182][ T341] ftdi_sio 6-1:0.0: device disconnected [ 77.823532][ T2249] overlayfs: failed to clone lowerpath [ 78.111502][ T2268] rust_binder: Error while translating object. [ 78.111544][ T2268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 78.118162][ T2268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:147 [ 78.217365][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.651284][ T2280] overlayfs: failed to clone lowerpath [ 78.661309][ T36] audit: type=1400 audit(334.621:383): avc: denied { create } for pid=2279 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.743219][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 79.321557][ T2310] ------------[ cut here ]------------ [ 79.327140][ T2310] WARNING: CPU: 0 PID: 2310 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 79.336610][ T2310] Modules linked in: [ 79.340533][ T2310] CPU: 0 UID: 0 PID: 2310 Comm: syz.3.659 Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461 [ 79.352075][ T2310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.362193][ T2310] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 79.368206][ T2310] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b1 3d ee 05 00 0f 85 be 00 00 00 c6 05 a4 3d ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 79.388040][ T2310] RSP: 0018:ffffc9000ba57880 EFLAGS: 00010246 [ 79.394284][ T2310] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 79.402294][ T2310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ba57938 [ 79.410336][ T2310] RBP: ffffc9000ba579a8 R08: ffffc9000ba57937 R09: 0000000000000000 [ 79.418461][ T2310] R10: ffffc9000ba57920 R11: fffff5200174af27 R12: ffffc9000ba578c0 [ 79.426518][ T2310] R13: dffffc0000000000 R14: 1ffff9200174af14 R15: 0000000000000000 [ 79.434570][ T2310] FS: 00007f1f63f456c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 79.443875][ T2310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.450505][ T2310] CR2: 0000200000001000 CR3: 000000012a9a0000 CR4: 00000000003526b0 [ 79.458849][ T2310] Call Trace: [ 79.462163][ T2310] [ 79.465235][ T2310] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.471452][ T2310] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 79.477238][ T2310] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 79.482930][ T2310] ___kmalloc_large_node+0xb5/0x250 [ 79.488195][ T2310] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 79.493879][ T2310] __kmalloc_large_node_noprof+0x1e/0xe0 [ 79.499542][ T2310] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 79.505215][ T2310] __kmalloc_noprof+0x26d/0x450 [ 79.510107][ T2310] incfs_realloc_mount_info+0xa7/0x4d0 [ 79.515691][ T2310] ? incfs_add_sysfs_node+0x118/0x240 [ 79.521113][ T2310] incfs_alloc_mount_info+0x479/0x600 [ 79.526944][ T2310] incfs_mount_fs+0x3ca/0x960 [ 79.531669][ T2310] ? __cfi_incfs_mount_fs+0x10/0x10 [ 79.537027][ T2310] ? vfs_parse_fs_string+0x102/0x170 [ 79.542353][ T2310] ? selinux_capable+0x38/0x50 [ 79.547173][ T2310] legacy_get_tree+0x103/0x1b0 [ 79.551981][ T2310] ? __cfi_incfs_mount_fs+0x10/0x10 [ 79.557245][ T2310] vfs_get_tree+0x9e/0x290 [ 79.561692][ T2310] do_new_mount+0x251/0xb40 [ 79.566302][ T2310] ? security_capable+0xcf/0xf0 [ 79.571328][ T2310] path_mount+0x688/0x1050 [ 79.575807][ T2310] ? putname+0x113/0x150 [ 79.580105][ T2310] __se_sys_mount+0x2bd/0x480 [ 79.584844][ T2310] ? __x64_sys_mount+0xf0/0xf0 [ 79.589694][ T2310] ? __kasan_check_write+0x18/0x20 [ 79.594984][ T2310] ? fpregs_restore_userregs+0x11d/0x260 [ 79.600679][ T2310] __x64_sys_mount+0xc3/0xf0 [ 79.605759][ T2310] x64_sys_call+0x2021/0x2ee0 [ 79.610582][ T2310] do_syscall_64+0x58/0xf0 [ 79.615129][ T2310] ? clear_bhb_loop+0x50/0xa0 [ 79.619840][ T2310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.625862][ T2310] RIP: 0033:0x7f1f6318eec9 [ 79.630317][ T2310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.650111][ T2310] RSP: 002b:00007f1f63f45038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.658617][ T2310] RAX: ffffffffffffffda RBX: 00007f1f633e5fa0 RCX: 00007f1f6318eec9 [ 79.667227][ T2310] RDX: 0000200000000500 RSI: 0000200000000040 RDI: 0000200000000000 [ 79.675742][ T2310] RBP: 00007f1f63211f91 R08: 00002000000001c0 R09: 0000000000000000 [ 79.684031][ T2310] R10: 000000000000c802 R11: 0000000000000246 R12: 0000000000000000 [ 79.692323][ T2310] R13: 00007f1f633e6038 R14: 00007f1f633e5fa0 R15: 00007ffe08752558 [ 79.700651][ T2310] [ 79.703781][ T2310] ---[ end trace 0000000000000000 ]--- [ 79.709507][ T2310] incfs: Error allocating mount info. -12 [ 79.715559][ T2310] incfs: mount failed -12 [ 79.722811][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 79.733450][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.746736][ T45] usb 5-1: USB disconnect, device number 13 [ 80.243555][ T395] Bluetooth: hci0: command 0x1003 tx timeout [ 80.243681][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110