last executing test programs: 3.198594002s ago: executing program 2 (id=444): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x6, @string={0x6, 0x3, "016a44da"}}}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1000}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/141, 0x8d, 0x2, 0x19}}, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2ba52ebd7000fddbdf251b000000060021"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0x81, 0xb4}) futimesat(r5, &(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0)={{}, {0x0, 0x2710}}) 2.73318225s ago: executing program 1 (id=448): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xdd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r3) syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), r3) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r3) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0xded4a1e4217ab166) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40008820) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x1ffcc35c6ab96c2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.617310319s ago: executing program 3 (id=450): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0xe) (async) socket$netlink(0x10, 0x3, 0xe) ioprio_set$pid(0x1, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 2.347456241s ago: executing program 3 (id=453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/22, 0x16, 0x0, 0x40000016}, @fda={0x66646185, 0x9, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 2.283456206s ago: executing program 1 (id=455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/nf_conntrack\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYBLOB="010129bd7000ffdbdf2503000000d583d7af442eb7c545a10bc3537abdf3957ba03e52ba6222775ace4100dc6ae1797238e0bb8a39ec6d5f0b2b98cdc7a0cdf5d562d8ae6110a218f3a8015581f2b2101af2da1f5f74cc053d8592bae87f95c32a5c8314baea1c6461c716ad"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000080) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x8) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000003c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="000100000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB="100000000000000020feff0000000000"], 0x2c, 0x0) chmod(&(0x7f0000000340)='./file1\x00', 0x20) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0x0) creat(&(0x7f0000000200)='./file0\x00', 0x102) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x100070, r4, 0xfe017000) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f0000000300)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000240)='/dev/audio#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='/dev/full\x00') r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) gettid() r7 = socket$inet(0x2, 0x4, 0x101) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) socket$inet(0x2, 0x6, 0x0) 2.213681562s ago: executing program 3 (id=456): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57788000) socket$inet6(0xa, 0x2, 0x0) inotify_init() poll(0x0, 0x0, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f000050b000/0x2000)=nil) 2.136491078s ago: executing program 0 (id=458): inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x80, 0x2, 0x3}}}, 0x18) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x100000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/4096, 0x1000, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000001600)=""/177, 0xb1, 0x1, 0x3e}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) write$P9_RCLUNK(r4, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) 2.081811033s ago: executing program 1 (id=459): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x7}, 0x0) 2.080846463s ago: executing program 0 (id=460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x13}}, {{&(0x7f0000000300)=@generic, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/24}], 0x0, &(0x7f0000000440)}, 0x4}, {{&(0x7f0000000500)=@in6, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)=""/229}, {&(0x7f0000000580)=""/36}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000000600)=""/19}], 0x0, &(0x7f0000000740)}, 0x5}], 0x1, 0x40000000, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff}) close(r1) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000014c0)={0x0, {}, 0x0, {}, 0x84, 0x2, 0x5, 0x15, "cec83d4ae4187459de9482fd2333e8a723f7f03daa91669c94425c640dfda7837cc0de8624246162f9298304713340cfd4b1662d647767562c65ef2bd1179981", "9abb58910b35e100996fa2a5f8831058780756026cdd4e7c7940f353d6d9b6b3", [0xf9a9, 0x8]}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x4, 0x4}}, 0x10, 0x0}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',']) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write(r3, &(0x7f0000001400)="b528aea160b80a3e3d56bb3995021bf15851911dd2c17dc5eb7a15c8351d74fd99a5fc32a055104d2a74c890f5bc86a349bb5e5305631b6d94d0ee0a7bd4d4e86c7e184a57caf951f0696abaf2fe5e745eb1017ed86408a4eefd489fcec4f391cf3fc88346914f8cfe907443286ebac88dca80b9bf0872ee55707a55e3772c869b9da69976893cf49b28ccf33b6d89abef50e4ed223930c508f554d3bfd1d563df01a66f9ae4713aabf5205821d72d0ec79e7deb58c1d069b2ec44", 0xbb) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000340)=ANY=[], 0x28) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000, 0x1, &(0x7f0000000100)=""/146, 0x92}, &(0x7f0000000080)=0x40) 1.98986241s ago: executing program 1 (id=461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_clone(0xc00a0080, &(0x7f0000000340)="1bc4553fa7730d81cc9d66bc554dbdbe38a9ae1e2f7cf518770c5eb229a42f23e11a80e6a7ac6575834c5f11bb9723ef5e44f3a1d0d96fcace130844052c3231514c2e7c9a7360df12600e42cc572546d80fb71c272d4a1fc7259591d16e92c3d0dfcfaa126434460110ae1504fb874daf42da200f82b28f5c60e30a36a1ff53f160bfae0594baed030d39544a30cd4c4a143e1c9a7d76302acefe4b6d", 0x9d, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000480)="89ed29ce178eeeca816c651309156e0c116b408fee65830b09b9fff56824aac802530a81c93e475482fb54245a9846b9711f0e08fd772f650cc615b6947e8eb89e6e7d200ec66b21b4592fce8b40ea859cbf400f2d55cc459b6dfca70f38c56d4e8cdfc96818fa81f441691613bbf9d7ce1da3332d9b1a4ba0df1ec7a7166f4e17f48fa8b7ebfcfe4e84ae8e1be3") ioprio_set$pid(0x2, r2, 0x0) ioprio_get$pid(0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x4, 0x8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x101042, 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x4000, 0x41) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) ppoll(&(0x7f0000000080), 0x1fffffffffffff7b, 0x0, 0x0, 0x62) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) 1.959275382s ago: executing program 2 (id=462): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r2, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x19, 0x1, 0x1ad, &(0x7f00000006c0)}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x0) 1.881590008s ago: executing program 0 (id=463): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_clone(0x12000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x11, r2) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x3, 0xfffc, 0xbfdf, 0x99, "ec28a144e13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) (async) r3 = syz_open_pts(r1, 0x20800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x20583) (async) chdir(&(0x7f0000000180)='./file0\x00') r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000005001a000010090581030002000000090000020d0000090582020002000000090503020002000000b3274f0215c0839db9c3b8e462a0b5cfdf79279ede7582ce57302398578d7a1ceb124423c58ea0ec72627976ee4e66af1bc44c018ed815116100dfd69861d523a6c22b80fc2d952c3e1ff551e8bae6c795793b1d32b943bf9c552113f9995d7bd50107fca64ddc0000000000008000000000"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="400b00000000d008ceac0b8919b48d775698c93d111365da78e6c9d6ba552a4815611cc57a6cff75bb9528a2c0e345a1488e8a531fe026c32b613b175ec577d30753a0d48021d8e3279ac82cbfc926c4b58693e7117ee6e0923195b4f1a4415510b40400000097e97ac33ca8ee97aeb743a2b263279a1a44f43693c27b11da97e00c023b17c835c8c929896d020b170a8d79a79374de55568c8865b1785b48669758349e5460e40c3b209d96658ffcebfb887c96cb4b3cf7f16e26663af64b8f60710cf45f6ba54d7084b8cc4fdb6bb0e0baef8b32f7752ceb27040dcc0d2c1e894ea293ea6fae7e3df5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x405, 0x80, &(0x7f0000000240)={0x0, 0x9, 0xfffc, 0x2}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0xfe, 0x0}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000380)={0x0, 0x1, 0x200, 0x3, 0x4}) (async) dup3(r3, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1.685691404s ago: executing program 0 (id=464): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024800010100000009040000160202"], 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e20, @loopback}}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e20, @loopback}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @local, 0x7}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x84c, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000080)={'batadv_slave_0\x00', {0x2, 0x4e21, @empty}}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000080)={'batadv_slave_0\x00', {0x2, 0x4e21, @empty}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsopen(&(0x7f00000001c0)='minix\x00', 0x0) (async) r6 = fsopen(&(0x7f00000001c0)='minix\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r1, 0x1, 0x0) fchdir(r7) (async) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf, 0x4, 0x6, 0x0, 0xfffffff0, 0x8, 0x6, 0x9, 0x15, 0x81, 0x31, 0x8, 0x0, 0x4, 0x80, 0x4f, 0xff, 0x5, 0x4, '\x00', 0x40, 0xe7}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000700)={[0x20062a, 0x6, 0x800000000009, 0xffffffffffffffff, 0x8, 0x8000, 0x80000001, 0x1, 0x7, 0x8, 0x100000001, 0x9, 0x0, 0x7, 0x40000000000000fd, 0xffffffffffff5f24], 0xeeef0000, 0x890}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private=0xa010100, 0x0, 0x0, 0x70, 0x0, [{@empty}, {}, {@remote}, {@empty}, {@initdev}, {@private}, {@empty}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$UHID_INPUT(r8, &(0x7f0000001180)={0x8, {"ec42a11f23382e58f3e2764e3cb74de779ef4034931150ec37f83424f1205b5c9fb8c05fe7a0e9ca7ccc3a568b7c90d0c55b26b7210f5bfc0a7a89238ccd3ccefc37746b638ce5409237f597170db976acbba29dae043084aa8632dc6497cdf0df82fb1d8471f5826203d2a7b24fabdb783faf3cb76c0af20480634dafeb864063317ee28f3a60ba478c524d4147b85c5b87b3f2ab52dc9a24832a1378fb9ed6be3d19ad487f3df1127d81e2cbe37184ee9e9d83e3108bbdc0940f39815dabd5620df2a0049bb87d9a4932542528b475ca12c34b8306518eca1b29b9d5e1a3f0709d73db4ae5711680df10fe56c922c8ebdb23a2136792244050262a494457bedd472c74ada3517c3267f875c59997d32beda2e9cf20f93180a20d1d7ae4ef7a7acebf291d8fe3abd286eacad87570e6999514d63b4f2ffd0ae150893aa0e320790220ffdc603569b4a7c506fe932f69686389c009724e260e82b21e83fe489bcb5bf83a4b48e0713cee25250868690014e4959551536c735b6536da92a5b3fa38479774499b62dddcf4f4402cb5ce118440d2abff183fa8c2124c83293a73391a4385fbe9047cba325aeb5da95f2da985c8c0247dcde4161cc199eb54c6db23262b34542928991b3351c63cfaa6baba38452a100b1466cabb581fa171e06c345150f4cdc2e0a06e26bf5b8d663d0746a6b98831d46f4b2cfd5698483f45e380454ad619711672da06f73a4a4c614f74ad2fa659edc401fb69a2a5b847ab94fff54d820f40b899fe74af914bef453a34d9c68dbfc82c091542c37e5e05f138d2ec865ae118a57d83633a90103e55c0ea1645ac00c328b7cc765cd3f238c95d1bab0a82acf838cb410985d1eed5d1e6c28b0b908c4b9b3418697112164663c408b8d5447d363b1de84096bbc257227579565effb883a5986d586617800e6984cb49f8ac3637e558d2e0b8a96391e3b01ff5bde133001a882741643750f5774f0c2c80e645957250471aef684b3bffa15362d567ebc0341a9e9b969f762880e61debb627ba4b6ccfae570da560e9293cc8bb04439f209f7ac5f150d2d4880514c583c067d0b011615ea97e38632cb0c9d21fe3ceba2afcd4326e1630bca7f737b2819fd0aaf5a6419b449bf7cbe0fc215f11b8990615924764199e69662d9335abd24ca1d7a43a4389f453c1d42828ba24ad0f286e48abc9bed38a64d95496139e3243ba5aa315a5ea346ed1998bd09d89094ef352ccf16a4ce317a24bd3c54b60904a35ad1b2f46079e543bea8bb64a5e9eccab7fcd663828c9911ff6633b43ef7b765ddb19b90e4c141e6c15143dd2ec2fd2b8b6a8850c675492d62c62da7e7b7bedf72c7ce18bc515668a3fb85e7764f1c216379802e6acac51c9fbf1eefad99bf94ab0872211f7938fd6cc2bf7926b5ebe6226d38b1491c0a391cf9a5c62560b41002da49c59ac1fddae7c33b5af998d44e4e49e95287d2042698d2907d4effd5437f7e2c418078435522a6261b16ff7acb0dbbf5b70fdf4633d68ab4c3173af06865ce7b6006d24752bcfa434d9dc645a7e7647f06640e08d9b01190ca8ff6e83299a85ba85d0b50ed4b03aa40ac1cdd89ca81ea5100e8cda27194420cf92d68c5d330b66f0dffb756292900df925271d09fed9254489ca1db241dcc48836e4f9aec4254be99c625aa15e4b2425593528762104d08584a9e810a5df72597ef7b27eb1ef74c715ed2581acfd489c09870b7a43c8b1f9f536287dd1a27d672f39353f4c72b6eb26426813201d666850389bb2cd551f8f6a5dab10e435afc2db630af4990c2b5df449690723b24b7c5714ec7400472cc49b11562ea3f383c2db1a748a7a57eedc426c898ea58cca5b36c56540f72bfd63b39e23ab7bab497e9c261e67fb488f0ac70b99c32691e714ec78f2a5a6fc627bf2bef64ab4d5b9fa5d9ccb2a2f88a94e10bf18f0c7b2e3dec8e33d3e549659edf4e6e6ca7ba872578c619d83914e604155aa83a50716667fe14b709272c652ca097e64dc9026c5b8cb71c9f5ae381dae38dc8bf1db6996e835460d67f670ee09bd26c733f6f45fc2589cef831a37aababaf37a819c757cfb63cdea044ba359c0ab2c9070547149a92d54bdb896720fb8984972130887ecdb06fce5b50cb3abdeb5b8625e775c6156e4c79577cb87636ca488cac12422079cf2ad1cc09d1f1893b187209669fd31c6f7450c19f0e1d2f2d9019c95e7026be7b39d30ab237c3d9b889436847f9387a4f62f0f15c71a3df4f64374f0d7723db4dd5b88453a875c21ca6a9c685e83f43e202e781f4a43550e9ad06d737d6a855288a180b0c9c4b0266f5229a51acf86d3dc1c1a342018af61722939112ddd59e24e38117942edbf5d35b9e7eb515447d92ee7d2cd7a28c7c0ef7faa3481c5ffa11d25f03f3d9e9e5e8fc5788d0be7129657b96fa7ecb1f6bfbfcbfb786e9aff2090303998a1bf47b847941a94c6bc450fd2ef2a1e0fb19339bc218f2300626a6ed04b5ebb91bbb69882b5fcb3efcc1023c0ffaaa9da579c48410f59c0aa9b82bb8b0c3db77b9c0de8158c996fa0977c8693a42cceaf12e62e80d608cc94b29a3a4e02c04fe1a2dbc828017e6d3864699a20e9dd7d1ed96764ddf0a757a2e5fbd7dc92e1dd6be7a9a751a154592587351818e74f225266e4516b3471bf1ba9ff4c520da279677707f020f1fe1066002c606cfc2cfa07b8a1f393f8e0ce32e52bbc98415c12601e7b63ff96d5b4bc765cf6086da00dc1d2f78668ce7c0e7d38683452218d78c9dca4b97fe5c95e0a3abf5d3de9501fc7e6edae1da8b6403feec5da7994f7c43e459feaa5a5967620e0f18b812eb3cbe701019d63ca3922aa2c3c275b42829de4627c9db721fe2049c61a36e099410cf3af6aef750ea6d71c86b54569cd66a119c961596f09424fb5095dda587b8f58ee2557c7dc900d36e51d92df537ea8777109d2925a10475d3ddd5bc78e0bba56c2f05a73119a1587f424406f96059eea30cab81d1c3f4f1fb3033be09f7209ac65cf534d301b62797c2d2427c535a8ed426af996d98bcadbbd4c70f7925e26935b3a69e1f2bd87e512d1e8e0fe9da84f7744532987c97c5f62b98a21eba856242c9e1272a67386ad27f92b395191b3da941ef3c2f10437db9171778962ca41d7bb1feb3e8aec5947c98f8d48ffbe991ae4770d5c01464dd10fc5c2a1f694c918dceda71114deb6c4547ac240c392a7f6b9a65e36564ab68b76f1066b0e2d0ffcc5ab226b1c61567fe54967385cd0d87eaa920df9b5ee9cb1be2e1d0cffd97553520f8920256a82b0eab429ed0a9113311736de9e5bf724d3f32a2c65cf7e9cb82804438fb3ea3348bfa84c2c13edc64c127989dd280e4d04540548006f41af7942cd12fa2c7600f9ba35bec7ecdc29844972b869daca8b0310f8b3b7cbf20358ff28997a6de2585e8d5787bef952ae0735360291e3712abf4a7c6c08c9dc1bc728dfa9301a2f201f455e9166b4cd86c20bd6466413fbcdab345c114320a0b4054178705ef663c4538491bdca960543a84ec3100c3088fcc047f6f0f9442bb8a0d2856ba054e21580b73b815be253a62a365850a6a8ea93733bb070cbae64a069c8b12dc605d35933c4df26598c9ca5d9d86965a151e6c060baa5a6a521adf0a06598412aa16c2edba0840897a0f69db399f1fa2ec5bce1a290dc3fab1bbe5cfa3218d34169951acf002f5187a7511b801aa5a2fbb0b10a7d0edadf2cc554f9b9fb7d68ffeccfe56a8b094ab1ced5e2c943a32782036ec5b603180f17427c3418aaa03a94f9e7007020a3d8073574697461d1bbf48bb43f953ce91f16c9b4a970f890a9142cf8f81fe48aec030e68c64b91e0fcc6706a4ed323813e30d8bd7aeb915f247780767449d85884d778c98df6703b0e49eac13f82a0f4884f29bc989fe2b7a402c9b76e0f9230d6ee97ed7a30e525aff269d142773a415d6d033977d2c849caf71a2e97ba6c66e9c15d613f3487bc731fcb3daeeaa43b688823cd7361f8c4a8ef8eaa2d89f047eda563bac7d41872f44271ef3d3ea06225ff2b6a0f7aa040030f0c7c80351d531c033ec3b415a0914f298c1f2090c1079a60b4b74ee12c3d11be5c0631efc676123bfc9ed3a44c08761eed8881a498a8154a8b432934d9ccc34dec851eb06a2c051aa855ad4c4f893f968b1ebbf39b4c08a885d22d9279a5616edebffcff3e881632039001bbea816dd2227afc4d242c8b5b44bee20819a4da283c70630809e2482a0d0242c35d49c8fe410b7985428c1050ca7b218d1f09b67b2c421fcdd927b382a2d7c4ced5e4498773f476b88bfe38a0cab2b4a30f8f56ca2189f188d5cba8113a89fc83a80faddef2e7dacb177eaa0a62126780adf81b6a829090337b6205ff8d6776c22408d0d8788a6b757fe04032d11c5a995a831249258670f57922bd0853d19445d2f1e6abf9a0efbbe58d1fca67de2c7dc6ce5854fce552e470e76027fc5a91264b91df62a51d67eb956c1b33e8ec3f393c8d33188a1b632128a13fb64128f7c226d3fb8909cd28af8caad821d80550e06522cba82ba6edbb23edd4b0f9a15247381ba01120e93c0ad91db4dc87fc49fc3852805aa107e488566fde5a31268726ab4026de970226662018f98aa7421bec6397dec2e5417c99281b9445c433f0835fdafe41306cd85bb7f93d7d374b48bc5f7ff8767f6c135a437702470991fe45840c55c6346f5d140913fc81ceb4748de2cc862e546731b2249b5622d3f008d7bcbb42052bc212312804b22fbb2606587ac80a998fe69afda556cfd81f4c4d40bf09757c1b67fdaa36d68fc142caa45d8f9ce900d9915a5c22ce4f7d2ca612b43a3aed2492abd0f720d96f84f470bb89eaf4816d0dd3a7573283127fedb0c157ab31d0a408c85a04844ea16b2050a2980329e308058a024503a9ad16e58d1bf172b44c57c74c36aec3bd4e896847827f8449dafd1851d90380eb59b17a5aa09505af716ee222ac7d316cb9699e5a5b61f36f8d1264b5b291932633a1e0558f6a76a22d6ae0a13517e631c31917f2c66928c049dc012c6b16e4cd2c410d3806323ecd511af07cb93887cfd34606eb9917ea5f349137987766f6523e0a831077d2d7aacbc739cdec733f34eb209ef57d28e172376e474b8fec58db86540780f5dc3dc3507e8d069f25fbdef79a8ad4ef5ccf16d396060cefd276dee7ca4b3e4d4d6c3d7bdce8b35d72daccd9b28f9327bfac55a470b423de4c5a26d8fdeb6b32e091baccf9f87848273873b6e39b484a1bdabe7af52a78bdd3264257f43cb5967589e9d5dca8f546e8d3237415f4120ae2bfca09493d1a31a79523e44ae4f96ece1164ac801a803c6e6f9c1f419eba94dd2338c8fc894643d41f7123fb91951d8234eef897e08c653f3b6b480ba73035f48d414b5910cd5c5805bbe1bcbb6a39fe85c8d169c53e37453498a9b33d56353f85bf27f222d5050fa86529046d8d114558103dcb945eff987ff0dde54d9ffddb6ab56cb009b567158ed37ab0548f78dc02dfb367da20a746e69658bda04f3d545c353acfeaa161e29dfe26002b891a736924dc08066321f9e5735fb67fc0cc2f1af36bcf431966810d31efaca3986be37bee5ad032c75406510d559424f2c3aca99c545cdf9276ee7d074bd52fe8890925503b965d2723f4aab60499bfe012251272eaaf6e035168b623a1a0bc07c6451cadee9bf50e12518105a8d9bba08259c292d1b953c2d86ef1821b0df15f11400ef3ddd0c4e34bc823c0dc434b", 0x1000}}, 0x1006) 1.672137555s ago: executing program 1 (id=465): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x0, 0x1, 0xc3}, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0xeeef0000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x4, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x837, 0x0, 0x10}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20102, 0x0) eventfd(0x9) socket(0x10, 0x3, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6c902, 0x0) write(r1, &(0x7f0000001400)="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", 0xffffff10) 1.533598436s ago: executing program 2 (id=466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r2 = dup3(r1, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) eventfd2(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xa) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100b, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 1.269199008s ago: executing program 3 (id=467): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0xe22, 0xe0be, @loopback, 0xfffff408}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @loopback, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x14) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = epoll_create1(0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x1, r4, 'id0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) pwritev2(r5, 0x0, 0x0, 0xfffffffb, 0x3, 0x4) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000040)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba02f2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.216135502s ago: executing program 1 (id=468): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) epoll_create(0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000695bb53f40e24877e672af00002d67420917b098d80983af05dc987ef5c6235c12f82b601b52df9c211fba8c0f47b2cdc525b4f0a17badd314be35db7e66bb4d63f751d100c8d156e7105058a155", @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf25030000000800020006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c095}, 0x24000895) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setownex(r7, 0xf, 0x0) ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x800, 0x10000002, 0x1947, 0xf}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r8) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x120001f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) 808.084895ms ago: executing program 2 (id=469): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x7}, 0x0) 807.553375ms ago: executing program 3 (id=470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x2103) syz_clone3(&(0x7f0000000400)={0x100002000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f000002f000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 766.565788ms ago: executing program 2 (id=471): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0x2, 0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x2, 0x8001, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x97, 0x5, 0x9, '\x00', 0xfe}, {0x9, 0x0, 0x6, '\x00', 0x10}, {0x7, 0x4, 0x8, '\x00', 0xb3}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x83, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x1b, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0xa5, 0x7, 0x2, '\x00', 0x7}, {0x3, 0xc, 0x6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf8, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) symlink(&(0x7f00000024c0)='./file0/file0\x00', &(0x7f0000002500)='./file1\x00') mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 539.797427ms ago: executing program 2 (id=472): unshare(0x62040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x304, 0x0, 0xfffffffffffffd72, 0x5, 0x0}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 398.963238ms ago: executing program 0 (id=473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_clone(0xc00a0080, &(0x7f0000000340)="1bc4553fa7730d81cc9d66bc554dbdbe38a9ae1e2f7cf518770c5eb229a42f23e11a80e6a7ac6575834c5f11bb9723ef5e44f3a1d0d96fcace130844052c3231514c2e7c9a7360df12600e42cc572546d80fb71c272d4a1fc7259591d16e92c3d0dfcfaa126434460110ae1504fb874daf42da200f82b28f5c60e30a36a1ff53f160bfae0594baed030d39544a30cd4c4a143e1c9a7d76302acefe4b6d", 0x9d, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000480)="89ed29ce178eeeca816c651309156e0c116b408fee65830b09b9fff56824aac802530a81c93e475482fb54245a9846b9711f0e08fd772f650cc615b6947e8eb89e6e7d200ec66b21b4592fce8b40ea859cbf400f2d55cc459b6dfca70f38c56d4e8cdfc96818fa81f441691613bbf9d7ce1da3332d9b1a4ba0df1ec7a7166f4e17f48fa8b7ebfcfe4e84ae8e1be3") ioprio_set$pid(0x2, r2, 0x0) ioprio_get$pid(0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x4, 0x8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x101042, 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x4000, 0x41) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) ppoll(&(0x7f0000000080), 0x1fffffffffffff7b, 0x0, 0x0, 0x62) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) 47.766636ms ago: executing program 3 (id=474): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000004c0)={[{@nfs_export_on}, {@redirect_dir_nofollow}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210f27bd7000fbdbdf25010000d8dabd37007500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40106726, &(0x7f00000000c0)) 0s ago: executing program 0 (id=475): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) getgid() syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 21.204418][ T36] audit: type=1400 audit(1754934668.740:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.205421][ T281] cgroup: Unknown subsys name 'net' [ 21.227081][ T36] audit: type=1400 audit(1754934668.740:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.254353][ T36] audit: type=1400 audit(1754934668.780:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.254464][ T281] cgroup: Unknown subsys name 'devices' [ 21.400364][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.405963][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.518622][ T36] audit: type=1400 audit(1754934669.060:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.541773][ T36] audit: type=1400 audit(1754934669.060:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.546448][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.566640][ T36] audit: type=1400 audit(1754934669.060:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.598461][ T36] audit: type=1400 audit(1754934669.120:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.600419][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.623898][ T36] audit: type=1400 audit(1754934669.120:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.658152][ T36] audit: type=1400 audit(1754934669.140:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.683643][ T36] audit: type=1400 audit(1754934669.140:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.879470][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.886503][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.893827][ T290] bridge_slave_0: entered allmulticast mode [ 22.900046][ T290] bridge_slave_0: entered promiscuous mode [ 22.914185][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.921265][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.928311][ T290] bridge_slave_1: entered allmulticast mode [ 22.934687][ T290] bridge_slave_1: entered promiscuous mode [ 22.944671][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.951768][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.958868][ T289] bridge_slave_0: entered allmulticast mode [ 22.965011][ T289] bridge_slave_0: entered promiscuous mode [ 22.974149][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.981207][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.988239][ T289] bridge_slave_1: entered allmulticast mode [ 22.994502][ T289] bridge_slave_1: entered promiscuous mode [ 23.025430][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.032500][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.039624][ T288] bridge_slave_0: entered allmulticast mode [ 23.045748][ T288] bridge_slave_0: entered promiscuous mode [ 23.056018][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.063074][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.070148][ T288] bridge_slave_1: entered allmulticast mode [ 23.076252][ T288] bridge_slave_1: entered promiscuous mode [ 23.101217][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.108244][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.115300][ T291] bridge_slave_0: entered allmulticast mode [ 23.121526][ T291] bridge_slave_0: entered promiscuous mode [ 23.133348][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.140383][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.147407][ T291] bridge_slave_1: entered allmulticast mode [ 23.153642][ T291] bridge_slave_1: entered promiscuous mode [ 23.270302][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277340][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.284615][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.291643][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.305527][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.312568][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.319791][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.326784][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.347561][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.354607][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.361874][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.368923][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.382403][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.389450][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.396709][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.403741][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.430267][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.437597][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.445098][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.452975][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.460271][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.467431][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.474706][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.495843][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.502879][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.519658][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.526684][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.540835][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.547905][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.555610][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.562661][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.570135][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.577138][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.596922][ T289] veth0_vlan: entered promiscuous mode [ 23.611521][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.618572][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.626319][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.633365][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.644190][ T289] veth1_macvtap: entered promiscuous mode [ 23.685548][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.710158][ T290] veth0_vlan: entered promiscuous mode [ 23.737950][ T288] veth0_vlan: entered promiscuous mode [ 23.745604][ T291] veth0_vlan: entered promiscuous mode [ 23.756334][ T290] veth1_macvtap: entered promiscuous mode [ 23.768092][ T339] rust_binder: 7: no such ref 1 [ 23.775761][ T288] veth1_macvtap: entered promiscuous mode [ 23.778948][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 23.783491][ T291] veth1_macvtap: entered promiscuous mode [ 23.822875][ T343] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.900909][ T349] kernel profiling enabled (shift: 5) [ 24.259332][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.282094][ T415] overlay: ./file0 is not a directory [ 24.429870][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.439662][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 24.448749][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.457779][ T9] usb 3-1: config 0 descriptor?? [ 24.598498][ T344] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.638479][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.751541][ T344] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 24.760701][ T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.768731][ T344] usb 4-1: Product: syz [ 24.772904][ T344] usb 4-1: Manufacturer: syz [ 24.777491][ T344] usb 4-1: SerialNumber: syz [ 24.782874][ T344] usb 4-1: config 0 descriptor?? [ 24.809447][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.819825][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.830746][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 24.844840][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.853992][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.862015][ T10] usb 1-1: Product: syz [ 24.866160][ T10] usb 1-1: Manufacturer: syz [ 24.872245][ T10] usb 1-1: SerialNumber: syz [ 24.877548][ T9] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 24.889843][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 24.991462][ T344] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 25.001476][ T344] asix 4-1:0.0: probe with driver asix failed with error -71 [ 25.010323][ T344] usb 4-1: USB disconnect, device number 2 [ 25.752168][ T436] ======================================================= [ 25.752168][ T436] WARNING: The mand mount option has been deprecated and [ 25.752168][ T436] and is ignored by this kernel. Remove the mand [ 25.752168][ T436] option from the mount to silence this warning. [ 25.752168][ T436] ======================================================= [ 25.878518][ T9] usb 3-1: USB disconnect, device number 2 [ 25.893204][ T10] cdc_mbim 1-1:1.0: bind() failure [ 25.899277][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 25.906071][ T10] cdc_ncm 1-1:1.1: bind() failure [ 25.912982][ T10] usb 1-1: USB disconnect, device number 2 [ 26.108509][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.258669][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 26.265037][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.273496][ T31] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 26.283273][ T31] usb 2-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 26.293066][ T31] usb 2-1: config 12 interface 0 has no altsetting 0 [ 26.301180][ T31] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 26.310300][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.318315][ T31] usb 2-1: Product: syz [ 26.322490][ T31] usb 2-1: Manufacturer: syz [ 26.327077][ T31] usb 2-1: SerialNumber: syz [ 26.399938][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 26.399946][ T447] binder: Unknown parameter 'context ' [ 26.399954][ T36] audit: type=1400 audit(1754934673.940:142): avc: denied { remount } for pid=445 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.448515][ T36] audit: type=1400 audit(1754934673.980:143): avc: denied { create } for pid=448 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 26.459046][ T453] tipc: Started in network mode [ 26.469670][ T36] audit: type=1400 audit(1754934673.980:144): avc: denied { create } for pid=448 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.473011][ T453] tipc: Node identity 4, cluster identity 4711 [ 26.492767][ T36] audit: type=1400 audit(1754934673.980:145): avc: denied { write } for pid=448 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.499208][ T453] tipc: Node number set to 4 [ 26.519258][ T36] audit: type=1400 audit(1754934673.980:146): avc: denied { read } for pid=448 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.543615][ T36] audit: type=1400 audit(1754934673.990:147): avc: denied { ioctl } for pid=448 comm="syz.2.23" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.551143][ T31] usb 2-1: selecting invalid altsetting 0 [ 26.578475][ T31] snd-usb-audio 2-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 26.586147][ T36] audit: type=1400 audit(1754934673.990:148): avc: denied { setopt } for pid=452 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.595720][ T31] usb 2-1: USB disconnect, device number 2 [ 26.611482][ T36] audit: type=1400 audit(1754934674.070:149): avc: denied { ioctl } for pid=452 comm="syz.0.22" path="socket:[5203]" dev="sockfs" ino=5203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.646969][ T36] audit: type=1400 audit(1754934674.070:150): avc: denied { write } for pid=452 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.647967][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.703424][ T36] audit: type=1400 audit(1754934674.070:151): avc: denied { lock } for pid=452 comm="syz.0.22" path="socket:[5203]" dev="sockfs" ino=5203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.740654][ T470] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.815367][ T478] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 26.927171][ T486] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 26.968521][ T444] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.008489][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.039656][ T344] rust_binder: 484: removing orphan mapping 0:112 [ 27.046120][ T344] rust_binder: 484: removing orphan mapping 112:1048 [ 27.122049][ T444] usb 4-1: Using ep0 maxpacket: 32 [ 27.122557][ T499] capability: warning: `syz.0.40' uses deprecated v2 capabilities in a way that may be insecure [ 27.129906][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.140822][ T499] capability: warning: `syz.0.40' uses 32-bit capabilities (legacy support in use) [ 27.152525][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.170943][ T502] tipc: Started in network mode [ 27.171453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.175800][ T502] tipc: Node identity 4, cluster identity 4711 [ 27.187900][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 27.193428][ T444] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.201562][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.209859][ T502] tipc: Node number set to 4 [ 27.220136][ T9] usb 3-1: config 0 descriptor?? [ 27.225056][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.235906][ T444] usb 4-1: config 0 descriptor?? [ 27.241837][ T444] hub 4-1:0.0: USB hub found [ 27.267507][ T507] rust_binder: Error while translating object. [ 27.267531][ T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.273958][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:33 [ 27.350470][ T509] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 27.441969][ T444] hub 4-1:0.0: 1 port detected [ 27.630251][ T9] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 27.908516][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.059542][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.069522][ T45] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 28.078591][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.087567][ T45] usb 2-1: config 0 descriptor?? [ 28.089501][ T519] cgroup: fork rejected by pids controller in /syz0 [ 28.211754][ T13] bridge_slave_1: left allmulticast mode [ 28.217434][ T13] bridge_slave_1: left promiscuous mode [ 28.223543][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.231496][ T13] bridge_slave_0: left allmulticast mode [ 28.237206][ T13] bridge_slave_0: left promiscuous mode [ 28.243106][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.351779][ T13] tipc: Left network mode [ 28.363280][ T13] veth1_macvtap: left promiscuous mode [ 28.369117][ T13] veth0_vlan: left promiscuous mode [ 28.378504][ T31] hub 4-1:0.0: activate --> -90 [ 28.415168][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.422444][ T623] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.429719][ T623] bridge_slave_0: entered allmulticast mode [ 28.436068][ T623] bridge_slave_0: entered promiscuous mode [ 28.442463][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.449501][ T623] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.456656][ T623] bridge_slave_1: entered allmulticast mode [ 28.463732][ T623] bridge_slave_1: entered promiscuous mode [ 28.497272][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.504428][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.511566][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.518785][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.520061][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.525878][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.532855][ T623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.532940][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.540291][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.547085][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.568496][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.575588][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.575647][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.582796][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.596751][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.597406][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.604030][ T45] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 28.622549][ T45] itetech 0003:258A:6A88.0003: hidraw1: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 28.640549][ T9] usb 3-1: USB disconnect, device number 3 [ 28.640870][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.653409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.661329][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.668364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.669740][ T465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.28'. [ 28.689644][ T421] usb 4-1: USB disconnect, device number 3 [ 28.695019][ T623] veth0_vlan: entered promiscuous mode [ 28.718316][ T517] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.721795][ T623] veth1_macvtap: entered promiscuous mode [ 28.726338][ T517] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 28.741012][ T517] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.748991][ T517] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 28.761343][ T64] usb 2-1: USB disconnect, device number 3 [ 28.781098][ T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 28.871862][ T646] tipc: Started in network mode [ 28.885794][ T646] tipc: Node identity 4, cluster identity 4711 [ 28.892225][ T646] tipc: Node number set to 4 [ 28.907668][ T648] binder: Unknown parameter 'st' [ 28.949280][ T650] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 29.222935][ T665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.222957][ T665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 29.232380][ T665] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.241431][ T665] rust_binder: Read failure Err(EFAULT) in pid:27 [ 29.319335][ T678] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 29.688504][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.708529][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.839621][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.849868][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.859920][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.869495][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.877620][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.887383][ T45] usb 3-1: SerialNumber: syz [ 29.892007][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 29.901516][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.910955][ T31] usb 4-1: config 0 descriptor?? [ 30.042416][ T701] rust_binder: Error while translating object. [ 30.042463][ T701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.048725][ T701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:25 [ 30.111906][ T687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.119220][ T706] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 30.121935][ T687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.150158][ T45] usb 3-1: 0:2 : does not exist [ 30.156655][ T45] usb 3-1: USB disconnect, device number 4 [ 30.168936][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.349449][ T31] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 30.918505][ T64] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 31.089510][ T64] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.099660][ T64] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 31.108651][ T64] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 31.117769][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.126540][ T64] usb 3-1: config 0 descriptor?? [ 31.166212][ T31] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71 [ 31.175287][ T31] usb 4-1: USB disconnect, device number 4 [ 31.193469][ T742] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 31.249228][ T750] Zero length message leads to an empty skb [ 31.488516][ T444] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 31.618560][ T444] usb 1-1: device descriptor read/64, error -71 [ 31.815093][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 31.815110][ T36] audit: type=1400 audit(1754934679.350:219): avc: denied { getopt } for pid=758 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.858511][ T444] usb 1-1: device descriptor read/64, error -71 [ 31.869204][ T759] rust_binder: Write failure EFAULT in pid:70 [ 31.949632][ T761] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 31.965290][ T761] kvm: pic: non byte read [ 31.970140][ T761] kvm: pic: level sensitive irq not supported [ 31.970186][ T761] kvm: pic: non byte read [ 32.018738][ T36] audit: type=1400 audit(1754934679.560:220): avc: denied { accept } for pid=764 comm="syz.3.92" lport=47977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 32.020023][ T765] netlink: 'syz.3.92': attribute type 4 has an invalid length. [ 32.061930][ T768] tipc: Started in network mode [ 32.066794][ T768] tipc: Node identity 4, cluster identity 4711 [ 32.073001][ T768] tipc: Node number set to 4 [ 32.108489][ T444] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 32.129137][ T770] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 32.229783][ T773] 9pnet_fd: Insufficient options for proto=fd [ 32.236440][ T773] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.245600][ T444] usb 1-1: device descriptor read/64, error -71 [ 32.248846][ T36] audit: type=1400 audit(1754934679.780:221): avc: denied { read } for pid=772 comm="syz.3.95" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.300514][ T774] binder: Bad value for 'max' [ 32.488485][ T444] usb 1-1: device descriptor read/64, error -71 [ 32.598597][ T444] usb usb1-port1: attempt power cycle [ 32.938491][ T444] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 32.959564][ T444] usb 1-1: device descriptor read/8, error -71 [ 33.089500][ T444] usb 1-1: device descriptor read/8, error -71 [ 33.250806][ T36] audit: type=1400 audit(1754934680.790:222): avc: denied { mounton } for pid=780 comm="syz.1.97" path="/proc/72/task" dev="proc" ino=6452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.280010][ T36] audit: type=1400 audit(1754934680.820:223): avc: denied { associate } for pid=782 comm="syz.1.97" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.328495][ T444] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 33.330298][ T36] audit: type=1400 audit(1754934680.870:224): avc: denied { getopt } for pid=785 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.355282][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.359653][ T444] usb 1-1: device descriptor read/8, error -71 [ 33.459131][ T789] rust_binder: 80: no such ref 2 [ 33.499531][ T444] usb 1-1: device descriptor read/8, error -71 [ 33.510017][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.528247][ T64] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 33.528788][ T36] audit: type=1400 audit(1754934681.060:225): avc: denied { read write } for pid=790 comm="syz.1.101" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.537678][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.561011][ T36] audit: type=1400 audit(1754934681.060:226): avc: denied { open } for pid=790 comm="syz.1.101" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.592535][ T36] audit: type=1400 audit(1754934681.110:227): avc: denied { ioctl } for pid=790 comm="syz.1.101" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.593735][ T64] usb 4-1: config 0 descriptor?? [ 33.619045][ T444] usb usb1-port1: unable to enumerate USB device [ 33.638787][ T791] kvm: emulating exchange as write [ 33.674587][ T9] usb 3-1: USB disconnect, device number 5 [ 33.690018][ T36] audit: type=1400 audit(1754934681.230:228): avc: denied { mounton } for pid=793 comm="syz.2.102" path="/13/file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 34.108175][ T64] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 34.729617][ T815] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 34.742240][ T815] kvm: pic: level sensitive irq not supported [ 34.742316][ T815] kvm: pic: non byte read [ 34.759557][ T818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 34.765452][ T815] kvm: pic: level sensitive irq not supported [ 34.767605][ T815] kvm: pic: non byte read [ 34.787241][ T815] kvm: pic: level sensitive irq not supported [ 34.787289][ T815] kvm: pic: non byte read [ 34.798931][ T815] kvm: pic: level sensitive irq not supported [ 34.799021][ T815] kvm: pic: non byte read [ 35.062268][ T9] rust_binder: 838: removing orphan mapping 0:24 [ 35.068732][ T9] rust_binder: 838: removing orphan mapping 24:1024 [ 35.078561][ T444] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.159439][ T64] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 35.170780][ T64] usb 4-1: USB disconnect, device number 5 [ 35.208517][ T444] usb 2-1: device descriptor read/64, error -71 [ 35.448493][ T444] usb 2-1: device descriptor read/64, error -71 [ 35.689023][ T444] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.805869][ T854] tipc: Started in network mode [ 35.810830][ T854] tipc: Node identity 4, cluster identity 4711 [ 35.817039][ T854] tipc: Node number set to 4 [ 35.828867][ T444] usb 2-1: device descriptor read/64, error -71 [ 35.889398][ T860] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 35.909498][ T865] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 35.923209][ T865] kvm: pic: level sensitive irq not supported [ 35.923288][ T865] kvm: pic: non byte read [ 35.934182][ T865] kvm: pic: level sensitive irq not supported [ 35.934233][ T865] kvm: pic: non byte read [ 35.945818][ T865] kvm: pic: level sensitive irq not supported [ 35.946117][ T865] kvm: pic: non byte read [ 35.957123][ T865] kvm: pic: level sensitive irq not supported [ 35.957160][ T865] kvm: pic: non byte read [ 36.068500][ T886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.132'. [ 36.077419][ T886] netlink: 43 bytes leftover after parsing attributes in process `syz.2.132'. [ 36.086410][ T886] netlink: 'syz.2.132': attribute type 5 has an invalid length. [ 36.094091][ T886] netlink: 43 bytes leftover after parsing attributes in process `syz.2.132'. [ 36.103054][ T444] usb 2-1: device descriptor read/64, error -71 [ 36.105248][ T886] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.109353][ T886] rust_binder: Read failure Err(EFAULT) in pid:80 [ 36.168511][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.174818][ T894] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 36.218618][ T444] usb usb2-port1: attempt power cycle [ 36.236767][ T9] rust_binder: 889: removing orphan mapping 0:24 [ 36.243245][ T9] rust_binder: 0: removing orphan mapping 24:1120 [ 36.319637][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.329514][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 36.338590][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.351071][ T45] usb 4-1: config 0 descriptor?? [ 36.481021][ T911] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.481044][ T911] rust_binder: Read failure Err(EFAULT) in pid:97 [ 36.498534][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.518843][ T915] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 36.558491][ T444] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.589490][ T444] usb 2-1: device descriptor read/8, error -71 [ 36.601364][ T921] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 36.610552][ T921] rust_binder: Write failure EINVAL in pid:106 [ 36.660875][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.677932][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.687718][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 36.696770][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.705904][ T9] usb 3-1: config 0 descriptor?? [ 36.740170][ T444] usb 2-1: device descriptor read/8, error -71 [ 36.758831][ T45] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 36.868475][ T64] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.913289][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 36.919310][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 36.928318][ T9] usb 3-1: USB disconnect, device number 7 [ 36.988476][ T444] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.009379][ T444] usb 2-1: device descriptor read/8, error -71 [ 37.019504][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.029166][ T64] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.038823][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.053032][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 37.062130][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 37.070222][ T64] usb 1-1: Product: syz [ 37.074366][ T64] usb 1-1: Manufacturer: syz [ 37.078978][ T64] usb 1-1: SerialNumber: syz [ 37.139591][ T444] usb 2-1: device descriptor read/8, error -71 [ 37.248597][ T444] usb usb2-port1: unable to enumerate USB device [ 37.285775][ T64] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 37.469304][ T926] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 37.486958][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 37.486971][ T36] audit: type=1400 audit(1754934685.020:242): avc: denied { read write } for pid=922 comm="syz.0.146" name="lp0" dev="devtmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 37.493693][ T9] usb 1-1: USB disconnect, device number 7 [ 37.516701][ T36] audit: type=1400 audit(1754934685.030:243): avc: denied { open } for pid=922 comm="syz.0.146" path="/dev/usb/lp0" dev="devtmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 37.525481][ T9] usblp0: removed [ 37.559690][ T45] lenovo 0003:17EF:6047.0006: Sensitivity setting failed: -71 [ 37.574268][ T45] usb 4-1: USB disconnect, device number 6 [ 37.651751][ T36] audit: type=1400 audit(1754934685.190:244): avc: denied { view } for pid=930 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.834107][ T935] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 38.038944][ T940] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 38.048985][ T942] binder: Bad value for 'stats' [ 38.101918][ T951] rust_binder: Error in use_page_slow: ESRCH [ 38.101933][ T951] rust_binder: use_range failure ESRCH [ 38.110489][ T947] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 38.123748][ T951] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 38.123769][ T951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.131605][ T951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:119 [ 38.141765][ T951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 38.296376][ T961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'. [ 38.315486][ T961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=961 comm=syz.3.159 [ 38.546595][ T36] audit: type=1400 audit(1754934686.080:245): avc: denied { create } for pid=967 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.863525][ T36] audit: type=1400 audit(1754934686.400:246): avc: denied { setopt } for pid=976 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.882883][ T36] audit: type=1400 audit(1754934686.400:247): avc: denied { sqpoll } for pid=976 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.902145][ T36] audit: type=1400 audit(1754934686.400:248): avc: denied { map } for pid=976 comm="syz.1.164" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.926024][ T36] audit: type=1400 audit(1754934686.400:249): avc: denied { write } for pid=976 comm="syz.1.164" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.950889][ T36] audit: type=1400 audit(1754934686.410:250): avc: denied { bind } for pid=976 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.981034][ T987] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 39.181462][ T997] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 39.189185][ T997] netlink: 'syz.0.170': attribute type 2 has an invalid length. [ 39.268127][ T1000] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 39.277477][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 39.279707][ T36] audit: type=1400 audit(1754934686.810:251): avc: denied { ioctl } for pid=999 comm="syz.3.171" path="socket:[8649]" dev="sockfs" ino=8649 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.301267][ T1000] rust_binder: Write failure EFAULT in pid:113 [ 40.179581][ T1012] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 40.272912][ T1022] netlink: 'syz.0.177': attribute type 12 has an invalid length. [ 40.608511][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.758481][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 40.764679][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 40.773796][ T45] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 40.783456][ T45] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 40.793102][ T45] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 40.802827][ T45] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 40.812549][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 40.819165][ T45] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 40.828169][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.838802][ T45] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 40.978502][ T984] Bluetooth: hci0: command 0x1003 tx timeout [ 40.978646][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.038368][ T45] scsi host1: usb-storage 1-1:1.0 [ 41.242344][ T45] usb 1-1: USB disconnect, device number 8 [ 41.298509][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 41.298517][ T985] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 41.321400][ T1039] netlink: 'syz.3.182': attribute type 16 has an invalid length. [ 41.329170][ T1039] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.182'. [ 41.341924][ T1039] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 41.349149][ T1039] rust_binder: Write failure EINVAL in pid:115 [ 41.359421][ T1042] incfs_lookup_dentry err:-13 [ 41.470316][ T1044] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 41.549772][ T1049] mmap: syz.3.186 (1049): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 41.738511][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.879731][ T64] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.889258][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.890052][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 41.901681][ T45] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.909966][ T45] usb 3-1: config 179 has no interface number 0 [ 41.916281][ T45] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 41.927562][ T45] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 41.939596][ T45] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.950815][ T45] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.964122][ T45] usb 3-1: config 179 interface 65 has no altsetting 0 [ 41.971035][ T45] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 41.980087][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.991593][ T45] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input4 [ 42.010865][ T1071] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 42.038510][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 42.043859][ T94] input input4: unable to receive magic message: -110 [ 42.044827][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.063083][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.072931][ T64] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 42.073135][ T94] input input4: unable to receive magic message: -32 [ 42.082091][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.105241][ T64] usb 4-1: config 0 descriptor?? [ 42.110507][ T94] input input4: unable to receive magic message: -32 [ 42.128509][ T444] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.258506][ T444] usb 1-1: device descriptor read/64, error -71 [ 42.498529][ T444] usb 1-1: device descriptor read/64, error -71 [ 42.520896][ T64] koneplus 0003:1E7D:2D51.0007: invalid report_size 873089763 [ 42.528383][ T64] koneplus 0003:1E7D:2D51.0007: item 0 4 1 7 parsing failed [ 42.535929][ T64] koneplus 0003:1E7D:2D51.0007: parse failed [ 42.541960][ T64] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -22 [ 42.551487][ T1087] rust_binder: Write failure EFAULT in pid:100 [ 42.613235][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 42.613252][ T36] audit: type=1400 audit(1754934690.150:268): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.724060][ T36] audit: type=1400 audit(1754934690.260:269): avc: denied { ioctl } for pid=1061 comm="syz.3.190" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 42.749303][ T421] usb 4-1: USB disconnect, device number 7 [ 42.778469][ T444] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 42.888494][ T64] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.918462][ T444] usb 1-1: device descriptor read/64, error -71 [ 43.038478][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 43.044680][ T64] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.052769][ T64] usb 2-1: config 0 has no interface number 0 [ 43.059244][ T64] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.070132][ T64] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.079889][ T64] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 43.088936][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.097570][ T64] usb 2-1: config 0 descriptor?? [ 43.168501][ T444] usb 1-1: device descriptor read/64, error -71 [ 43.278883][ T444] usb usb1-port1: attempt power cycle [ 43.498503][ T45] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 43.512908][ T64] uclogic 0003:28BD:0071.0008: failed retrieving string descriptor #100: -71 [ 43.531677][ T64] uclogic 0003:28BD:0071.0008: failed retrieving pen parameters: -71 [ 43.541438][ T64] uclogic 0003:28BD:0071.0008: pen probing failed: -71 [ 43.548367][ T64] uclogic 0003:28BD:0071.0008: failed probing parameters: -71 [ 43.558508][ T64] uclogic 0003:28BD:0071.0008: probe with driver uclogic failed with error -71 [ 43.569205][ T64] usb 2-1: USB disconnect, device number 8 [ 43.591440][ T1096] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004' [ 43.599730][ T36] audit: type=1400 audit(1754934691.140:270): avc: denied { bind } for pid=1095 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.619642][ T444] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 43.628474][ T45] usb 4-1: device descriptor read/64, error -71 [ 43.639457][ T444] usb 1-1: device descriptor read/8, error -71 [ 43.769532][ T444] usb 1-1: device descriptor read/8, error -71 [ 43.878478][ T45] usb 4-1: device descriptor read/64, error -71 [ 43.898483][ T64] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 43.938468][ T985] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.938477][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 44.008476][ T444] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.029504][ T444] usb 1-1: device descriptor read/8, error -71 [ 44.049670][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.059962][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.069535][ T64] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 44.078592][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.086570][ T64] usb 2-1: SerialNumber: syz [ 44.118491][ T45] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 44.159639][ T444] usb 1-1: device descriptor read/8, error -71 [ 44.248512][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.268568][ T444] usb usb1-port1: unable to enumerate USB device [ 44.294819][ T64] usb 2-1: 0:2 : does not exist [ 44.299773][ T64] usb 2-1: unit 5 not found! [ 44.305911][ T64] usb 2-1: USB disconnect, device number 9 [ 44.313199][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.488500][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.519286][ T421] usb 3-1: USB disconnect, device number 8 [ 44.519316][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 44.533459][ T421] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 44.598574][ T45] usb usb4-port1: attempt power cycle [ 44.604434][ T1099] binder: Bad value for 'defcontext' [ 44.639334][ T1101] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 44.793657][ T36] audit: type=1400 audit(1754934692.330:271): avc: denied { append } for pid=1106 comm="syz.2.205" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.938486][ T45] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 44.959539][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.089536][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.098501][ T421] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.118492][ T330] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 45.249608][ T421] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 45.258742][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.267255][ T421] usb 2-1: config 0 descriptor?? [ 45.269778][ T330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.280293][ T330] usb 3-1: not running at top speed; connect to a high speed hub [ 45.288980][ T330] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 45.297357][ T330] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 45.305598][ T330] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 45.314727][ T330] usb 3-1: config 129 has no interface number 0 [ 45.321003][ T444] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.328590][ T330] usb 3-1: config 129 has no interface number 1 [ 45.334844][ T330] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 45.348079][ T45] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 45.355728][ T330] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 45.366860][ T330] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 45.380041][ T330] usb 3-1: config 129 interface 135 has no altsetting 0 [ 45.387006][ T330] usb 3-1: config 129 interface 5 has no altsetting 0 [ 45.394587][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.401595][ T330] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 45.410661][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.418658][ T330] usb 3-1: Product: syz [ 45.422805][ T330] usb 3-1: Manufacturer: syz [ 45.427387][ T330] usb 3-1: SerialNumber: syz [ 45.475784][ T421] usb 2-1: Cannot read MAC address [ 45.481034][ T421] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 45.493211][ T421] usb 2-1: USB disconnect, device number 10 [ 45.519455][ T444] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.529605][ T444] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.539227][ T444] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 45.548319][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.556366][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.562574][ T444] usb 1-1: SerialNumber: syz [ 45.639170][ T330] usb 3-1: MIDIStreaming interface descriptor not found [ 45.649120][ T330] usb 3-1: USB disconnect, device number 9 [ 45.668599][ T45] usb usb4-port1: unable to enumerate USB device [ 45.770743][ T444] usb 1-1: 0:2 : does not exist [ 45.775638][ T444] usb 1-1: unit 5 not found! [ 45.781831][ T444] usb 1-1: USB disconnect, device number 13 [ 46.175259][ T1151] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 46.183898][ T1151] rust_binder: Write failure EINVAL in pid:119 [ 46.266559][ T1159] binder: Bad value for 'stats' [ 46.282023][ T421] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.298757][ T1162] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 46.309596][ T36] audit: type=1400 audit(1754934693.850:272): avc: denied { remount } for pid=1161 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.379713][ T1173] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 46.391778][ T1168] rust_binder: Failed copying remainder into alloc: EFAULT [ 46.391796][ T1168] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 46.399311][ T1168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.407597][ T1168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:131 [ 46.438653][ T421] usb 2-1: Using ep0 maxpacket: 16 [ 46.454031][ T421] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 46.462129][ T421] usb 2-1: config 0 has no interface number 0 [ 46.468201][ T421] usb 2-1: config 0 interface 18 has no altsetting 0 [ 46.476269][ T421] usb 2-1: New USB device found, idVendor=55aa, idProduct=a10b, bcdDevice=7a.1a [ 46.485376][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.493391][ T421] usb 2-1: Product: syz [ 46.497563][ T421] usb 2-1: Manufacturer: syz [ 46.502354][ T421] usb 2-1: SerialNumber: syz [ 46.508415][ T421] usb 2-1: config 0 descriptor?? [ 46.527273][ T1177] /dev/rnullb0: Can't open blockdev [ 46.533686][ T36] audit: type=1400 audit(1754934694.080:273): avc: denied { write } for pid=1179 comm="syz.0.230" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.590304][ T36] audit: type=1400 audit(1754934694.130:274): avc: denied { read } for pid=1179 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.688624][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 46.727056][ T36] audit: type=1400 audit(1754934694.260:275): avc: denied { getopt } for pid=1146 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.770371][ T421] usb 2-1: USB disconnect, device number 11 [ 46.798485][ T64] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.839564][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.849359][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 46.858376][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.866926][ T10] usb 4-1: config 0 descriptor?? [ 46.948474][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 46.954582][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.965459][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.978270][ T64] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.987320][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.995901][ T64] usb 3-1: config 0 descriptor?? [ 47.231807][ T36] audit: type=1400 audit(1754934694.770:276): avc: denied { bind } for pid=1206 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.275084][ T10] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 47.293124][ T1209] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 47.316631][ T1214] incfs: Error accessing: workdir=./bus,lowerdir=./file0,upperdir=./file1,. [ 47.325447][ T1214] incfs: mount failed -2 [ 47.379200][ T1223] rust_binder: 214: no such ref 0 [ 47.380072][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 47.384296][ T1223] rust_binder: 214: no such ref 1 [ 47.393316][ T1224] erspan0: default FDB implementation only supports local addresses [ 47.398235][ T1223] rust_binder: 214: no such ref 2 [ 47.412789][ T64] HID 045e:07da: Invalid code 65791 type 1 [ 47.419488][ T36] audit: type=1400 audit(1754934694.950:277): avc: denied { accept } for pid=1221 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.458623][ T64] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input7 [ 47.477635][ T64] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 47.649999][ T36] audit: type=1400 audit(1754934695.190:278): avc: denied { lock } for pid=1244 comm="syz.1.250" path="socket:[10149]" dev="sockfs" ino=10149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 47.812895][ T36] audit: type=1400 audit(1754934695.350:279): avc: denied { rename } for pid=1244 comm="syz.1.250" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 47.875635][ T421] usb 3-1: USB disconnect, device number 10 [ 48.091196][ T10] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71 [ 48.099988][ T10] usb 4-1: USB disconnect, device number 12 [ 48.442045][ T1254] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 48.514079][ T36] audit: type=1400 audit(1754934696.050:280): avc: denied { map } for pid=1256 comm="syz.1.253" path="socket:[10236]" dev="sockfs" ino=10236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.537659][ T36] audit: type=1400 audit(1754934696.050:281): avc: denied { accept } for pid=1256 comm="syz.1.253" path="socket:[10236]" dev="sockfs" ino=10236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.561716][ T36] audit: type=1400 audit(1754934696.050:282): avc: denied { append } for pid=1260 comm="syz.0.254" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.617992][ T36] audit: type=1400 audit(1754934696.150:283): avc: denied { connect } for pid=1267 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.661855][ T1273] netlink: 17 bytes leftover after parsing attributes in process `syz.0.258'. [ 48.684674][ T1277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 48.684706][ T1277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:232 [ 48.754188][ T1285] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 48.814562][ T36] audit: type=1400 audit(1754934696.350:284): avc: denied { sqpoll } for pid=1288 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.831441][ T1289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1289 comm=syz.1.264 [ 48.958527][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.045626][ T36] audit: type=1400 audit(1754934696.580:285): avc: denied { mounton } for pid=1299 comm="syz.1.267" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 49.045690][ T1300] /dev/rnullb0: Can't open blockdev [ 49.096982][ T1304] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 49.097156][ T36] audit: type=1400 audit(1754934696.630:286): avc: denied { execute } for pid=1303 comm="syz.1.269" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.097340][ T1304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 49.137949][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 49.143083][ T444] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 49.151575][ T45] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.159869][ T45] usb 1-1: config 179 has no interface number 0 [ 49.166452][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.177592][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 49.188847][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.199988][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 49.211416][ T45] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.225779][ T45] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 49.234882][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.243801][ T1283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.245622][ T1305] process 'syz.1.269' launched './file0' with NULL argv: empty string added [ 49.299405][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.309209][ T444] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 49.318238][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.326887][ T444] usb 4-1: config 0 descriptor?? [ 49.468524][ T421] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 49.598492][ T421] usb 3-1: device descriptor read/64, error -71 [ 49.658031][ T10] usb 1-1: USB disconnect, device number 14 [ 49.658082][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 49.672938][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 49.734620][ T444] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 49.838551][ T421] usb 3-1: device descriptor read/64, error -71 [ 49.994394][ T1313] rust_binder: 1312 RLIMIT_NICE not set [ 50.019456][ T1315] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.078492][ T421] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 50.089275][ T36] audit: type=1400 audit(1754934697.630:287): avc: denied { create } for pid=1322 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 50.099268][ T1323] fuse: Unknown parameter 'groux_id' [ 50.119108][ T1323] 9pnet_fd: Insufficient options for proto=fd [ 50.181564][ T1328] kvm: kvm [1327]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 50.190229][ T1328] kvm: kvm [1327]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 50.201191][ T1328] kvm: kvm [1327]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 50.212642][ T1328] kvm: kvm [1327]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 50.221142][ T421] usb 3-1: device descriptor read/64, error -71 [ 50.221269][ T1328] kvm: kvm [1327]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 50.230953][ T1334] fuse: Unknown parameter 'uootmode' [ 50.238416][ T1328] kvm_intel: kvm [1327]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 50.452596][ T1339] /dev/rnullb0: Can't open blockdev [ 50.468492][ T421] usb 3-1: device descriptor read/64, error -71 [ 50.510153][ T1343] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.536011][ T444] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 50.544891][ T444] usb 4-1: USB disconnect, device number 13 [ 50.578577][ T421] usb usb3-port1: attempt power cycle [ 50.918502][ T421] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 50.939559][ T421] usb 3-1: device descriptor read/8, error -71 [ 51.080046][ T421] usb 3-1: device descriptor read/8, error -71 [ 51.238335][ T1354] rust_binder: 153: no such ref 3 [ 51.243451][ T1354] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 51.250716][ T1354] rust_binder: 153: no such ref 2 [ 51.256511][ T1354] rust_binder: 153: no such ref 2 [ 51.261588][ T1354] rust_binder: 153: no such ref 3 [ 51.266604][ T1354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 51.278481][ T344] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 51.338492][ T421] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 51.359506][ T421] usb 3-1: device descriptor read/8, error -71 [ 51.439531][ T344] usb 1-1: config 0 has no interfaces? [ 51.446472][ T344] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 51.455814][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.463850][ T344] usb 1-1: Product: syz [ 51.468013][ T344] usb 1-1: Manufacturer: syz [ 51.472660][ T344] usb 1-1: SerialNumber: syz [ 51.478037][ T344] usb 1-1: config 0 descriptor?? [ 51.488944][ T1356] rust_binder: Write failure EINVAL in pid:250 [ 51.489225][ T1356] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 51.491944][ T421] usb 3-1: device descriptor read/8, error -71 [ 51.526898][ T1360] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 51.618599][ T421] usb usb3-port1: unable to enumerate USB device [ 51.687366][ T1348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.695914][ T1348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.704309][ T1348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 51.704328][ T1348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:241 [ 51.714126][ T444] usb 1-1: USB disconnect, device number 15 [ 51.778494][ T344] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.929510][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.940447][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.950188][ T344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.963212][ T344] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.972798][ T344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.981930][ T344] usb 2-1: config 0 descriptor?? [ 52.298471][ T64] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 52.390837][ T344] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 52.400756][ T344] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 52.448494][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 52.454774][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.464890][ T64] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 52.478520][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.487549][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.495534][ T64] usb 4-1: SerialNumber: syz [ 52.500446][ T421] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 52.510038][ T64] usb 4-1: bad CDC descriptors [ 52.648502][ T329] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.660056][ T421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.669873][ T421] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 52.678940][ T421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.687437][ T421] usb 1-1: config 0 descriptor?? [ 52.710978][ T444] usb 4-1: USB disconnect, device number 14 [ 52.798475][ T329] usb 3-1: Using ep0 maxpacket: 8 [ 52.804568][ T329] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.812931][ T329] usb 3-1: config 179 has no interface number 0 [ 52.819221][ T329] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 52.830321][ T329] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 52.841566][ T329] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.852699][ T329] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 52.864081][ T329] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.877303][ T329] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.886544][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.895553][ T1379] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 53.097837][ T421] lenovo 0003:17EF:6047.000D: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 53.200919][ T64] usb 2-1: USB disconnect, device number 12 [ 53.244014][ T633] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.308830][ T419] usb 3-1: USB disconnect, device number 15 [ 53.308959][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 53.323763][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 53.717530][ T1389] overlayfs: failed to resolve './bus': -2 [ 53.735788][ T1394] netlink: 84 bytes leftover after parsing attributes in process `syz.1.300'. [ 53.735809][ T1395] netlink: 84 bytes leftover after parsing attributes in process `syz.1.300'. [ 53.753731][ T1395] rust_binder: Error in use_page_slow: ESRCH [ 53.753747][ T1395] rust_binder: use_range failure ESRCH [ 53.758515][ T1394] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 53.759764][ T1395] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 53.765149][ T1394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 53.765170][ T1394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:265 [ 53.773188][ T1395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.799655][ T1395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:265 [ 53.831867][ T1399] rust_binder: 157: no such ref 0 [ 53.867593][ T1397] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 53.898272][ T421] lenovo 0003:17EF:6047.000D: Sensitivity setting failed: -71 [ 53.908534][ T421] usb 1-1: USB disconnect, device number 16 [ 53.917588][ T1403] netlink: 'syz.1.303': attribute type 16 has an invalid length. [ 53.925386][ T1403] netlink: 'syz.1.303': attribute type 3 has an invalid length. [ 53.933045][ T1403] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.303'. [ 53.943043][ T1403] binder: Unknown parameter 'stats [ 53.943043][ T1403] qj6SAB5A' [ 53.953096][ T1402] rust_binder: Write failure EFAULT in pid:271 [ 53.954559][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 53.954574][ T36] audit: type=1400 audit(1754934701.500:293): avc: granted { setsecparam } for pid=1398 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 53.969980][ T1407] netlink: 'syz.1.304': attribute type 27 has an invalid length. [ 54.588808][ T36] audit: type=1400 audit(1754934702.130:294): avc: denied { unmount } for pid=623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.879912][ T1431] netlink: 'syz.1.312': attribute type 29 has an invalid length. [ 54.887820][ T1431] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.312'. [ 54.903491][ T1431] SELinux: policydb magic number 0x37373130 does not match expected magic number 0xf97cff8c [ 54.908296][ T36] audit: type=1400 audit(1754934702.440:295): avc: denied { load_policy } for pid=1430 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.918516][ T1431] SELinux: failed to load policy [ 55.251665][ T419] rust_binder: 1452: removing orphan mapping 0:24 [ 55.298516][ T985] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.298693][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 55.318651][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.326047][ T36] audit: type=1400 audit(1754934702.860:296): avc: denied { create } for pid=1459 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 55.345543][ T36] audit: type=1400 audit(1754934702.860:297): avc: denied { create } for pid=1459 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.366022][ T36] audit: type=1400 audit(1754934702.860:298): avc: denied { write } for pid=1459 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.418486][ T36] audit: type=1400 audit(1754934702.860:299): avc: denied { nlmsg_write } for pid=1459 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.439526][ T64] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.440353][ T36] audit: type=1400 audit(1754934702.860:300): avc: denied { ioctl } for pid=1459 comm="syz.3.323" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.489849][ T36] audit: type=1400 audit(1754934702.860:301): avc: denied { read } for pid=1459 comm="syz.3.323" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.516253][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.526430][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 55.528467][ T419] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 55.536767][ T36] audit: type=1400 audit(1754934702.860:302): avc: denied { open } for pid=1459 comm="syz.3.323" path="/57/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.567099][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.584916][ T45] usb 3-1: config 0 descriptor?? [ 55.598476][ T64] usb 2-1: Using ep0 maxpacket: 8 [ 55.618222][ T64] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 55.626880][ T64] usb 2-1: config 179 has no interface number 0 [ 55.637033][ T64] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 55.648141][ T64] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 55.659869][ T64] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.671681][ T64] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 55.683686][ T64] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 55.696944][ T64] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 55.705987][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.717264][ T1451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 55.738463][ T419] usb 1-1: Using ep0 maxpacket: 8 [ 55.746497][ T419] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 55.756463][ T419] usb 1-1: config 179 has no interface number 0 [ 55.763524][ T419] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 55.775426][ T419] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 55.786854][ T419] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.798108][ T419] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 55.809576][ T419] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 55.822972][ T419] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 55.832059][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.843159][ T1458] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 55.908485][ T444] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 56.001640][ T45] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 56.061666][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.072632][ T444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 56.085909][ T444] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 56.095962][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.105850][ T444] usb 4-1: config 0 descriptor?? [ 56.288494][ T329] usb 1-1: USB disconnect, device number 17 [ 56.288535][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 56.308607][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 56.327615][ T64] usb 2-1: USB disconnect, device number 13 [ 56.333555][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 56.333581][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 56.532556][ T444] wacom 0003:056A:0003.000F: unknown main item tag 0x0 [ 56.539556][ T444] wacom 0003:056A:0003.000F: unknown main item tag 0x0 [ 56.546436][ T444] wacom 0003:056A:0003.000F: unknown main item tag 0x0 [ 56.553373][ T444] wacom 0003:056A:0003.000F: unknown main item tag 0x0 [ 56.560266][ T444] wacom 0003:056A:0003.000F: unknown main item tag 0x0 [ 56.567409][ T444] wacom 0003:056A:0003.000F: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 56.578466][ T444] wacom 0003:056A:0003.000F: hidraw1: USB HID vff.fc Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0 [ 56.591141][ T444] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.000F/input/input9 [ 56.739607][ T344] usb 4-1: USB disconnect, device number 15 [ 56.778466][ T329] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 56.809915][ T45] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 56.825077][ T45] usb 3-1: USB disconnect, device number 16 [ 56.950606][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.960771][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.971458][ T329] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 56.980565][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.989818][ T329] usb 1-1: SerialNumber: syz [ 57.210406][ T329] usb 1-1: 0:2 : does not exist [ 57.221417][ T329] usb 1-1: USB disconnect, device number 18 [ 57.292022][ T1136] udevd[1136]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.351531][ T1489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 57.387616][ T1489] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 57.405508][ T1489] netlink: 'syz.3.333': attribute type 6 has an invalid length. [ 57.423329][ T1489] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.333'. [ 57.528707][ T1495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.528736][ T1495] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 57.538127][ T1495] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:176 [ 57.626518][ T64] rust_binder: 1494: removing orphan mapping 0:24 [ 57.731380][ T1505] rust_binder: Error while translating object. [ 57.731432][ T1505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 57.737626][ T1505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:183 [ 57.796909][ T1508] overlayfs: overlapping lowerdir path [ 57.839352][ T344] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 57.998465][ T344] usb 4-1: Using ep0 maxpacket: 32 [ 58.016596][ T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.030997][ T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.041442][ T344] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.051110][ T344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.062806][ T344] usb 4-1: config 0 descriptor?? [ 58.079976][ T344] hub 4-1:0.0: USB hub found [ 58.228507][ T329] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 58.289908][ T344] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 58.371337][ T1530] rust_binder: Write failure EFAULT in pid:203 [ 58.390824][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.401009][ T329] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 58.411180][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.422090][ T329] usb 1-1: config 0 descriptor?? [ 58.501189][ T344] hid-generic 0003:046D:C31C.0010: item fetching failed at offset 0/1 [ 58.516925][ T344] hid-generic 0003:046D:C31C.0010: probe with driver hid-generic failed with error -22 [ 58.802680][ T1552] rust_binder: Write failure EINVAL in pid:225 [ 58.803010][ T1552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.828839][ T344] usb 4-1: USB disconnect, device number 16 [ 58.843190][ T329] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 58.866856][ T1553] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 58.877543][ T1553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 59.041751][ T36] kauditd_printk_skb: 879 callbacks suppressed [ 59.041769][ T36] audit: type=1400 audit(1754934706.580:1170): avc: denied { ioctl } for pid=1516 comm="syz.0.343" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.082289][ T36] audit: type=1400 audit(1754934706.580:1171): avc: denied { ioctl } for pid=1516 comm="syz.0.343" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.238643][ T36] audit: type=1400 audit(1754934706.780:1172): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.288577][ T36] audit: type=1400 audit(1754934706.780:1173): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.321856][ T36] audit: type=1400 audit(1754934706.780:1174): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.356257][ T36] audit: type=1400 audit(1754934706.800:1175): avc: denied { read } for pid=1555 comm="syz.3.357" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.378283][ T36] audit: type=1400 audit(1754934706.800:1176): avc: denied { read open } for pid=1555 comm="syz.3.357" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.402277][ T36] audit: type=1400 audit(1754934706.800:1177): avc: denied { create } for pid=1555 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.424761][ T36] audit: type=1400 audit(1754934706.800:1178): avc: denied { read write } for pid=1555 comm="syz.3.357" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.447837][ T36] audit: type=1400 audit(1754934706.800:1179): avc: denied { read write open } for pid=1555 comm="syz.3.357" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.682148][ T329] lenovo 0003:17EF:6047.0011: Sensitivity setting failed: -71 [ 59.703099][ T329] usb 1-1: USB disconnect, device number 19 [ 59.714122][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 60.131638][ T1597] rust_binder: Write failure EFAULT in pid:308 [ 60.139504][ T1598] random: crng reseeded on system resumption [ 60.346018][ T1611] rust_binder: Write failure EFAULT in pid:282 [ 60.479070][ T344] rust_binder: 1617: removing orphan mapping 0:1048 [ 60.588666][ T64] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 60.700494][ T1631] 9pnet_fd: Insufficient options for proto=fd [ 60.731183][ T1631] __vm_enough_memory: pid: 1631, comm: syz.1.381, bytes: 18014402804453376 not enough memory for the allocation [ 60.782576][ T64] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 60.809065][ T64] usb 4-1: string descriptor 0 read error: -22 [ 60.815446][ T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.855699][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.885109][ T64] usb 4-1: found format II with max.bitrate = 65528, frame size=65535 [ 60.918458][ T64] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 61.177352][ T64] usb 4-1: USB disconnect, device number 17 [ 61.269180][ T1136] udevd[1136]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.308472][ T329] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 61.333618][ T1652] can: request_module (can-proto-5) failed. [ 61.487270][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.509373][ T329] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 61.523915][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.533206][ T329] usb 2-1: config 0 descriptor?? [ 61.688488][ T64] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 61.758631][ T344] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 61.840582][ T64] usb 3-1: config 125 has an invalid interface number: 15 but max is 1 [ 61.848902][ T64] usb 3-1: config 125 has an invalid interface number: 220 but max is 1 [ 61.857236][ T64] usb 3-1: config 125 has no interface number 0 [ 61.863506][ T64] usb 3-1: config 125 has no interface number 1 [ 61.869812][ T64] usb 3-1: config 125 interface 15 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 61.880900][ T64] usb 3-1: config 125 interface 15 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 61.891916][ T64] usb 3-1: config 125 interface 15 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 61.903015][ T64] usb 3-1: config 125 interface 15 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 61.914064][ T64] usb 3-1: config 125 interface 15 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 61.925026][ T344] usb 1-1: Using ep0 maxpacket: 8 [ 61.930106][ T64] usb 3-1: config 125 interface 15 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 61.941172][ T64] usb 3-1: config 125 interface 15 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 61.949846][ T329] lenovo 0003:17EF:6047.0012: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 61.962795][ T64] usb 3-1: config 125 interface 15 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 61.974891][ T344] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 61.983172][ T64] usb 3-1: config 125 interface 15 altsetting 2 endpoint 0x7 has invalid maxpacket 14134, setting to 64 [ 61.994661][ T344] usb 1-1: config 179 has no interface number 0 [ 62.001633][ T344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 62.013161][ T64] usb 3-1: config 125 interface 15 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 62.024473][ T344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 62.035730][ T64] usb 3-1: config 125 interface 15 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 62.046516][ T344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 62.058675][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0x8, skipping [ 62.070316][ T344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 62.081744][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0x1, skipping [ 62.100155][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xA, skipping [ 62.103245][ T1659] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 62.111221][ T344] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 62.132477][ T64] usb 3-1: config 125 interface 220 altsetting 208 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 62.144978][ T344] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 62.154448][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xD, skipping [ 62.165510][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.173537][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xD, skipping [ 62.184981][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xA, skipping [ 62.197839][ T1656] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 62.222057][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xF, skipping [ 62.244678][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xF, skipping [ 62.256347][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xB, skipping [ 62.269344][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0x5, skipping [ 62.298565][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xD, skipping [ 62.328453][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xE, skipping [ 62.348478][ T64] usb 3-1: config 125 interface 220 altsetting 208 has a duplicate endpoint with address 0xC, skipping [ 62.361768][ T64] usb 3-1: config 125 interface 15 has no altsetting 0 [ 62.371272][ T64] usb 3-1: config 125 interface 220 has no altsetting 0 [ 62.381745][ T64] usb 3-1: Dual-Role OTG device on HNP port [ 62.388893][ T64] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=73.5a [ 62.398195][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.406316][ T64] usb 3-1: Product: 偅ꓑ뺥뵮樲哤樨腓薥Ề퀲킳ᾡ埊 [ 62.414293][ T64] usb 3-1: Manufacturer: љ [ 62.419703][ T64] usb 3-1: SerialNumber: ﳿ [ 62.442387][ T1654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.450985][ T421] usb 1-1: USB disconnect, device number 20 [ 62.456908][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 62.456943][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 62.702990][ T64] usb 3-1: USB disconnect, device number 17 [ 62.757849][ T329] lenovo 0003:17EF:6047.0012: Sensitivity setting failed: -71 [ 62.769300][ T329] usb 2-1: USB disconnect, device number 14 [ 62.822142][ T1686] kvm_intel: kvm [1685]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x5 [ 62.908497][ T444] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 62.962399][ T1691] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 62.970689][ T1692] netlink: 'syz.3.400': attribute type 16 has an invalid length. [ 62.978413][ T1692] netlink: 'syz.3.400': attribute type 3 has an invalid length. [ 62.981367][ T1691] netlink: 'syz.3.400': attribute type 2 has an invalid length. [ 62.996706][ T1692] netlink: 64058 bytes leftover after parsing attributes in process `syz.3.400'. [ 63.060914][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 63.072202][ T444] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 63.098449][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.108005][ T444] usb 1-1: config 0 descriptor?? [ 63.134726][ T1682] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 63.336702][ T633] Bluetooth: hci1: Frame reassembly failed (-84) [ 63.493880][ T1714] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 63.493909][ T1714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 63.502224][ T1714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:236 [ 63.542753][ T1716] 8021q: VLANs not supported on ip_vti0 [ 63.621332][ T444] hid-generic 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 64.097486][ T36] kauditd_printk_skb: 1390 callbacks suppressed [ 64.097502][ T36] audit: type=1400 audit(1754934711.630:2570): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.188493][ T36] audit: type=1400 audit(1754934711.670:2571): avc: denied { ioctl } for pid=1731 comm="syz.3.414" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.238601][ T36] audit: type=1400 audit(1754934711.670:2572): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.258465][ T64] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 64.276904][ T36] audit: type=1400 audit(1754934711.670:2573): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.302411][ T36] audit: type=1400 audit(1754934711.700:2574): avc: denied { create } for pid=1733 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.323462][ T36] audit: type=1400 audit(1754934711.700:2575): avc: denied { create } for pid=1733 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.345805][ T36] audit: type=1400 audit(1754934711.700:2576): avc: denied { write } for pid=1733 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.366351][ T36] audit: type=1400 audit(1754934711.700:2577): avc: denied { write } for pid=1733 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.402154][ T36] audit: type=1400 audit(1754934711.700:2578): avc: denied { read } for pid=1733 comm="syz.2.415" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.456526][ T36] audit: type=1400 audit(1754934711.700:2579): avc: denied { read open } for pid=1733 comm="syz.2.415" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.501845][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.512047][ T64] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 64.528261][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.539873][ T64] usb 4-1: config 0 descriptor?? [ 64.569610][ T1737] overlay: ./file0/file0 is not a directory [ 64.758480][ T444] usb 1-1: reset full-speed USB device number 21 using dummy_hcd [ 64.957197][ T64] lenovo 0003:17EF:6047.0014: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 65.155665][ T64] lenovo 0003:17EF:6047.0014: Failed to switch F7/9/11 mode: -71 [ 65.166678][ T64] lenovo 0003:17EF:6047.0014: Failed to switch middle button: -71 [ 65.174810][ T64] lenovo 0003:17EF:6047.0014: Fn-lock setting failed: -71 [ 65.182145][ T64] lenovo 0003:17EF:6047.0014: Sensitivity setting failed: -71 [ 65.193116][ T64] usb 4-1: USB disconnect, device number 18 [ 65.378512][ T985] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.378528][ T984] Bluetooth: hci0: command 0x1003 tx timeout [ 65.378549][ T984] Bluetooth: hci1: command 0x1003 tx timeout [ 65.384614][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 65.538729][ T330] usb 1-1: USB disconnect, device number 21 [ 79.925144][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 79.925161][ T36] audit: type=1400 audit(1754934727.460:2649): avc: denied { write } for pid=1741 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.930477][ T1748] ./cgroup: Can't lookup blockdev [ 79.939068][ T36] audit: type=1400 audit(1754934727.460:2650): avc: denied { write } for pid=1741 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.982125][ T36] audit: type=1400 audit(1754934727.460:2651): avc: denied { mounton } for pid=1743 comm="syz.2.419" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 80.008877][ T36] audit: type=1400 audit(1754934727.480:2652): avc: denied { read write } for pid=1741 comm="syz.0.417" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.032743][ T1749] input: syz1 as /devices/virtual/input/input14 [ 80.033436][ T36] audit: type=1400 audit(1754934727.480:2653): avc: denied { read write open } for pid=1741 comm="syz.0.417" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.110395][ T1749] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.116970][ T1749] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 80.138151][ T36] audit: type=1400 audit(1754934727.500:2654): avc: denied { read write } for pid=1745 comm="syz.3.420" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.139779][ T1749] audit: backlog limit exceeded [ 80.194240][ T1749] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.338471][ T421] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 80.441955][ T1765] netlink: 5 bytes leftover after parsing attributes in process `syz.3.423'. [ 80.490916][ T421] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 80.505719][ T421] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 80.523543][ T421] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 80.546673][ T421] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.561286][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.577547][ T421] usb 2-1: config 0 descriptor?? [ 80.587918][ T421] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 80.738465][ T444] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 80.830775][ T64] usb 2-1: USB disconnect, device number 15 [ 80.974544][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.982873][ T1773] fuse: Bad value for 'user_id' [ 80.994064][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.000441][ T1773] fuse: Bad value for 'user_id' [ 81.439283][ T1777] rust_binder: Write failure EFAULT in pid:334 [ 81.988699][ T1785] rust_binder: Got transaction with invalid offset. [ 81.995043][ T1785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.002485][ T1785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 82.058456][ T64] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 82.149978][ T1789] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.159992][ T1789] FAULT_INJECTION: forcing a failure. [ 82.159992][ T1789] name failslab, interval 1, probability 0, space 0, times 1 [ 82.172671][ T1789] CPU: 0 UID: 0 PID: 1789 Comm: syz.1.432 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 82.172699][ T1789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.172718][ T1789] Call Trace: [ 82.172725][ T1789] [ 82.172733][ T1789] __dump_stack+0x21/0x30 [ 82.172765][ T1789] dump_stack_lvl+0x10c/0x190 [ 82.172788][ T1789] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.172810][ T1789] ? avc_has_perm+0x144/0x220 [ 82.172833][ T1789] ? __cfi_avc_has_perm+0x10/0x10 [ 82.172880][ T1789] dump_stack+0x19/0x20 [ 82.172900][ T1789] should_fail_ex+0x3d9/0x530 [ 82.172925][ T1789] should_failslab+0xac/0x100 [ 82.172936][ T1789] __kmalloc_cache_noprof+0x41/0x3c0 [ 82.172950][ T1789] ? vhost_task_create+0x101/0x350 [ 82.172962][ T1789] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 82.172981][ T1789] vhost_task_create+0x101/0x350 [ 82.172998][ T1789] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 82.173019][ T1789] ? __cfi_vhost_task_create+0x10/0x10 [ 82.173037][ T1789] ? __cfi_vhost_task_fn+0x10/0x10 [ 82.173053][ T1789] ? __kasan_check_write+0x18/0x20 [ 82.173072][ T1789] ? mutex_lock+0x92/0x1c0 [ 82.173084][ T1789] ? __cfi_mutex_lock+0x10/0x10 [ 82.173098][ T1789] ? kernel_text_address+0xa9/0xe0 [ 82.173111][ T1789] kvm_mmu_post_init_vm+0x1a6/0x310 [ 82.173124][ T1789] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 82.173143][ T1789] ? _parse_integer_limit+0x195/0x1e0 [ 82.173168][ T1789] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 82.173190][ T1789] ? kstrtoull+0x13b/0x1e0 [ 82.173211][ T1789] ? kstrtouint+0x78/0xf0 [ 82.173233][ T1789] ? ioctl_has_perm+0x1aa/0x4d0 [ 82.173247][ T1789] ? __asan_memcpy+0x5a/0x80 [ 82.173259][ T1789] ? ioctl_has_perm+0x3e0/0x4d0 [ 82.173269][ T1789] ? has_cap_mac_admin+0xd0/0xd0 [ 82.173286][ T1789] ? __kasan_check_write+0x18/0x20 [ 82.173309][ T1789] ? mutex_lock_killable+0x92/0x1c0 [ 82.173333][ T1789] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.173354][ T1789] ? proc_fail_nth_write+0x17e/0x210 [ 82.173374][ T1789] kvm_vcpu_ioctl+0x96f/0xee0 [ 82.173399][ T1789] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.173424][ T1789] ? __cfi_vfs_write+0x10/0x10 [ 82.173449][ T1789] ? __kasan_check_write+0x18/0x20 [ 82.173471][ T1789] ? mutex_unlock+0x8b/0x240 [ 82.173491][ T1789] ? __cfi_mutex_unlock+0x10/0x10 [ 82.173503][ T1789] ? __fget_files+0x2c5/0x340 [ 82.173513][ T1789] ? __fget_files+0x2c5/0x340 [ 82.173523][ T1789] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.173535][ T1789] ? security_file_ioctl+0x34/0xd0 [ 82.173546][ T1789] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.173564][ T1789] __se_sys_ioctl+0x132/0x1b0 [ 82.173584][ T1789] __x64_sys_ioctl+0x7f/0xa0 [ 82.173602][ T1789] x64_sys_call+0x1878/0x2ee0 [ 82.173625][ T1789] do_syscall_64+0x58/0xf0 [ 82.173643][ T1789] ? clear_bhb_loop+0x50/0xa0 [ 82.173664][ T1789] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.173687][ T1789] RIP: 0033:0x7fdc3838ebe9 [ 82.173708][ T1789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.173723][ T1789] RSP: 002b:00007fdc3926b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.173744][ T1789] RAX: ffffffffffffffda RBX: 00007fdc385b5fa0 RCX: 00007fdc3838ebe9 [ 82.173758][ T1789] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 82.173771][ T1789] RBP: 00007fdc3926b090 R08: 0000000000000000 R09: 0000000000000000 [ 82.173783][ T1789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.173794][ T1789] R13: 00007fdc385b6038 R14: 00007fdc385b5fa0 R15: 00007ffe0c4d5fb8 [ 82.173810][ T1789] [ 82.550732][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.560842][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.571101][ T64] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.580146][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.588107][ T64] usb 1-1: SerialNumber: syz [ 82.687028][ T1797] rust_binder: Write failure EINVAL in pid:347 [ 82.690658][ T1797] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 82.978458][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.056529][ T64] usb 1-1: 0:2 : does not exist [ 83.064153][ T64] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 83.073887][ T64] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 83.078472][ T329] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 83.083468][ T64] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 83.102324][ T64] usb 1-1: USB disconnect, device number 22 [ 83.147606][ T1754] udevd[1754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.260644][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.270815][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.281522][ T329] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.290615][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.298617][ T329] usb 2-1: SerialNumber: syz [ 83.374435][ T1802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1802 comm=syz.0.436 [ 83.486695][ T1809] binder: Binderfs stats mode cannot be changed during a remount [ 83.507062][ T1811] rust_binder: Failed copying remainder into alloc: EFAULT [ 83.507085][ T1811] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 83.515735][ T329] usb 2-1: 0:2 : does not exist [ 83.537257][ T1811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 83.537284][ T1811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:322 [ 83.551791][ T329] usb 2-1: USB disconnect, device number 16 [ 83.729816][ T1818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 83.742149][ T1754] udevd[1754]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.773228][ T1821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 83.790097][ T1818] FAULT_INJECTION: forcing a failure. [ 83.790097][ T1818] name failslab, interval 1, probability 0, space 0, times 0 [ 83.820811][ T1818] CPU: 1 UID: 0 PID: 1818 Comm: syz.3.442 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 83.820841][ T1818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.820852][ T1818] Call Trace: [ 83.820858][ T1818] [ 83.820865][ T1818] __dump_stack+0x21/0x30 [ 83.820892][ T1818] dump_stack_lvl+0x10c/0x190 [ 83.820914][ T1818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.820938][ T1818] dump_stack+0x19/0x20 [ 83.820966][ T1818] should_fail_ex+0x3d9/0x530 [ 83.820992][ T1818] should_failslab+0xac/0x100 [ 83.821011][ T1818] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 83.821036][ T1818] ? dup_task_struct+0xbc/0xc50 [ 83.821055][ T1818] ? kasan_save_track+0x4f/0x80 [ 83.821073][ T1818] dup_task_struct+0xbc/0xc50 [ 83.821091][ T1818] ? __kasan_check_write+0x18/0x20 [ 83.821114][ T1818] ? _raw_spin_lock_irq+0x8d/0x120 [ 83.821134][ T1818] ? copy_process+0x3220/0x3220 [ 83.821153][ T1818] ? __kasan_check_write+0x18/0x20 [ 83.821176][ T1818] copy_process+0x538/0x3220 [ 83.821199][ T1818] ? __cfi_copy_process+0x10/0x10 [ 83.821219][ T1818] ? __kasan_check_write+0x18/0x20 [ 83.821242][ T1818] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 83.821262][ T1818] vhost_task_create+0x1d6/0x350 [ 83.821280][ T1818] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 83.821300][ T1818] ? __cfi_vhost_task_create+0x10/0x10 [ 83.821319][ T1818] ? __cfi_vhost_task_fn+0x10/0x10 [ 83.821336][ T1818] ? __kasan_check_write+0x18/0x20 [ 83.821358][ T1818] ? mutex_lock+0x92/0x1c0 [ 83.821380][ T1818] ? __cfi_mutex_lock+0x10/0x10 [ 83.821403][ T1818] ? kernel_text_address+0xa9/0xe0 [ 83.821424][ T1818] kvm_mmu_post_init_vm+0x1a6/0x310 [ 83.821446][ T1818] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 83.821467][ T1818] ? _parse_integer_limit+0x195/0x1e0 [ 83.821490][ T1818] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 83.821511][ T1818] ? kstrtoull+0x13b/0x1e0 [ 83.821533][ T1818] ? kstrtouint+0x78/0xf0 [ 83.821554][ T1818] ? ioctl_has_perm+0x1aa/0x4d0 [ 83.821573][ T1818] ? __asan_memcpy+0x5a/0x80 [ 83.821597][ T1818] ? ioctl_has_perm+0x3e0/0x4d0 [ 83.821616][ T1818] ? has_cap_mac_admin+0xd0/0xd0 [ 83.821636][ T1818] ? __kasan_check_write+0x18/0x20 [ 83.821658][ T1818] ? mutex_lock_killable+0x92/0x1c0 [ 83.821682][ T1818] ? __cfi_mutex_lock_killable+0x10/0x10 [ 83.821705][ T1818] ? proc_fail_nth_write+0x17e/0x210 [ 83.821728][ T1818] kvm_vcpu_ioctl+0x96f/0xee0 [ 83.821753][ T1818] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.821776][ T1818] ? __cfi_vfs_write+0x10/0x10 [ 83.821800][ T1818] ? __kasan_check_write+0x18/0x20 [ 83.821820][ T1818] ? mutex_unlock+0x8b/0x240 [ 83.821839][ T1818] ? __cfi_mutex_unlock+0x10/0x10 [ 83.821859][ T1818] ? __fget_files+0x2c5/0x340 [ 83.821875][ T1818] ? __fget_files+0x2c5/0x340 [ 83.821892][ T1818] ? bpf_lsm_file_ioctl+0xd/0x20 [ 83.821912][ T1818] ? security_file_ioctl+0x34/0xd0 [ 83.821928][ T1818] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.821948][ T1818] __se_sys_ioctl+0x132/0x1b0 [ 83.821974][ T1818] __x64_sys_ioctl+0x7f/0xa0 [ 83.821991][ T1818] x64_sys_call+0x1878/0x2ee0 [ 83.822012][ T1818] do_syscall_64+0x58/0xf0 [ 83.822029][ T1818] ? clear_bhb_loop+0x50/0xa0 [ 83.822052][ T1818] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.822073][ T1818] RIP: 0033:0x7fa994b8ebe9 [ 83.822086][ T1818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.822099][ T1818] RSP: 002b:00007fa995a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.822118][ T1818] RAX: ffffffffffffffda RBX: 00007fa994db5fa0 RCX: 00007fa994b8ebe9 [ 83.822132][ T1818] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 83.822143][ T1818] RBP: 00007fa995a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 83.822153][ T1818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.822163][ T1818] R13: 00007fa994db6038 R14: 00007fa994db5fa0 R15: 00007ffd8ccd5928 [ 83.822178][ T1818] [ 84.058461][ T64] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 84.384875][ T1841] netlink: 'syz.1.448': attribute type 11 has an invalid length. [ 84.513447][ T1851] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 84.540490][ T1850] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 84.561747][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 84.569190][ T64] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 84.577365][ T64] usb 3-1: config 0 has no interface number 0 [ 84.583806][ T64] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 84.588448][ T1851] rust_binder: Write failure EINVAL in pid:346 [ 84.595459][ T64] usb 3-1: config 0 interface 196 has no altsetting 0 [ 84.608503][ T1850] rust_binder: Write failure EINVAL in pid:346 [ 84.612015][ T64] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 84.638443][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.646441][ T64] usb 3-1: Product: syz [ 84.650328][ T1855] rust_binder: inc_ref_done called when no active inc_refs [ 84.651026][ T1855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 84.668444][ T64] usb 3-1: Manufacturer: syz [ 84.698460][ T64] usb 3-1: SerialNumber: syz [ 84.709134][ T64] usb 3-1: config 0 descriptor?? [ 84.719378][ T1828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.932400][ T36] kauditd_printk_skb: 686 callbacks suppressed [ 84.932416][ T36] audit: type=1400 audit(1754934732.470:3339): avc: denied { write } for pid=1871 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.977932][ T36] audit: type=1400 audit(1754934732.480:3340): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.007964][ T64] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 85.020693][ T64] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 85.042805][ T36] audit: type=1400 audit(1754934732.480:3341): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.051664][ T64] usb 3-1: USB disconnect, device number 18 [ 85.123446][ T36] audit: type=1400 audit(1754934732.480:3342): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.333260][ T36] audit: type=1400 audit(1754934732.480:3343): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.432126][ T36] audit: type=1400 audit(1754934732.480:3344): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.508911][ T36] audit: type=1400 audit(1754934732.480:3345): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.564171][ T36] audit: type=1400 audit(1754934732.490:3346): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.590708][ T36] audit: type=1400 audit(1754934732.490:3347): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.616322][ T36] audit: type=1400 audit(1754934732.500:3348): avc: denied { ioctl } for pid=1826 comm="syz.2.444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.880470][ T1906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 85.948453][ T64] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 86.068487][ T329] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 86.097491][ T421] rust_binder: 1900: removing orphan mapping 0:24 [ 86.138446][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 86.147416][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.174747][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 86.187768][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.208453][ T329] usb 2-1: device descriptor read/64, error -71 [ 86.209080][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.224270][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.233558][ T64] usb 1-1: SerialNumber: syz [ 86.241963][ T64] cdc_acm 1-1:1.0: Zero length descriptor references [ 86.260105][ T64] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 86.458494][ T329] usb 2-1: device descriptor read/64, error -71 [ 86.507046][ T64] usb 1-1: USB disconnect, device number 23 [ 86.708456][ T329] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 86.858468][ T329] usb 2-1: device descriptor read/64, error -71 [ 86.960051][ T1926] overlayfs: missing 'lowerdir' [ 87.013045][ T1926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.474'. [ 87.027174][ T1926] ------------[ cut here ]------------ [ 87.032708][ T1926] WARNING: CPU: 0 PID: 1926 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 87.042121][ T1926] Modules linked in: [ 87.046018][ T1926] CPU: 0 UID: 0 PID: 1926 Comm: syz.3.474 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 87.059426][ T1926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.069522][ T1926] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 87.075429][ T1926] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 71 28 ee 05 00 0f 85 be 00 00 00 c6 05 64 28 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 87.095152][ T1926] RSP: 0018:ffffc9001121f9a0 EFLAGS: 00010246 [ 87.101257][ T1926] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 87.108469][ T329] usb 2-1: device descriptor read/64, error -71 [ 87.109263][ T1926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001121fa58 [ 87.123474][ T1926] RBP: ffffc9001121fad0 R08: ffffc9001121fa57 R09: 0000000000000000 [ 87.131502][ T1926] R10: ffffc9001121fa40 R11: fffff52002243f4b R12: ffffc9001121f9e0 [ 87.139655][ T1926] R13: dffffc0000000000 R14: 1ffff92002243f38 R15: 0000000000000000 [ 87.147671][ T1926] FS: 00007fa995a1e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 87.156631][ T1926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.163237][ T1926] CR2: 0000000000000000 CR3: 000000013c08c000 CR4: 00000000003526b0 [ 87.171237][ T1926] DR0: 000000000000fffe DR1: 0000000000000003 DR2: 0000000000000e8f [ 87.179237][ T1926] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 87.187215][ T1926] Call Trace: [ 87.190531][ T1926] [ 87.193464][ T1926] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 87.199216][ T1926] ? activate_task+0x38b/0x3d0 [ 87.203990][ T1926] ? try_to_wake_up+0xe40/0x1b00 [ 87.208937][ T1926] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 87.215094][ T1926] ___kmalloc_large_node+0x9c/0x1d0 [ 87.220559][ T1926] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 87.226751][ T1926] __kmalloc_large_node_noprof+0x1e/0xe0 [ 87.228798][ T329] usb usb2-port1: attempt power cycle [ 87.232500][ T1926] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 87.243902][ T1926] __kmalloc_noprof+0x26d/0x450 [ 87.248771][ T1926] ? __kasan_check_write+0x18/0x20 [ 87.253888][ T1926] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 87.259903][ T1926] ? __cfi_futex_wake+0x10/0x10 [ 87.264756][ T1926] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 87.271182][ T1926] ? selinux_file_ioctl+0x6e0/0x1360 [ 87.276469][ T1926] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 87.282021][ T1926] ? do_futex+0x356/0x500 [ 87.286351][ T1926] ? __cfi_do_futex+0x10/0x10 [ 87.291032][ T1926] ? __fget_files+0x2c5/0x340 [ 87.295711][ T1926] ? bpf_lsm_file_ioctl+0xd/0x20 [ 87.300661][ T1926] ? security_file_ioctl+0x34/0xd0 [ 87.305774][ T1926] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 87.312201][ T1926] __se_sys_ioctl+0x132/0x1b0 [ 87.316882][ T1926] __x64_sys_ioctl+0x7f/0xa0 [ 87.321516][ T1926] x64_sys_call+0x1878/0x2ee0 [ 87.326198][ T1926] do_syscall_64+0x58/0xf0 [ 87.330620][ T1926] ? clear_bhb_loop+0x50/0xa0 [ 87.335309][ T1926] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.341207][ T1926] RIP: 0033:0x7fa994b8ebe9 [ 87.345622][ T1926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.365251][ T1926] RSP: 002b:00007fa995a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.373758][ T1926] RAX: ffffffffffffffda RBX: 00007fa994db5fa0 RCX: 00007fa994b8ebe9 [ 87.381758][ T1926] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000009 [ 87.388473][ T444] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 87.389741][ T1926] RBP: 00007fa994c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 87.405234][ T1926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.413219][ T1926] R13: 00007fa994db6038 R14: 00007fa994db5fa0 R15: 00007ffd8ccd5928 [ 87.421208][ T1926] [ 87.424219][ T1926] ---[ end trace 0000000000000000 ]--- [ 87.429754][ T421] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 87.541439][ T444] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.551943][ T444] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.563417][ T444] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.573210][ T329] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 87.580831][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.582060][ T421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.590138][ T444] usb 1-1: SerialNumber: syz [ 87.599233][ T421] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 87.613472][ T329] usb 2-1: device descriptor read/8, error -71 [ 87.618443][ T421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.638538][ T421] usb 3-1: config 0 descriptor?? [ 87.750801][ T329] usb 2-1: device descriptor read/8, error -71 [ 87.827094][ T444] usb 1-1: 0:2 : does not exist [ 87.837564][ T444] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 87.847891][ T444] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 87.857421][ T444] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 87.878628][ T444] usb 1-1: USB disconnect, device number 24 [ 87.915590][ T1754] udevd[1754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.988462][ T329] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 88.010298][ T329] usb 2-1: device descriptor read/8, error -71 [ 88.050246][ T421] usbhid 3-1:0.0: can't add hid device: -71 [ 88.056198][ T421] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.068587][ T421] usb 3-1: USB disconnect, device number 19 [ 88.140254][ T329] usb 2-1: device descriptor read/8, error -71 [ 88.248835][ T329] usb usb2-port1: unable to enumerate USB device [ 88.258492][ T1740] Bluetooth: hci0: command 0x1003 tx timeout [ 88.259910][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110