last executing test programs: 39.356185115s ago: executing program 3 (id=4): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000000010001200", 0x34}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f00000002c0), 0x81, &(0x7f0000000300)={[{@inode32}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x4010, 0x0) r7 = syz_usb_connect(0x0, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x2c, &(0x7f0000000580)=ANY=[@ANYRESDEC=r8]) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 37.463447541s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x11, r3, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000180)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) write(r1, &(0x7f0000000280)="010000000000000020", 0x9) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000040)=[{0x3, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000080), 0x3173a4e940640801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x448100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000340)={{0x1ff8, 0x54000, 0xb, 0x5, 0x7f, 0x8a, 0x2, 0x0, 0x9, 0x12, 0xff, 0xe}, {0xb000, 0xffe, 0x10, 0x9, 0x2, 0x3, 0x4, 0x6, 0x8, 0x2, 0xf, 0x8}, {0x0, 0xa000, 0x0, 0x0, 0x6, 0xdd, 0x3e, 0xd, 0x8f, 0x2, 0x3, 0x1}, {0x200000, 0x8000000, 0xe, 0x1b, 0x2, 0xb, 0xfb, 0xfc, 0xd, 0x2, 0x3, 0x7}, {0xffc, 0xeeef0000, 0x3, 0x8, 0x6, 0x9, 0x8, 0x7, 0x8, 0x4, 0xf4, 0x8}, {0xb000, 0xb000, 0x0, 0x7, 0xc, 0x8, 0x89, 0x0, 0x0, 0x4, 0x4, 0x4}, {0x3000, 0x25000, 0xb, 0x7, 0xe3, 0x80, 0x6, 0xb, 0x2, 0xc, 0x40, 0x43}, {0x1000, 0x1ffe, 0x4, 0x71, 0x2b, 0x3, 0x4, 0xe, 0x10, 0x81, 0xfd, 0x83}, {0x3000, 0xbe}, {0x2, 0x4}, 0x80000004, 0x0, 0x7000, 0x402, 0x2, 0x2001, 0xa000, 0x0, [0xff, 0xbc9, 0xd, 0x7]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 37.298879155s ago: executing program 3 (id=14): r0 = syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x0, 0x40010, r1, 0x0) syz_io_uring_complete(0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) process_mrelease(r2, 0x0) 21.616958031s ago: executing program 32 (id=14): r0 = syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x0, 0x40010, r1, 0x0) syz_io_uring_complete(0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) process_mrelease(r2, 0x0) 4.58192255s ago: executing program 4 (id=184): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x9f63422128820807, 0x0, {[0xb, 0xffffffff, 0x400000000001001d, 0xfffffffffffffff6, 0x4005, 0xa8, 0x2, 0x800]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000380)="66baf80cb8adc5648e48b89ab6a3fd000000000f23d80f21f835400000900f23f86dbafc0cecb972000040b804000000ba000000000f30b99a020000b800000000430f01c20f30c744240000400000c7442402dfc50000c7442406000000000f011c242642fec719c4c2590df80f38f044b75a0f07d9c9b9800000c0ae2d6666000400000f30", 0x86}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.490061462s ago: executing program 4 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000e3f000/0x4000)=nil, 0x4000}, 0x1}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40045201, 0xffffffffffffffff) syz_io_uring_setup(0x867, &(0x7f0000000240)={0x0, 0x9164, 0x2000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, r2, 0x0) 4.397851084s ago: executing program 4 (id=186): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x4ef, 0xffffffffffffffff, 'id1\x00'}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)) getsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f00000000c0)=""/141, &(0x7f0000000180)=0x8d) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000200)={0x7, 'batadv_slave_1\x00', {0x6}, 0xf4e}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x2, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000d00)={0xf0, 0x0, &(0x7f0000000580)=[@request_freeze={0x400c6313, 0x2, 0x3}, @free_buffer, @clear_freeze={0x400c6314, 0x2, 0x2}, @acquire={0x40046305, 0x1}, @freeze_done={0x40086315, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1108, 0x1, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/112, 0x70, 0x0, 0x11}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x1000}, @dead_binder_done={0x40086310, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/231, 0xe7, 0x1, 0x2f}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}}, &(0x7f0000000540)={0x0, 0x18, 0x40}}, 0x1000}, @free_buffer={0x40086303, r2}], 0x653, 0x0, &(0x7f0000000680)=""/1619}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x20004000) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000011c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000ec0)={0x2b4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75658516}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff0001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8bef, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20040810}, 0x20040004) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000001200)) (async) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x880018, &(0x7f0000001380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}, {@cache_mmap}, {@access_any}, {@afid={'afid', 0x3d, 0xfffffffffffffffc}}, {@cache_readahead}, {@uname={'uname', 0x3d, ':[^-!%'}}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@cachetag={'cachetag', 0x3d, 'vcan0\x00'}}, {@mmap}], [{@smackfsroot={'smackfsroot', 0x3d, 'wpan3\x00'}}]}}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001480)={0x3, 0x1, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002340)={0xf0, 0x0, &(0x7f0000001880)=[@transaction={0x40406300, {0x1, 0x0, 0x1, 0x0, 0x80, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001680)={@ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/219, 0xdb, 0x1, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/150, 0x96, 0x2, 0x30}, @flat=@handle={0x73682a85, 0x0, 0x1, 0x3}}, &(0x7f0000001700)={0x0, 0x28, 0x50}}}, @clear_freeze={0x400c6314, 0x2, 0x3}, @dead_binder_done={0x40086310, 0x3}, @enter_looper, @clear_death={0x400c630f, 0x0, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000017c0)={@ptr={0x70742a85, 0x1, &(0x7f0000001740)=""/106, 0x6a, 0x0, 0x12}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x0, 0x26}}, &(0x7f0000001840)={0x0, 0x28, 0x40}}, 0x400}, @free_buffer={0x40086303, r2}, @increfs_done={0x40106308, 0x0, 0x2}, @clear_death={0x400c630f, 0x2}], 0x9ac, 0x0, &(0x7f0000001980)=""/2476}) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), r3) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002400), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x38, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40050) (async) sendmsg$inet(r0, &(0x7f0000002800)={&(0x7f0000002500)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002780)=[{&(0x7f0000002540)="8e7700eb20786a0335c8b32083f1a633b363e6cdae66d00476f85a", 0x1b}, {&(0x7f0000002580)="16be24f0fd71bafb0c688b89e4a56429c05b6f1d81cc841ab4c27593366cd3932139a503a79701a6313dcd13f44d28d4c797d1c88110a69842f0b85488d884f2fa3ba07d18c2ec987966ad3341831554fa0418adea895bf91fcf195c96365f2240fd699cf8689cf5e2b31c686897bf997f89523ec5bc3d8cd4ca82af3b69263e30", 0x81}, {&(0x7f0000002640)="60746aa74bbf5bb0377815bd617665d4372eb00fc5d4880a264cbfc896bc6cbdb98b3e4bdb42decdb403e972fc156d7fcfe5153d774ca214f354e38fcf8cebee0f0eb850d3b9c9cf12b71c2850c1b161e2e9659955ff34d8a64c972604db9c5f5caccb1a00e1037a819c1b0d78b61bec93ec5df21c525f5571c4698d738e1f427e8ef91bbae423f9e706fd6570f7494b758115", 0x93}, {&(0x7f0000002700)="093ea3da077c43664382c840d8553fa68cc8e928fa86e385e48ff3f318dee69c74a9474e1ab1ec0782d80bc0520cd58115652f618b9a3df84d80d095b6a0c0498375b4b42e2b2106551955cc18a75a9995c5c78cbc2be59d64b64ca8511c4d8800ca57f00aa2f56d33c906", 0x6b}], 0x4, &(0x7f00000027c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}, 0x20000040) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x1c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r8, &(0x7f0000002ac0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000002b00)=0x1c, 0x80000) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8b}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20081}, 0x800) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (rerun: 32) 4.194585069s ago: executing program 4 (id=187): exit(0xef1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xf3, 0x1800001, 0x81, 0x7fffffff, 0xfff8, 0x0, 0x10000, 0x0, 0x4bfb, 0x4, 0x200000000042, 0x20000000000004, 0x1000, 0x5, 0x10000000009, 0x100000090], 0x25000, 0x108e55}) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)=""/35, 0x23}], 0x1) (async) ptrace$setregs(0xd, r0, 0x2, &(0x7f00000004c0)) (async) ptrace$cont(0x21, r0, 0x5, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000340)=0x0) close(r4) (async) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32], 0x3c}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x0) (async) close_range(0xffffffffffffffff, r1, 0x2) 3.610706643s ago: executing program 0 (id=189): faccessat(0xffffffffffffffff, &(0x7f000000c6c0)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x31, 0x4, @tid=r0}, 0x0) mprotect(&(0x7f00004a3000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.603983283s ago: executing program 0 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async, rerun: 64) open(0x0, 0x14507e, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f00000000c0)={@val={0xa, 0x9000}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x40, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x80, 0x8ed, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x2, 0x9}, @sack={0x5, 0x1e, [0x6, 0x4, 0x7, 0x6, 0x6d, 0x7a26, 0xc0]}, @generic={0x4, 0x2}]}}}}}}}}}, 0x7a) (async) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000084c050200000000000001090224000100000001090400080103000700092100008001222817fcdef765f2c1000000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="8708e70debc6cb6d1a49f8e4cd22411a026a7201e2e8bc62be02dd990835368942b85cf16bb305c815c2d0e44437cc6910a9652ef013d05ded4bcbb717cae71691baa8317a2b98bfe8cd21da1b4675d9de2509ef77d0309c7d491601d6160db58255af424ee37e0f1309a3a037b9794ad69ac372e4779f40edd56fba6ac0e30c90d23e340aa0a6bf4a6aca214de7d5bf4b69872453f4f5d6e53e039d2687fda5116e6225ee1f113a62a8acc957"], 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) (async) chdir(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x200000, 0x200000, 0x7}) (async) r7 = eventfd(0x201) (async) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000440)={0x0, 'veth1_to_team\x00', {}, 0x6}) (async, rerun: 64) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000500)={0x27800000000, 0x0, 0x1, r7, 0x1}) (async, rerun: 64) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000540)={0x27800000000, 0x0, 0x1, r7, 0x1}) (async) syz_usb_connect$uac1(0x3, 0x7b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockname$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000200)=0x1c) 3.557923715s ago: executing program 2 (id=191): r0 = syz_open_dev$loop(&(0x7f0000019900), 0x440, 0x888e2) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000019940)='/sys/kernel/uevent_helper', 0x82802, 0xf) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000440)={0x0, 0x0, 0x5}) fcntl$lock(r2, 0x26, &(0x7f0000000480)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x7, &(0x7f00000004c0)={0x2, 0x1, 0x7, 0x5}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000019980)={r1, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x100, 0x0, &(0x7f0000000100)=""/256}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000500)="1100000058001f00032ae4f9002304000a04d6", 0x13) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0xe7) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0xe0) read$msr(r6, &(0x7f0000000640)=""/222, 0xde) (async) write$cgroup_int(r6, &(0x7f0000000740)=0x5, 0x12) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) pwritev(r7, &(0x7f0000000380)=[{&(0x7f00000003c0)="b2", 0x1}], 0x1, 0x200, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000019ac0)={0x0, {}, 0x0, {}, 0x9, 0x12, 0x5, 0x4, "b2457fe0a2bb4b55eaea087c4e466e845e7ae5226a864610920034b9a71aaae39ea671f106bfd1a3474294abf8d39047413833f256c276acaeb80cc2ee05a0f8", "91afb9a08a67e7b030fb2599e054750e9c46e7088972a20000000000005a00", [0x3c, 0x7]}) 3.33293494s ago: executing program 2 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, 0x0, 0x100) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x1) 3.33144137s ago: executing program 2 (id=193): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d002100dfff0000000000000700000005000000ea0007000a0002"], 0x30}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x6, 0x30, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "c5bc1d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xc18, 0x3, 0x1000, 0x74}, {0x6, 0x24, 0x1a, 0x3, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x4, 0x1}, @obex={0x5, 0x24, 0x15, 0xf800}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x4, 0x6, 0x4d, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x43, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0x9, 0xf}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x4, 0x6, 0xff, 0x40, 0x5}, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="050f05f210"], 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x410}}, {0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "975cc8b473bbaa51d3f746ed87657bbe3a3faa2c8df73e28bc3b1575bcfb5bf3584b1025da9e4badc865039f9269a3f31850d893d0aa40ac3f476e0276e53d29be9e1f5ca16f2a6a7ef4ccbdd2d8f3be8b500101d200787014b606efc3ccc2551676a957f68da25518cb19b023da5f230e4c2e3aae4bafa6e3a96c36"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.722244078s ago: executing program 1 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x2a3c188f39285d79, &(0x7f0000000400), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000009c0)={0x1, 0x0, [{0xc0010140, 0x0, 0x1}]}) (async) mount$cgroup2(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x24006, &(0x7f00000008c0)=ANY=[@ANYBLOB="6661766f7264796e6d2ff7732c646f6e745f686173682c0013e8ffd44abc9fca5d4592cf0954d80ee309a3de221ce0c2ea4b25402222f8a8daf1d279d2ad4f9bc7ac582490b6cebd5512b8701510b9dcdc64cdea4192d50dd3f85d51f32e465d07e1660e43b81e5e7682a8fe05322d2f64305e6015737d383bacffacb3ec41f86485747ca4013f3876bff01d1da505782f44a9bdfde519946fdc7b27b022ccf345e53f47bcdfba5032e572bbeaae5b484568f3beb67271524bce653d86144ce65daf1c5d779fdde211a7b136780547476cf8a19734c4f0aa1bf008cf9fc66facdd0c33de569aa0a0a1a73c95e5c26d"]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000780)=0xe8) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000a00)={[{@xino_on}, {@index_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r3}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_type}, {@obj_type={'obj_type', 0x3d, 'uid>'}}, {@smackfsroot={'smackfsroot', 0x3d, 'favordynmods'}}, {@fowner_gt={'fowner>', r3}}, {@euid_lt={'euid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', r3}}]}) chdir(&(0x7f00000002c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x207) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c0) (async) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = dup(r5) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=r8, @ANYBLOB="2cdf"]) (async) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x940002, &(0x7f0000000640)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_on}, {@workdir={'workdir', 0x3d, './file1'}}], [], 0x2c}) (async) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) symlinkat(&(0x7f0000000000)='./cgroup\x00', r9, &(0x7f0000000140)='./cgroup\x00') 1.586449172s ago: executing program 1 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010329bdf000fcdadf25240000001800018014ab6432dd62d2885109cc47ffb7ac597b0002007665746831000000000000000000000012e55ef76c98ba049af59315bf3708d4c6896dfce517e7b01a2d44deb5530ad9e54c67b5fab398d305a86969cba606dfab78e27290f194b8f1103b090505f0162761f5a0aeb7834a"], 0x2c}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d6, 0x32}, @in6=@mcast1, {0x200, 0x7ff, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x7}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r8, &(0x7f0000002c40)={0x20, 0x0, r9, {0x3ec, 0x0, 0xfffffe01, 0xffffffff}}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.518604993s ago: executing program 1 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, 0x0, 0x100) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x1) 1.502882884s ago: executing program 1 (id=203): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x3) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000000c0)={0x0, 0x1}) 1.446868185s ago: executing program 1 (id=204): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000240)=@md0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x120) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'some', 0x20, 0x8000, 0x20, 0x2}, 0x2f) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="74c91b843418435db17403b0af76825ce0f134174f20e7a3e930da2e24882df6a1dea2140821abdaa240a171fb23b844bcb4237b189a3ed08dded20d6a3eb5475b553a541a68d856010ee97b326b859282e6269ddf6243be5453eb0661abf2dd2becbb14f1bae24161673c3e18a2cb33f0c8f148ba9f37398c4de9497fe03e137fdafb2533d21c03784b52dac3093111f1578888d557e2984e05d5cd4c47de9edef630800dda2f1a3c621564c7e9", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 1.446562895s ago: executing program 1 (id=205): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f0000000040)=""/30, &(0x7f0000000100)=0x44) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101b43, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wake_lock', 0x202, 0xc4) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20c00, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbc) (async) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3000004) (async) write(r2, &(0x7f00000001c0)='0', 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x4) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4e7, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x78, 0x80, 0xe, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x2, 0x7f, 0x1, {0x22, 0xce1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x7, 0x6}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x5, 0x1, 0x0, 0x8, 0x9}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1001}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "e4756c8552f3683274b1e527c12daa6e5baf0ccc97b88b0bee8449ae30493fc10eb8831f7d98e371709c3ab64ccb630be5df66f70f8a3f399692ce99e8ffd8ca4ce607a6649aa244df4ea083b8fa1b602c3215fb39"}}, {0x16, &(0x7f0000000400)=@string={0x16, 0x3, "32013389d8a37e68f63d1d4596fbf9506d7a8240"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2401}}]}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x33) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000140)) 1.128306933s ago: executing program 4 (id=206): r0 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0x180) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000001740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, &(0x7f0000001780)=0x18) process_vm_readv(r1, &(0x7f0000001500)=[{&(0x7f0000001540)=""/54, 0x7ffff000}, {&(0x7f0000001580)=""/152, 0x98}], 0x2, &(0x7f0000001640)=[{&(0x7f0000001680)=""/95, 0x7ffff000}], 0x286, 0x0) mount$incfs(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000001280), 0x1804002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001380)={@loopback, 0x7a, r3}) socket$inet6(0xa, 0x5, 0x0) chdir(&(0x7f00000012c0)='./bus\x00') mkdirat(r0, &(0x7f0000001740)='./dev\x00', 0x16a) mount(0x0, &(0x7f00000017c0)='./dev\x00', &(0x7f0000001800)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f00000018c0)='./mnt\x00', &(0x7f0000001900)='ext4\x00', 0x108470, 0x0) setxattr$incfs_metadata(&(0x7f0000001940)='./mnt\x00', &(0x7f0000001980), &(0x7f00000019c0)="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", 0xf85, 0x0) r4 = memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x7706, 0x0) iopl(0x3) process_mrelease(0xffffffffffffffff, 0x700000000000013) chmod(&(0x7f0000001300)='./file1\x00', 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(r0, &(0x7f0000000280)='.\x00', 0x543000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='10', 0x2) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) 465.895299ms ago: executing program 0 (id=207): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0), 0x80800, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000040)={0xfffffff9, 0xfa816b87c44abc96}) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001f40)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1s]\xaba\xf93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\x19\x8d\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdcU\x00\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-ox\xdb;\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\x13$\t\xa8\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\vf\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf66\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6\x02\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xed\x16\xbcL\x10\x8d\x10\x9c<\x0e\x94\x13}\xbe\xd0\x89\xee\x90p%\x1bV\x89\an\x11Lc\xf8\xe6\'\x84\xfd\x01K/\x15\xce\x8dh}\x00q\xe7\x7f\x19r\xc4z>\xfcX\x98\xccd13S#\'y\xab\xe4\x1fW\xd3\xa1g\x1d\x8eGa\xa2\xab&\xf1\x96\xb5\x1b\xdb\xb0\x8a\x0fVM,\xf5\xcd5\xaaKt8\'\x046\x15\x94\xfa\xc4\x9e\xfc\xa2C\x1e\xd3%,1\x80.\x91h\xeeIb\x82\xd7\xa99\x86O\x9c\x14b\xbeA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xacC\x95\xf0\x9d\xe8\x80G\xc2\xc1zL\xd0\x1f\x8c0\xf5\xec\v\xed\xad\x1d#\xde\x98\xf9\v\x02Y\x89\xb2\'\xeaH\xbc{o\xbc\b?\xd9\x81\'\x0f7Xl\xcc\x93I3 \x0e\xc190`\xd9\xe46w\x1d\xdeV\xbf\xc9\x9e\xb4\xde\xe6\xa3\x97%D]\xd1Vd]\x03\x89J\xa8 \x99\xef\x9b\x00'/2064) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001f40)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1s]\xaba\xf93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\x19\x8d\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdcU\x00\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-ox\xdb;\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\x13$\t\xa8\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\vf\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf66\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6\x02\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xed\x16\xbcL\x10\x8d\x10\x9c<\x0e\x94\x13}\xbe\xd0\x89\xee\x90p%\x1bV\x89\an\x11Lc\xf8\xe6\'\x84\xfd\x01K/\x15\xce\x8dh}\x00q\xe7\x7f\x19r\xc4z>\xfcX\x98\xccd13S#\'y\xab\xe4\x1fW\xd3\xa1g\x1d\x8eGa\xa2\xab&\xf1\x96\xb5\x1b\xdb\xb0\x8a\x0fVM,\xf5\xcd5\xaaKt8\'\x046\x15\x94\xfa\xc4\x9e\xfc\xa2C\x1e\xd3%,1\x80.\x91h\xeeIb\x82\xd7\xa99\x86O\x9c\x14b\xbeA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xacC\x95\xf0\x9d\xe8\x80G\xc2\xc1zL\xd0\x1f\x8c0\xf5\xec\v\xed\xad\x1d#\xde\x98\xf9\v\x02Y\x89\xb2\'\xeaH\xbc{o\xbc\b?\xd9\x81\'\x0f7Xl\xcc\x93I3 \x0e\xc190`\xd9\xe46w\x1d\xdeV\xbf\xc9\x9e\xb4\xde\xe6\xa3\x97%D]\xd1Vd]\x03\x89J\xa8 \x99\xef\x9b\x00'/2064) 410.44138ms ago: executing program 0 (id=208): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r1, r2+60000000}}, &(0x7f00000000c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r3 = openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x82, 0x0) readv(r3, &(0x7f0000002400)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/174, 0xae}, {&(0x7f0000001240)=""/77, 0x4d}, {&(0x7f00000012c0)=""/140, 0x8c}, {&(0x7f0000001380)=""/122, 0x7a}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6) getresuid(&(0x7f00000024c0), &(0x7f0000002500)=0x0, &(0x7f0000002540)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) stat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f00000026c0)='./file0\x00', 0x100, 0x100, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000002480)='system.posix_acl_access\x00', &(0x7f0000002940)={{}, {0x1, 0x2}, [{0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x0, r6}, {0x2, 0x4, r7}, {0x2, 0x2, r8}, {0x2, 0x0, r9}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x0, 0xee00}, {0x8, 0x2, r10}], {0x10, 0x6}, {0x20, 0x3}}, 0x6c, 0x2) quotactl_fd$Q_SYNC(r3, 0x2, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000002a00)={&(0x7f00000029c0)=[{0x491, 0x6, 0x10001, 0xffc, 0x5}], 0x1, 0x28, 0x74, 0x5}) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000002a40)=@md0, r9, &(0x7f0000002a80)={0x9, 0x0, 0x100, 0x100, 0x9, 0x4, 0x4, 0x1}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b40), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ppoll(&(0x7f0000002c80)=[{r3, 0x8000}, {r0, 0xa3c4}, {r3, 0x3432}, {r0, 0x80}, {r0, 0x2010}, {r0}, {r0}, {r3, 0x11c0}, {r3, 0x40a4}, {r3, 0x81}], 0xa, &(0x7f0000002d00)={0x77359400}, &(0x7f0000002d40)={[0x10]}, 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000002d80)={0x501, r3}, 0x614f8e199777c282) rt_sigtimedwait(&(0x7f0000002dc0)={[0x8]}, &(0x7f0000002e00), &(0x7f0000002e80)={0x0, 0x989680}, 0x8) readv(r0, &(0x7f0000002f80)=[{&(0x7f0000002ec0)=""/143, 0x8f}], 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000), &(0x7f0000003040)='./file0\x00', 0x8, 0x1) syz_clone(0x14080000, &(0x7f0000003080)="d8ec015216c7fa3c3913e78809ae87874c1b5865aeadb94dbae9eff308993432646e49689b7967a2b0a7275c3f79c7b8e176668f008aca400e2116253d43801fa63d269aabe86d1670fe35ab2bf8e1fd5f4ec69020c6ff8b39e750a7aa55df6d2bb244423699391784474f6ba3c5f6648ee1f31c3ce4a78b2bd3d368187e6596276fa9a10abf521ae719fb7aaa3e66f9c581", 0x92, &(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)="e067455606c03f4d93891627be270f578df4af112d098724418ccfa4ea58e2f49db325f0d6fa564c1d21f37b7e74d2139a35947b30437fb453ec3f59c6d25c834ddd3a011bb689a7b7265315fe148137b853b0a29b35db79020509b33c32f5c51a66588fb3a40f256e691ab7445f5ba6e2a5b86c7464dbc3895e8f43d0f06d07fdecaa185bb6627b1d4c96628d857371ec1d4d12f00e4c6d1278818bc78cc1f17330b9db34ecfba52e535a1c43e9b35492ac7fdf07814cdd1a4e318db612a635ccff4d6e3ffc6002fe146d4edd917b313298382a296336a9174ef9c15fff6ced96ff551a018b6bca4efd084cc19ddb3151628119f63b39b1562b29") r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003300), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000003640)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003600)={&(0x7f0000003340)={0x294, r12, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x6, 0x0, 0x400, 0x3, 0x7, 0xe0c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa07b, 0x6, 0x2, 0xfedc, 0x1, 0xc373, 0x580]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x401, 0xd, 0x7, 0x98, 0xd, 0x8, 0x5]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x3}, {0x7}, {0x6, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x5}, {0x3}, {0x0, 0x2}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x6}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x6}, {0x3, 0x11}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x6, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe, 0x3, 0x1, 0x2, 0x2, 0x0, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x1, 0x1, 0x2, 0x60, 0x60, 0xb, 0x12, 0x12, 0x4, 0x24, 0x16, 0x2, 0x16, 0x1, 0x1b, 0x12, 0xb, 0x16, 0x36, 0x5, 0x6c, 0x60, 0x9, 0x12]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x16]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5dd2, 0x5, 0x5, 0x8000, 0x3, 0x1, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xb3, 0x935, 0x8001, 0x7, 0x2, 0x2, 0x4f8]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x5}, {0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x7}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x3}, {0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0xd}, {}, {0x7, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x2, 0x9}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x2, 0x8}, {}, {0x6, 0x3}, {0x3, 0x4}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0xa}, {0x2}, {0x5, 0x3}, {0x4, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5}, {0x1, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x9, 0x96, 0x6, 0xc4, 0x81, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x100, 0xfff, 0xfff, 0x8, 0x4, 0xe]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x1, 0x5, 0x7, 0x0, 0x12, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0xa}, {0x1, 0x1}, {0x7, 0x9}, {}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x3, 0x8}, {0x2, 0x7}, {0x3, 0x5}, {0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0x0, 0x3f2f, 0x8, 0x97, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x8}, {0x5, 0x1}, {0x3, 0x8}, {0x4, 0x7}, {0x6, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x294}, 0x1, 0x0, 0x0, 0x80}, 0x800) setreuid(r6, r7) futex$unlock_pi_list32(0x0, 0x687, 0x6, &(0x7f00000036c0), &(0x7f0000003700)=0x80, 0x6) 409.62863ms ago: executing program 0 (id=209): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80020, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)=@vmx={0x5, 0x0, 0x2080, {0x80a0000, 0xfec00000, {0x5}, 0x1, 0x6}, {"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", "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"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000002300)=[@textreal={0x8, &(0x7f0000000000)="0f79d70f22140f01c30f01c966b80acb00000f23d80f21f86635800000d00f23f8f30f1eca36660f575e000f2e977428b838098ec8660f20c6", 0x39}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 350.539362ms ago: executing program 0 (id=210): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003000000401e0400304000010203010903690003017f00ce080b0201010a20070904000000010120000924010700090900040904010000010220000904010101010220000905010940000406080825018233050d00090402000001022000090402010101022000090582090800b1090a08250101330e0400"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) (async) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003000000401e0400304000010203010903690003017f00ce080b0201010a20070904000000010120000924010700090900040904010000010220000904010101010220000905010940000406080825018233050d00090402000001022000090402010101022000090582090800b1090a08250101330e0400"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) (async) 311.025382ms ago: executing program 2 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, 0x0, 0x100) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x1) 293.557193ms ago: executing program 2 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r2, 0x0, 0xe0, 0xc000, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[@set_irq_handler={0xc8, 0x20, {0x45, 0x1}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x0, 0x0) 196.049835ms ago: executing program 2 (id=213): timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000006740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006780)='./proc\x00', &(0x7f00000067c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006800)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000006840)='6', 0x1) modify_ldt$write(0x1, &(0x7f0000006880)={0x1fff, 0x0, 0x400}, 0x10) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000042c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000004300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000004340)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f00000043c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt/trace_marker\x00', 0x1, 0x5a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000004200), 0x8, 0x0) write(r4, &(0x7f0000000140)="2dc873c624265d11080acffbbf542b3b4fd0ff57318d8185b4", 0x19) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000041c0)='./sys\x00', 0x98) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) mount(0x0, &(0x7f0000004640)='./sys\x00', &(0x7f0000004680)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000046c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004700)={0x2020}, 0x2020) 0s ago: executing program 4 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1000, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syslog(0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x66, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 30.040058][ T36] audit: type=1400 audit(1792128754.550:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.043716][ T287] cgroup: Unknown subsys name 'net' [ 30.062784][ T36] audit: type=1400 audit(1792128754.550:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.090203][ T36] audit: type=1400 audit(1792128754.580:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.090781][ T287] cgroup: Unknown subsys name 'devices' [ 30.216667][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.222375][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.338278][ T36] audit: type=1400 audit(1792128754.850:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.361513][ T36] audit: type=1400 audit(1792128754.850:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.386682][ T36] audit: type=1400 audit(1792128754.850:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.411979][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.420872][ T36] audit: type=1400 audit(1792128754.940:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.444593][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.446421][ T36] audit: type=1400 audit(1792128754.940:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.480701][ T36] audit: type=1400 audit(1792128754.950:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.506554][ T36] audit: type=1400 audit(1792128754.950:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.362955][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.370376][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.377738][ T296] bridge_slave_0: entered allmulticast mode [ 31.384300][ T296] bridge_slave_0: entered promiscuous mode [ 31.394541][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.401615][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.408949][ T296] bridge_slave_1: entered allmulticast mode [ 31.415323][ T296] bridge_slave_1: entered promiscuous mode [ 31.463855][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.471085][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.478243][ T295] bridge_slave_0: entered allmulticast mode [ 31.484772][ T295] bridge_slave_0: entered promiscuous mode [ 31.493254][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.500555][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.507737][ T295] bridge_slave_1: entered allmulticast mode [ 31.514349][ T295] bridge_slave_1: entered promiscuous mode [ 31.520501][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.527631][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.534789][ T297] bridge_slave_0: entered allmulticast mode [ 31.541172][ T297] bridge_slave_0: entered promiscuous mode [ 31.550735][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.557891][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.565071][ T297] bridge_slave_1: entered allmulticast mode [ 31.571450][ T297] bridge_slave_1: entered promiscuous mode [ 31.595611][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.602712][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.609883][ T294] bridge_slave_0: entered allmulticast mode [ 31.616381][ T294] bridge_slave_0: entered promiscuous mode [ 31.625788][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.632879][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.640131][ T294] bridge_slave_1: entered allmulticast mode [ 31.646555][ T294] bridge_slave_1: entered promiscuous mode [ 31.797264][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.804390][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.811786][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.818885][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.833165][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.840286][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.847655][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.856414][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.875730][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.882843][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.890257][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.897335][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.941417][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.948520][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.955841][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.962905][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.975950][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.983320][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.991240][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.998592][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.005982][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.013273][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.020614][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.028016][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.055350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.062457][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.070152][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.077221][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.109609][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.116719][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.125655][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.132739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.141373][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.148542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.157125][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.164235][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.184604][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.191711][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.199765][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.206858][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.253057][ T294] veth0_vlan: entered promiscuous mode [ 32.262418][ T297] veth0_vlan: entered promiscuous mode [ 32.277029][ T295] veth0_vlan: entered promiscuous mode [ 32.290943][ T297] veth1_macvtap: entered promiscuous mode [ 32.307643][ T294] veth1_macvtap: entered promiscuous mode [ 32.338820][ T296] veth0_vlan: entered promiscuous mode [ 32.346298][ T295] veth1_macvtap: entered promiscuous mode [ 32.373485][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.389363][ T296] veth1_macvtap: entered promiscuous mode [ 32.446674][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.471024][ T317] ======================================================= [ 32.471024][ T317] WARNING: The mand mount option has been deprecated and [ 32.471024][ T317] and is ignored by this kernel. Remove the mand [ 32.471024][ T317] option from the mount to silence this warning. [ 32.471024][ T317] ======================================================= [ 32.509065][ T317] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 32.517542][ T317] overlayfs: missing 'lowerdir' [ 32.620711][ T325] tipc: Started in network mode [ 32.625814][ T325] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 32.633141][ T325] tipc: Enabled bearer , priority 0 [ 32.640846][ T325] tipc: Enabling of bearer rejected, failed to enable media [ 32.650279][ T325] tipc: Enabling of bearer rejected, media not registered [ 32.824396][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.975369][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 32.985345][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 32.995335][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 33.006554][ T45] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 33.016813][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.024434][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.035237][ T315] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.042662][ T315] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.051068][ T45] pl2303 4-1:1.0: pl2303 converter detected [ 33.059812][ T45] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 33.072796][ T334] netlink: 'syz.2.8': attribute type 12 has an invalid length. [ 33.174078][ T31] usb 1-1: device descriptor read/64, error -71 [ 33.314061][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.328874][ T342] overlayfs: overlapping lowerdir path [ 33.341548][ T342] veth0_to_bridge: entered allmulticast mode [ 33.354662][ T315] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 33.363279][ T315] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 33.370579][ T315] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 33.378125][ T315] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 33.386463][ T315] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 33.420007][ T31] usb 1-1: device descriptor read/64, error -71 [ 33.464081][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 33.470770][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 33.481208][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 33.490463][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.498784][ T10] usb 3-1: Product: syz [ 33.503105][ T10] usb 3-1: Manufacturer: syz [ 33.507882][ T10] usb 3-1: SerialNumber: syz [ 33.515291][ T10] usb 3-1: config 0 descriptor?? [ 33.524998][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 33.533068][ T10] usb 3-1: Detected FT232R [ 33.654299][ T315] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 33.662191][ T315] pl2303 ttyUSB0: error sending break = -32 [ 33.674178][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.698869][ T313] usb 4-1: USB disconnect, device number 2 [ 33.706164][ T313] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 33.714512][ T313] pl2303 4-1:1.0: device disconnected [ 33.723760][ T10] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 33.731722][ T10] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 33.739266][ T10] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 33.750528][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 33.761336][ T10] usb 3-1: USB disconnect, device number 2 [ 33.767579][ T45] tipc: Node number set to 43690 [ 33.773026][ T10] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 33.782754][ T10] ftdi_sio 3-1:0.0: device disconnected [ 33.824078][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.064056][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.101217][ T336] veth0_to_bridge: left allmulticast mode [ 34.174120][ T31] usb usb1-port1: attempt power cycle [ 34.305941][ T352] x_tables: duplicate entry at hook 1 [ 34.342672][ T354] x86/PAT: syz.3.13:354 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 34.414018][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.490116][ T356] x86/PAT: syz.3.13:356 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 34.513984][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.535467][ T31] usb 1-1: device descriptor read/8, error -71 [ 34.564018][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 34.570462][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.580756][ T45] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 34.590645][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.600141][ T45] usb 2-1: config 0 descriptor?? [ 34.675115][ T31] usb 1-1: device descriptor read/8, error -71 [ 34.933996][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.955027][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.013026][ T45] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x2 [ 35.021295][ T45] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 35.029373][ T45] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 35.037677][ T45] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 35.045609][ T45] hid-multitouch 0003:0EEF:72D0.0001: unknown main item tag 0x0 [ 35.054751][ T45] hid-multitouch 0003:0EEF:72D0.0001: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.1-1/input0 [ 35.095127][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.187846][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 35.187865][ T36] audit: type=1400 audit(1792128759.700:124): avc: denied { create } for pid=359 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.224074][ T31] usb usb1-port1: unable to enumerate USB device [ 35.230741][ T45] usb 2-1: USB disconnect, device number 2 [ 35.232319][ T36] audit: type=1400 audit(1792128759.740:125): avc: denied { create } for pid=359 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.284008][ T36] audit: type=1400 audit(1792128759.770:126): avc: denied { create } for pid=359 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.323939][ T36] audit: type=1400 audit(1792128759.770:127): avc: denied { mmap_zero } for pid=359 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.363650][ T36] audit: type=1400 audit(1792128759.770:128): avc: denied { create } for pid=359 comm="syz.2.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.394140][ T36] audit: type=1400 audit(1792128759.770:129): avc: denied { map } for pid=359 comm="syz.2.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.418502][ T36] audit: type=1400 audit(1792128759.770:130): avc: denied { read write } for pid=359 comm="syz.2.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.446534][ T36] audit: type=1400 audit(1792128759.770:131): avc: denied { map } for pid=359 comm="syz.2.15" path="socket:[3607]" dev="sockfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 35.469384][ T36] audit: type=1400 audit(1792128759.770:132): avc: denied { cmd } for pid=359 comm="iou-wrk-360" path="socket:[3607]" dev="sockfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.747365][ T36] audit: type=1400 audit(1792128760.260:133): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.887448][ T366] hub 1-0:1.0: USB hub found [ 35.892599][ T366] hub 1-0:1.0: 1 port detected [ 35.923593][ T368] can: request_module (can-proto-0) failed. [ 36.034067][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.049663][ T373] __vm_enough_memory: pid: 373, comm: syz.2.19, bytes: 11727165546496 not enough memory for the allocation [ 36.214048][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 36.222707][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.243984][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.253803][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 36.294460][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 36.303567][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.314790][ T31] usb 2-1: config 0 descriptor?? [ 36.452007][ T419] netlink: 88 bytes leftover after parsing attributes in process `syz.0.23'. [ 36.503978][ T313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.663971][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 36.677932][ T313] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 36.703977][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.712046][ T313] usb 3-1: Product: syz [ 36.724444][ T313] usb 3-1: Manufacturer: syz [ 36.729177][ T313] usb 3-1: SerialNumber: syz [ 36.737474][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 36.743579][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.772454][ T31] usb 2-1: USB disconnect, device number 3 [ 37.514121][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.663973][ T10] usb 2-1: device descriptor read/64, error -71 [ 37.934057][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.194029][ T9] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 38.201613][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.209345][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.224071][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.344066][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.364116][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 38.444468][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.454417][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.465027][ T313] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 38.484227][ T313] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 38.494043][ T313] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 38.501342][ T9] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 38.525487][ T313] usb 3-1: USB disconnect, device number 3 [ 38.574544][ T453] udevd[453]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.594148][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.674073][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 38.692021][ T9] usb usb1-port1: attempt power cycle [ 38.704154][ T10] usb usb2-port1: attempt power cycle [ 39.043999][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 39.051530][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.074355][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 39.085595][ T10] usb 2-1: device descriptor read/8, error -71 [ 39.214072][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 39.222744][ T10] usb 2-1: device descriptor read/8, error -71 [ 39.234469][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 39.240056][ T9] usb usb1-port1: unable to enumerate USB device [ 39.464000][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.485418][ T10] usb 2-1: device descriptor read/8, error -71 [ 39.594015][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 39.615246][ T10] usb 2-1: device descriptor read/8, error -71 [ 39.724100][ T10] usb usb2-port1: unable to enumerate USB device [ 39.745317][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.755855][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.765182][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 39.776631][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 39.787833][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.803071][ T9] usb 3-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 39.813022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.822008][ T9] usb 3-1: Product: syz [ 39.826458][ T9] usb 3-1: Manufacturer: syz [ 39.831120][ T9] usb 3-1: SerialNumber: syz [ 40.045232][ T9] usb 3-1: 1:1 : invalid UAC_AS_GENERAL desc [ 40.053453][ T9] usb 3-1: 0:2 : does not exist [ 40.070138][ T9] usb 3-1: USB disconnect, device number 4 [ 40.579027][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 40.579048][ T36] audit: type=1400 audit(1792128765.090:175): avc: denied { setopt } for pid=478 comm="syz.2.41" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.610161][ T479] Zero length message leads to an empty skb [ 40.630892][ T36] audit: type=1400 audit(1792128765.120:176): avc: denied { write } for pid=478 comm="syz.2.41" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.651422][ T36] audit: type=1400 audit(1792128765.140:177): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.779389][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.821638][ T481] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 40.832632][ T36] audit: type=1400 audit(1792128765.340:178): avc: denied { relabelto } for pid=480 comm="syz.2.42" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 40.888479][ T36] audit: type=1400 audit(1792128765.340:179): avc: denied { associate } for pid=480 comm="syz.2.42" name="file0" dev="tmpfs" ino=96 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 40.940311][ T36] audit: type=1400 audit(1792128765.400:180): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 40.942270][ T485] loop5: detected capacity change from 0 to 7 [ 40.979133][ T31] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 40.997087][ T36] audit: type=1400 audit(1792128765.450:181): avc: denied { write } for pid=484 comm="syz.2.43" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.024073][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.033325][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.041565][ T31] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.064049][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.070762][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.070806][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.070849][ T485] loop5: unable to read partition table [ 41.077809][ T485] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾-ý?‹ºÐ œëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 41.080437][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.114954][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.123014][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 41.123381][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.132254][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.141495][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.168291][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.177537][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.185753][ T31] usb 2-1: config 0 descriptor?? [ 41.191868][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.201283][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.210079][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.219352][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.273477][ T36] audit: type=1400 audit(1792128765.780:182): avc: denied { execute } for pid=494 comm="syz.2.46" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.273606][ T495] process 'syz.2.46' launched '/dev/fd/4' with NULL argv: empty string added [ 41.307864][ T36] audit: type=1400 audit(1792128765.820:183): avc: denied { unlink } for pid=491 comm="syz.0.45" name="#1" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.332107][ T36] audit: type=1400 audit(1792128765.840:184): avc: denied { mount } for pid=491 comm="syz.0.45" name="/" dev="overlay" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.403322][ T502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.48'. [ 41.615296][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.622272][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.631598][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.638669][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.645622][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.652545][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.659591][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.666665][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.673688][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.680770][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.687856][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.695512][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.702560][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.709860][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.716928][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.723995][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.731003][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.739136][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.746220][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.753166][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.760319][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.767278][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.774468][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.781445][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.788429][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.795391][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.802324][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.809353][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.816624][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.823580][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.830584][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.837663][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.844771][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.851708][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.859254][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.866255][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 41.871817][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.878879][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.886010][ T31] wacom 0003:056A:0307.0002: unknown main item tag 0x0 [ 41.894895][ T45] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 41.904046][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.912132][ T45] usb 3-1: Product: syz [ 41.916414][ T45] usb 3-1: Manufacturer: 떙鬳탞ä™ê­“ë…呤몃㴧쮆ו絨젓ë¥ë¸²á£¸ì¥¶à¹³ì©å‡“ [ 41.926229][ T45] usb 3-1: SerialNumber: syz [ 41.931728][ T31] wacom 0003:056A:0307.0002: hidraw0: USB HID v0.08 Device [HID 056a:0307] on usb-dummy_hcd.1-1/input0 [ 42.050617][ T492] overlayfs: statfs failed on './file0' [ 42.084219][ T510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.155823][ T507] mmap: syz.2.49 (507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.171318][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 42.192941][ T45] usb 3-1: USB disconnect, device number 5 [ 42.334065][ T31] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 42.484810][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 42.493594][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.504252][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 42.513421][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.527148][ T31] usb 1-1: Found UVC 1.00 device (046d:0825) [ 42.540366][ T31] usb 1-1: No streaming interface found for terminal 2. [ 42.728058][ T31] usb 1-1: USB disconnect, device number 10 [ 43.426805][ T67] rust_binder: 537: undelivered TRANSACTION_ERROR: 29189 [ 43.523991][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 43.549509][ T45] usb 2-1: USB disconnect, device number 8 [ 43.584008][ T542] kvm: user requested TSC rate below hardware speed [ 43.591782][ T542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 43.664006][ T31] usb 1-1: device descriptor read/64, error -71 [ 43.684054][ T67] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.856545][ T67] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 43.867086][ T67] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 43.882393][ T67] usb 3-1: config 0 interface 0 has no altsetting 0 [ 43.889533][ T67] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 43.899115][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.907419][ T31] usb 1-1: device descriptor read/64, error -71 [ 43.914675][ T67] usb 3-1: config 0 descriptor?? [ 43.921330][ T67] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 44.014054][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.154053][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.165338][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.179785][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.189402][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.197748][ T45] usb 2-1: Product: syz [ 44.202137][ T45] usb 2-1: Manufacturer: syz [ 44.207083][ T45] usb 2-1: SerialNumber: syz [ 44.313800][ T31] usb 1-1: device descriptor read/64, error -71 [ 44.564009][ T31] usb 1-1: device descriptor read/64, error -71 [ 44.684047][ T31] usb usb1-port1: attempt power cycle [ 45.023989][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.045112][ T31] usb 1-1: device descriptor read/8, error -71 [ 45.185147][ T31] usb 1-1: device descriptor read/8, error -71 [ 45.219936][ T45] cdc_ncm 2-1:1.0: bind() failure [ 45.228379][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 45.235553][ T45] cdc_ncm 2-1:1.1: bind() failure [ 45.243341][ T45] usb 2-1: USB disconnect, device number 9 [ 45.423991][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 45.445163][ T31] usb 1-1: device descriptor read/8, error -71 [ 45.576670][ T31] usb 1-1: device descriptor read/8, error -71 [ 45.685650][ T31] usb usb1-port1: unable to enumerate USB device [ 45.748028][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 45.748051][ T36] audit: type=1400 audit(1792128770.260:219): avc: denied { ioctl } for pid=551 comm="syz.1.61" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.801221][ T36] audit: type=1400 audit(1792128770.310:220): avc: denied { mounton } for pid=553 comm="syz.1.62" path="/13/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 45.877408][ T36] audit: type=1400 audit(1792128770.390:221): avc: denied { mount } for pid=560 comm="syz.1.63" name="/" dev="configfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.907774][ T36] audit: type=1400 audit(1792128770.420:222): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.935838][ T36] audit: type=1400 audit(1792128770.450:223): avc: denied { read } for pid=564 comm="syz.1.64" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.958686][ T36] audit: type=1400 audit(1792128770.450:224): avc: denied { open } for pid=564 comm="syz.1.64" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.982702][ T36] audit: type=1400 audit(1792128770.490:225): avc: denied { ioctl } for pid=564 comm="syz.1.64" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x6e86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.009175][ T36] audit: type=1400 audit(1792128770.520:226): avc: denied { ioctl } for pid=564 comm="syz.1.64" path="socket:[6243]" dev="sockfs" ino=6243 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.038897][ T36] audit: type=1400 audit(1792128770.550:227): avc: denied { shutdown } for pid=564 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.060093][ T36] audit: type=1400 audit(1792128770.550:228): avc: denied { getopt } for pid=564 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.088277][ T567] 9pnet_virtio: no channels available for device 127.0.0.1 [ 46.308232][ T574] rust_binder: 573:574 no such ref 0 [ 46.313810][ T574] rust_binder: 573:574 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 46.322308][ T574] rust_binder: Write failure EINVAL in pid:60 [ 46.328793][ T574] rust_binder: 573:574 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 46.338201][ T574] rust_binder: Write failure EINVAL in pid:60 [ 46.344498][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.464194][ T45] usb 3-1: USB disconnect, device number 6 [ 46.484099][ T31] usb 2-1: device descriptor read/64, error -71 [ 46.503990][ T585] 9pnet_fd: p9_fd_create_unix (585): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 46.723979][ T31] usb 2-1: device descriptor read/64, error -71 [ 46.944507][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.054556][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.105163][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.115521][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.125730][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 47.135862][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.155042][ T45] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 47.164341][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.172492][ T45] usb 3-1: Product: syz [ 47.177172][ T45] usb 3-1: Manufacturer: syz [ 47.181903][ T45] usb 3-1: SerialNumber: syz [ 47.191377][ T45] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 47.203055][ T45] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 47.213919][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.220605][ T45] usbserial_generic 3-1:1.0: generic converter detected [ 47.229746][ T45] usb 3-1: generic converter now attached to ttyUSB0 [ 47.403399][ T588] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 47.427888][ T606] netlink: 52 bytes leftover after parsing attributes in process `syz.0.76'. [ 47.439765][ T606] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 47.453970][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.463189][ T45] usb 3-1: USB disconnect, device number 7 [ 47.479692][ T45] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 47.498704][ T45] usbserial_generic 3-1:1.0: device disconnected [ 47.584083][ T31] usb usb2-port1: attempt power cycle [ 47.934025][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.955047][ T31] usb 2-1: device descriptor read/8, error -71 [ 47.992851][ T612] sit0: entered promiscuous mode [ 47.999545][ T612] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 48.007557][ T612] netlink: 1 bytes leftover after parsing attributes in process `syz.2.78'. [ 48.094990][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.346206][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.385013][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.524988][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.614038][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 48.644064][ T31] usb usb2-port1: unable to enumerate USB device [ 48.688019][ T633] netlink: 9 bytes leftover after parsing attributes in process `syz.2.84'. [ 48.704010][ T633] z00ªX¹¦: renamed from gretap0 (while UP) [ 48.724612][ T633] z00ªX¹¦: entered allmulticast mode [ 48.793969][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 48.805333][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.824090][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 48.836948][ T10] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 48.846144][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.854270][ T10] usb 1-1: Product: syz [ 48.858515][ T10] usb 1-1: Manufacturer: syz [ 48.863149][ T10] usb 1-1: SerialNumber: syz [ 48.963980][ T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 49.075766][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 49.085813][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 49.115449][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.131136][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 49.141534][ T31] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 49.150888][ T31] usb 3-1: config 0 has no interface number 0 [ 49.157276][ T31] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 49.168640][ T31] usb 3-1: config 0 interface 88 has no altsetting 0 [ 49.179497][ T31] usb 3-1: language id specifier not provided by device, defaulting to English [ 49.200387][ T31] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 49.209832][ T31] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 49.218248][ T31] usb 3-1: Product: syz [ 49.230109][ T31] usb 3-1: SerialNumber: syz [ 49.235912][ T639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.246679][ T31] usb 3-1: config 0 descriptor?? [ 49.252243][ T633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 49.264050][ T639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.284810][ T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.297072][ T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.305653][ T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.314883][ T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.324712][ T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.334313][ T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.343616][ T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.353896][ T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.543992][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.695461][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 49.706593][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 49.725066][ T45] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 49.743966][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.752073][ T45] usb 2-1: Product: syz [ 49.773971][ T45] usb 2-1: Manufacturer: syz [ 49.778727][ T45] usb 2-1: SerialNumber: syz [ 50.292627][ T384] bridge_slave_1: left allmulticast mode [ 50.298462][ T384] bridge_slave_1: left promiscuous mode [ 50.304435][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.312608][ T384] bridge_slave_0: left allmulticast mode [ 50.318435][ T384] bridge_slave_0: left promiscuous mode [ 50.324178][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.425799][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.433015][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.440246][ T645] bridge_slave_0: entered allmulticast mode [ 50.446914][ T645] bridge_slave_0: entered promiscuous mode [ 50.454689][ T384] veth1_macvtap: left promiscuous mode [ 50.460435][ T384] veth0_vlan: left promiscuous mode [ 50.537723][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.545049][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.554206][ T645] bridge_slave_1: entered allmulticast mode [ 50.561385][ T645] bridge_slave_1: entered promiscuous mode [ 50.641261][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.648412][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.655780][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.662868][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.693830][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.701781][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.712809][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.718913][ T653] rust_binder: Write failure EINVAL in pid:71 [ 50.719937][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.729049][ T653] rust_binder: 652:653 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 50.744366][ T653] rust_binder: Write failure EINVAL in pid:71 [ 50.764983][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.772100][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.802087][ T645] veth0_vlan: entered promiscuous mode [ 50.818093][ T645] veth1_macvtap: entered promiscuous mode [ 51.013240][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 51.013259][ T36] audit: type=1400 audit(1792128775.520:253): avc: denied { create } for pid=665 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 51.040392][ T36] audit: type=1400 audit(1792128775.520:254): avc: denied { write } for pid=665 comm="syz.4.91" path="socket:[6527]" dev="sockfs" ino=6527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 51.417007][ T45] usb 2-1: Can't get UAC3 power state for id 10 [ 51.434983][ T45] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 51.446245][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 51.458811][ T10] usb 1-1: USB disconnect, device number 15 [ 51.463603][ T45] usb 2-1: USB disconnect, device number 14 [ 51.493470][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 51.509440][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.555265][ T36] audit: type=1400 audit(1792128776.070:255): avc: denied { execute } for pid=671 comm="syz.4.93" path="/file1" dev="ramfs" ino=6113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 51.747416][ T31] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input8 [ 51.766010][ T36] audit: type=1400 audit(1792128776.280:256): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=505 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.790036][ T31] usb 3-1: USB disconnect, device number 8 [ 51.790081][ C1] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 51.811255][ T45] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 51.821632][ T36] audit: type=1400 audit(1792128776.280:257): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=505 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.848097][ T36] audit: type=1400 audit(1792128776.280:258): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=505 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.853811][ T453] udevd[453]: Error opening device "/dev/input/event3": No such file or directory [ 51.883335][ T453] udevd[453]: Unable to EVIOCGABS device "/dev/input/event3" [ 51.891297][ T453] udevd[453]: Unable to EVIOCGABS device "/dev/input/event3" [ 51.934050][ T357] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.965455][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 51.973641][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 51.983825][ T45] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 51.993140][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.001419][ T45] usb 2-1: Product: syz [ 52.005891][ T45] usb 2-1: Manufacturer: syz [ 52.010519][ T45] usb 2-1: SerialNumber: syz [ 52.093997][ T357] usb 5-1: Using ep0 maxpacket: 32 [ 52.100502][ T357] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 52.112437][ T357] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 52.121758][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 52.129829][ T357] usb 5-1: Product: syz [ 52.135756][ T357] usb 5-1: Manufacturer: syz [ 52.140845][ T357] usb 5-1: SerialNumber: syz [ 52.147721][ T357] asix 5-1:2.0: probe with driver asix failed with error -22 [ 52.204033][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 52.220138][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 52.230887][ T45] usb 2-1: USB disconnect, device number 15 [ 52.245863][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.334033][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.345974][ T683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 52.348335][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.364548][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.372860][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.381802][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.390929][ T683] capability: warning: `syz.0.97' uses deprecated v2 capabilities in a way that may be insecure [ 52.392222][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.410500][ T36] audit: type=1400 audit(1792128776.920:259): avc: denied { bind } for pid=682 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.430797][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.439960][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.448653][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.459271][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.468313][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.480012][ T685] syzkaller1: entered promiscuous mode [ 52.485587][ T685] syzkaller1: entered allmulticast mode [ 52.494558][ T313] usb 5-1: USB disconnect, device number 2 [ 52.594095][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.793992][ T357] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 52.834086][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 52.879671][ T36] audit: type=1400 audit(1792128777.390:260): avc: denied { watch } for pid=692 comm="syz.1.101" path="/23" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.901447][ T36] audit: type=1400 audit(1792128777.400:261): avc: denied { watch_reads } for pid=692 comm="syz.1.101" path="/23/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.914817][ T693] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.933090][ T693] overlayfs: missing 'lowerdir' [ 52.943985][ T357] usb 1-1: Using ep0 maxpacket: 16 [ 52.950794][ T357] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.963283][ T357] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 52.972978][ T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.981124][ T357] usb 1-1: Product: syz [ 52.985436][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.991844][ T357] usb 1-1: Manufacturer: syz [ 52.996550][ T357] usb 1-1: SerialNumber: syz [ 53.001993][ T357] usb 1-1: config 0 descriptor?? [ 53.008084][ T357] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 53.194149][ T313] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 53.210016][ T10] usb 1-1: USB disconnect, device number 16 [ 53.224058][ T31] usb 3-1: device descriptor read/64, error -71 [ 53.344056][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 53.344464][ T31] usb usb3-port1: attempt power cycle [ 53.351153][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.365566][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.376248][ T313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.385530][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.393746][ T313] usb 2-1: Product: syz [ 53.397986][ T313] usb 2-1: Manufacturer: syz [ 53.402705][ T313] usb 2-1: SerialNumber: syz [ 53.612529][ T313] usb 2-1: 0:2 : does not exist [ 53.619479][ T313] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 53.630936][ T313] usb 2-1: USB disconnect, device number 16 [ 53.643382][ T453] udevd[453]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.694006][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.714987][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.733498][ T707] : renamed from bridge0 (while UP) [ 53.770298][ T714] overlayfs: conflicting options: metacopy=off,verity=require [ 53.791370][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.800532][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.809681][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.818901][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.828099][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.837142][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.846611][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.857219][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.864168][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.865441][ T36] audit: type=1400 audit(1792128778.380:262): avc: denied { connect } for pid=715 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.873798][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 53.902125][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 54.084023][ T313] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 54.094206][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 54.120729][ T31] usb 3-1: device descriptor read/8, error -71 [ 54.154160][ T310] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.234025][ T313] usb 1-1: Using ep0 maxpacket: 16 [ 54.240497][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.254035][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.255531][ T31] usb 3-1: device descriptor read/8, error -71 [ 54.263796][ T313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.263843][ T313] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 54.297554][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.306524][ T313] usb 1-1: config 0 descriptor?? [ 54.325292][ T310] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.333432][ T310] usb 5-1: config 0 has no interface number 0 [ 54.339657][ T310] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.350583][ T310] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.360515][ T310] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 54.369853][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.378765][ T310] usb 5-1: config 0 descriptor?? [ 54.384172][ T31] usb usb3-port1: unable to enumerate USB device [ 54.424067][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 54.519061][ T313] usbhid 1-1:0.0: can't add hid device: -71 [ 54.525267][ T313] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 54.534472][ T313] usb 1-1: USB disconnect, device number 17 [ 54.575204][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.587012][ T10] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 54.589551][ T722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.597031][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.608786][ T722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.613360][ T10] usb 2-1: Product: syz [ 54.625052][ T10] usb 2-1: Manufacturer: syz [ 54.629742][ T10] usb 2-1: SerialNumber: syz [ 54.635246][ T10] usb 2-1: config 0 descriptor?? [ 54.641257][ T10] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 54.894991][ T726] usb 2-1: USB disconnect, device number 17 [ 54.950585][ T310] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 54.958002][ T310] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 54.966393][ T310] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 54.973688][ T310] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 54.981086][ T310] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 54.989292][ T310] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 55.002042][ T310] hid_prodikeys: hid-prodikeys: failed to find output report [ 55.002042][ T310] [ 55.052217][ T736] netlink: 'syz.0.114': attribute type 11 has an invalid length. [ 55.313967][ T726] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 55.427347][ T741] overlayfs: workdir and upperdir must be separate subtrees [ 55.465127][ T726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.475390][ T726] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 55.486410][ T726] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 55.500696][ T726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.509317][ T726] usb 1-1: Product: syz [ 55.513793][ T726] usb 1-1: Manufacturer: syz [ 55.518471][ T726] usb 1-1: SerialNumber: syz [ 55.984017][ T31] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 56.014004][ T726] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 56.078005][ T753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.086703][ T753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.136102][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.146394][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.155535][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.164118][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 56.172220][ T31] usb 3-1: string descriptor 0 read error: -22 [ 56.175409][ T726] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 56.180063][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.189161][ T726] usb 2-1: config 179 has no interface number 0 [ 56.197697][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.204402][ T726] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 56.223189][ T726] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 56.224568][ T31] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 56.235260][ T726] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 56.242260][ T31] cdc_ncm 3-1:1.0: bind() failure [ 56.253366][ T726] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 56.269362][ T726] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 56.282779][ T726] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 56.291901][ T726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.301251][ T749] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 56.427456][ T752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.436943][ T752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.445807][ T726] usb 3-1: USB disconnect, device number 13 [ 56.514224][ T310] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 56.756833][ T726] usb 2-1: USB disconnect, device number 18 [ 56.762907][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 56.762938][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 56.780129][ T726] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 56.932917][ T310] usb 5-1: USB disconnect, device number 3 [ 56.976200][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 56.976221][ T36] audit: type=1400 audit(1792128781.490:274): avc: denied { connect } for pid=759 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.253270][ T767] input: syz1 as /devices/virtual/input/input10 [ 57.261661][ T36] audit: type=1400 audit(1792128781.770:275): avc: denied { bind } for pid=766 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.288660][ T726] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 57.296467][ T36] audit: type=1400 audit(1792128781.790:276): avc: denied { listen } for pid=766 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.316444][ T36] audit: type=1400 audit(1792128781.790:277): avc: denied { accept } for pid=766 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.336644][ T36] audit: type=1400 audit(1792128781.790:278): avc: denied { read } for pid=766 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.356173][ T36] audit: type=1400 audit(1792128781.800:279): avc: denied { sqpoll } for pid=766 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.430850][ T36] audit: type=1400 audit(1792128781.940:280): avc: denied { create } for pid=785 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 57.451821][ T36] audit: type=1400 audit(1792128781.960:281): avc: denied { name_bind } for pid=785 comm="syz.1.128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 57.485440][ T726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.493531][ T726] usb 3-1: not running at top speed; connect to a high speed hub [ 57.502223][ T726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.512531][ T726] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 57.521555][ T726] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 57.532912][ T726] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 57.542139][ T726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.550235][ T726] usb 3-1: Product: syz [ 57.554474][ T726] usb 3-1: Manufacturer: syz [ 57.559117][ T726] usb 3-1: SerialNumber: syz [ 57.713988][ T31] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 57.769707][ T761] tipc: Started in network mode [ 57.774708][ T761] tipc: Node identity 4, cluster identity 4711 [ 57.780923][ T761] tipc: Node number set to 4 [ 57.843969][ T31] usb 2-1: device descriptor read/64, error -71 [ 57.954458][ T726] usb 3-1: USB disconnect, device number 14 [ 57.972794][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.060185][ T313] usb 1-1: USB disconnect, device number 18 [ 58.068586][ T36] audit: type=1400 audit(1792128782.580:282): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.095527][ T31] usb 2-1: device descriptor read/64, error -71 [ 58.120258][ T794] tipc: Resetting bearer [ 58.126669][ T36] audit: type=1400 audit(1792128782.630:283): avc: denied { ioctl } for pid=793 comm="syz.0.129" path="socket:[7377]" dev="sockfs" ino=7377 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.153498][ T799] netlink: 'syz.4.130': attribute type 46 has an invalid length. [ 58.344062][ T31] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 58.474181][ T31] usb 2-1: device descriptor read/64, error -71 [ 58.493984][ T313] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 58.644026][ T313] usb 1-1: Using ep0 maxpacket: 32 [ 58.650478][ T313] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 58.658815][ T313] usb 1-1: config 0 has no interface number 0 [ 58.664983][ T313] usb 1-1: config 0 interface 184 has no altsetting 0 [ 58.673552][ T313] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 58.682751][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.690850][ T313] usb 1-1: Product: syz [ 58.695089][ T313] usb 1-1: Manufacturer: syz [ 58.699727][ T313] usb 1-1: SerialNumber: syz [ 58.705238][ T313] usb 1-1: config 0 descriptor?? [ 58.712210][ T313] smsc75xx v1.0.0 [ 58.714043][ T357] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 58.723996][ T31] usb 2-1: device descriptor read/64, error -71 [ 58.834093][ T31] usb usb2-port1: attempt power cycle [ 58.875604][ T357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 58.883931][ T357] usb 3-1: not running at top speed; connect to a high speed hub [ 58.892548][ T357] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 58.905178][ T357] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 58.914316][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.922354][ T357] usb 3-1: Product: syz [ 58.926578][ T357] usb 3-1: Manufacturer: syz [ 58.931315][ T357] usb 3-1: SerialNumber: syz [ 59.161973][ T805] No source specified [ 59.184102][ T31] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 59.205147][ T31] usb 2-1: device descriptor read/8, error -71 [ 59.335073][ T31] usb 2-1: device descriptor read/8, error -71 [ 59.605556][ T31] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 59.635241][ T31] usb 2-1: device descriptor read/8, error -71 [ 59.787194][ T31] usb 2-1: device descriptor read/8, error -71 [ 59.898057][ T357] usb 3-1: unit 4 not found! [ 59.904220][ T31] usb usb2-port1: unable to enumerate USB device [ 59.910815][ T357] usb 3-1: unit 0 not found! [ 59.922788][ T357] usb 3-1: USB disconnect, device number 15 [ 60.173449][ T817] __nla_validate_parse: 25 callbacks suppressed [ 60.173536][ T817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 60.189272][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 60.670613][ T853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.142'. [ 60.720491][ T45] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 60.809793][ T858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.143'. [ 60.875140][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.885575][ T45] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 60.897192][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.910040][ T45] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.924740][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.936006][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 60.948154][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 60.962289][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.971635][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 60.983960][ T45] usb 5-1: SerialNumber: syz [ 60.992792][ T830] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 61.254618][ T313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 61.271913][ T313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 61.281739][ T313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 61.292124][ T313] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 61.304126][ T313] usb 1-1: USB disconnect, device number 19 [ 61.315165][ T867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 61.744279][ T877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=877 comm=syz.2.149 [ 62.422273][ T882] FAULT_INJECTION: forcing a failure. [ 62.422273][ T882] name failslab, interval 1, probability 0, space 0, times 1 [ 62.435132][ T882] CPU: 1 UID: 0 PID: 882 Comm: syz.0.151 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 62.435162][ T882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.435178][ T882] Call Trace: [ 62.435188][ T882] [ 62.435195][ T882] __dump_stack+0x21/0x30 [ 62.435232][ T882] dump_stack_lvl+0x140/0x1c0 [ 62.435258][ T882] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.435284][ T882] ? unwind_get_return_address+0x51/0x90 [ 62.435309][ T882] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 62.435337][ T882] dump_stack+0x19/0x20 [ 62.435361][ T882] should_fail_ex+0x3c2/0x510 [ 62.435379][ T882] should_failslab+0xac/0x100 [ 62.435396][ T882] kmem_cache_alloc_node_noprof+0x45/0x420 [ 62.435421][ T882] ? __alloc_skb+0x10c/0x360 [ 62.435439][ T882] __alloc_skb+0x10c/0x360 [ 62.435455][ T882] ? __call_rcu_common+0xd5/0x710 [ 62.435480][ T882] tipc_msg_create+0x50/0x500 [ 62.435503][ T882] ? __kasan_check_write+0x18/0x20 [ 62.435527][ T882] tipc_group_proto_xmit+0x14f/0x880 [ 62.435551][ T882] tipc_group_delete+0x13f/0x470 [ 62.435574][ T882] ? tipc_recvstream+0xe80/0xe80 [ 62.435593][ T882] ? __cfi_tipc_group_delete+0x10/0x10 [ 62.435617][ T882] ? tipc_group_self+0x29/0x1c0 [ 62.435639][ T882] tipc_release+0x1ea/0x1c40 [ 62.435657][ T882] ? __cfi_tipc_release+0x10/0x10 [ 62.435674][ T882] ? __kasan_check_write+0x18/0x20 [ 62.435696][ T882] ? down_write+0xee/0x2b0 [ 62.435723][ T882] ? __cfi_down_write+0x10/0x10 [ 62.435768][ T882] ? call_rcu+0x14/0x20 [ 62.435805][ T882] sock_close+0xb7/0x220 [ 62.435844][ T882] ? __cfi_sock_close+0x10/0x10 [ 62.435878][ T882] __fput+0x208/0xa30 [ 62.435907][ T882] ____fput+0x20/0x30 [ 62.435924][ T882] task_work_run+0x1e8/0x260 [ 62.435949][ T882] ? __cfi_task_work_run+0x10/0x10 [ 62.435972][ T882] ? __kasan_check_write+0x18/0x20 [ 62.435996][ T882] resume_user_mode_work+0x35/0x50 [ 62.436017][ T882] syscall_exit_to_user_mode+0x63/0xb0 [ 62.436039][ T882] do_syscall_64+0x63/0xf0 [ 62.436054][ T882] ? clear_bhb_loop+0x50/0xa0 [ 62.436237][ T882] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.436263][ T882] RIP: 0033:0x7fd07079e559 [ 62.436308][ T882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.436329][ T882] RSP: 002b:00007fd071685028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 62.436354][ T882] RAX: 0000000000000000 RBX: 00007fd070a25fa0 RCX: 00007fd07079e559 [ 62.436365][ T882] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 62.436376][ T882] RBP: 00007fd0708358b0 R08: 0000000000000000 R09: 0000000000000000 [ 62.436386][ T882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.436396][ T882] R13: 00007fd070a26038 R14: 00007fd070a25fa0 R15: 00007ffc449ad4a8 [ 62.436410][ T882] [ 62.774842][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 62.774861][ T36] audit: type=1400 audit(1792128787.290:310): avc: denied { search } for pid=884 comm="syz.0.152" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.804252][ T36] audit: type=1400 audit(1792128787.290:311): avc: denied { append } for pid=884 comm="syz.0.152" name="uprobe_events" dev="tracefs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.918225][ T36] audit: type=1400 audit(1792128787.430:312): avc: denied { create } for pid=898 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 62.984967][ T903] netlink: 'syz.0.158': attribute type 63 has an invalid length. [ 62.992805][ T903] netlink: 5 bytes leftover after parsing attributes in process `syz.0.158'. [ 63.001695][ T903] gretap0: entered allmulticast mode [ 63.007782][ T903] netlink: 'syz.0.158': attribute type 16 has an invalid length. [ 63.016422][ T357] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 63.175480][ T357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.183954][ T357] usb 3-1: config 129 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 63.195754][ T357] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 63.204972][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.213073][ T357] usb 3-1: Product: syz [ 63.217376][ T357] usb 3-1: Manufacturer: syz [ 63.222131][ T357] usb 3-1: SerialNumber: syz [ 63.228067][ T894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.263961][ T313] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 63.415161][ T313] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 63.424123][ T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.434387][ T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.443688][ T313] usb 1-1: config 1 has no interface number 0 [ 63.449893][ T313] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 63.460797][ T313] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 63.501960][ T45] usb 5-1: USB disconnect, device number 4 [ 63.502429][ T313] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.522811][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.531176][ T313] usb 1-1: Product: syz [ 63.539795][ T357] usb 3-1: MIDIStreaming interface descriptor not found [ 63.544052][ T313] usb 1-1: Manufacturer: syz [ 63.567698][ T313] usb 1-1: SerialNumber: syz [ 63.584015][ T357] usb 3-1: USB disconnect, device number 16 [ 63.683370][ T383] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.683592][ T36] audit: type=1400 audit(1792128788.190:313): avc: denied { write } for pid=915 comm="syz.1.163" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.695420][ T383] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.713566][ T36] audit: type=1400 audit(1792128788.210:314): avc: denied { ioctl } for pid=915 comm="syz.1.163" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.796815][ T903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=903 comm=syz.0.158 [ 63.809329][ T36] audit: type=1400 audit(1792128788.310:315): avc: denied { execute } for pid=921 comm="syz.4.164" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.811563][ T36] audit: type=1400 audit(1792128788.320:316): avc: denied { read } for pid=921 comm="syz.4.164" name="transaction_report" dev="binder" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.837284][ T903] netlink: 188 bytes leftover after parsing attributes in process `syz.0.158'. [ 63.857279][ T36] audit: type=1400 audit(1792128788.320:317): avc: denied { open } for pid=921 comm="syz.4.164" path="/dev/binderfs/features/transaction_report" dev="binder" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.891957][ T36] audit: type=1400 audit(1792128788.400:318): avc: denied { map } for pid=921 comm="syz.4.164" path="/dev/binderfs/features/transaction_report" dev="binder" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.917540][ T36] audit: type=1400 audit(1792128788.410:319): avc: denied { mounton } for pid=921 comm="syz.4.164" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.152121][ T937] overlayfs: failed to resolve './file0': -2 [ 64.159242][ T932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.166'. [ 64.382145][ T313] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 64.394894][ T313] usb 1-1: USB disconnect, device number 20 [ 64.463080][ T944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=944 comm=syz.0.169 [ 65.270744][ T965] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 65.281499][ T357] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 65.424015][ T357] usb 3-1: device descriptor read/64, error -71 [ 65.603999][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 65.664020][ T357] usb 3-1: device descriptor read/64, error -71 [ 65.734022][ T919] Bluetooth: hci0: command 0x1003 tx timeout [ 65.734335][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.765049][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 65.773613][ T10] usb 1-1: string descriptor 0 read error: -22 [ 65.779945][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 65.789052][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.873994][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.903967][ T357] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 65.993963][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 66.034053][ T357] usb 3-1: device descriptor read/64, error -71 [ 66.036274][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.051416][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.061248][ T313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.074140][ T313] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 66.083392][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.092235][ T313] usb 5-1: config 0 descriptor?? [ 66.155413][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.166453][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.176285][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.189270][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 66.198413][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.205049][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.218942][ T45] usb 2-1: config 0 descriptor?? [ 66.219296][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.233231][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.241884][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.267371][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.274108][ T357] usb 3-1: device descriptor read/64, error -71 [ 66.277013][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.292148][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 66.298223][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 66.307175][ T973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.309697][ T10] usb 1-1: USB disconnect, device number 21 [ 66.319449][ T973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.333956][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.341177][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.348316][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.355309][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.362259][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.369324][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.376283][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.383317][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.390269][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.394491][ T357] usb usb3-port1: attempt power cycle [ 66.397266][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.409568][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.416565][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.423483][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.430556][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.437502][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.444557][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.451485][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.458532][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.465478][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.472465][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.479419][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.486745][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.493766][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.500788][ T313] apple 0003:05AC:026C.0004: unknown main item tag 0x0 [ 66.509406][ T313] apple 0003:05AC:026C.0004: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.4-1/input0 [ 66.530867][ T31] usb 5-1: USB disconnect, device number 5 [ 66.632787][ T972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.641430][ T972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.650734][ T45] logitech-hidpp-device 0003:046D:C262.0005: unbalanced collection at end of report description [ 66.661468][ T45] logitech-hidpp-device 0003:046D:C262.0005: hidpp_probe:parse failed [ 66.669769][ T45] logitech-hidpp-device 0003:046D:C262.0005: probe with driver logitech-hidpp-device failed with error -22 [ 66.734060][ T357] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 66.755271][ T357] usb 3-1: device descriptor read/8, error -71 [ 66.820440][ T978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 66.830785][ T978] FAULT_INJECTION: forcing a failure. [ 66.830785][ T978] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 66.844210][ T978] CPU: 0 UID: 0 PID: 978 Comm: syz.0.180 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 66.844249][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.844265][ T978] Call Trace: [ 66.844272][ T978] [ 66.844282][ T978] __dump_stack+0x21/0x30 [ 66.844327][ T978] dump_stack_lvl+0x140/0x1c0 [ 66.844366][ T978] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.844407][ T978] dump_stack+0x19/0x20 [ 66.844443][ T978] should_fail_ex+0x3c2/0x510 [ 66.844469][ T978] should_fail_alloc_page+0xec/0x110 [ 66.844495][ T978] __alloc_pages_noprof+0x1c0/0x7e0 [ 66.844527][ T978] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 66.844561][ T978] __folio_alloc_noprof+0x14/0x80 [ 66.844588][ T978] folio_prealloc+0x46/0x220 [ 66.844610][ T978] do_pte_missing+0x16af/0x4440 [ 66.844635][ T978] ? schedule+0xc5/0x240 [ 66.844662][ T978] ? __futex_wait+0x330/0x3d0 [ 66.844693][ T978] ? pte_marker_clear+0x1b0/0x1b0 [ 66.844719][ T978] ? __cfi_futex_wake_mark+0x10/0x10 [ 66.844750][ T978] ? futex_wake+0x666/0x950 [ 66.844778][ T978] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 66.844829][ T978] handle_mm_fault+0x1189/0x1ba0 [ 66.844856][ T978] ? __cfi_handle_mm_fault+0x10/0x10 [ 66.844879][ T978] ? lock_vma_under_rcu+0x4cf/0x590 [ 66.844907][ T978] ? __se_sys_futex+0x13c/0x320 [ 66.844935][ T978] do_user_addr_fault+0x951/0x1230 [ 66.844960][ T978] ? __cfi_ksys_write+0x10/0x10 [ 66.844997][ T978] ? fpregs_restore_userregs+0x11c/0x260 [ 66.845033][ T978] exc_page_fault+0x58/0xc0 [ 66.845063][ T978] asm_exc_page_fault+0x2b/0x30 [ 66.845093][ T978] RIP: 0033:0x7fd070665de6 [ 66.845114][ T978] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d c7 05 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 ac c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 66.845136][ T978] RSP: 002b:00007fd071682f60 EFLAGS: 00010206 [ 66.845159][ T978] RAX: 0000000000000000 RBX: 00007fd070a25fa0 RCX: 0000200000000ac0 [ 66.845177][ T978] RDX: 0000200000000a00 RSI: 0000200000000a00 RDI: 00007fd070836397 [ 66.845208][ T978] RBP: 00007fd0708358b0 R08: 00007fd070652930 R09: 0000000000000000 [ 66.845226][ T978] R10: 0000000000000002 R11: 0000200000000a00 R12: 00000000000000b3 [ 66.845242][ T978] R13: 0000200000000a00 R14: 0000000000000002 R15: 00007ffc449ad4a8 [ 66.845263][ T978] [ 66.845280][ T978] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 66.903222][ T357] usb 3-1: device descriptor read/8, error -71 [ 67.058730][ T313] usb 2-1: USB disconnect, device number 23 [ 67.130346][ T985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.153983][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 67.303994][ T357] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 67.313412][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 67.322549][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.335148][ T357] usb 3-1: device descriptor read/8, error -71 [ 67.341861][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.349625][ T995] rust_binder: 994:995 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 67.350998][ T10] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 67.358918][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.369761][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 67.383715][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.387866][ T995] rust_binder: 994:995 got transaction to invalid handle 1 [ 67.400004][ T10] usb 1-1: Found UVC 1.00 device (046d:0825) [ 67.412098][ T995] rust_binder: 994:995 transaction call to 0:0 failed ENOENT, code 0 size 104-24 line process.rs:952 [ 67.417015][ T10] usb 1-1: No streaming interface found for terminal 2. [ 67.423671][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.438087][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.444437][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.452463][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.464988][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.472943][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.479258][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.487227][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.493631][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.502004][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.508332][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.516277][ T357] usb 3-1: device descriptor read/8, error -71 [ 67.522495][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.528847][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.536759][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.542991][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.550872][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.557096][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.565008][ T995] rust_binder: Write failure EINVAL in pid:110 [ 67.571242][ T995] rust_binder: 994:995 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 67.609042][ T45] usb 1-1: USB disconnect, device number 22 [ 67.625212][ T357] usb usb3-port1: unable to enumerate USB device [ 67.894639][ T357] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.043968][ T357] usb 5-1: device descriptor read/64, error -71 [ 68.129069][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 68.129089][ T36] audit: type=1400 audit(1792128792.640:330): avc: denied { ioctl } for pid=1009 comm="syz.2.188" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.163248][ T1010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 68.186488][ T1015] syzkaller1: entered promiscuous mode [ 68.192148][ T1015] syzkaller1: entered allmulticast mode [ 68.433954][ T313] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 68.593956][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 68.600494][ T313] usb 1-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 68.610933][ T313] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.624001][ T313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.630672][ T313] usb 1-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 68.639890][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.648925][ T313] usb 1-1: config 0 descriptor?? [ 68.655173][ T313] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 68.704089][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 68.853982][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 68.862783][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.881664][ T1046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.890286][ T10] usb 3-1: config 0 has no interface number 0 [ 68.892775][ T1046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.899001][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 68.913619][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.921720][ T10] usb 3-1: Product: syz [ 68.926124][ T10] usb 3-1: Manufacturer: syz [ 68.930874][ T10] usb 3-1: SerialNumber: syz [ 68.940646][ T10] usb 3-1: config 0 descriptor?? [ 68.948643][ T10] smsc95xx v2.0.0 [ 69.347633][ T1029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 69.356622][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 69.367465][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.394434][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 69.405377][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 70.041465][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.073810][ T1068] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.083564][ T36] audit: type=1400 audit(1792128794.590:331): avc: denied { getopt } for pid=1067 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.086439][ T1068] 9p: Unknown uid 00000000004294967295 [ 70.186067][ T1072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'. [ 70.300620][ T1083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 70.327693][ T384] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.564010][ T313] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 70.704239][ T313] usb 2-1: device descriptor read/64, error -71 [ 70.943997][ T313] usb 2-1: device descriptor read/64, error -71 [ 71.035115][ T36] audit: type=1400 audit(1792128795.550:332): avc: denied { write } for pid=1089 comm="syz.4.206" name="/" dev="incremental-fs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.061042][ T1091] incfs: Unexpected inode type [ 71.066118][ T36] audit: type=1400 audit(1792128795.550:333): avc: denied { add_name } for pid=1089 comm="syz.4.206" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.090463][ T36] audit: type=1400 audit(1792128795.550:334): avc: denied { create } for pid=1089 comm="syz.4.206" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.110479][ T36] audit: type=1400 audit(1792128795.570:335): avc: denied { associate } for pid=1089 comm="syz.4.206" name="mnt" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.131927][ T36] audit: type=1400 audit(1792128795.570:336): avc: denied { remount } for pid=1089 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.151990][ T36] audit: type=1400 audit(1792128795.570:337): avc: denied { setattr } for pid=1089 comm="syz.4.206" name="mnt" dev="incremental-fs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.174934][ T36] audit: type=1400 audit(1792128795.570:338): avc: denied { setattr } for pid=1089 comm="syz.4.206" name="file1" dev="incremental-fs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.200258][ T36] audit: type=1400 audit(1792128795.570:339): avc: denied { mounton } for pid=1089 comm="syz.4.206" path="/31/bus/file1" dev="incremental-fs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.234029][ T313] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 71.266493][ T310] usb 1-1: USB disconnect, device number 23 [ 71.363970][ T313] usb 2-1: device descriptor read/64, error -71 [ 71.463094][ T310] usb 3-1: USB disconnect, device number 21 [ 71.548955][ T1108] FAULT_INJECTION: forcing a failure. [ 71.548955][ T1108] name failslab, interval 1, probability 0, space 0, times 0 [ 71.561934][ T1108] CPU: 0 UID: 0 PID: 1108 Comm: syz.2.213 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 71.561965][ T1108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.561977][ T1108] Call Trace: [ 71.561983][ T1108] [ 71.561989][ T1108] __dump_stack+0x21/0x30 [ 71.562023][ T1108] dump_stack_lvl+0x140/0x1c0 [ 71.562050][ T1108] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.562078][ T1108] ? kasan_save_track+0x4f/0x80 [ 71.562106][ T1108] ? kasan_save_track+0x3e/0x80 [ 71.562132][ T1108] ? kasan_save_alloc_info+0x3a/0x50 [ 71.562154][ T1108] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 71.562181][ T1108] ? __get_vm_area_node+0x150/0x390 [ 71.562202][ T1108] dump_stack+0x19/0x20 [ 71.562231][ T1108] should_fail_ex+0x3c2/0x510 [ 71.562248][ T1108] should_failslab+0xac/0x100 [ 71.562265][ T1108] kmem_cache_alloc_node_noprof+0x45/0x420 [ 71.562291][ T1108] ? alloc_vmap_area+0x230/0x26f0 [ 71.562313][ T1108] alloc_vmap_area+0x230/0x26f0 [ 71.562336][ T1108] ? kasan_save_alloc_info+0x3a/0x50 [ 71.562358][ T1108] ? vm_map_ram+0xdd0/0xdd0 [ 71.562378][ T1108] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 71.562405][ T1108] ? __get_vm_area_node+0x150/0x390 [ 71.562426][ T1108] __get_vm_area_node+0x1f8/0x390 [ 71.562449][ T1108] __vmalloc_node_range_noprof+0x340/0x1300 [ 71.562472][ T1108] ? alloc_ldt_struct+0xbd/0x2f0 [ 71.562494][ T1108] ? __se_sys_modify_ldt+0x70/0x2e0 [ 71.562516][ T1108] ? __x64_sys_modify_ldt+0x7f/0xa0 [ 71.562539][ T1108] ? x64_sys_call+0x143d/0x2ee0 [ 71.562557][ T1108] ? do_syscall_64+0x57/0xf0 [ 71.562577][ T1108] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 71.562602][ T1108] ? alloc_ldt_struct+0xbd/0x2f0 [ 71.562625][ T1108] __vmalloc_noprof+0x104/0x1d0 [ 71.562646][ T1108] ? alloc_ldt_struct+0xbd/0x2f0 [ 71.562668][ T1108] ? __kasan_kmalloc+0x96/0xb0 [ 71.562684][ T1108] ? __cfi___vmalloc_noprof+0x10/0x10 [ 71.562705][ T1108] ? __kmalloc_cache_noprof+0x23c/0x470 [ 71.562739][ T1108] ? alloc_ldt_struct+0x7e/0x2f0 [ 71.562771][ T1108] alloc_ldt_struct+0xbd/0x2f0 [ 71.562821][ T1108] ? __kasan_check_write+0x18/0x20 [ 71.562861][ T1108] write_ldt+0x43d/0x760 [ 71.562884][ T1108] ? native_write_gdt_entry+0x40/0x40 [ 71.562908][ T1108] ? __x64_sys_futex+0x110/0x110 [ 71.562926][ T1108] ? __cfi_ksys_write+0x10/0x10 [ 71.562953][ T1108] __se_sys_modify_ldt+0x70/0x2e0 [ 71.562976][ T1108] __x64_sys_modify_ldt+0x7f/0xa0 [ 71.562999][ T1108] x64_sys_call+0x143d/0x2ee0 [ 71.563017][ T1108] do_syscall_64+0x57/0xf0 [ 71.563032][ T1108] ? clear_bhb_loop+0x50/0xa0 [ 71.563080][ T1108] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.563116][ T1108] RIP: 0033:0x7f474579e559 [ 71.563131][ T1108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.563147][ T1108] RSP: 002b:00007f47465b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 71.563166][ T1108] RAX: ffffffffffffffda RBX: 00007f4745a25fa0 RCX: 00007f474579e559 [ 71.563180][ T1108] RDX: 0000000000000010 RSI: 0000200000006880 RDI: 0000000000000001 [ 71.563192][ T1108] RBP: 00007f47458358b0 R08: 0000000000000000 R09: 0000000000000000 [ 71.563203][ T1108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.563214][ T1108] R13: 00007f4745a26038 R14: 00007f4745a25fa0 R15: 00007fff75bbe278 [ 71.563233][ T1108] [ 71.563246][ T1108] syz.2.213: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 71.685435][ T31] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 71.688686][ T1108] ,cpuset= [ 71.876096][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.878249][ T313] usb 2-1: device descriptor read/64, error -71 [ 71.885954][ T1108] syz2,mems_allowed=0 [ 71.935435][ T645] ------------[ cut here ]------------ [ 71.944033][ T1108] [ 71.944963][ T645] WARNING: CPU: 1 PID: 645 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 71.947588][ T1108] CPU: 0 UID: 0 PID: 1108 Comm: syz.2.213 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 71.947680][ T1108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.947722][ T1108] Call Trace: [ 71.947744][ T1108] [ 71.947777][ T1108] __dump_stack+0x21/0x30 [ 71.947883][ T1108] dump_stack_lvl+0x140/0x1c0 [ 71.947976][ T1108] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.948080][ T1108] dump_stack+0x19/0x20 [ 71.948165][ T1108] warn_alloc+0x1e7/0x2c0 [ 71.948237][ T1108] ? kasan_save_free_info+0x44/0x50 [ 71.948318][ T1108] ? __cfi_warn_alloc+0x10/0x10 [ 71.948382][ T1108] ? __get_vm_area_node+0x211/0x390 [ 71.948458][ T1108] ? __get_vm_area_node+0x211/0x390 [ 71.948533][ T1108] __vmalloc_node_range_noprof+0x365/0x1300 [ 71.948630][ T1108] ? __se_sys_modify_ldt+0x70/0x2e0 [ 71.948705][ T1108] ? __x64_sys_modify_ldt+0x7f/0xa0 [ 71.948788][ T1108] ? x64_sys_call+0x143d/0x2ee0 [ 71.948873][ T1108] ? do_syscall_64+0x57/0xf0 [ 71.948952][ T1108] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 71.949036][ T1108] ? alloc_ldt_struct+0xbd/0x2f0 [ 71.949112][ T1108] __vmalloc_noprof+0x104/0x1d0 [ 71.949180][ T1108] ? alloc_ldt_struct+0xbd/0x2f0 [ 71.949255][ T1108] ? __kasan_kmalloc+0x96/0xb0 [ 71.949305][ T1108] ? __cfi___vmalloc_noprof+0x10/0x10 [ 71.949373][ T1108] ? __kmalloc_cache_noprof+0x23c/0x470 [ 71.949466][ T1108] ? alloc_ldt_struct+0x7e/0x2f0 [ 71.949541][ T1108] alloc_ldt_struct+0xbd/0x2f0 [ 71.949608][ T1108] ? __kasan_check_write+0x18/0x20 [ 71.949693][ T1108] write_ldt+0x43d/0x760 [ 71.949761][ T1108] ? native_write_gdt_entry+0x40/0x40 [ 71.949845][ T1108] ? __x64_sys_futex+0x110/0x110 [ 71.949903][ T1108] ? __cfi_ksys_write+0x10/0x10 [ 71.949989][ T1108] __se_sys_modify_ldt+0x70/0x2e0 [ 71.950066][ T1108] __x64_sys_modify_ldt+0x7f/0xa0 [ 71.950142][ T1108] x64_sys_call+0x143d/0x2ee0 [ 71.950222][ T1108] do_syscall_64+0x57/0xf0 [ 71.950275][ T1108] ? clear_bhb_loop+0x50/0xa0 [ 71.950365][ T1108] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.950432][ T1108] RIP: 0033:0x7f474579e559 [ 71.950486][ T1108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.950541][ T1108] RSP: 002b:00007f47465b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 71.950599][ T1108] RAX: ffffffffffffffda RBX: 00007f4745a25fa0 RCX: 00007f474579e559 [ 71.950643][ T1108] RDX: 0000000000000010 RSI: 0000200000006880 RDI: 0000000000000001 [ 71.950685][ T1108] RBP: 00007f47458358b0 R08: 0000000000000000 R09: 0000000000000000 [ 71.950727][ T1108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.950770][ T1108] R13: 00007f4745a26038 R14: 00007f4745a25fa0 R15: 00007fff75bbe278 [ 71.950817][ T1108] [ 71.951021][ T1108] Mem-Info: [ 71.955239][ T645] Modules linked in: [ 71.955258][ T645] CPU: 1 UID: 0 PID: 645 Comm: syz-executor Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 71.967102][ T1108] active_anon:23376 inactive_anon:0 isolated_anon:0 [ 71.967102][ T1108] active_file:21558 inactive_file:2329 isolated_file:0 [ 71.967102][ T1108] unevictable:0 dirty:48 writeback:0 [ 71.967102][ T1108] slab_reclaimable:4959 slab_unreclaimable:71516 [ 71.967102][ T1108] mapped:24585 shmem:16598 pagetables:871 [ 71.967102][ T1108] sec_pagetables:0 bounce:0 [ 71.967102][ T1108] kernel_misc_reclaimable:0 [ 71.967102][ T1108] free:1498414 free_pcp:6641 free_cma:0 [ 71.976850][ T645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.976872][ T645] RIP: 0010:drop_nlink+0xce/0x110 [ 71.976902][ T645] Code: 04 00 00 be 08 00 00 00 e8 ff 0b ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 eb b5 03 cc e8 62 93 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 71.976921][ T645] RSP: 0018:ffffc900016bfc88 EFLAGS: 00010293 [ 71.976940][ T645] RAX: ffffffff81f4b95e RBX: ffff88811baf30c8 RCX: ffff88813241a780 [ 71.991171][ T1108] Node 0 active_anon:93504kB inactive_anon:0kB active_file:86232kB inactive_file:9316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98340kB dirty:192kB writeback:0kB shmem:66392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5568kB pagetables:3484kB sec_pagetables:0kB all_unreclaimable? no [ 71.992306][ T645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.992324][ T645] RBP: ffffc900016bfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 71.992342][ T645] R10: dffffc0000000000 R11: fffff520002d7f80 R12: dffffc0000000000 [ 71.997706][ T1108] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955032kB mlocked:0kB bounce:0kB free_pcp:5060kB local_pcp:5060kB free_cma:0kB [ 72.001813][ T645] R13: 1ffff1102375e622 R14: ffff88811baf3110 R15: 0000000000000000 [ 72.006730][ T1108] lowmem_reserve[]: [ 72.011422][ T645] FS: 000055557f752500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 72.011450][ T645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.016517][ T313] usb usb2-port1: attempt power cycle [ 72.021555][ T645] CR2: 000055557f775958 CR3: 000000012e47a000 CR4: 00000000003526b0 [ 72.026925][ T1108] 0 [ 72.032722][ T645] Call Trace: [ 72.038750][ T1108] 3920 [ 72.043155][ T645] [ 72.043170][ T645] shmem_rmdir+0x5f/0x90 [ 72.048037][ T1108] 3920 [ 72.052639][ T645] vfs_rmdir+0x3de/0x560 [ 72.052671][ T645] incfs_kill_sb+0x102/0x220 [ 72.059388][ T1108] Normal free:3045880kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93504kB inactive_anon:0kB active_file:86232kB inactive_file:9316kB unevictable:0kB writepending:192kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:19844kB local_pcp:660kB free_cma:0kB [ 72.063981][ T645] deactivate_locked_super+0xd5/0x270 [ 72.064014][ T645] deactivate_super+0xb8/0xe0 [ 72.064040][ T645] cleanup_mnt+0x438/0x4d0 [ 72.073124][ T1108] lowmem_reserve[]: [ 72.073847][ T645] __cleanup_mnt+0x1d/0x40 [ 72.078900][ T1108] 0 [ 72.084109][ T645] task_work_run+0x1e8/0x260 [ 72.090017][ T1108] 0 [ 72.094695][ T645] ? __cfi_task_work_run+0x10/0x10 [ 72.099563][ T1108] 0 [ 72.104616][ T645] ? __x64_sys_umount+0x12e/0x180 [ 72.104653][ T645] ? __cfi___x64_sys_umount+0x10/0x10 [ 72.110040][ T1108] [ 72.114353][ T645] ? __kasan_check_read+0x15/0x20 [ 72.119638][ T1108] DMA32: [ 72.124192][ T645] resume_user_mode_work+0x35/0x50 [ 72.129438][ T1108] 5*4kB [ 72.134326][ T645] syscall_exit_to_user_mode+0x63/0xb0 [ 72.139264][ T1108] (M) [ 72.143457][ T645] do_syscall_64+0x63/0xf0 [ 72.143486][ T645] ? clear_bhb_loop+0x50/0xa0 [ 72.148357][ T1108] 2*8kB [ 72.154176][ T645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.154219][ T645] RIP: 0033:0x7faa17b9f797 [ 72.154240][ T645] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 72.161978][ T1108] (M) [ 72.178360][ T645] RSP: 002b:00007ffcae0d14b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.178413][ T645] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faa17b9f797 [ 72.187916][ T1108] 5*16kB [ 72.194960][ T645] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcae0d1570 [ 72.194987][ T645] RBP: 00007ffcae0d1570 R08: 00007ffcae0d2570 R09: 00000000ffffffff [ 72.204156][ T1108] (M) [ 72.211041][ T645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcae0d2600 [ 72.220022][ T1108] 5*32kB [ 72.227023][ T645] R13: 00007faa17c34cf3 R14: 00000000000117aa R15: 00007ffcae0d2640 [ 72.227052][ T645] [ 72.231092][ T1108] (M) [ 72.233217][ T645] ---[ end trace 0000000000000000 ]--- [ 72.233287][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 72.237918][ T1108] 3*64kB [ 72.252612][ T645] ================================================================== [ 72.294939][ T1108] (M) [ 72.303855][ T645] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 72.309937][ T1108] 5*128kB [ 72.328534][ T645] Write of size 4 at addr 0000000000000168 by task syz-executor/645 [ 72.328562][ T645] [ 72.328573][ T645] CPU: 1 UID: 0 PID: 645 Comm: syz-executor Tainted: G W syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 72.328606][ T645] Tainted: [W]=WARN [ 72.328614][ T645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.328646][ T645] Call Trace: [ 72.328670][ T645] [ 72.328696][ T645] __dump_stack+0x21/0x30 [ 72.328812][ T645] dump_stack_lvl+0x140/0x1c0 [ 72.328902][ T645] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.328987][ T645] print_report+0x3d/0x70 [ 72.329080][ T645] kasan_report+0x162/0x1a0 [ 72.329143][ T645] ? ihold+0x24/0x70 [ 72.329205][ T645] ? ihold+0x24/0x70 [ 72.329251][ T645] kasan_check_range+0x25a/0x2b0 [ 72.329314][ T645] __kasan_check_write+0x18/0x20 [ 72.329385][ T645] ihold+0x24/0x70 [ 72.329436][ T645] vfs_rmdir+0x25c/0x560 [ 72.329508][ T645] incfs_kill_sb+0x102/0x220 [ 72.329589][ T645] deactivate_locked_super+0xd5/0x270 [ 72.329654][ T645] deactivate_super+0xb8/0xe0 [ 72.329738][ T645] cleanup_mnt+0x438/0x4d0 [ 72.329792][ T645] __cleanup_mnt+0x1d/0x40 [ 72.329845][ T645] task_work_run+0x1e8/0x260 [ 72.329926][ T645] ? __cfi_task_work_run+0x10/0x10 [ 72.329999][ T645] ? __x64_sys_umount+0x12e/0x180 [ 72.330073][ T645] ? __cfi___x64_sys_umount+0x10/0x10 [ 72.330167][ T645] ? __kasan_check_read+0x15/0x20 [ 72.330265][ T645] resume_user_mode_work+0x35/0x50 [ 72.330338][ T645] syscall_exit_to_user_mode+0x63/0xb0 [ 72.330414][ T645] do_syscall_64+0x63/0xf0 [ 72.330459][ T645] ? clear_bhb_loop+0x50/0xa0 [ 72.330533][ T645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.330603][ T645] RIP: 0033:0x7faa17b9f797 [ 72.330655][ T645] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 72.330701][ T645] RSP: 002b:00007ffcae0d14b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.330757][ T645] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faa17b9f797 [ 72.330799][ T645] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcae0d1570 [ 72.330839][ T645] RBP: 00007ffcae0d1570 R08: 00007ffcae0d2570 R09: 00000000ffffffff [ 72.330881][ T645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcae0d2600 [ 72.330921][ T645] R13: 00007faa17c34cf3 R14: 00000000000117aa R15: 00007ffcae0d2640 [ 72.330967][ T645] [ 72.330988][ T645] ================================================================== [ 72.341868][ T1108] (M) [ 72.343460][ T645] Disabling lock debugging due to kernel taint [ 72.375252][ T919] Bluetooth: hci0: command 0x1003 tx timeout [ 72.384026][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 72.391169][ T1108] 5*256kB [ 72.399615][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.428646][ T313] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 72.437239][ T31] usb 1-1: can't read configurations, error -61 [ 72.461858][ T1108] (M) [ 72.470223][ T645] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 72.478891][ T313] usb 2-1: device descriptor read/8, error -71 [ 72.481260][ T645] #PF: supervisor write access in kernel mode [ 72.488560][ T1108] 5*512kB [ 72.492544][ T645] #PF: error_code(0x0002) - not-present page [ 72.492562][ T645] PGD 800000011aacb067 P4D 800000011aacb067 PUD 0 [ 72.499694][ T1108] (M) [ 72.528384][ T645] [ 72.528398][ T645] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 72.528426][ T645] CPU: 1 UID: 0 PID: 645 Comm: syz-executor Tainted: G B W syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 72.528462][ T645] Tainted: [B]=BAD_PAGE, [W]=WARN [ 72.528470][ T645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.528484][ T645] RIP: 0010:ihold+0x2a/0x70 [ 72.535569][ T1108] 4*1024kB [ 72.538569][ T645] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 4d 8a 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 5d [ 72.538597][ T645] RSP: 0018:ffffc900016bfcc8 EFLAGS: 00010246 [ 72.543400][ T1108] (UM) [ 72.546866][ T645] [ 72.546880][ T645] RAX: ffff88813241a700 RBX: 0000000000000000 RCX: ffff88813241a780 [ 72.546901][ T645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.546914][ T645] RBP: ffffc900016bfcd8 R08: ffffffff893cd947 R09: 1ffffffff1279b28 [ 72.546931][ T645] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000000 [ 72.546948][ T645] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 72.553394][ T1108] 4*2048kB [ 72.553969][ T645] FS: 000055557f752500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 72.553995][ T645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.554012][ T645] CR2: 0000000000000168 CR3: 000000012e47a000 CR4: 00000000003526b0 [ 72.554032][ T645] Call Trace: [ 72.560065][ T1108] (M) [ 72.561295][ T645] [ 72.561309][ T645] vfs_rmdir+0x25c/0x560 [ 72.567594][ T1108] 716*4096kB [ 72.568996][ T645] incfs_kill_sb+0x102/0x220 [ 72.575133][ T1108] (M) [ 72.579458][ T645] deactivate_locked_super+0xd5/0x270 [ 72.579501][ T645] deactivate_super+0xb8/0xe0 [ 72.582240][ T1108] = 2949972kB [ 72.586896][ T645] cleanup_mnt+0x438/0x4d0 [ 72.586928][ T645] __cleanup_mnt+0x1d/0x40 [ 72.586949][ T645] task_work_run+0x1e8/0x260 [ 72.591192][ T1108] Normal: [ 72.595032][ T645] ? __cfi_task_work_run+0x10/0x10 [ 72.595071][ T645] ? __x64_sys_umount+0x12e/0x180 [ 72.595101][ T645] ? __cfi___x64_sys_umount+0x10/0x10 [ 72.599139][ T1108] 175*4kB [ 72.603442][ T645] ? __kasan_check_read+0x15/0x20 [ 72.606794][ T1108] (UME) [ 72.610584][ T645] resume_user_mode_work+0x35/0x50 [ 72.610621][ T645] syscall_exit_to_user_mode+0x63/0xb0 [ 72.617202][ T1108] 122*8kB [ 72.618184][ T645] do_syscall_64+0x63/0xf0 [ 72.618223][ T645] ? clear_bhb_loop+0x50/0xa0 [ 72.625223][ T313] usb 2-1: device descriptor read/8, error -71 [ 72.628576][ T645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.628611][ T645] RIP: 0033:0x7faa17b9f797 [ 72.648856][ T1108] (UME) [ 72.650948][ T645] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 72.650973][ T645] RSP: 002b:00007ffcae0d14b8 EFLAGS: 00000246 [ 72.660796][ T1108] 25*16kB [ 72.667408][ T645] ORIG_RAX: 00000000000000a6 [ 72.667430][ T645] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faa17b9f797 [ 72.667447][ T645] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcae0d1570 [ 72.667460][ T645] RBP: 00007ffcae0d1570 R08: 00007ffcae0d2570 R09: 00000000ffffffff [ 72.667476][ T645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcae0d2600 [ 72.667491][ T645] R13: 00007faa17c34cf3 R14: 00000000000117aa R15: 00007ffcae0d2640 [ 72.672245][ T1108] (ME) [ 72.678432][ T645] [ 72.678445][ T645] Modules linked in: [ 72.678474][ T645] CR2: 0000000000000168 [ 72.678487][ T645] ---[ end trace 0000000000000000 ]--- [ 72.678498][ T645] RIP: 0010:ihold+0x2a/0x70 [ 72.687778][ T1108] 25*32kB [ 72.689171][ T645] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 4d 8a 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 5d [ 72.698262][ T1108] (UME) [ 72.700124][ T645] RSP: 0018:ffffc900016bfcc8 EFLAGS: 00010246 [ 72.700151][ T645] RAX: ffff88813241a700 RBX: 0000000000000000 RCX: ffff88813241a780 [ 72.709098][ T1108] 45*64kB [ 72.711165][ T645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.711190][ T645] RBP: ffffc900016bfcd8 R08: ffffffff893cd947 R09: 1ffffffff1279b28 [ 72.714595][ T1108] (UME) [ 72.719346][ T645] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000000 [ 72.719371][ T645] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 72.719388][ T645] FS: 000055557f752500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 72.728186][ T1108] 25*128kB [ 72.730105][ T645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.730127][ T645] CR2: 0000000000000168 CR3: 000000012e47a000 CR4: 00000000003526b0 [ 72.739165][ T1108] (UME) [ 72.740907][ T645] Kernel panic - not syncing: Fatal exception [ 72.741078][ T645] Kernel Offset: disabled