last executing test programs: 3.474997401s ago: executing program 0 (id=2316): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.172904956s ago: executing program 2 (id=2339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xd000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) 1.148722528s ago: executing program 0 (id=2340): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.068676894s ago: executing program 0 (id=2341): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) r1 = dup3(r0, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 1.068430724s ago: executing program 0 (id=2342): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000008010000001400020077673100000000000000000000000000080005000120"], 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000050) ioctl$BLKROSET(r3, 0x125d, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000000000040"]) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x1, 0xfffffffffffff000, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340)) 1.068125084s ago: executing program 2 (id=2343): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0xfffa, 0xa, 0x9, 0x1022}, {0x0, 0x60, 0x0, 0x9}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xb53b, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) r5 = dup(r4) read$FUSE(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x4000000000080002, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000080)={{r2}, 0x101, 0x4, 0x400}) bind$packet(r7, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 997.38967ms ago: executing program 2 (id=2344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x1802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@migrate={0x23c, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x4e20, 0xfffe, 0xa, 0x0, 0x0, 0x32}}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@multicast2, @in=@private=0xa010100, @in6=@local, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x19}, @in6=@local}}, @algo_auth={0x13b, 0x1, {{'sha256-mb\x00'}, 0x798, "22523a387224ed1613275d1b234fc89374a31f2d940f0494160ce9621f6d6022251d88b962eb786a897fd2ed857a1f6fe639e569ff5d88f179ceba36b6d298d8221c70e2de99e9472924db48d4ac8e746ef264002fc249ca482549928e66402411ae1212b10ee3ea85e57ffece44448c6e017fe1547f501c8f971e1d92b57ba1139ab660a1978f3c4049bb321742bda87a0f663ae158157285470e964df9ef8857f393fa0dbc2021c6b93b61c43a7b069aade20af10ad7a03c8a0abc7e06af2e677566f997b423773f239e085377a28d0e13069332b8116f3baf19fed87a34945f0db35b1eae0ac411ef57e3c3bf0af24a1c7a"}}, @mark={0xc, 0x15, {0x35075a, 0xb696}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @offload={0xc}]}, 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x2}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000060305000000000000000000000000002800010001000000"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000000c0)=0x6) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 997.17403ms ago: executing program 2 (id=2345): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0xa, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 996.77299ms ago: executing program 0 (id=2346): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003d80)=@newtaction={0xe4, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0xd0, 0x1, [@m_ipt={0xcc, 0x1, 0x0, 0x0, {{0xffffffd7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x48, 0x6, {0xba15, 'security\x00', 0xdb, 0xffff, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup(r2) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001640)=""/65, 0x41}], 0x1, &(0x7f0000006b40)=""/137, 0x89}, 0x42}], 0x1, 0x20, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r6 = eventfd2(0xd, 0x1) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000080)={0x0, r6}) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mount$bind(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200), 0x4000, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r8 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0xa000000c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 996.60642ms ago: executing program 2 (id=2347): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(r0, &(0x7f00000001c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@flushpolicy={0x0, 0x1d, 0x10, 0x70bd29, 0x25dfdbff, "", [@XFRMA_SET_MARK={0x0, 0x1d, 0x6}]}, 0xfffffffffffffe3e}}, 0x841) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a000000300001802c00018014000300fe800000000000aa45"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @remote, 0x1000}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 923.821936ms ago: executing program 2 (id=2348): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x12, {0x12, 0x22, "00f4387006c2836f285175715452948e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 910.839557ms ago: executing program 1 (id=2350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}, 0x1, 0x19000000, 0x0, 0x24000000}, 0x0) 857.361201ms ago: executing program 1 (id=2351): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="f451", 0x2}], 0x1, 0x0, 0x0, 0x4008010}, 0x80f5) (async, rerun: 32) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000200)) (rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 32) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) (rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000002c0)) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x10) (rerun: 64) syz_usb_connect$uac1(0x4, 0xa5, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES8=r0], 0x0) (async) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) (async) r7 = eventfd2(0xd, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x90) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x2000022, &(0x7f0000000340)) (async, rerun: 32) r8 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000280)={r3, 0x0, 0xfffff000, 0x10000ffff3000}) (rerun: 32) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000440)) close_range(r1, r7, 0x2) 857.166151ms ago: executing program 1 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xd000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) 856.803391ms ago: executing program 1 (id=2353): syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000143edd08b82225646cd30102030109024400010000010009040000da060a0000052407d53926"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) r7 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 731.913642ms ago: executing program 0 (id=2354): r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$rfkill(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7}]}, 0x34}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 356.714701ms ago: executing program 1 (id=2355): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008cb31bf7c7bc79c971e94b03469d87f980003400000000a0800024000000015080001400000000b0800014000000012"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = timerfd_create(0x8, 0x80800) timerfd_gettime(r2, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000200)={0xafbcb7ab, {{0x2, 0x4e22, @empty}}}, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000bc0)=0x6, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40048000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf2503000000080006000400000008000400010000005400018008000800090000000c0007000400000002000000060004004e24000008000b0073697000080006006f76660008000b0073697000060001000a00000014000300fe8800000000000000000000000001010800060000100000080004000f0000001c000380050008002100000008de040000000000060007004e240000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4044085) 305.343796ms ago: executing program 1 (id=2356): syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000143edd08b82225646cd30102030109024400010000010009040000da060a0000052407d53926"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0xffffffff80408040}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3ffff, {0x5, 0x0, 0x0, 0x4000000008, 0x460e, 0x5, {0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x180080, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r6, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) 236.772891ms ago: executing program 3 (id=2357): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0xfffa, 0xa, 0x9, 0x1022}, {0x0, 0x60, 0x0, 0x9}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xb53b, @loopback, 0x6}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf2502a7"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000100), 0x10) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r7 = dup(r2) read$FUSE(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r9, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 221.768023ms ago: executing program 3 (id=2358): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 188.349575ms ago: executing program 3 (id=2359): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000600)=""/222, 0xde}], 0x1, 0x1a, 0x0) 172.782856ms ago: executing program 3 (id=2360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x14, 0x11, 0x300, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000004c0), 0x4) close(r2) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) fstat(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc) r11 = fcntl$dupfd(r6, 0x0, r6) fremovexattr(r11, &(0x7f0000000140)=@random={'security.', '/dev/fuse\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0x2, &(0x7f0000000080)=0x14, 0x4) modify_ldt$write(0x1, &(0x7f00000000c0)={0x0, 0x20000800, 0x1000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x10) kernel console output (not intermixed with test programs): 4159: removing orphan mapping 0:24 [ 139.315391][ T4167] overlayfs: failed to clone upperpath [ 139.355911][ T36] audit: type=1400 audit(1756338549.385:532): avc: denied { execmem } for pid=4173 comm="syz.1.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 139.563106][ T36] audit: type=1326 audit(1756338549.585:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.3.1198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcc1b8ebe9 code=0x0 [ 139.883590][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 140.043366][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 140.049757][ T9] usb 1-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 140.060297][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 11776, setting to 64 [ 140.071925][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 140.085803][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.095097][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.103274][ T9] usb 1-1: SerialNumber: syz [ 140.112906][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 140.119921][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 140.127333][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.423563][ T31] usb 1-1: USB disconnect, device number 48 [ 140.442919][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 140.643414][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 140.794402][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.804603][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.814286][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.823479][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.831488][ T9] usb 4-1: SerialNumber: syz [ 140.843754][ T4231] tipc: Started in network mode [ 140.848656][ T4231] tipc: Node identity 4a2986f7a1dc, cluster identity 4711 [ 140.855886][ T4231] tipc: Enabled bearer , priority 0 [ 140.925354][ T4232] syzkaller0: entered promiscuous mode [ 140.930886][ T4232] syzkaller0: entered allmulticast mode [ 140.936848][ T4232] tipc: Resetting bearer [ 140.944935][ T4232] tipc: Resetting bearer [ 140.958371][ T4232] tipc: Disabling bearer [ 141.040014][ T9] usb 4-1: 0:2 : does not exist [ 141.045044][ T9] usb 4-1: unit 5 not found! [ 141.055248][ T9] usb 4-1: USB disconnect, device number 42 [ 141.069547][ T1808] udevd[1808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.178876][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 141.605999][ T4254] rust_binder: 541: no such ref 3 [ 142.031133][ T36] audit: type=1400 audit(1756338552.055:534): avc: denied { setopt } for pid=4269 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.395562][ T31] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 142.407076][ T36] audit: type=1400 audit(1756338552.435:535): avc: denied { getopt } for pid=4285 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.426868][ T36] audit: type=1400 audit(1756338552.435:536): avc: denied { read } for pid=4285 comm="syz.3.1231" path="socket:[22091]" dev="sockfs" ino=22091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.450244][ T36] audit: type=1400 audit(1756338552.435:537): avc: denied { listen } for pid=4285 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.520039][ T4294] tipc: Started in network mode [ 142.525035][ T4294] tipc: Node identity , cluster identity 4711 [ 142.531186][ T4294] tipc: Failed to obtain node identity [ 142.536834][ T4294] tipc: Enabling of bearer rejected, failed to enable media [ 142.564439][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 142.577839][ T31] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 142.587385][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.596790][ T31] usb 1-1: config 0 descriptor?? [ 142.603453][ T4284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.670637][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 142.679852][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 142.690257][ T4313] binder: Unknown parameter 'fscontext?}' [ 142.743903][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'. [ 142.799549][ T4326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1245'. [ 142.944899][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 142.961991][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 142.971343][ T4329] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 143.038169][ T31] hid-generic 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 143.133982][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 143.303194][ T4366] 9pnet_fd: Insufficient options for proto=fd [ 143.414810][ T4374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 143.437474][ T4375] tipc: Enabling of bearer rejected, failed to enable media [ 143.501471][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 143.514331][ T36] audit: type=1400 audit(1756338553.545:538): avc: denied { listen } for pid=4373 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.544857][ T36] audit: type=1326 audit(1756338553.565:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc1b8ebe9 code=0x7ffc0000 [ 143.568589][ T36] audit: type=1326 audit(1756338553.565:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc1b8ebe9 code=0x7ffc0000 [ 143.592620][ T36] audit: type=1326 audit(1756338553.565:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc1b8ebe9 code=0x7ffc0000 [ 143.622171][ T36] audit: type=1326 audit(1756338553.565:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcc1b8ebe9 code=0x7ffc0000 [ 143.645742][ T36] audit: type=1326 audit(1756338553.565:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc1b8ebe9 code=0x7ffc0000 [ 144.207410][ T4392] xt_NFQUEUE: number of total queues is 0 [ 144.246691][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 144.503411][ T61] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 144.579850][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 144.596420][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 144.655959][ T61] usb 4-1: Using ep0 maxpacket: 32 [ 144.663405][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.682430][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.693584][ T61] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.702747][ T61] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.717454][ T61] usb 4-1: config 0 descriptor?? [ 144.726671][ T61] hub 4-1:0.0: USB hub found [ 144.831888][ T4458] rust_binder: Write failure EFAULT in pid:921 [ 144.904168][ T9] usb 1-1: USB disconnect, device number 49 [ 144.923758][ T61] hub 4-1:0.0: 1 port detected [ 144.996006][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 145.014589][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 145.233726][ T61] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 145.333427][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 145.364287][ T4483] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1299'. [ 145.383459][ T392] usb 4-1: USB disconnect, device number 43 [ 145.473398][ T9] usb 1-1: device descriptor read/64, error -71 [ 145.723384][ T9] usb 1-1: device descriptor read/64, error -71 [ 145.983432][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 146.113389][ T9] usb 1-1: device descriptor read/64, error -71 [ 146.303405][ T4523] input: syz0 as /devices/virtual/input/input24 [ 146.353427][ T9] usb 1-1: device descriptor read/64, error -71 [ 146.463571][ T9] usb usb1-port1: attempt power cycle [ 146.577047][ T4551] netlink: 'syz.3.1330': attribute type 4 has an invalid length. [ 146.803448][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 146.824588][ T9] usb 1-1: device descriptor read/8, error -71 [ 146.833381][ T392] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 146.988445][ T392] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.999785][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.008058][ T392] usb 4-1: Product: syz [ 147.013619][ T392] usb 4-1: Manufacturer: syz [ 147.018331][ T392] usb 4-1: SerialNumber: syz [ 147.197050][ T9] usb 1-1: device descriptor read/8, error -71 [ 147.443423][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 147.465962][ T9] usb 1-1: device descriptor read/8, error -71 [ 147.594671][ T9] usb 1-1: device descriptor read/8, error -71 [ 147.703530][ T9] usb usb1-port1: unable to enumerate USB device [ 147.865087][ T4624] tipc: Enabling of bearer rejected, failed to enable media [ 148.104590][ T4639] bridge0: port 3(veth0_to_team) entered blocking state [ 148.111670][ T4639] bridge0: port 3(veth0_to_team) entered disabled state [ 148.118894][ T4639] veth0_to_team: entered allmulticast mode [ 148.125046][ T4639] veth0_to_team: entered promiscuous mode [ 148.131467][ T4639] veth0_to_team: left allmulticast mode [ 148.137241][ T4639] veth0_to_team: left promiscuous mode [ 148.142783][ T4639] bridge0: port 3(veth0_to_team) entered disabled state [ 149.447142][ T36] kauditd_printk_skb: 514 callbacks suppressed [ 149.475488][ T36] audit: type=1400 audit(1756338560.471:1058): avc: denied { execute_no_trans } for pid=4666 comm="syz.1.1380" path="/580/file2" dev="tmpfs" ino=3300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.712517][ T392] usb 4-1: USB disconnect, device number 44 [ 151.072328][ T4715] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.215391][ T4760] overlayfs: failed to clone upperpath [ 152.666289][ T4773] input: syz0 as /devices/virtual/input/input27 [ 152.706021][ T36] audit: type=1400 audit(1756338563.731:1059): avc: denied { accept } for pid=4774 comm="syz.3.1427" path="socket:[25044]" dev="sockfs" ino=25044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.558953][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.569737][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.577229][ T4796] bridge_slave_0: entered allmulticast mode [ 153.583735][ T4796] bridge_slave_0: entered promiscuous mode [ 153.590080][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.597164][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.604275][ T4796] bridge_slave_1: entered allmulticast mode [ 153.610502][ T4796] bridge_slave_1: entered promiscuous mode [ 153.635987][ T36] audit: type=1326 audit(1756338564.661:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc1b8ebe9 code=0x7fc00000 [ 153.687973][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.695273][ T4796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.702543][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.709606][ T4796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.728430][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.735681][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.745897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.752973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.761985][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.769070][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.777957][ T328] bridge_slave_1: left allmulticast mode [ 153.784027][ T328] bridge_slave_1: left promiscuous mode [ 153.789686][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.797258][ T328] bridge_slave_0: left allmulticast mode [ 153.802893][ T328] bridge_slave_0: left promiscuous mode [ 153.808558][ T61] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 153.808850][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.833257][ T328] bridge0 (unregistering): left allmulticast mode [ 153.882617][ T4796] veth0_vlan: entered promiscuous mode [ 153.893216][ T4796] veth1_macvtap: entered promiscuous mode [ 153.914156][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 153.928571][ T328] tipc: Left network mode [ 153.934312][ T328] veth0_vlan: left promiscuous mode [ 153.963456][ T61] usb 1-1: Using ep0 maxpacket: 8 [ 153.975184][ T61] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 153.984676][ T61] usb 1-1: config 2 has no interface number 0 [ 153.990811][ T61] usb 1-1: config 2 interface 31 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 154.005591][ T61] usb 1-1: config 2 interface 31 has no altsetting 0 [ 154.013812][ T61] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 154.022898][ T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.033345][ T61] usb 1-1: Product: syz [ 154.038430][ T61] usb 1-1: Manufacturer: syz [ 154.043061][ T61] usb 1-1: SerialNumber: syz [ 154.064454][ T9] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 154.072687][ T9] usb 4-1: config 0 has no interface number 0 [ 154.080515][ T9] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 154.089821][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.098121][ T9] usb 4-1: Product: syz [ 154.102318][ T9] usb 4-1: Manufacturer: syz [ 154.107310][ T9] usb 4-1: SerialNumber: syz [ 154.114085][ T9] usb 4-1: config 0 descriptor?? [ 154.322719][ T9] usb 4-1: USB disconnect, device number 45 [ 154.687005][ T4851] overlayfs: failed to clone upperpath [ 154.844684][ T4859] fuse: Bad value for 'fd' [ 154.853338][ T36] audit: type=1400 audit(1756338565.871:1061): avc: denied { mounton } for pid=4858 comm="syz.3.1459" path="/230/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 154.875986][ T36] audit: type=1400 audit(1756338565.871:1062): avc: denied { unmount } for pid=4858 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.940778][ T4867] input: syz0 as /devices/virtual/input/input29 [ 155.693217][ T36] audit: type=1400 audit(1756338566.711:1063): avc: denied { write } for pid=4882 comm="syz.1.1467" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 155.767518][ T36] audit: type=1400 audit(1756338566.791:1064): avc: denied { create } for pid=4892 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.904362][ T4904] overlayfs: failed to clone upperpath [ 156.063564][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.215320][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 156.223745][ T9] usb 2-1: config 0 has no interface number 0 [ 156.232279][ T9] usb 2-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=55.2b [ 156.241578][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.249700][ T9] usb 2-1: Product: syz [ 156.253999][ T9] usb 2-1: Manufacturer: syz [ 156.258704][ T9] usb 2-1: SerialNumber: syz [ 156.268103][ T9] usb 2-1: config 0 descriptor?? [ 156.433458][ T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 156.487311][ T9] rtl8150 2-1:0.51: couldn't find required endpoints [ 156.494496][ T9] rtl8150 2-1:0.51: probe with driver rtl8150 failed with error -5 [ 156.506789][ T9] usb 2-1: USB disconnect, device number 5 [ 156.593582][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 156.594894][ T10] usb 1-1: USB disconnect, device number 54 [ 156.613496][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.647043][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.657497][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.667380][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.679195][ T31] usb 4-1: config 0 descriptor?? [ 156.687673][ T31] hub 4-1:0.0: USB hub found [ 156.886864][ T31] hub 4-1:0.0: 1 port detected [ 156.968180][ T4942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1495'. [ 156.993441][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 157.053335][ T36] audit: type=1400 audit(1756338568.071:1065): avc: denied { create } for pid=4947 comm="syz.1.1498" name="#28" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.075212][ T36] audit: type=1400 audit(1756338568.101:1066): avc: denied { link } for pid=4947 comm="syz.1.1498" name="#28" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.102291][ T36] audit: type=1400 audit(1756338568.101:1067): avc: denied { rename } for pid=4947 comm="syz.1.1498" name="#29" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.154501][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.164751][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.173840][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.182590][ T10] usb 1-1: config 0 descriptor?? [ 157.363413][ T431] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.499314][ T31] hub 4-1:0.0: activate --> -90 [ 157.513514][ T431] usb 2-1: Using ep0 maxpacket: 16 [ 157.520587][ T431] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.529363][ T431] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 157.537575][ T431] usb 2-1: config 0 has no interface number 0 [ 157.544045][ T431] usb 2-1: config 0 interface 48 has no altsetting 0 [ 157.552346][ T431] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 157.561682][ T431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.570039][ T431] usb 2-1: Product: syz [ 157.574549][ T431] usb 2-1: Manufacturer: syz [ 157.579199][ T431] usb 2-1: SerialNumber: syz [ 157.585553][ T431] usb 2-1: config 0 descriptor?? [ 157.795664][ T431] usb-storage 2-1:0.48: USB Mass Storage device detected [ 157.847250][ T431] usb 2-1: USB disconnect, device number 6 [ 157.902929][ T392] usb 4-1: USB disconnect, device number 46 [ 158.316930][ T4991] overlayfs: missing 'lowerdir' [ 158.542362][ T4998] tipc: Enabling of bearer <™>h:s> rejected, media not registered [ 158.563396][ T392] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.624799][ T5003] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.1521'. [ 158.663416][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 158.714484][ T392] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.726111][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.737058][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.746996][ T392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.760071][ T392] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.769158][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.777855][ T392] usb 2-1: config 0 descriptor?? [ 158.815818][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 158.824995][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.832996][ T10] usb 4-1: Product: syz [ 158.837624][ T10] usb 4-1: Manufacturer: syz [ 158.842236][ T10] usb 4-1: SerialNumber: syz [ 159.187329][ T392] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 159.196260][ T392] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 159.683906][ T431] usb 1-1: USB disconnect, device number 55 [ 159.924762][ T5019] overlayfs: failed to clone upperpath [ 160.013895][ T431] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 160.163398][ T431] usb 1-1: Using ep0 maxpacket: 32 [ 160.169984][ T431] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.183199][ T431] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 160.192634][ T431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.201108][ T431] usb 1-1: Product: syz [ 160.206259][ T431] usb 1-1: Manufacturer: syz [ 160.210904][ T431] usb 1-1: SerialNumber: syz [ 160.217416][ T431] usb 1-1: config 0 descriptor?? [ 160.223838][ T431] usb 1-1: bad CDC descriptors [ 160.229321][ T431] usb 1-1: unsupported MDLM descriptors [ 160.425361][ T10] usb 1-1: USB disconnect, device number 56 [ 161.346298][ T366] usb 2-1: USB disconnect, device number 7 [ 161.408690][ T5104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.417535][ T5104] overlayfs: missing 'lowerdir' [ 161.428594][ T431] usb 4-1: USB disconnect, device number 47 [ 161.468851][ T5110] overlayfs: failed to clone upperpath [ 161.541422][ T36] audit: type=1400 audit(1756338572.561:1068): avc: denied { write } for pid=5126 comm="syz.3.1575" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.561883][ T5131] overlayfs: failed to clone upperpath [ 161.562361][ T36] audit: type=1400 audit(1756338572.561:1069): avc: denied { open } for pid=5126 comm="syz.3.1575" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.616249][ T5137] overlayfs: failed to clone upperpath [ 161.648112][ T36] audit: type=1400 audit(1756338572.671:1070): avc: denied { getopt } for pid=5142 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.872354][ T5160] kvm: pic: non byte write [ 161.963198][ T366] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.124572][ T366] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.134340][ T366] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.144052][ T366] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.158331][ T366] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 162.167548][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 162.175775][ T366] usb 2-1: Product: syz [ 162.180004][ T366] usb 2-1: Manufacturer: syz [ 162.184697][ T366] usb 2-1: SerialNumber: syz [ 162.393051][ T366] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.602350][ T431] usb 2-1: USB disconnect, device number 8 [ 162.608794][ T431] usblp0: removed [ 163.080320][ T5182] overlayfs: failed to clone upperpath [ 163.173384][ T366] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 163.333347][ T366] usb 4-1: Using ep0 maxpacket: 16 [ 163.339706][ T366] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 163.347900][ T366] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.358093][ T366] usb 4-1: config 0 has no interface number 0 [ 163.365671][ T366] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 163.374836][ T366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.382839][ T366] usb 4-1: Product: syz [ 163.387052][ T366] usb 4-1: Manufacturer: syz [ 163.391678][ T366] usb 4-1: SerialNumber: syz [ 163.396328][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.404669][ T366] usb 4-1: config 0 descriptor?? [ 163.554721][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.561424][ T10] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 163.570569][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.579341][ T10] usb 2-1: config 0 descriptor?? [ 163.612497][ T366] usb 4-1: USB disconnect, device number 48 [ 163.991688][ T10] zeroplus 0003:0C12:0005.0015: item fetching failed at offset 0/3 [ 164.008465][ T10] zeroplus 0003:0C12:0005.0015: parse failed [ 164.015757][ T10] zeroplus 0003:0C12:0005.0015: probe with driver zeroplus failed with error -22 [ 164.192825][ T429] usb 2-1: USB disconnect, device number 9 [ 164.363377][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 164.516034][ T10] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 164.525144][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.533223][ T10] usb 4-1: Product: syz [ 164.537718][ T10] usb 4-1: Manufacturer: syz [ 164.542338][ T10] usb 4-1: SerialNumber: syz [ 164.548111][ T10] usb 4-1: config 0 descriptor?? [ 164.571981][ T5228] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1622'. [ 165.113381][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 165.263396][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 165.270884][ T10] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 165.280060][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.288174][ T10] usb 1-1: Product: syz [ 165.292353][ T10] usb 1-1: Manufacturer: syz [ 165.297080][ T10] usb 1-1: SerialNumber: syz [ 165.302238][ T10] usb 1-1: config 0 descriptor?? [ 165.923385][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.074528][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.085588][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 166.097323][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.106554][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.114618][ T10] usb 2-1: Product: syz [ 166.118808][ T10] usb 2-1: Manufacturer: syz [ 166.123534][ T10] usb 2-1: SerialNumber: syz [ 166.130274][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 166.330109][ T5268] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.938475][ T5268] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.945896][ T10] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 166.953413][ T10] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 167.140174][ T429] usb 4-1: USB disconnect, device number 49 [ 167.147562][ T10] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 167.154639][ T10] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 167.161359][ T10] wwan wwan0: port wwan0mbim0 attached [ 167.168308][ T10] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 6a:1d:8f:77:66:ce [ 167.182075][ T10] usb 2-1: USB disconnect, device number 10 [ 167.188652][ T10] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 167.249670][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 167.593393][ T429] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 167.743396][ T429] usb 4-1: Using ep0 maxpacket: 16 [ 167.749701][ T429] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 167.761414][ T429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.773754][ T429] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.782871][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.790911][ T429] usb 4-1: Product: syz [ 167.795117][ T429] usb 4-1: Manufacturer: syz [ 167.799706][ T429] usb 4-1: SerialNumber: syz [ 167.805027][ T429] usb 4-1: config 0 descriptor?? [ 167.889182][ T429] usb 1-1: USB disconnect, device number 57 [ 167.903480][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 168.064494][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.073255][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.083605][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.092834][ T10] usb 2-1: config 1 has no interface number 1 [ 168.099122][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.113587][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.122810][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.131032][ T10] usb 2-1: Product: syz [ 168.135400][ T10] usb 2-1: Manufacturer: syz [ 168.141831][ T10] usb 2-1: SerialNumber: syz [ 168.358464][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 168.380646][ T10] usb 2-1: USB disconnect, device number 11 [ 169.163363][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.315002][ T10] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 169.323986][ T10] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 169.333151][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.345785][ T10] usb 2-1: config 0 descriptor?? [ 169.358333][ T10] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 169.566703][ T429] usb 2-1: USB disconnect, device number 12 [ 169.993376][ T429] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 170.131392][ T36] audit: type=1400 audit(1756338581.151:1071): avc: denied { create } for pid=5417 comm="syz.1.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 170.151449][ T429] usb 1-1: Using ep0 maxpacket: 8 [ 170.157109][ T36] audit: type=1400 audit(1756338581.181:1072): avc: denied { ioctl } for pid=5411 comm="syz.0.1691" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.183214][ T429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.191734][ T429] usb 1-1: config 1 interface 0 has no altsetting 0 [ 170.199886][ T429] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 170.208999][ T429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.217189][ T429] usb 1-1: Product: syz [ 170.221612][ T429] usb 1-1: Manufacturer: syz [ 170.226240][ T429] usb 1-1: SerialNumber: syz [ 170.240495][ T36] audit: type=1400 audit(1756338581.261:1073): avc: denied { create } for pid=5422 comm="syz.2.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.289997][ T431] usb 4-1: USB disconnect, device number 50 [ 170.300062][ T36] audit: type=1400 audit(1756338581.321:1074): avc: denied { read write } for pid=5428 comm="syz.3.1698" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.324461][ T36] audit: type=1400 audit(1756338581.321:1075): avc: denied { open } for pid=5428 comm="syz.3.1698" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.435624][ T429] usbhid 1-1:1.0: can't add hid device: -22 [ 170.441723][ T429] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 170.452025][ T429] usb 1-1: USB disconnect, device number 58 [ 170.613392][ T431] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 170.693386][ T366] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 170.766001][ T431] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=80.99 [ 170.775170][ T431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.783172][ T431] usb 4-1: Product: syz [ 170.787401][ T431] usb 4-1: Manufacturer: syz [ 170.792001][ T431] usb 4-1: SerialNumber: syz [ 170.797237][ T431] usb 4-1: config 0 descriptor?? [ 170.803095][ T431] usb 4-1: MBOX3: Invalid descriptor size=18. [ 170.843364][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 170.849844][ T366] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 170.858326][ T366] usb 2-1: config 0 has no interface number 0 [ 170.864548][ T366] usb 2-1: config 0 interface 144 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 170.874528][ T366] usb 2-1: config 0 interface 144 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64 [ 170.884470][ T366] usb 2-1: config 0 interface 144 has no altsetting 0 [ 170.892708][ T366] usb 2-1: New USB device found, idVendor=24c6, idProduct=36f8, bcdDevice=e2.fc [ 170.901813][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.909830][ T366] usb 2-1: Product: syz [ 170.914006][ T366] usb 2-1: Manufacturer: syz [ 170.918598][ T366] usb 2-1: SerialNumber: syz [ 170.923928][ T366] usb 2-1: config 0 descriptor?? [ 170.929179][ T5433] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 170.936528][ T5433] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.011099][ T366] usb 4-1: USB disconnect, device number 51 [ 171.148877][ T10] usb 2-1: USB disconnect, device number 13 [ 172.085027][ T5495] input: syz1 as /devices/virtual/input/input32 [ 172.113622][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 172.263355][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 172.269952][ T10] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 172.279792][ T10] usb 1-1: config 0 has no interface number 0 [ 172.288472][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 172.297997][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.306327][ T10] usb 1-1: Product: syz [ 172.310957][ T10] usb 1-1: Manufacturer: syz [ 172.316453][ T10] usb 1-1: SerialNumber: syz [ 172.323780][ T10] usb 1-1: config 0 descriptor?? [ 173.503361][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 173.653393][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 173.659774][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 173.668024][ T31] usb 4-1: config 0 has no interface number 0 [ 173.674159][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 173.682472][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 173.691588][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.699795][ T31] usb 4-1: Product: syz [ 173.704017][ T31] usb 4-1: Manufacturer: syz [ 173.708659][ T31] usb 4-1: SerialNumber: syz [ 173.713972][ T31] usb 4-1: config 0 descriptor?? [ 173.719812][ T31] smsc75xx v1.0.0 [ 174.883548][ T431] usb 1-1: USB disconnect, device number 59 [ 174.923507][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 174.941049][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 174.963715][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 174.983344][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 174.988585][ T5551] tipc: Started in network mode [ 174.993027][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 174.993052][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 174.998504][ T5551] tipc: Node identity e0000001, cluster identity 4711 [ 175.012078][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 175.024625][ T5551] tipc: Enabling of bearer rejected, failed to enable media [ 175.036808][ T31] usb 4-1: USB disconnect, device number 52 [ 175.079344][ T5556] input: syz0 as /devices/virtual/input/input33 [ 175.121733][ T36] audit: type=1326 audit(1756338586.141:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.2.1757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce3778ebe9 code=0x0 [ 175.349896][ T5568] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2794754333 (89432138656 ns) > initial count (74757939712 ns). Using initial count to start timer. [ 175.368055][ T5568] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 175.995458][ T5595] kvm: kvm [5594]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010006) = 0x8000 [ 176.005230][ T5595] kvm: kvm [5594]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 176.014597][ T5595] kvm: kvm [5594]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000 [ 176.024277][ T5595] kvm: kvm [5594]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 176.251808][ T5607] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5607 comm=syz.0.1776 [ 176.272693][ T5609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1777'. [ 176.281942][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 176.326896][ T5613] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 176.335392][ T5613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 176.437981][ T5627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5627 comm=syz.2.1785 [ 176.554361][ T5645] overlayfs: failed to clone upperpath [ 176.573343][ T366] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 176.582476][ T5647] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5647 comm=syz.2.1794 [ 176.621190][ T5651] overlayfs: failed to clone upperpath [ 176.653529][ T5655] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 176.744409][ T366] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.751079][ T366] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 176.780527][ T366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.794183][ T366] usb 1-1: config 0 descriptor?? [ 177.206456][ T366] usbhid 1-1:0.0: can't add hid device: -71 [ 177.212480][ T366] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 177.221580][ T366] usb 1-1: USB disconnect, device number 60 [ 177.279779][ T5669] kvm: kvm [5668]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 177.288344][ T5669] kvm: kvm [5668]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 177.302761][ T5669] kvm: kvm [5668]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 177.312348][ T5669] kvm: kvm [5668]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 177.326651][ T5669] kvm: kvm [5668]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 177.335123][ T5669] kvm: kvm [5668]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 177.443360][ T392] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 177.593397][ T392] usb 2-1: Using ep0 maxpacket: 16 [ 177.599646][ T392] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.610743][ T392] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.623587][ T392] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.630215][ T392] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 177.639275][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.647844][ T392] usb 2-1: config 0 descriptor?? [ 177.727997][ T5684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1812'. [ 177.739879][ T36] audit: type=1400 audit(1756338588.761:1077): avc: denied { nlmsg_read } for pid=5685 comm="syz.2.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.739895][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 177.773363][ T366] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 177.924694][ T366] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.934896][ T366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.945989][ T366] usb 4-1: string descriptor 0 read error: -22 [ 177.952320][ T366] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.961403][ T366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.971458][ T366] usb 4-1: 0:2 : does not exist [ 178.056462][ T392] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 178.063218][ T392] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 178.069954][ T392] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 178.077301][ T392] kye 0003:0458:0138.0016: hidraw0: USB HID v0.08 Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 178.171781][ T5678] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1809'. [ 178.181225][ T392] usb 4-1: USB disconnect, device number 53 [ 178.263593][ T431] usb 2-1: USB disconnect, device number 14 [ 178.853363][ T431] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 178.943418][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 179.014531][ T431] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.021196][ T431] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 179.030294][ T431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.038850][ T431] usb 1-1: config 0 descriptor?? [ 179.104505][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.114748][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.124435][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.133365][ T392] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.133567][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.149233][ T9] usb 4-1: SerialNumber: syz [ 179.284478][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.295454][ T392] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.304543][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.313430][ T392] usb 2-1: config 0 descriptor?? [ 179.356586][ T9] usb 4-1: 0:2 : does not exist [ 179.364541][ T9] usb 4-1: USB disconnect, device number 54 [ 179.373598][ T1808] udevd[1808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.447591][ T431] usbhid 1-1:0.0: can't add hid device: -71 [ 179.453673][ T431] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 179.467099][ T431] usb 1-1: USB disconnect, device number 61 [ 179.722235][ T392] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 179.731762][ T392] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0017/input/input35 [ 179.807808][ T392] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 180.136198][ T366] usb 2-1: USB disconnect, device number 15 [ 180.173353][ T392] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 180.253415][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 180.323414][ T392] usb 4-1: Using ep0 maxpacket: 32 [ 180.329690][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.340610][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.350394][ T392] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 180.359482][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.368244][ T392] usb 4-1: config 0 descriptor?? [ 180.404563][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 180.413751][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.422452][ T9] usb 1-1: config 0 descriptor?? [ 180.673340][ T36] audit: type=1326 audit(1756338591.691:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8998ebe9 code=0x7ffc0000 [ 180.680660][ T5761] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5761 comm=syz.2.1849 [ 180.697210][ T36] audit: type=1326 audit(1756338591.691:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8998ebe9 code=0x7ffc0000 [ 180.734670][ T36] audit: type=1326 audit(1756338591.691:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f7e8998ebe9 code=0x7ffc0000 [ 180.759138][ T36] audit: type=1326 audit(1756338591.691:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8998ebe9 code=0x7ffc0000 [ 180.786862][ T392] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 180.796079][ T5772] SELinux: failed to load policy [ 180.796691][ T36] audit: type=1326 audit(1756338591.691:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8998ebe9 code=0x7ffc0000 [ 180.803189][ T392] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 180.837927][ T392] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 180.838101][ T36] audit: type=1400 audit(1756338591.861:1083): avc: denied { write } for pid=5775 comm="syz.1.1856" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 180.846376][ T392] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 180.876563][ T392] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0 [ 180.884555][ T392] koneplus 0003:1E7D:2D51.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 181.227993][ T392] usb 4-1: USB disconnect, device number 55 [ 181.694807][ T36] audit: type=1400 audit(1756338592.721:1084): avc: denied { getopt } for pid=5798 comm="syz.1.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.125105][ T5810] overlayfs: failed to clone upperpath [ 182.275268][ T9] usb 1-1: Cannot set autoneg [ 182.280144][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 182.292419][ T9] usb 1-1: USB disconnect, device number 62 [ 182.720874][ T5831] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 182.728508][ T5831] SELinux: failed to load policy [ 182.853386][ T392] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 183.005014][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.016071][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.025848][ T429] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 183.033479][ T392] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.042513][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.051403][ T392] usb 4-1: config 0 descriptor?? [ 183.193352][ T429] usb 1-1: Using ep0 maxpacket: 32 [ 183.199619][ T429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.210579][ T429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.220367][ T429] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.229468][ T429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.238357][ T429] usb 1-1: config 0 descriptor?? [ 183.244387][ T429] hub 1-1:0.0: USB hub found [ 183.445529][ T429] hub 1-1:0.0: 1 port detected [ 184.052555][ T429] hub 1-1:0.0: activate --> -90 [ 184.260590][ T392] uclogic 0003:256C:006D.0019: interface is invalid, ignoring [ 184.269807][ T392] usb 4-1: USB disconnect, device number 56 [ 184.446064][ T5851] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 184.446097][ T5851] rust_binder: Read failure Err(EFAULT) in pid:179 [ 184.454974][ T392] usb 1-1: USB disconnect, device number 63 [ 184.467515][ T429] usb 1-1-port1: cannot disable (err = -71) [ 184.468668][ T5853] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 184.481124][ T5853] SELinux: failed to load policy [ 184.503812][ T5857] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 184.503812][ T36] audit: type=1400 audit(1756338595.531:1085): avc: denied { relabelfrom } for pid=5856 comm="syz.1.1892" name="TCP" dev="sockfs" ino=29300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 184.535967][ T36] audit: type=1400 audit(1756338595.561:1086): avc: denied { relabelto } for pid=5856 comm="syz.1.1892" name="TCP" dev="sockfs" ino=29300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:devpts_t:s0" [ 184.722698][ T5875] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 184.730335][ T5875] SELinux: failed to load policy [ 184.829569][ T5892] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5892 comm=syz.1.1908 [ 184.974751][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 184.983793][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 185.009230][ T5903] input: syz1 as /devices/virtual/input/input36 [ 185.015631][ T5903] input: failed to attach handler leds to device input36, error: -6 [ 185.036168][ T5907] rust_binder: 1109: no such ref 0 [ 185.041355][ T5907] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 185.114814][ T5913] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5913 comm=syz.2.1917 [ 185.363369][ T429] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 185.514594][ T429] usb 1-1: config 0 has an invalid interface number: 204 but max is 1 [ 185.522838][ T429] usb 1-1: config 0 has an invalid interface number: 177 but max is 1 [ 185.531091][ T429] usb 1-1: config 0 has no interface number 0 [ 185.537215][ T429] usb 1-1: config 0 has no interface number 1 [ 185.543331][ T429] usb 1-1: config 0 interface 204 has no altsetting 0 [ 185.550141][ T429] usb 1-1: config 0 interface 177 has no altsetting 0 [ 185.558463][ T429] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e1, bcdDevice=6e.1b [ 185.567660][ T429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.575699][ T429] usb 1-1: Product: syz [ 185.579883][ T429] usb 1-1: Manufacturer: syz [ 185.584496][ T429] usb 1-1: SerialNumber: syz [ 185.589652][ T429] usb 1-1: config 0 descriptor?? [ 185.595819][ T429] ftdi_sio 1-1:0.204: FTDI USB Serial Device converter detected [ 185.603767][ T429] ftdi_sio ttyUSB0: unknown device type: 0x6e1b [ 185.661732][ T5935] tipc: Enabling of bearer rejected, already enabled [ 185.797332][ T429] ftdi_sio 1-1:0.177: FTDI USB Serial Device converter detected [ 185.805435][ T429] ftdi_sio ttyUSB1: unknown device type: 0x6e1b [ 185.812667][ T429] usb 1-1: USB disconnect, device number 64 [ 185.823435][ T429] ftdi_sio 1-1:0.204: device disconnected [ 185.830721][ T429] ftdi_sio 1-1:0.177: device disconnected [ 185.884557][ T392] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 186.043344][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 186.050172][ T392] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.058527][ T392] usb 4-1: config 0 has no interface number 0 [ 186.064982][ T392] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.076295][ T392] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.086118][ T392] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.099807][ T392] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 186.109203][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.118469][ T392] usb 4-1: config 0 descriptor?? [ 186.323322][ T36] audit: type=1400 audit(1756338597.341:1087): avc: denied { connect } for pid=5965 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.512379][ T36] audit: type=1326 audit(1756338597.531:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3778ebe9 code=0x7fc00000 [ 186.544943][ T392] holtek_mouse 0003:04D9:A072.001A: unknown main item tag 0x0 [ 186.552482][ T392] holtek_mouse 0003:04D9:A072.001A: unknown main item tag 0x0 [ 186.574956][ T36] audit: type=1326 audit(1756338597.531:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce3778ebe9 code=0x7fc00000 [ 186.583351][ T392] holtek_mouse 0003:04D9:A072.001A: unknown main item tag 0x0 [ 186.618358][ T36] audit: type=1326 audit(1756338597.531:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3778ebe9 code=0x7fc00000 [ 186.623377][ T392] holtek_mouse 0003:04D9:A072.001A: unknown main item tag 0x0 [ 186.664902][ T36] audit: type=1326 audit(1756338597.531:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3778ebe9 code=0x7fc00000 [ 186.667221][ T392] holtek_mouse 0003:04D9:A072.001A: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input1 [ 186.715779][ T36] audit: type=1326 audit(1756338597.531:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3778ebe9 code=0x7fc00000 [ 186.763243][ T36] audit: type=1326 audit(1756338597.531:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3778ebe9 code=0x7fc00000 [ 186.809170][ T36] audit: type=1326 audit(1756338597.531:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3778ebe9 code=0x7fc00000 [ 186.827003][ T392] usb 4-1: USB disconnect, device number 57 [ 186.869087][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 186.923553][ T5985] rust_binder: inc_ref_done called when no active inc_refs [ 187.493629][ T6015] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 188.143354][ T392] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 188.293347][ T392] usb 2-1: Using ep0 maxpacket: 16 [ 188.299705][ T392] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.307807][ T392] usb 2-1: config 0 has no interface number 0 [ 188.313949][ T392] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.324853][ T392] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.334665][ T392] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.347691][ T392] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 188.357047][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.370842][ T392] usb 2-1: config 0 descriptor?? [ 188.412795][ T6027] kvm_pr_unimpl_wrmsr: 22 callbacks suppressed [ 188.412816][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 188.429181][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 188.440356][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 188.453682][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 188.464498][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 188.475440][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 188.486243][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 188.497226][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 188.507696][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 188.518730][ T6027] kvm: kvm [6026]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 188.784779][ T392] usbhid 2-1:0.1: can't add hid device: -71 [ 188.790781][ T392] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 188.799528][ T392] usb 2-1: USB disconnect, device number 16 [ 188.902991][ T6041] overlayfs: failed to clone upperpath [ 189.533392][ T392] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 189.662743][ T6045] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 189.683390][ T392] usb 2-1: Using ep0 maxpacket: 8 [ 189.689673][ T392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.700044][ T392] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 189.701917][ T6047] overlayfs: failed to clone upperpath [ 189.711186][ T392] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 189.732166][ T392] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 189.741751][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.750192][ T392] usb 2-1: Product: syz [ 189.754743][ T392] usb 2-1: Manufacturer: syz [ 189.759431][ T392] usb 2-1: SerialNumber: syz [ 189.765337][ T392] usb 2-1: config 0 descriptor?? [ 189.771279][ T392] cdc_acm 2-1:0.0: skipping garbage [ 189.818666][ T6054] netlink: 'syz.2.1977': attribute type 4 has an invalid length. [ 190.129110][ T366] usb 2-1: USB disconnect, device number 17 [ 190.658972][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 190.658991][ T36] audit: type=1326 audit(1756338601.681:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.2.1982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce3778ebe9 code=0x0 [ 190.703366][ T392] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 190.813404][ T366] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 190.854530][ T392] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 190.865924][ T392] usb 1-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.879019][ T392] usb 1-1: config 1 interface 0 has no altsetting 0 [ 190.886942][ T392] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40 [ 190.896004][ T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.904116][ T392] usb 1-1: Product: syz [ 190.908371][ T392] usb 1-1: Manufacturer: syz [ 190.912979][ T392] usb 1-1: SerialNumber: syz [ 190.963367][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 190.971021][ T366] usb 4-1: Using ep0 maxpacket: 16 [ 190.977519][ T366] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.985682][ T366] usb 4-1: config 0 has no interface number 0 [ 190.991867][ T366] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.002776][ T366] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.012546][ T366] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.025399][ T366] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 191.034508][ T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.043164][ T366] usb 4-1: config 0 descriptor?? [ 191.124474][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.135486][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.144738][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.153647][ T9] usb 2-1: config 0 descriptor?? [ 191.323220][ T392] usbhid 1-1:1.0: can't add hid device: -71 [ 191.329312][ T392] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 191.338318][ T392] usb 1-1: USB disconnect, device number 65 [ 191.451675][ T366] usbhid 4-1:0.1: can't add hid device: -71 [ 191.457706][ T366] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 191.467396][ T366] usb 4-1: USB disconnect, device number 58 [ 191.562416][ T9] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 191.573002][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001B/input/input37 [ 191.648453][ T9] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 191.655813][ T36] audit: type=1400 audit(1756338602.671:1158): avc: denied { map } for pid=6091 comm="syz.1.1990" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.674912][ T9] usb 2-1: USB disconnect, device number 18 [ 191.708450][ T6096] netlink: 'syz.1.1991': attribute type 4 has an invalid length. [ 192.073390][ T366] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 192.223394][ T366] usb 1-1: Using ep0 maxpacket: 8 [ 192.229673][ T366] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.240152][ T366] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 192.251042][ T366] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 192.265952][ T366] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 192.275158][ T366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.283252][ T366] usb 1-1: Product: syz [ 192.287626][ T366] usb 1-1: Manufacturer: syz [ 192.292249][ T366] usb 1-1: SerialNumber: syz [ 192.297813][ T366] usb 1-1: config 0 descriptor?? [ 192.305320][ T366] cdc_acm 1-1:0.0: skipping garbage [ 192.473330][ T392] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 192.634700][ T392] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.641476][ T392] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 192.650597][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.659309][ T392] usb 2-1: config 0 descriptor?? [ 193.067981][ T392] usbhid 2-1:0.0: can't add hid device: -71 [ 193.074691][ T392] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.083615][ T392] usb 2-1: USB disconnect, device number 19 [ 193.088857][ T6136] fuse: Unknown parameter '0x0000000000000005' [ 193.123253][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.129774][ T6141] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 193.136503][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.136926][ T6141] rust_binder: Error while translating object. [ 193.142956][ T6141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.149240][ T6141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:929 [ 193.638906][ T6144] /dev/rnullb0: Can't open blockdev [ 194.444612][ T36] audit: type=1400 audit(1756338605.471:1159): avc: denied { execute } for pid=6157 comm="syz.1.2018" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.524681][ T6161] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 194.533073][ T6165] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 194.848287][ T366] usb 1-1: USB disconnect, device number 66 [ 194.884511][ T6178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 195.143371][ T2151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.143384][ T2152] Bluetooth: hci0: command 0x1003 tx timeout [ 195.335529][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 195.380412][ T6193] rust_binder: Error while translating object. [ 195.380452][ T6193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.386849][ T6193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 195.403346][ T392] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 195.412156][ T6195] netlink: 'syz.2.2031': attribute type 4 has an invalid length. [ 195.554626][ T392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.565369][ T392] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 195.576217][ T392] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x18, changing to 0x8 [ 195.587673][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 195.597338][ T392] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 195.611592][ T392] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 195.620668][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.628678][ T392] usb 4-1: Product: syz [ 195.632840][ T392] usb 4-1: Manufacturer: syz [ 195.637470][ T392] usb 4-1: SerialNumber: syz [ 195.643042][ T392] usb 4-1: config 0 descriptor?? [ 195.856120][ T6185] loop7: detected capacity change from 0 to 7 [ 195.863060][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.872250][ C0] buffer_io_error: 2 callbacks suppressed [ 195.872268][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.886264][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.895441][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.903408][ T1808] loop7: unable to read partition table [ 195.910738][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.919968][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.928148][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.937355][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.945211][ T6185] loop7: unable to read partition table [ 195.946337][ T6201] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 195.951617][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.972991][ T6185] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 195.977338][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.979644][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.002339][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.010576][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.019884][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.028049][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.037243][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.038143][ T6185] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2028'. [ 196.045402][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.060032][ T36] audit: type=1400 audit(1756338607.081:1160): avc: denied { ioctl } for pid=6184 comm="syz.3.2028" path="socket:[31451]" dev="sockfs" ino=31451 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.063362][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.155662][ T431] usb 4-1: USB disconnect, device number 59 [ 196.203193][ T6211] overlayfs: failed to clone upperpath [ 196.305502][ T6231] netlink: 'syz.1.2047': attribute type 4 has an invalid length. [ 196.313037][ T6233] overlayfs: failed to clone upperpath [ 196.332506][ T6235] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2049'. [ 196.358176][ T6235] kvm_pr_unimpl_wrmsr: 30 callbacks suppressed [ 196.358201][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 196.373979][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 196.384380][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 196.396560][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 196.407288][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 196.418013][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 196.423378][ T392] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 196.428349][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 196.445616][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 196.455951][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 196.466661][ T6235] kvm: kvm [6234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 196.593345][ T392] usb 1-1: Using ep0 maxpacket: 16 [ 196.599850][ T392] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.608197][ T392] usb 1-1: config 0 has no interface number 0 [ 196.614711][ T392] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.625966][ T392] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.635935][ T392] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.649570][ T392] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 196.663463][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.677622][ T392] usb 1-1: config 0 descriptor?? [ 196.699641][ T36] audit: type=1400 audit(1756338607.721:1161): avc: denied { map } for pid=6244 comm="syz.3.2053" path="socket:[32087]" dev="sockfs" ino=32087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.723058][ T36] audit: type=1400 audit(1756338607.721:1162): avc: denied { accept } for pid=6244 comm="syz.3.2053" path="socket:[32087]" dev="sockfs" ino=32087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.776453][ T36] audit: type=1400 audit(1756338607.801:1163): avc: denied { mounton } for pid=6248 comm="syz.1.2055" path="/130/file0" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 196.776994][ T6249] incfs: Backing dir is not set, filesystem can't be mounted. [ 196.799834][ T6247] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 196.807069][ T6249] incfs: mount failed -2 [ 196.833002][ T6249] netlink: 'syz.1.2055': attribute type 29 has an invalid length. [ 196.840910][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 196.856775][ T6249] overlay: ./file0 is not a directory [ 196.967946][ T6261] overlayfs: failed to clone upperpath [ 196.995184][ T6263] netlink: 'syz.2.2057': attribute type 4 has an invalid length. [ 197.086370][ T392] usbhid 1-1:0.1: can't add hid device: -71 [ 197.092541][ T392] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 197.102430][ T392] usb 1-1: USB disconnect, device number 67 [ 197.337254][ T6287] overlayfs: failed to clone upperpath [ 197.368490][ T6289] overlayfs: failed to clone upperpath [ 197.600596][ T6293] FAULT_INJECTION: forcing a failure. [ 197.600596][ T6293] name failslab, interval 1, probability 0, space 0, times 1 [ 197.613425][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.3.2072 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 197.613461][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.613473][ T6293] Call Trace: [ 197.613490][ T6293] [ 197.613498][ T6293] __dump_stack+0x21/0x30 [ 197.613530][ T6293] dump_stack_lvl+0x10c/0x190 [ 197.613555][ T6293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 197.613578][ T6293] ? __kasan_check_write+0x18/0x20 [ 197.613603][ T6293] ? mutex_unlock+0x8b/0x240 [ 197.613621][ T6293] dump_stack+0x19/0x20 [ 197.613644][ T6293] should_fail_ex+0x3d9/0x530 [ 197.613671][ T6293] should_failslab+0xac/0x100 [ 197.613691][ T6293] kmem_cache_alloc_noprof+0x42/0x3a0 [ 197.613718][ T6293] ? getname_flags+0xc6/0x710 [ 197.613738][ T6293] getname_flags+0xc6/0x710 [ 197.613757][ T6293] __x64_sys_renameat2+0xba/0x100 [ 197.613785][ T6293] x64_sys_call+0x2e18/0x2ee0 [ 197.613811][ T6293] do_syscall_64+0x58/0xf0 [ 197.613834][ T6293] ? clear_bhb_loop+0x50/0xa0 [ 197.613852][ T6293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 197.613888][ T6293] RIP: 0033:0x7fbcc1b8ebe9 [ 197.613903][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.613915][ T6293] RSP: 002b:00007fbcc2a9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 197.613934][ T6293] RAX: ffffffffffffffda RBX: 00007fbcc1db5fa0 RCX: 00007fbcc1b8ebe9 [ 197.613943][ T6293] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 197.613952][ T6293] RBP: 00007fbcc2a9a090 R08: 0000000000000005 R09: 0000000000000000 [ 197.613969][ T6293] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 197.613978][ T6293] R13: 00007fbcc1db6038 R14: 00007fbcc1db5fa0 R15: 00007fff29cb5ee8 [ 197.613989][ T6293] [ 197.817187][ T6299] input: syz0 as /devices/virtual/input/input38 [ 197.964520][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 198.145710][ T6319] overlayfs: missing 'workdir' [ 198.286448][ T6322] overlayfs: failed to clone upperpath [ 198.462449][ T6327] netlink: 'syz.0.2086': attribute type 4 has an invalid length. [ 198.486444][ T6329] input: syz0 as /devices/virtual/input/input39 [ 198.608569][ T6339] rust_binder: Error while translating object. [ 198.608637][ T6339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 198.615122][ T6339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1176 [ 198.772453][ T6345] netlink: 'syz.3.2095': attribute type 4 has an invalid length. [ 198.872638][ T6354] input: syz0 as /devices/virtual/input/input40 [ 199.193381][ T366] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 199.213694][ T6368] overlayfs: missing 'lowerdir' [ 199.343366][ T366] usb 4-1: Using ep0 maxpacket: 32 [ 199.349774][ T366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.360852][ T366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.370685][ T366] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.379843][ T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.388453][ T366] usb 4-1: config 0 descriptor?? [ 199.394368][ T366] hub 4-1:0.0: USB hub found [ 199.517574][ T6386] netlink: 'syz.0.2113': attribute type 4 has an invalid length. [ 199.537492][ T6388] netlink: 'syz.0.2114': attribute type 4 has an invalid length. [ 199.545620][ T6388] FAULT_INJECTION: forcing a failure. [ 199.545620][ T6388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.558711][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.0.2114 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 199.558742][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.558751][ T6388] Call Trace: [ 199.558755][ T6388] [ 199.558760][ T6388] __dump_stack+0x21/0x30 [ 199.558779][ T6388] dump_stack_lvl+0x10c/0x190 [ 199.558794][ T6388] ? __cfi_dump_stack_lvl+0x10/0x10 [ 199.558809][ T6388] ? kstrtoull+0x13b/0x1e0 [ 199.558830][ T6388] dump_stack+0x19/0x20 [ 199.558844][ T6388] should_fail_ex+0x3d9/0x530 [ 199.558861][ T6388] should_fail+0xf/0x20 [ 199.558876][ T6388] should_fail_usercopy+0x1e/0x30 [ 199.558887][ T6388] _copy_from_user+0x22/0xb0 [ 199.558902][ T6388] ___sys_sendmsg+0x159/0x2a0 [ 199.558919][ T6388] ? __sys_sendmsg+0x280/0x280 [ 199.558935][ T6388] ? proc_fail_nth_write+0x17e/0x210 [ 199.558950][ T6388] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 199.558968][ T6388] __x64_sys_sendmsg+0x1eb/0x2c0 [ 199.558984][ T6388] ? fput+0x1a5/0x240 [ 199.558998][ T6388] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 199.559014][ T6388] ? ksys_write+0x1ef/0x250 [ 199.559025][ T6388] ? __kasan_check_read+0x15/0x20 [ 199.559041][ T6388] x64_sys_call+0x2a4c/0x2ee0 [ 199.559057][ T6388] do_syscall_64+0x58/0xf0 [ 199.559072][ T6388] ? clear_bhb_loop+0x50/0xa0 [ 199.559084][ T6388] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 199.559102][ T6388] RIP: 0033:0x7f0538f8ebe9 [ 199.559112][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.559123][ T6388] RSP: 002b:00007f0539ec1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.559137][ T6388] RAX: ffffffffffffffda RBX: 00007f05391b5fa0 RCX: 00007f0538f8ebe9 [ 199.559153][ T6388] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000006 [ 199.559162][ T6388] RBP: 00007f0539ec1090 R08: 0000000000000000 R09: 0000000000000000 [ 199.559169][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.559177][ T6388] R13: 00007f05391b6038 R14: 00007f05391b5fa0 R15: 00007ffe4825f458 [ 199.559187][ T6388] [ 199.779150][ T6390] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.779174][ T6390] rust_binder: Read failure Err(EFAULT) in pid:1186 [ 199.794433][ T366] hub 4-1:0.0: 1 port detected [ 199.899142][ T6401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1186 [ 199.955086][ T6412] netlink: 'syz.1.2123': attribute type 4 has an invalid length. [ 200.348573][ T366] hub 4-1:0.0: activate --> -90 [ 200.498170][ T6420] netlink: 'syz.1.2126': attribute type 4 has an invalid length. [ 200.549165][ T366] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 200.551595][ T392] usb 4-1: USB disconnect, device number 60 [ 201.027208][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2142'. [ 201.036755][ T6454] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6454 comm=syz.2.2142 [ 201.191192][ T6464] netlink: 'syz.1.2147': attribute type 4 has an invalid length. [ 201.208656][ T328] macsec0: left allmulticast mode [ 201.216037][ T328] veth1_macvtap: left allmulticast mode [ 201.226323][ T328] macsec0: left promiscuous mode [ 201.231557][ T328] bridge0: port 3(macsec0) entered disabled state [ 201.241596][ T328] bridge_slave_1: left allmulticast mode [ 201.251509][ T328] bridge_slave_1: left promiscuous mode [ 201.257420][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.265115][ T328] bridge_slave_0: left allmulticast mode [ 201.270775][ T328] bridge_slave_0: left promiscuous mode [ 201.276740][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.308269][ T6469] 9pnet: Could not find request transport: unMx [ 201.333381][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 201.373422][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.380472][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.387579][ T6460] bridge_slave_0: entered allmulticast mode [ 201.393989][ T6460] bridge_slave_0: entered promiscuous mode [ 201.400294][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.407371][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.414496][ T6460] bridge_slave_1: entered allmulticast mode [ 201.420870][ T6460] bridge_slave_1: entered promiscuous mode [ 201.426869][ T328] tipc: Disabling bearer [ 201.432274][ T328] tipc: Left network mode [ 201.437733][ T328] veth1_macvtap: left promiscuous mode [ 201.443548][ T328] veth0_vlan: left promiscuous mode [ 201.483354][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 201.490258][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.500657][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 201.511522][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 201.531369][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 201.540499][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.548669][ T9] usb 4-1: Product: syz [ 201.552890][ T9] usb 4-1: Manufacturer: syz [ 201.557579][ T9] usb 4-1: SerialNumber: syz [ 201.565982][ T9] usb 4-1: config 0 descriptor?? [ 201.572677][ T9] cdc_acm 4-1:0.0: skipping garbage [ 201.596218][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.603349][ T6460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.610690][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.617750][ T6460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.638744][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.646436][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.655748][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.662851][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.673073][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.680172][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.707223][ T6460] veth0_vlan: entered promiscuous mode [ 201.718085][ T6460] veth1_macvtap: entered promiscuous mode [ 201.877825][ T31] usb 4-1: USB disconnect, device number 61 [ 202.033390][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 202.163378][ T9] usb 3-1: device descriptor read/64, error -71 [ 202.413362][ T9] usb 3-1: device descriptor read/64, error -71 [ 202.607182][ T6502] netlink: 'syz.1.2157': attribute type 4 has an invalid length. [ 202.663400][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 202.793364][ T9] usb 3-1: device descriptor read/64, error -71 [ 203.043356][ T9] usb 3-1: device descriptor read/64, error -71 [ 203.153576][ T9] usb usb3-port1: attempt power cycle [ 203.236592][ T6522] netlink: 'syz.3.2166': attribute type 4 has an invalid length. [ 203.255617][ T6525] netlink: 'syz.3.2167': attribute type 4 has an invalid length. [ 203.493373][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 203.524505][ T9] usb 3-1: device descriptor read/8, error -71 [ 203.654510][ T9] usb 3-1: device descriptor read/8, error -71 [ 203.696134][ T36] audit: type=1400 audit(1756338614.721:1164): avc: denied { map } for pid=6528 comm="syz.0.2169" path="socket:[33921]" dev="sockfs" ino=33921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.720294][ T36] audit: type=1400 audit(1756338614.721:1165): avc: denied { read accept } for pid=6528 comm="syz.0.2169" path="socket:[33921]" dev="sockfs" ino=33921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.737761][ T6532] overlayfs: failed to clone upperpath [ 203.748586][ T6533] rust_binder: Error while translating object. [ 203.750433][ T6533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 203.756666][ T6533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1207 [ 203.771293][ T6534] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 203.796626][ T6534] rust_binder: Write failure EINVAL in pid:1207 [ 203.893341][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 203.924442][ T9] usb 3-1: device descriptor read/8, error -71 [ 204.054482][ T9] usb 3-1: device descriptor read/8, error -71 [ 204.163456][ T9] usb usb3-port1: unable to enumerate USB device [ 204.390974][ T6568] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.399393][ T6568] netlink: 'syz.1.2179': attribute type 4 has an invalid length. [ 204.664840][ T6574] netlink: 'syz.0.2182': attribute type 4 has an invalid length. [ 204.883379][ T392] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 204.913379][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 205.033348][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 205.039719][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.050751][ T31] usb 1-1: device descriptor read/64, error -71 [ 205.057044][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.067212][ T392] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 205.076271][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.084830][ T392] usb 4-1: config 0 descriptor?? [ 205.195360][ T431] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 205.206283][ T6588] overlayfs: failed to clone upperpath [ 205.240406][ T6591] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2190'. [ 205.266124][ T6593] 9pnet_fd: Insufficient options for proto=fd [ 205.303459][ T31] usb 1-1: device descriptor read/64, error -71 [ 205.310749][ T392] usbhid 4-1:0.0: can't add hid device: -71 [ 205.319987][ T392] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.336601][ T392] usb 4-1: USB disconnect, device number 62 [ 205.358864][ T431] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.371977][ T431] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 205.384031][ T431] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.390904][ T431] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 205.400362][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.413449][ T431] usb 3-1: config 0 descriptor?? [ 205.424025][ T6582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.449947][ T6609] kvm_pr_unimpl_wrmsr: 30 callbacks suppressed [ 205.449972][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 205.465128][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 205.481952][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 205.490736][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 205.507769][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 205.516422][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 205.533419][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 205.542056][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfff7 [ 205.553355][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 205.567149][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xffcf [ 205.576229][ T6609] kvm: kvm [6608]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xffbe [ 205.683346][ T31] usb 1-1: device descriptor read/64, error -71 [ 205.751669][ T6612] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 205.765084][ T6612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 205.907917][ T6620] rust_binder: Write failure EINVAL in pid:1001 [ 205.933328][ T31] usb 1-1: device descriptor read/64, error -71 [ 206.017203][ T6622] SELinux: policydb string SE Linu does not match my string SE Linux [ 206.025680][ T6622] SELinux: failed to load policy [ 206.043095][ T6624] netlink: 'syz.3.2201': attribute type 4 has an invalid length. [ 206.055781][ T31] usb usb1-port1: attempt power cycle [ 206.114939][ T6630] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 206.393367][ T31] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 206.414455][ T31] usb 1-1: device descriptor read/8, error -71 [ 206.554432][ T31] usb 1-1: device descriptor read/8, error -71 [ 206.764953][ T6643] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 206.793358][ T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 206.824813][ T31] usb 1-1: device descriptor read/8, error -71 [ 206.828522][ T6649] overlayfs: failed to clone upperpath [ 206.954361][ T31] usb 1-1: device descriptor read/8, error -71 [ 207.014184][ T6653] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 207.021990][ T6653] netlink: 'syz.3.2215': attribute type 3 has an invalid length. [ 207.030727][ T6653] input: syz0 as /devices/virtual/input/input41 [ 207.063656][ T31] usb usb1-port1: unable to enumerate USB device [ 207.436742][ T6672] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2221'. [ 207.446297][ T6672] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6672 comm=syz.1.2221 [ 207.724588][ T6676] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 207.839731][ T431] usb 3-1: string descriptor 0 read error: -71 [ 207.853335][ T6679] netlink: 'syz.2.2224': attribute type 4 has an invalid length. [ 207.862941][ T431] usbhid 3-1:0.0: can't add hid device: -71 [ 207.869430][ T431] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 207.882578][ T431] usb 3-1: USB disconnect, device number 49 [ 208.028901][ T9] kernel read not supported for file inotify (pid: 9 comm: kworker/0:0) [ 208.103879][ T36] audit: type=1400 audit(1756338619.131:1166): avc: denied { setcheckreqprot } for pid=6686 comm="syz.3.2227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 208.272427][ T6695] netlink: 'syz.1.2230': attribute type 4 has an invalid length. [ 208.301372][ T6697] overlayfs: failed to clone upperpath [ 208.307847][ T6697] fuse: Bad value for 'fd' [ 208.314122][ T6697] incfs: Options parsing error. -22 [ 208.319748][ T6697] incfs: mount failed -22 [ 208.333337][ T431] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 208.370194][ T6705] netlink: 'syz.1.2234': attribute type 4 has an invalid length. [ 208.483315][ T431] usb 3-1: Using ep0 maxpacket: 32 [ 208.489683][ T431] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.499853][ T431] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.512922][ T431] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 208.522033][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.530838][ T431] usb 3-1: config 0 descriptor?? [ 208.536771][ T431] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 208.583536][ T6716] SELinux: policydb version 0 does not match my version range 15-33 [ 208.591666][ T6716] SELinux: failed to load policy [ 208.603400][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 208.617445][ T6720] netlink: 'syz.0.2240': attribute type 4 has an invalid length. [ 208.774527][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 208.786884][ T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 208.796162][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.805444][ T9] usb 4-1: config 0 descriptor?? [ 208.938266][ T6734] netlink: 'syz.1.2246': attribute type 4 has an invalid length. [ 209.216205][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 209.222296][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 209.231067][ T9] usb 4-1: USB disconnect, device number 63 [ 209.677036][ T6743] SELinux: failed to load policy [ 209.690375][ T6745] FAULT_INJECTION: forcing a failure. [ 209.690375][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 209.703095][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.2250 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 209.703126][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.703139][ T6745] Call Trace: [ 209.703146][ T6745] [ 209.703155][ T6745] __dump_stack+0x21/0x30 [ 209.703180][ T6745] dump_stack_lvl+0x10c/0x190 [ 209.703194][ T6745] ? __cfi_dump_stack_lvl+0x10/0x10 [ 209.703210][ T6745] dump_stack+0x19/0x20 [ 209.703224][ T6745] should_fail_ex+0x3d9/0x530 [ 209.703242][ T6745] should_failslab+0xac/0x100 [ 209.703254][ T6745] __kmalloc_cache_node_noprof+0x46/0x3d0 [ 209.703277][ T6745] ? __get_vm_area_node+0x154/0x3a0 [ 209.703292][ T6745] __get_vm_area_node+0x154/0x3a0 [ 209.703306][ T6745] __vmalloc_node_range_noprof+0x33c/0x1420 [ 209.703321][ T6745] ? sel_write_load+0x226/0x5e0 [ 209.703336][ T6745] ? kernel_text_address+0xa9/0xe0 [ 209.703350][ T6745] ? unwind_get_return_address+0x51/0x90 [ 209.703365][ T6745] ? _parse_integer_limit+0x195/0x1e0 [ 209.703381][ T6745] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 209.703396][ T6745] ? avc_has_perm_noaudit+0x268/0x360 [ 209.703412][ T6745] ? __asan_memcpy+0x5a/0x80 [ 209.703427][ T6745] ? avc_has_perm_noaudit+0x286/0x360 [ 209.703443][ T6745] ? sel_write_load+0x226/0x5e0 [ 209.703456][ T6745] vmalloc_noprof+0xfd/0x1d0 [ 209.703469][ T6745] ? sel_write_load+0x226/0x5e0 [ 209.703482][ T6745] ? __cfi_avc_has_perm+0x10/0x10 [ 209.703496][ T6745] ? mutex_lock+0x92/0x1c0 [ 209.703508][ T6745] ? __cfi_vmalloc_noprof+0x10/0x10 [ 209.703523][ T6745] sel_write_load+0x226/0x5e0 [ 209.703536][ T6745] ? proc_fail_nth_write+0x17e/0x210 [ 209.703550][ T6745] ? __cfi_sel_write_load+0x10/0x10 [ 209.703564][ T6745] ? bpf_lsm_file_permission+0xd/0x20 [ 209.703579][ T6745] ? __cfi_sel_write_load+0x10/0x10 [ 209.703592][ T6745] vfs_write+0x3c0/0xe80 [ 209.703603][ T6745] ? __cfi_vfs_write+0x10/0x10 [ 209.703613][ T6745] ? __kasan_check_write+0x18/0x20 [ 209.703628][ T6745] ? mutex_lock+0x92/0x1c0 [ 209.703638][ T6745] ? __cfi_mutex_lock+0x10/0x10 [ 209.703648][ T6745] ? __fget_files+0x2c5/0x340 [ 209.703661][ T6745] ksys_write+0x141/0x250 [ 209.703671][ T6745] ? __cfi_ksys_write+0x10/0x10 [ 209.703682][ T6745] ? __kasan_check_read+0x15/0x20 [ 209.703698][ T6745] __x64_sys_write+0x7f/0x90 [ 209.703708][ T6745] x64_sys_call+0x271c/0x2ee0 [ 209.703725][ T6745] do_syscall_64+0x58/0xf0 [ 209.703739][ T6745] ? clear_bhb_loop+0x50/0xa0 [ 209.703751][ T6745] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 209.703768][ T6745] RIP: 0033:0x7f0538f8ebe9 [ 209.703788][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.703798][ T6745] RSP: 002b:00007f0539ec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.703814][ T6745] RAX: ffffffffffffffda RBX: 00007f05391b5fa0 RCX: 00007f0538f8ebe9 [ 209.703824][ T6745] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003 [ 209.703833][ T6745] RBP: 00007f0539ec1090 R08: 0000000000000000 R09: 0000000000000000 [ 209.703841][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.703849][ T6745] R13: 00007f05391b6038 R14: 00007f05391b5fa0 R15: 00007ffe4825f458 [ 209.703859][ T6745] [ 209.730192][ T6747] overlay: Unknown parameter 'obj_user' [ 209.731786][ T6745] syz.0.2250: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 210.043340][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.2250 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 210.043376][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.043389][ T6745] Call Trace: [ 210.043396][ T6745] [ 210.043405][ T6745] __dump_stack+0x21/0x30 [ 210.043435][ T6745] dump_stack_lvl+0x10c/0x190 [ 210.043460][ T6745] ? __cfi_dump_stack_lvl+0x10/0x10 [ 210.043485][ T6745] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 210.043512][ T6745] dump_stack+0x19/0x20 [ 210.043536][ T6745] warn_alloc+0x1bc/0x2a0 [ 210.043561][ T6745] ? __cfi_warn_alloc+0x10/0x10 [ 210.043586][ T6745] ? __get_vm_area_node+0x392/0x3a0 [ 210.043610][ T6745] __vmalloc_node_range_noprof+0x361/0x1420 [ 210.043637][ T6745] ? kernel_text_address+0xa9/0xe0 [ 210.043661][ T6745] ? unwind_get_return_address+0x51/0x90 [ 210.043684][ T6745] ? _parse_integer_limit+0x195/0x1e0 [ 210.043711][ T6745] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 210.043736][ T6745] ? avc_has_perm_noaudit+0x268/0x360 [ 210.043760][ T6745] ? __asan_memcpy+0x5a/0x80 [ 210.043789][ T6745] ? avc_has_perm_noaudit+0x286/0x360 [ 210.043828][ T6745] ? sel_write_load+0x226/0x5e0 [ 210.043852][ T6745] vmalloc_noprof+0xfd/0x1d0 [ 210.043878][ T6745] ? sel_write_load+0x226/0x5e0 [ 210.043903][ T6745] ? __cfi_avc_has_perm+0x10/0x10 [ 210.043928][ T6745] ? mutex_lock+0x92/0x1c0 [ 210.043946][ T6745] ? __cfi_vmalloc_noprof+0x10/0x10 [ 210.043971][ T6745] sel_write_load+0x226/0x5e0 [ 210.043993][ T6745] ? proc_fail_nth_write+0x17e/0x210 [ 210.044018][ T6745] ? __cfi_sel_write_load+0x10/0x10 [ 210.044042][ T6745] ? bpf_lsm_file_permission+0xd/0x20 [ 210.044068][ T6745] ? __cfi_sel_write_load+0x10/0x10 [ 210.044091][ T6745] vfs_write+0x3c0/0xe80 [ 210.044111][ T6745] ? __cfi_vfs_write+0x10/0x10 [ 210.044129][ T6745] ? __kasan_check_write+0x18/0x20 [ 210.044157][ T6745] ? mutex_lock+0x92/0x1c0 [ 210.044176][ T6745] ? __cfi_mutex_lock+0x10/0x10 [ 210.044194][ T6745] ? __fget_files+0x2c5/0x340 [ 210.044219][ T6745] ksys_write+0x141/0x250 [ 210.044238][ T6745] ? __cfi_ksys_write+0x10/0x10 [ 210.044259][ T6745] ? __kasan_check_read+0x15/0x20 [ 210.044287][ T6745] __x64_sys_write+0x7f/0x90 [ 210.044307][ T6745] x64_sys_call+0x271c/0x2ee0 [ 210.044336][ T6745] do_syscall_64+0x58/0xf0 [ 210.044361][ T6745] ? clear_bhb_loop+0x50/0xa0 [ 210.044383][ T6745] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 210.044414][ T6745] RIP: 0033:0x7f0538f8ebe9 [ 210.044433][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.044450][ T6745] RSP: 002b:00007f0539ec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.044474][ T6745] RAX: ffffffffffffffda RBX: 00007f05391b5fa0 RCX: 00007f0538f8ebe9 [ 210.044491][ T6745] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003 [ 210.044505][ T6745] RBP: 00007f0539ec1090 R08: 0000000000000000 R09: 0000000000000000 [ 210.044519][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.044534][ T6745] R13: 00007f05391b6038 R14: 00007f05391b5fa0 R15: 00007ffe4825f458 [ 210.044552][ T6745] [ 210.044561][ T6745] Mem-Info: [ 210.075041][ T6772] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6772 comm=syz.1.2263 [ 210.085600][ T6745] active_anon:36158 inactive_anon:2 isolated_anon:0 [ 210.085600][ T6745] active_file:24794 inactive_file:27462 isolated_file:0 [ 210.085600][ T6745] unevictable:16345 dirty:586 writeback:0 [ 210.085600][ T6745] slab_reclaimable:6357 slab_unreclaimable:70541 [ 210.085600][ T6745] mapped:25229 shmem:16482 pagetables:1075 [ 210.085600][ T6745] sec_pagetables:0 bounce:0 [ 210.085600][ T6745] kernel_misc_reclaimable:0 [ 210.085600][ T6745] free:1448383 free_pcp:3224 free_cma:0 [ 210.094015][ T6774] rust_binder: Write failure EFAULT in pid:1046 [ 210.097338][ T6745] Node 0 active_anon:144632kB inactive_anon:8kB active_file:99176kB inactive_file:109848kB unevictable:65380kB isolated(anon):0kB isolated(file):0kB mapped:100916kB dirty:2344kB writeback:0kB shmem:65928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5704kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no [ 210.373326][ T366] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 210.417282][ T6745] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:0kB free_cma:0kB [ 210.491875][ T6745] lowmem_reserve[]: 0 3921 3921 [ 210.497319][ T6745] Normal free:2835768kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:144788kB inactive_anon:8kB active_file:99176kB inactive_file:109848kB unevictable:65380kB writepending:2344kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4452kB local_pcp:32kB free_cma:0kB [ 210.529598][ T6745] lowmem_reserve[]: 0 0 0 [ 210.534059][ T6745] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 210.549681][ T6745] Normal: 44*4kB (UME) 36*8kB (UME) 409*16kB (UME) 392*32kB (UME) 180*64kB (UME) 78*128kB (UME) 59*256kB (UME) 44*512kB (UME) 20*1024kB (UME) 9*2048kB (UME) 661*4096kB (M) = 2825056kB [ 210.568165][ T6745] 85081 total pagecache pages [ 210.572942][ T6745] 2 pages in swap cache [ 210.577331][ T6745] Free swap = 124528kB [ 210.581494][ T6745] Total swap = 124996kB [ 210.585828][ T6745] 2097051 pages RAM [ 210.589761][ T6745] 0 pages HighMem/MovableOnly [ 210.594500][ T366] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.594527][ T366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.605157][ T6745] 351530 pages reserved [ 210.614498][ T366] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.617995][ T6745] 0 pages cma reserved [ 210.619622][ T6745] Memory allocations: [ 210.627625][ T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.631325][ T6745] 0 B 0 init/main.c:1370 func:do_initcalls [ 210.631350][ T6745] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 210.635529][ T366] usb 4-1: SerialNumber: syz [ 210.643418][ T6745] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 210.643441][ T6745] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 210.678968][ T6745] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 210.686922][ T6745] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 210.695565][ T6745] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 210.703509][ T6745] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 210.711519][ T6745] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 210.719458][ T6745] 0 B 0 init/initramfs.c:101 func:find_link [ 210.872715][ T366] usb 4-1: skipping empty audio interface (v1) [ 210.880454][ T366] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.891932][ T366] usb 4-1: USB disconnect, device number 64 [ 210.897811][ T1808] udevd[1808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 211.073501][ T431] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 211.106480][ T366] usb 3-1: USB disconnect, device number 50 [ 211.149587][ T6823] hub 6-0:1.0: USB hub found [ 211.154437][ T6823] hub 6-0:1.0: 1 port detected [ 211.223360][ T431] usb 1-1: Using ep0 maxpacket: 32 [ 211.229728][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.241051][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.250874][ T431] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.259975][ T431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.268745][ T431] usb 1-1: config 0 descriptor?? [ 211.274687][ T431] hub 1-1:0.0: USB hub found [ 211.475567][ T431] hub 1-1:0.0: 1 port detected [ 211.584829][ T36] audit: type=1400 audit(1756338622.611:1167): avc: denied { relabelfrom } for pid=6838 comm="syz.3.2291" name="NETLINK" dev="sockfs" ino=35014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 211.596054][ T6842] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 212.026673][ T6847] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 212.036357][ T6847] SELinux: failed to load policy [ 212.054610][ T36] audit: type=1400 audit(1756338623.081:1168): avc: denied { listen } for pid=6848 comm="syz.2.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.083157][ T431] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 212.091723][ T330] usb 1-1: USB disconnect, device number 72 [ 212.194733][ T6857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 212.536422][ T6863] kvm_pr_unimpl_wrmsr: 74 callbacks suppressed [ 212.536440][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 212.551289][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 212.565894][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 212.574331][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 212.590118][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 212.598794][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 212.613816][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 212.622269][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfff7 [ 212.642253][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xffcf [ 212.651128][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xffbe [ 213.013364][ T330] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 213.066241][ T6876] netlink: 'syz.2.2304': attribute type 4 has an invalid length. [ 213.088024][ T6878] input: syz0 as /devices/virtual/input/input42 [ 213.145156][ T6882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 213.164517][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.171188][ T330] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 213.180353][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.189000][ T330] usb 4-1: config 0 descriptor?? [ 213.505167][ T6888] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 213.597114][ T330] zeroplus 0003:0C12:0005.001C: unknown main item tag 0x0 [ 213.605153][ T330] zeroplus 0003:0C12:0005.001C: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 213.616586][ T330] zeroplus 0003:0C12:0005.001C: no inputs found [ 213.798138][ T366] usb 4-1: USB disconnect, device number 65 [ 214.013263][ T6892] FAULT_INJECTION: forcing a failure. [ 214.013263][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 214.026376][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.2.2309 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 214.026406][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.026420][ T6892] Call Trace: [ 214.026425][ T6892] [ 214.026433][ T6892] __dump_stack+0x21/0x30 [ 214.026463][ T6892] dump_stack_lvl+0x10c/0x190 [ 214.026487][ T6892] ? __cfi_dump_stack_lvl+0x10/0x10 [ 214.026510][ T6892] ? avc_has_perm+0x144/0x220 [ 214.026536][ T6892] ? __cfi_avc_has_perm+0x10/0x10 [ 214.026561][ T6892] dump_stack+0x19/0x20 [ 214.026584][ T6892] should_fail_ex+0x3d9/0x530 [ 214.026613][ T6892] should_failslab+0xac/0x100 [ 214.026634][ T6892] __kmalloc_cache_noprof+0x41/0x3c0 [ 214.026662][ T6892] ? vhost_task_create+0x101/0x350 [ 214.026690][ T6892] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 214.026712][ T6892] vhost_task_create+0x101/0x350 [ 214.026730][ T6892] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 214.026749][ T6892] ? __cfi_vhost_task_create+0x10/0x10 [ 214.026764][ T6892] ? __cfi_vhost_task_fn+0x10/0x10 [ 214.026775][ T6892] ? __kasan_check_write+0x18/0x20 [ 214.026791][ T6892] ? mutex_lock+0x92/0x1c0 [ 214.026803][ T6892] ? __cfi_mutex_lock+0x10/0x10 [ 214.026813][ T6892] ? kernel_text_address+0xa9/0xe0 [ 214.026828][ T6892] kvm_mmu_post_init_vm+0x1a6/0x310 [ 214.026846][ T6892] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 214.026862][ T6892] ? _parse_integer_limit+0x195/0x1e0 [ 214.026878][ T6892] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 214.026893][ T6892] ? kstrtoull+0x13b/0x1e0 [ 214.026908][ T6892] ? kstrtouint+0x78/0xf0 [ 214.026923][ T6892] ? ioctl_has_perm+0x1aa/0x4d0 [ 214.026937][ T6892] ? __asan_memcpy+0x5a/0x80 [ 214.026953][ T6892] ? ioctl_has_perm+0x3e0/0x4d0 [ 214.026966][ T6892] ? has_cap_mac_admin+0xd0/0xd0 [ 214.026979][ T6892] ? __kasan_check_write+0x18/0x20 [ 214.026995][ T6892] ? mutex_lock_killable+0x92/0x1c0 [ 214.027014][ T6892] ? __cfi_mutex_lock_killable+0x10/0x10 [ 214.027025][ T6892] ? proc_fail_nth_write+0x17e/0x210 [ 214.027041][ T6892] kvm_vcpu_ioctl+0x96f/0xee0 [ 214.027059][ T6892] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 214.027076][ T6892] ? __cfi_vfs_write+0x10/0x10 [ 214.027086][ T6892] ? __kasan_check_write+0x18/0x20 [ 214.027102][ T6892] ? mutex_unlock+0x8b/0x240 [ 214.027113][ T6892] ? __cfi_mutex_unlock+0x10/0x10 [ 214.027123][ T6892] ? __fget_files+0x2c5/0x340 [ 214.027137][ T6892] ? __fget_files+0x2c5/0x340 [ 214.027149][ T6892] ? bpf_lsm_file_ioctl+0xd/0x20 [ 214.027164][ T6892] ? security_file_ioctl+0x34/0xd0 [ 214.027177][ T6892] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 214.027194][ T6892] __se_sys_ioctl+0x135/0x1b0 [ 214.027207][ T6892] __x64_sys_ioctl+0x7f/0xa0 [ 214.027220][ T6892] x64_sys_call+0x1878/0x2ee0 [ 214.027236][ T6892] do_syscall_64+0x58/0xf0 [ 214.027251][ T6892] ? clear_bhb_loop+0x50/0xa0 [ 214.027264][ T6892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 214.027282][ T6892] RIP: 0033:0x7f1a1138ebe9 [ 214.027294][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.027305][ T6892] RSP: 002b:00007f1a121b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.027321][ T6892] RAX: ffffffffffffffda RBX: 00007f1a115b5fa0 RCX: 00007f1a1138ebe9 [ 214.027331][ T6892] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 214.027339][ T6892] RBP: 00007f1a121b4090 R08: 0000000000000000 R09: 0000000000000000 [ 214.027348][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.027356][ T6892] R13: 00007f1a115b6038 R14: 00007f1a115b5fa0 R15: 00007ffc4c5632f8 [ 214.027367][ T6892] [ 214.423036][ T36] audit: type=1400 audit(1756338625.441:1169): avc: denied { create } for pid=6897 comm="syz.2.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 214.633341][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 214.683340][ T31] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 214.783385][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 214.789697][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.800629][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.810476][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.819745][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.830214][ T10] usb 4-1: config 0 descriptor?? [ 214.836727][ T10] hub 4-1:0.0: USB hub found [ 214.844399][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.849465][ T6911] netlink: 'syz.2.2319': attribute type 4 has an invalid length. [ 214.855602][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.873146][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.882626][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.891603][ T31] usb 1-1: config 0 descriptor?? [ 215.038360][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 215.133351][ T61] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 215.248227][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 215.254288][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 215.273717][ T10] usb 4-1: USB disconnect, device number 66 [ 215.285171][ T61] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.291888][ T61] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 215.301066][ T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.310436][ T61] usb 3-1: config 0 descriptor?? [ 215.718777][ T61] zeroplus 0003:0C12:0005.001E: unknown main item tag 0x1 [ 215.726799][ T61] zeroplus 0003:0C12:0005.001E: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.2-1/input0 [ 215.738375][ T61] zeroplus 0003:0C12:0005.001E: no inputs found [ 215.769026][ T6916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1075 [ 215.825145][ T6925] SELinux: failed to load policy [ 215.851565][ T6927] netlink: 'syz.3.2325': attribute type 4 has an invalid length. [ 215.897546][ T6931] FAULT_INJECTION: forcing a failure. [ 215.897546][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 215.910269][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.3.2327 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 215.910301][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.910313][ T6931] Call Trace: [ 215.910320][ T6931] [ 215.910327][ T6931] __dump_stack+0x21/0x30 [ 215.910363][ T6931] dump_stack_lvl+0x10c/0x190 [ 215.910388][ T6931] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.910415][ T6931] dump_stack+0x19/0x20 [ 215.910438][ T6931] should_fail_ex+0x3d9/0x530 [ 215.910459][ T6931] should_failslab+0xac/0x100 [ 215.910472][ T6931] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 215.910490][ T6931] ? dup_task_struct+0xbc/0xc50 [ 215.910504][ T6931] ? kasan_save_track+0x4f/0x80 [ 215.910516][ T6931] dup_task_struct+0xbc/0xc50 [ 215.910529][ T6931] ? __kasan_check_write+0x18/0x20 [ 215.910545][ T6931] ? _raw_spin_lock_irq+0x8d/0x120 [ 215.910561][ T6931] ? copy_process+0x3220/0x3220 [ 215.910575][ T6931] ? __kasan_check_write+0x18/0x20 [ 215.910591][ T6931] copy_process+0x538/0x3220 [ 215.910606][ T6931] ? __cfi_copy_process+0x10/0x10 [ 215.910619][ T6931] ? __kasan_check_write+0x18/0x20 [ 215.910635][ T6931] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 215.910649][ T6931] vhost_task_create+0x1d6/0x350 [ 215.910661][ T6931] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 215.910674][ T6931] ? __cfi_vhost_task_create+0x10/0x10 [ 215.910687][ T6931] ? __cfi_vhost_task_fn+0x10/0x10 [ 215.910698][ T6931] ? __kasan_check_write+0x18/0x20 [ 215.910713][ T6931] ? mutex_lock+0x92/0x1c0 [ 215.910724][ T6931] ? __cfi_mutex_lock+0x10/0x10 [ 215.910735][ T6931] ? kernel_text_address+0xa9/0xe0 [ 215.910750][ T6931] kvm_mmu_post_init_vm+0x1a6/0x310 [ 215.910774][ T6931] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 215.910789][ T6931] ? _parse_integer_limit+0x195/0x1e0 [ 215.910806][ T6931] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 215.910821][ T6931] ? kstrtoull+0x13b/0x1e0 [ 215.910836][ T6931] ? kstrtouint+0x78/0xf0 [ 215.910852][ T6931] ? ioctl_has_perm+0x1aa/0x4d0 [ 215.910865][ T6931] ? __asan_memcpy+0x5a/0x80 [ 215.910881][ T6931] ? ioctl_has_perm+0x3e0/0x4d0 [ 215.910894][ T6931] ? has_cap_mac_admin+0xd0/0xd0 [ 215.910907][ T6931] ? __kasan_check_write+0x18/0x20 [ 215.910922][ T6931] ? mutex_lock_killable+0x92/0x1c0 [ 215.910934][ T6931] ? __cfi_mutex_lock_killable+0x10/0x10 [ 215.910946][ T6931] ? proc_fail_nth_write+0x17e/0x210 [ 215.910961][ T6931] kvm_vcpu_ioctl+0x96f/0xee0 [ 215.910978][ T6931] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 215.910995][ T6931] ? __cfi_vfs_write+0x10/0x10 [ 215.911009][ T6931] ? __kasan_check_write+0x18/0x20 [ 215.911024][ T6931] ? mutex_unlock+0x8b/0x240 [ 215.911035][ T6931] ? __cfi_mutex_unlock+0x10/0x10 [ 215.911045][ T6931] ? __fget_files+0x2c5/0x340 [ 215.911059][ T6931] ? __fget_files+0x2c5/0x340 [ 215.911071][ T6931] ? bpf_lsm_file_ioctl+0xd/0x20 [ 215.911087][ T6931] ? security_file_ioctl+0x34/0xd0 [ 215.911100][ T6931] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 215.911116][ T6931] __se_sys_ioctl+0x135/0x1b0 [ 215.911130][ T6931] __x64_sys_ioctl+0x7f/0xa0 [ 215.911143][ T6931] x64_sys_call+0x1878/0x2ee0 [ 215.911159][ T6931] do_syscall_64+0x58/0xf0 [ 215.911173][ T6931] ? clear_bhb_loop+0x50/0xa0 [ 215.911186][ T6931] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.911203][ T6931] RIP: 0033:0x7fbcc1b8ebe9 [ 215.911216][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.911227][ T6931] RSP: 002b:00007fbcc2a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.911242][ T6931] RAX: ffffffffffffffda RBX: 00007fbcc1db5fa0 RCX: 00007fbcc1b8ebe9 [ 215.911255][ T6931] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 215.911264][ T6931] RBP: 00007fbcc2a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 215.911272][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.911281][ T6931] R13: 00007fbcc1db6038 R14: 00007fbcc1db5fa0 R15: 00007fff29cb5ee8 [ 215.911291][ T6931] [ 216.309881][ T31] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #100: -71 [ 216.319480][ T330] usb 3-1: USB disconnect, device number 51 [ 216.325790][ T31] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 216.335686][ T31] uclogic 0003:256C:006D.001D: failed probing pen v1 parameters: -71 [ 216.344311][ T31] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 216.351868][ T31] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71 [ 216.363198][ T31] usb 1-1: USB disconnect, device number 73 [ 216.510712][ T6948] 9pnet_fd: Insufficient options for proto=fd [ 216.613391][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 216.763352][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 216.769767][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.780750][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.790525][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.799571][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.808457][ T10] usb 4-1: config 0 descriptor?? [ 216.829514][ T10] hub 4-1:0.0: USB hub found [ 216.929429][ T6969] netlink: 'syz.2.2343': attribute type 4 has an invalid length. [ 216.967901][ T6974] SELinux: failed to load policy [ 216.968750][ T6975] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2346'. [ 216.982481][ T6975] tc_dump_action: action bad kind [ 216.992844][ T6977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2347'. [ 217.002789][ T6977] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6977 comm=syz.2.2347 [ 217.031674][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 217.094011][ T6990] overlayfs: failed to resolve './file1': -2 [ 217.243927][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 217.249921][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.263374][ T330] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 217.283693][ T10] usb 4-1: USB disconnect, device number 67 [ 217.414419][ T330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.421086][ T330] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 217.430272][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.438895][ T330] usb 3-1: config 0 descriptor?? [ 217.846940][ T330] zeroplus 0003:0C12:0005.001F: unknown main item tag 0x1 [ 217.858767][ T330] zeroplus 0003:0C12:0005.001F: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.2-1/input0 [ 217.874551][ T330] zeroplus 0003:0C12:0005.001F: no inputs found [ 217.992798][ T7016] ------------[ cut here ]------------ [ 217.998330][ T7016] WARNING: CPU: 1 PID: 7016 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 218.007800][ T7016] Modules linked in: [ 218.011793][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.3.2362 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 218.023402][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.033502][ T7016] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 218.039406][ T7016] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f1 25 ee 05 00 0f 85 be 00 00 00 c6 05 e4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 218.048069][ T61] usb 3-1: USB disconnect, device number 52 [ 218.059095][ T7016] RSP: 0018:ffffc9000d41f580 EFLAGS: 00010246 [ 218.071192][ T7016] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 218.079328][ T7016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d41f638 [ 218.087340][ T7016] RBP: ffffc9000d41f6a8 R08: ffffc9000d41f637 R09: 0000000000000000 [ 218.095353][ T7016] R10: ffffc9000d41f620 R11: fffff52001a83ec7 R12: ffffc9000d41f5c0 [ 218.103401][ T7016] R13: dffffc0000000000 R14: 1ffff92001a83eb4 R15: 0000000000000000 [ 218.111392][ T7016] FS: 00007fbcc2a9a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 218.120582][ T7016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.127262][ T7016] CR2: 00007fbcc1b746a0 CR3: 000000011c3e8000 CR4: 00000000003526b0 [ 218.135284][ T7016] Call Trace: [ 218.138600][ T7016] [ 218.141526][ T7016] ? do_syscall_64+0x58/0xf0 [ 218.146151][ T7016] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 218.152247][ T7016] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 218.158005][ T7016] ? hashtab_init+0xdb/0x1f0 [ 218.162715][ T7016] ___kmalloc_large_node+0x9c/0x1d0 [ 218.167953][ T7016] ? hashtab_init+0xdb/0x1f0 [ 218.172586][ T7016] __kmalloc_large_node_noprof+0x1e/0xe0 [ 218.178292][ T7016] ? hashtab_init+0xdb/0x1f0 [ 218.182909][ T7016] __kmalloc_noprof+0x26d/0x450 [ 218.187827][ T7016] hashtab_init+0xdb/0x1f0 [ 218.192257][ T7016] ? class_read+0x162/0x8a0 [ 218.196821][ T7016] symtab_init+0x44/0x70 [ 218.201100][ T7016] class_read+0x1df/0x8a0 [ 218.205482][ T7016] ? __cfi_class_read+0x10/0x10 [ 218.210356][ T7016] ? hashtab_init+0x105/0x1f0 [ 218.215067][ T7016] policydb_read+0xaab/0x28c0 [ 218.219766][ T7016] ? kasan_save_alloc_info+0x40/0x50 [ 218.225089][ T7016] ? __cfi_policydb_read+0x10/0x10 [ 218.230225][ T7016] ? security_load_policy+0x128/0x12f0 [ 218.235739][ T7016] security_load_policy+0x162/0x12f0 [ 218.241042][ T7016] ? __kasan_check_write+0x18/0x20 [ 218.246382][ T7016] ? _raw_spin_lock+0x8c/0x120 [ 218.251169][ T7016] ? __cfi__raw_spin_lock+0x10/0x10 [ 218.256481][ T7016] ? sel_write_load+0x226/0x5e0 [ 218.261357][ T7016] ? vmalloc_noprof+0xfd/0x1d0 [ 218.266179][ T7016] ? _raw_spin_unlock+0x45/0x60 [ 218.271083][ T7016] ? __cfi_security_load_policy+0x10/0x10 [ 218.276861][ T7016] ? __kasan_check_write+0x18/0x20 [ 218.282009][ T7016] sel_write_load+0x298/0x5e0 [ 218.286763][ T7016] ? futex_wait+0x29a/0x7a0 [ 218.291315][ T7016] ? __cfi_sel_write_load+0x10/0x10 [ 218.296552][ T7016] ? __cfi_futex_wait+0x10/0x10 [ 218.301424][ T7016] ? bpf_lsm_file_permission+0xd/0x20 [ 218.306824][ T7016] ? __cfi_sel_write_load+0x10/0x10 [ 218.312044][ T7016] vfs_write+0x3c0/0xe80 [ 218.316320][ T7016] ? __cfi_vfs_write+0x10/0x10 [ 218.321108][ T7016] ? __kasan_check_write+0x18/0x20 [ 218.326245][ T7016] ? mutex_lock+0x92/0x1c0 [ 218.330678][ T7016] ? __cfi_mutex_lock+0x10/0x10 [ 218.335558][ T7016] ? __fget_files+0x2c5/0x340 [ 218.340254][ T7016] ksys_write+0x141/0x250 [ 218.344955][ T7016] ? __cfi_ksys_write+0x10/0x10 [ 218.349817][ T7016] ? __kasan_check_write+0x18/0x20 [ 218.354963][ T7016] ? fpregs_restore_userregs+0x11d/0x260 [ 218.360617][ T7016] __x64_sys_write+0x7f/0x90 [ 218.365228][ T7016] x64_sys_call+0x271c/0x2ee0 [ 218.369927][ T7016] do_syscall_64+0x58/0xf0 [ 218.374369][ T7016] ? clear_bhb_loop+0x50/0xa0 [ 218.379058][ T7016] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 218.384977][ T7016] RIP: 0033:0x7fbcc1b8ebe9 [ 218.389415][ T7016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.409096][ T7016] RSP: 002b:00007fbcc2a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.417582][ T7016] RAX: ffffffffffffffda RBX: 00007fbcc1db5fa0 RCX: 00007fbcc1b8ebe9 [ 218.425585][ T7016] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000004 [ 218.433598][ T7016] RBP: 00007fbcc1c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.441602][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.449593][ T7016] R13: 00007fbcc1db6038 R14: 00007fbcc1db5fa0 R15: 00007fff29cb5ee8 [ 218.457603][ T7016] [ 218.460630][ T7016] ---[ end trace 0000000000000000 ]--- [ 218.466238][ T7016] SELinux: failed to load policy