last executing test programs: 2.995013313s ago: executing program 3 (id=1291): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x204500, 0xc6, 0xa}, 0x18) r1 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200000, 0x121, 0x3a}, 0x18) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)=0x8) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000580)={0x0, &(0x7f0000000180)=[@nested_load_code={0x12e, 0x78, {0x3, "c74424005c000000c74424025d4e0000ff2c2436f343aa0f78b90040000066440fe9e966bad00466b8050066efc744240066000000c7442402f7ffffffff1c246540f64c4005090f20d835200000000f22d80f20e035000400000f22e00f1c27"}}, @nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0x1a}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xc281, 0x3, 0x1}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x4e, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x3ff, 0x1}}, @in_dx={0x69, 0x20, {0x8091, 0x1}}, @wr_crn={0x67, 0x20, {0x8, 0x2}}, @set_irq_handler={0xc8, 0x20, {0xa6, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x67, 0x1, 0x4, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x19, 0x7, 0x80}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x33, 0x5, 0x0, 0x2}}, @wr_drn={0x68, 0x20, {0x0, 0x6}}, @code={0xa, 0x54, {"3ef20f5975d666baf80cb8c5496d86ef66bafc0cec660f1ec0b8010000000f01d966b800018ed0f367f2400f001e0f01c466ba4100b800000000ef0f01c3c482254622"}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x64, 0x5, 0x8, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x8b, 0x0, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xa4a0}}], 0x3cc}) mprotect(&(0x7f0000e12000/0x1000)=nil, 0x1000, 0x4000001) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000680)={0x0, 0x400}) sendto$inet(r1, &(0x7f00000006c0)="318cdba73ffaff692116f372d7b425511fded7c83e9d351587391cef0393696b90986c50fd168205321ef5881224d643f692dd2efef7c86dff8893a026a0febe23075a5d6141695d239ffa60166f24b286c1f35e5732ca05bbe8cfac71fd65adf954936a5a62cec00f45b3ffeace9805b98287c71aefd8b46188dc6cb6b0cbc793cf04eeb1e8913d0b0753f8316fb65d63c4324c96feb15876b2654b23781b2964638464f536031f1c6cc2ce0b574079779a712ccc22e7cf0703b93ab4c3779ab31561aca5e9dc3739fbba92f94265ddcedf3395ab1be5d7790a1fb4c7a082c410d460a2891f1f1bf35b83e068", 0xed, 0x20000890, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2f) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r6, 0x8010aebc, &(0x7f00000007c0)={0xf000, 0x1c000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x4, 0xf5, 0x0, 0x9, 0x5, @private0, @mcast2, 0x7800, 0x7800, 0x0, 0xfffffffe}}) bind$can_raw(r4, &(0x7f00000008c0)={0x1d, r7}, 0x10) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000900)={&(0x7f0000c15000/0x3000)=nil, 0x3000}) r8 = openat$cgroup(r5, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000980)={0x334, 0x3, 0x7, 0x0, 0x0, [{{r5}, 0xffffffffffffffff}, {{r6}, 0x1}, {{r6}, 0x1ff}, {{r3}, 0x2}, {{r8}, 0x9}, {{r5}, 0x5}, {{r0}, 0x9}]}) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r9}, 0x10, &(0x7f0000000b80)={&(0x7f0000000b00)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x25, 0x2, 0x0, 0x0, "8eddd9c14c84f5adc1de8d7d5dad805b2d937e77059763df834d901079e7ab330c04abe71a105dd8c255d132b76490817b7b18f6f18bdf2a4d3da7a0cb956380"}, 0x48}, 0x1, 0x0, 0x0, 0x44814}, 0x4000000) ioctl$KVM_TDX_INIT_MEM_REGION(r6, 0xc008aeba, &(0x7f0000000c40)={0x3, 0x0, &(0x7f0000000c00)={&(0x7f0000df7000/0x2000)=nil, 0xdddd1000, 0x8}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000c80)={0x0, 'nicvf0\x00', {0x1}, 0x7}) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000cc0)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000d00)) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f0000000d40)=0xfc, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000d80), 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e00)={'ip_vti0\x00', r10, 0x8000, 0x40, 0xb, 0xea08, {{0x19, 0x4, 0x2, 0x6, 0x64, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x3, 0x5e}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0x0, [{@broadcast, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x42, 0x1, 0x8, [{@empty, 0x6}, {@rand_addr=0x64010101, 0x4}, {@rand_addr=0x64010101, 0x4}]}, @ssrr={0x89, 0xb, 0x44, [@broadcast, @loopback]}, @generic={0x83, 0xf, "c0989f9cdbbb68a2a04fc2ef8d"}, @rr={0x7, 0xb, 0xb6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) 2.983588004s ago: executing program 3 (id=1292): r0 = syz_clone(0x20090800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x8, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x2) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r6, 0x2) r7 = socket$inet6(0xa, 0x3, 0xff) shutdown(r7, 0x1) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$binfmt_script(r7, &(0x7f00000000c0), 0x28) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xf, 0x0, 0x1, 0x7, 0x0, 0x28d3}, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0xffffffffffffffff}, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, &(0x7f0000004fc0)) 2.919970028s ago: executing program 3 (id=1296): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="200a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000980)={0x0, 0xe, 0xe5, {0xe5, 0x9, "00490d99dafda5dcb7dc690625c9b12296f5a3ec8b3cf1009ebe4b0a7b4b2f6baa0de1f8eec7af9d43b6759042e9d94917e9b1c346c5275f108cc009e6a924e49d3993a9093c87c9632452cbd71fdff5e85cd0398740c5acfdbaa9e6e916e77c8ce08c21e37996c344bee3b5e48151136fd5c314c99e57db28033e637565ff5002c898dbb7e9f2472b6e839930da1fe282650c70a3297da9d0c48b78d0b8bcc9cc05bcfa989546d3315378e04113c4a2980e79b53e19f4e614060fb491edc028d797b4fb00539564225b398d5e034893c5999c58a877da5bd503afd4978e60d7c6c056"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000dc0)=ANY=[]}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) close(r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$sock_linger(r3, 0x1, 0x34, &(0x7f0000000080)={0x5, 0x10006}, 0x8) 2.664042293s ago: executing program 0 (id=1307): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="b016040174ee1ab0f94bf38a98af561a3e3f81fb20358ead3d4c8273cce1f3ce3ac6a00b2cc969cd1d", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800070000000000140002007767300000426eed1a00000000000000880008804800"], 0xb8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) unshare(0x64000600) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {0x0, 0x4000}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @empty}, 0x2a0}) r5 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r5, &(0x7f000000ae00)=[{{&(0x7f0000001b00)=@caif, 0x80, 0x0}}], 0x1, 0x10) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x13, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x23, 0x3, 0x7, 0xfffff03c}, {0x6}, {0x6, 0x1, 0x8, 0x2}, {0x400, 0x5, 0x5, 0x2}]}, 0x10) 2.627713355s ago: executing program 0 (id=1308): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb, [{{0x9, 0x4, 0x0, 0x3, 0x3e, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xd, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205000000b7a5adc004e0c4e51b435d53ee0b90b57b130387b6af8ed1da172866937737a6514867984266df63ebdeab8985dea28cc4ffba6817ab6b6565662d2a7bf9bf6ee6267157892c0b91a5b7561311c1eb57c4ff57458ce9a5b93ca99a39142ceaa50b8829637848109affdb9b31246350e2033dfde1dd9962d990a3bae453a1741d52cf229a0c421eba7d"], 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "771a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r3, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001880)=""/185, 0xb9}], 0x2}, 0x9}], 0x2, 0x10023, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0xc0010007, 0x0, 0xfffffffffffffff9}]}) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) 2.295707974s ago: executing program 3 (id=1311): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) mount$incfs(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000240)={[{@rlog_pages={'rlog_pages', 0x3d, 0x81}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='nolazytime'}, {@subj_role}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r0}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2002060, 0x0) 2.240639678s ago: executing program 3 (id=1312): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peek(0x2, r1, &(0x7f0000000180)) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r3, 0x267a4000) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r5, 0xffffffffffffef81, &(0x7f0000000100)) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0x4, 0x4, "51b082e3", "9ba695e3"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x17, 0x22, 0x9, 0xc2, 0xfff, 0x7}}}, 0x0) 1.944676476s ago: executing program 0 (id=1314): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES8=r0]) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x10}) read$FUSE(r0, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0x0, 0x8000000000010000, 0x906, r3, r4, 0xc000, '\x00', 0x6, 0x27efc00800000, 0x81, 0x3, {0xa, 0x3ff}, {0x6, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa03}, 0x80008001, 0xa, 0xfffffffe, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0xffffffff, 0x22000100, 0x0, 0x0, 0x8000000}}, 0x50) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r5, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) fstat(r5, &(0x7f0000000780)) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="5825be06000000000000007ca274634cf178856e", 0x14}], 0x1}}], 0x2, 0x4004040) 1.880385019s ago: executing program 0 (id=1315): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="4554a2cf947338eacf2dd23dc6de1d30b0bb35f2f9a5b9df1e11a7", 0x1b, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000000c0)='\x00', &(0x7f0000000100)) keyctl$get_security(0x11, 0x0, &(0x7f0000000140)=""/155, 0x9b) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) keyctl$chown(0x4, r0, r1, 0xee01) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0xa00080, &(0x7f0000000340)={[{@nfs_export_off}, {@nfs_export_on}]}) r3 = syz_usb_connect$cdc_ecm(0x6, 0x6c, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x2, 0xc0, 0x7f, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfffe, 0x4, 0x11}, [@obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xfbe3, 0x1, 0x7, 0x5, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x10}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x52, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x5, 0x40}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xfa, 0x9, 0x4, 0x40, 0x9}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x9, 0x36, {0x36, 0xe, "c341323e4450369267d3d75aacd6afa9003afa28e559e09380970ea8867edd9d9e4e608d8eefc2223f1f23686ecec08d185051eb"}}, &(0x7f0000000540)={0x0, 0x3, 0xec, @string={0xec, 0x3, "44a48f06f29eabb29c7d96b3da4a16a7d3f1dd96cda679e1199075f2227b37399ae80204565875133d6af1aa0fa397d7df519fb33549bbbd164aacdebaf1178f2cfcf297a3e2612b0357a378e15bc8b60b6d8ebb75f06feba01e86ea7d53fa549c61b4b3aa65ae7588ca8bff85dd4288b2346b33cfdb2e192f42f3ba009def2694b36df8151594dab653c29085929c71a9f8cae3788a543536c5eadf9886bfc758efc99b4e6fae668cd21aecc0b0b7d9427edd60b3a6528b68adbc215a89f8acbf5a72844d79a726da9e179a29751ca6282f132c003cec6e094a862080ec5980a970354ead2cd865e576"}}, &(0x7f0000000640)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x2, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x0, 0x9, 0xd, "065d1a2b", "9d996102"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x6, 0x8, 0x5, 0x4, 0xfffd}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x0, 0x12, 0x2, "d50b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xaa}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x40, [0xff]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000900)={0x40, 0xb, 0x2, "e248"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x13, 0x6, @random="34a70f75793a"}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "04a5"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x5}}) syz_usb_connect$cdc_ecm(0x5, 0x8b, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x1, 0x6, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x90, 0x3, 0x2, 0x6, 0x0, 0xc, {{0xb, 0x24, 0x6, 0x0, 0x0, "d4bcdca41a22"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6b, 0xb, 0x5, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0xfffb}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x1}, @country_functional={0x12, 0x24, 0x7, 0xa, 0x1, [0x7fff, 0x9, 0x3, 0x7, 0x7, 0x6]}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7c4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x25, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x458, 0x6, 0x5, 0x5}}}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x4, 0x1, 0x2, 0x40, 0x4}, 0xaa, &(0x7f0000000d00)={0x5, 0xf, 0xaa, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "ef1c5fc8ff5a6831255fd0580d67faf6"}, @generic={0x6d, 0x10, 0x2, "ec782105f5bbb4d552595d456f450ba3637817d8d8f1a06179e92eb5a2900f66c680e027bf2b979142eb576fe651c0c14b2aa1c9ba720e909ded468ff6155591c9181206742d679b9f4e936d2cc48406bb1669a1ab20b75e5c44b70a11ef08f8ab5e87eb835024f4745a"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x2, 0xf, 0xfffb, [0x0, 0x0]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x1140, 0x0, 0x2, [0x3f30]}]}, 0x7, [{0x21, &(0x7f0000000dc0)=@string={0x21, 0x3, "69ac0887a04ff3c8daab38e23e97f5b83537dd4296f4f9b9941ccec9e539c3"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41c}}, {0x14, &(0x7f0000000e40)=@string={0x14, 0x3, "35021c6db3df449ff928f7794483927b9af1"}}, {0x3d, &(0x7f0000000e80)=@string={0x3d, 0x3, "77f0ad520b4305ae1f630cb0afadb03c73a3034e6c324c18be403ae25784dfba9918c56716850afa68d3bfa90b496f997e9d07936ebc661f636588"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x180a}}, {0x53, &(0x7f0000000f00)=@string={0x53, 0x3, "2e7a651f3aa5cc27c8c0bf7e6f7b2b3c6f15ee3a5dc7a9dee933c05e0de3f3eedef8fd27c1f5e57e41333bb5ef8132f3d1f08dbf21cbf62e664ed038dbefb8713448172305185963e8ad0b87703ee05b49"}}, {0x7c, &(0x7f0000000f80)=@string={0x7c, 0x3, "0d24a517ec069d2fc5ec17da359a9476c5af93daeb9956f4b016f34dbec70438adfdaf00e4b3f29493569f0f35538d31322bf32f51285f83481a456acae0dfa440a3cee7a189532c863f69bc77033ab7bb439155107484917d99ab55dfcb4df57d67fc9bc40104a3d6a976de57522e9a4bb60c13e42310ca10a9"}}]}) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r0, r1, r5) r7 = accept$unix(0xffffffffffffffff, &(0x7f00000030c0)=@abs, &(0x7f0000003140)=0x6e) getgroups(0x8, &(0x7f00000038c0)=[r5, r2, r5, r5, r2, r2, r5, r5]) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003e80), 0x420001, 0x0) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ec) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe(&(0x7f0000003ec0)={0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r14 = syz_io_uring_complete(0x0) r15 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000006800)='./binderfs/binder-control\x00', 0x802, 0x0) r16 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000006840), 0x2, 0x0) r17 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000006880)='rdma.max\x00', 0x2, 0x0) r18 = openat$uhid(0xffffffffffffff9c, &(0x7f00000068c0), 0x2, 0x0) r19 = signalfd(0xffffffffffffffff, &(0x7f0000006900)={[0x1]}, 0x8) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r7, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003180)="b4eb6095570a38b61ac1b845483b3e6d6ccd9949f6590c13a790e3acddffa62f4f3131bdae47768f647380fb5d8bb8fd74c6d9a48d8977c5f97ecf7e488fd76968b911d63db71d603405ca653baa47615e187d80c6fc7c96ba0d530c5baa57cfb70d31595c37eb6803168907b1e670338af58b427d467e6d74180c211870d139ce5b6c9fc9d3f59a", 0x88}, {&(0x7f0000003240)="d68cc217da997d71c0fa86c02219617c8e10020e1491c934f91f949207ef0d87d83a7d46858c6b16f320b81c6bc35fbdd9843f1ac8435b0dcf44979c51935a1734a6a5f7f5eb44db7612186d8b7f520a7386cdffa31a942e4bc75ca12a4b78a9edac96f87077683512c4b54f5c3eb66c82039cf14e152850862efa3c1d1c529cbf33ef78a76a0b6f3f4ff123fe1d3047c33fb10ffe16771709e275f614a7154c49cb40652f145afedd7cd9825440c9", 0xaf}, {&(0x7f0000003300)="c2abf3a341eda1654d08e64125bb3e9436c935311197fa09fd162b4327f4a85d38d208574496beb401b26c17ec0124fde869789aad3b98a72c70c657bc88bd50c909764be45874ef88cdeeac547455688bc335b9db8011b6b5da93ca5b52c7b0c25cac505f2d059ae5201617c9786fdbcec9134c3f", 0x75}, {&(0x7f0000003380)="0347849c826426e770d1d3b7be970a2272e07cee0c7a03434f20fa6d84ffdcb7e621ef7e1a9a80f01da932ada7886dcb238df21cfcecb6c966984d9897fb2be68b5ea6cd212120cb04e9270bc21e4126a8d860274f600064e9a1b5672c37b0453cf7a23b966325e85ff583c0e9dc4d198c5699316b2a698ee1ae367883fad4b1e5c9f578102f68a84a1d9e7b62713b3c2cc52e7dbe1e513db82724967933743a7e1bee50b440ec7701bf7e2091a6ef0542b430ecfc6d3ce49ca53fd6f08e8d17c01559fcfb99de24a318b9a9cc6beadf1ebcd439d8b7e54808c67d3c2589e6fe664ec76d7bd3bce440f52beecbb2bdc9d4160f9894c08e71f8", 0xf9}, {&(0x7f0000003480)="cddff302177cda246ad6d31a329e80207d98231be56c4b9b2589150c58a45cc943001450a1df5494fb2d92741589ee56d923c8b0ac80b6562ef0264208f742b01e6782f48c46a754988bfcb8d87a2a16cd901abf79934db354f95c9d1289759322b63ff942149cbfe528e4407fb1e51175fc7c48e18e8bfd52ca09cae054e1c89c5fef658617d5ec3bdfb0378e84c8caa7cec230520f156e22fedbffa1bb9406b07436f18c8804e5e94121ee2f073d4de700616f769b3740ec7374dbefa9298a90d1f6e0", 0xc4}, {&(0x7f0000003580)="6134c0adedf49abcb7edfa71030ed4bc6e4945641e89d32d14a7a9e8c36272fc9d0d882ca8f4fb69be2ac7ef33064d90ec29ba67f3ae75263d86c5bbbbe0ff5a378d3d1dc643017c005b8c93f4b48394c7258ed3bc84ab382e5c16404f8babc40723e2dade15cff04021b7f09d1e8f8ca90950951e374a42cad6ebd97e8b404a11a9f5a1e99fb448a1dd23026814a35d71cc0867ca81ebc66addb18a1e06fd2fd0187ae1cd6ee541332a2cd9b1d9be02a83ae96c33607a1f691052b3626ad10ca597d3bb277312018850092b12f37833d2", 0xd1}, {&(0x7f0000003680)="16cfdc1d60c5d2b54d8ef8dd369042c9dfe8c8c75725f19adec9ecb05345eaa50a8fe56e6a8498469e6619d7cea4115cd3d173691266ddea8236c2723d8b9d4f8e9c2a133fb1c1ab56cd044dcd9eb1edaf3b274e8f85e3e5148990efbabb5fc6e4d01891e3f29f026d4ef59e442d153168b22d96b8e475cafe6f11ec57a4c922ba6c82d76d8ee8a3540a0d7f8f6004b377d43e54049a46f55f0b60e59cbe092be2a5920c15ca07b556", 0xa9}, {&(0x7f0000003740)="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", 0xfd}], 0x8, &(0x7f0000003900)=[@cred={{0x1c, 0x1, 0x2, {r6, r1, r8}}}], 0x20}}, {{&(0x7f0000003940)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003e00)=[{&(0x7f00000039c0)="b6786758a044f23c125ab60b99d5c59f2b6d5764d09c7bfe982c10acc4ac12ba4ec1aa918616e715c39af50ee77fe85d8b9fdbde07371a634af83996aefd54d54f4f293b8c0f9e6836e9cdde879fc552a4b930c4b98dc3c181f6431902b295599857322853ef9d9a9e5e4de2bac4a1e7dddb5a77ea1129f27591e053da9c1475c1947bef1e04735d8cb5b17efdbe66e053416869eb851257b8b677951a7ac2755e639991d8e094", 0xa7}, {&(0x7f0000003a80)="c1c3b852ebd081386ff243d6df2789b242c1003bf44c6c10e1f285339f36bea5994676303faa6b2d72f7eabc456acfe71d0917f10a9331e69aa6ccae50a25cb900eb18c56316b22e1677d6d8f17bc882072554228341fff9040d963a9815ec297b0d040796d1b511f17dd9706a0c2102227e5339f85f082e799c67d16aeb89ebc46607f2334c2b19702fc6c59362a6f2edf3e3b4dc6a1ada6fd46be03a7b466b20742c6c1419f506124a2b600d55c1d1b69a3c5c4947e39fac1bb5991ff1a25da37549ef9271c3f7b31b36b8da7a8d040be35ee4efc7a452d23fdeebf2511f66a80aec8879519c74", 0xe8}, {&(0x7f0000003b80)="7447e4f798645e9b399344f3b8352477607710bd9a28e761942a52e02f92989594b40634225d9bbf95a0e1bc8e9ee9d697e558310fe8ce79a22c165e49c8087c60899275ff18ba5ec9e756ff9467365eeba8f7939664e6dfdc1446de333996544eb8", 0x62}, {&(0x7f0000003c00)="b7f411047683f4c1804d549014ae2045552de838dc668d3a9ac3e2cf892cc2dbfbe22af405416c3f6dc51fee3544a99cb90fd56e95a0a5aa60e1f7aa21c406d845819e3bffcf568d25416beaa12f6cc4c949414fa072361af316b7d238c81d749ef0a46414", 0x65}, {&(0x7f0000003c80)="5eb28e1e9c20b077dc4f6f02fb75b43b037cb83198b81eb30a67225caae1336e8939311ece9e148212f26247427a667f31da76f94f3d4a58fd5608415ec9a0c6af5c9000dd7ecec577ecfe618c38fe247cefb13a21f80701b42b99f7", 0x5c}, {&(0x7f0000003d00)="1358e587332f536482041860617c7dbd170689faff895aea1163c26a8d17eeaada38e60cf0be1648267e1579c5a93b9768fd52bc704260ae0a2c7e60a15273aa77c51276e8e64c9035286f47fcd4f7bc64b4c32334b79d6063065669dd8448776f2c1ff7810647d25c2272126a9e706ede3657826558042cc7a6d001e002c7863f502c90484c7e7e07c45d460252b2fe6c05fb1a5c666ab273ea1e6cc490a06b3b278a504fe724f19882", 0xaa}, {&(0x7f0000003dc0)="36c9dc84da3822f92abe23d2f53089676204a42ed86a4e231c22a3e319115a56a8d6fba49d4ffec58075900276f6a73fb15c54d6549cbbb07595a9", 0x3b}], 0x7, &(0x7f0000003f00)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11, r12]}}, @cred={{0x1c, 0x1, 0x2, {r6, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r6, r1, r5}}}], 0x80, 0x84}}, {{&(0x7f0000003f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004700)=[{&(0x7f0000004000)="8c2e0b86b008a1d356482b1eda05fe0959d97ca900ec7aad97fd7ca208494af927583dd45adce2cb9f1f0707ae0510d0156fe722fae864b84c5a25ff6320e6083aa0f5ec395a4cb74547b1e87648ed0b6ef379920a475a718fd6", 0x5a}, {&(0x7f0000004080)="2d669ff959bf05152cd4cfb644be5dabda27f86321894a7861129859c50e9c20439761ad6c00c2406a62c8aa3fca8fa0016acddec42a9b01bee92592aaad807a12d7ec9b38d2a37b2599847adb4507c170bc3eafd42c8800af028c84024f9e46fa22978ed67f539d7306314982649ca88ce4488ae46376fa110b9b0d10849ebdca2684993e975ca2c5009046e43558060228d205858b0bf7c70f0d26ff89d158c0d14d8d619580f60ca543d237b442ab", 0xb0}, {&(0x7f0000004140)="8e43cc6ce9b65f0bb0db91a38e0725f58b5f214f06235e8d18366dea813fa1cc5e7f5d6a9b00ade3aba1e68e47fe31a01862ee652abe46aaba9f0c246c691c0065a00ba7602378b87bd6e71c239ed23d5b55186b2b8deb52acc5a0c4718a6688982418e2d80b5c5e371848638b8445751b80432d2d91726def029b0941bd9396272ee190c4b66109085c9c1e65f59e257e5359d405cde9ab43edfe7c338bed948bf0d72128dbdae2cd224b1cb201a3450fdb99833277ad1db8edb40afc7589c0f93b94d7c303d6038071a3352cff715935db8d240917625780ecc5e719", 0xdd}, {&(0x7f0000004240)="d86ef4460a28de4f9d508229259377db06868487e2e95523991b322b0e681b79797c7c036ec7f4aa2ab0c83b9df9b39ee61b2c7ab41a3658a2a4be23e306b0a5769fdb683a1da49a87d9d473bf97d4e4f7bb6cf8fa48855af9d382e14e1ea4ade90822d19b2694a86740e580a325c3a82f7026bbb002f6ce00a7f5c22221a82c17d8", 0x82}, {&(0x7f0000004300)="a63a824f2868a90ebb848de1d6f872bebad6fb7d3f20f7689b545be502a23e159149bfc71502fe2927c6cd361c1b1bea106da750b944136752010c19f7e6641c603e78822bdaaeaa992ae7ee4af6ec4efcab90268b7ff7", 0x57}, {&(0x7f0000004380)="0767992611e4451007e2c68ad44d93d7372dfafed44226cc81434a00433697cc4f1d60778ee3f23df4012d6d40faf00500baaa11706ca3ad582be2584399e2d126b0330f8537e475d925e8b978263100aa4ff8d01a7775f83e2c8f4d71c881413d824991278bc0b6446926427bed098a4ae40efb7e2d3aaeeb7ebd31db75e869d96a82c763c00956ac5a82a5dba2206c310e7e8919de406966df1c8391a9e60352ecfcdc0f720f0da7a9914a83c94717338c3928053cb63352b8bd12e9e8b087e20d3e4094736b9d829d64cd68f6993c6cbdd368cdfd5c3c045ed4396e6746272b6d42c47b3e63c8e97e38d667b13a905c62316211f107b2ea", 0xf9}, {&(0x7f0000004480)="4b391022c30b062ccff8aa5ae2a96fee0b7b3d501487abc654a357b2ff0a7dd0cb92e129fe650f8bc38aa32fd4dedf696638d4bd4aa277347c5ccc9e80e1ffaaa0cbe78590f192cc3a4b46867a7b77ff0b453d28e10249b642fce4022ec7d9f2b5eeb0f2fae6e4d0941e4e7979afcfc4797039da7719106d9a3eed1736312e0e5b95528b63b9d85406a70b8a4b3b01e6576eedc36f60ef09a94d152cf0c78caeb344be99e6ae8b82f8e0d2eb9317a857208a5c84e96d1876912aa967af4b68b42d8979ed8ed367a16223e051ba2b8c30d281bc947e9e79373addf9c697561f461b879a462675e0a503f39104a44544", 0xef}, {&(0x7f0000004580)="2bee579b94fd747e3531c99073faf8895a66a835624abab72b890213a6ccfe06bd9e03990479ea89cfa6d821ca6656a7d09835162aeadbe5ed1779140c7cfaf258ae601a802a75d3f84b808e22f2d1b93ae1d64288db50dd9b4521abbbae553af6cf73dae77e1a36f7d6ac05fb6ff6e53e448f7a285b9b870dece4f552ae4048c6e71ff4e4b812baebcfbcc4b013fb113d89f7", 0x93}, {&(0x7f0000004640)="508d7be218649e6e084c9a53460ecb48c0a95464b62d9345803a401373a27074418ec3ef52d88105d4e44468e9df7fa6fa6dd9101722641920a2cc9a0733fe3f0251e0eed0d68de4a23714c4d19ccee6cf9dd1ccd0785d68a6baea96ff0166ddf74434a52019fbfae83cf4cb55a4fef983445cf7e4c0c8d6fec4977dda5378a470838cdddb5adbf6c440a08ef2e15d688771eb7e42bf2590b5ae8da0ab42d9", 0x9f}], 0x9, &(0x7f0000006940)=[@cred={{0x1c, 0x1, 0x2, {r6, r13, r2}}}, @rights={{0x2c, 0x1, 0x1, [r14, r15, r16, r17, r18, r19, r20]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}], 0x70, 0x40000}}], 0x3, 0x40008010) request_key(&(0x7f0000006a80)='rxrpc_s\x00', &(0x7f0000006ac0)={'syz', 0x0}, &(0x7f0000006b00)='keyring\x00', r0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000006b40)={0x2710, 0x4, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) keyctl$revoke(0x3, 0x0) 1.763582406s ago: executing program 3 (id=1319): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca00090506020d020d0006090582020002000110"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000340)={0x14, 0x0, 0x0}, &(0x7f0000000880)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0003e90000007d97baa0cf47f616024191023b6cda14fa35ca90b0cc3e411703bf273bc04997eeb57f5b887df4ad3cc5a12434739e53dd03116b030cb067dee4a6a25a680db8f815ae1a8b250c53a1d28cf1aa62fe4743aaf6296bc0fd204d1c7c7f9f0e4e30dbc1770ab1116f850c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.684832761s ago: executing program 1 (id=1324): r0 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1.601455376s ago: executing program 1 (id=1325): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80d0) r1 = socket$key(0xf, 0x3, 0x2) close_range(r1, r1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x5, @usage=0xffffffff, 0x0, 0xfffffffffffffffb, 0x40, 0x2f, 0xfff, 0x7, 0x400, @struct={0x8001, 0xff}, 0x3, 0x4, [0x9, 0x400, 0xed, 0x34, 0x8, 0x1]}, {0x160, @struct={0x9, 0x9}, 0x0, 0x0, 0x7fff, 0xc, 0x4, 0xfffffffffffffff9, 0x22, @struct={0x7, 0x6}, 0x6, 0x5, [0x4, 0x4, 0x9, 0x7fffffff, 0xc32d, 0x5]}, {0x200, @usage=0x1, 0x0, 0x7, 0x9, 0x2, 0x66, 0x3263, 0x80, @struct={0x1, 0x9}, 0x0, 0x2, [0x4, 0x5, 0x1, 0x1682a70a, 0x4, 0x3]}, {0x7fff, 0xffffffffffffff80, 0xfa8}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x5, @usage=0xffffffff, 0x0, 0xfffffffffffffffb, 0x40, 0x2f, 0xfff, 0x7, 0x400, @struct={0x8001, 0xff}, 0x3, 0x4, [0x9, 0x400, 0xed, 0x34, 0x8, 0x1]}, {0x160, @struct={0x9, 0x9}, 0x0, 0x0, 0x7fff, 0xc, 0x4, 0xfffffffffffffff9, 0x22, @struct={0x7, 0x6}, 0x6, 0x5, [0x4, 0x4, 0x9, 0x7fffffff, 0xc32d, 0x5]}, {0x200, @usage=0x1, 0x0, 0x7, 0x9, 0x2, 0x66, 0x3263, 0x80, @struct={0x1, 0x9}, 0x0, 0x2, [0x4, 0x5, 0x1, 0x1682a70a, 0x4, 0x3]}, {0x7fff, 0xffffffffffffff80, 0xfa8}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000005c0)={0x0, 0x3, 0xfffffffffffff1df}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000009c0)={0x0, 0x40, 0x101}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000dc0)={0x11, 0x4, {0x5, @struct={0x3, 0x2}, r2, 0x24e, 0x2, 0xffffffffffffffff, 0x5, 0x2, 0x8, @struct={0xffff76a0, 0x2}, 0x5, 0x1, [0x400, 0x4981, 0x8, 0x7, 0x0, 0xff]}, {0x9, @struct={0x5, 0x3}, r3, 0x2, 0x3ff, 0x39, 0x8, 0x3, 0x10, @struct={0x0, 0x8001}, 0x1000, 0x2, [0x6, 0x0, 0x1, 0xdb, 0x0, 0x7]}, {0x8000000000000001, @struct={0x1, 0x9}, r4, 0xffffffffffffffff, 0xb, 0x2, 0x4, 0x6, 0x2, @struct={0x9, 0x4}, 0x0, 0xfffffff9, [0x6, 0x9, 0x100, 0x7, 0xffffffffffff0000, 0x5]}, {0x1, 0x0, 0x3}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000dc0)={0x11, 0x4, {0x5, @struct={0x3, 0x2}, r2, 0x24e, 0x2, 0xffffffffffffffff, 0x5, 0x2, 0x8, @struct={0xffff76a0, 0x2}, 0x5, 0x1, [0x400, 0x4981, 0x8, 0x7, 0x0, 0xff]}, {0x9, @struct={0x5, 0x3}, r3, 0x2, 0x3ff, 0x39, 0x8, 0x3, 0x10, @struct={0x0, 0x8001}, 0x1000, 0x2, [0x6, 0x0, 0x1, 0xdb, 0x0, 0x7]}, {0x8000000000000001, @struct={0x1, 0x9}, r4, 0xffffffffffffffff, 0xb, 0x2, 0x4, 0x6, 0x2, @struct={0x9, 0x4}, 0x0, 0xfffffff9, [0x6, 0x9, 0x100, 0x7, 0xffffffffffff0000, 0x5]}, {0x1, 0x0, 0x3}}) r5 = socket$netlink(0x10, 0x3, 0x8) sendmsg$key(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x2, 0x8, 0x4, 0x9, 0x3, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x18}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000001280)={0x8, 'vlan1\x00', {'vcan0\x00'}}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000012c0)=""/113, &(0x7f0000001340)=0x71) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x60, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x78c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040854) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r8) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r8) syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r5) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r5) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xc8, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf498}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x490}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0xfffffffb}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa7f3}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xc8, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf498}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x490}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0xfffffffb}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa7f3}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0}, &(0x7f0000001780)=0xc) fcntl$setownex(r5, 0xf, &(0x7f00000017c0)={0x0, r10}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001800)={0x2, 0xeb75, 0x9, 0x7, 0x4, 0x3}) fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) (async) r12 = fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) openat$cgroup_pressure(r12, &(0x7f0000001840)='cpu.pressure\x00', 0x2, 0x0) (async) r13 = openat$cgroup_pressure(r12, &(0x7f0000001840)='cpu.pressure\x00', 0x2, 0x0) sendmsg$unix(r12, &(0x7f0000001a40)={&(0x7f0000001880)=@file={0x1}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)="c7dcf1d0cd93e492e400e1099abb8754c3253e568a9066696419a46ca0022e794e50e5adf18aafdf17b90b", 0x2b}], 0x1, &(0x7f00000019c0)=[@rights={{0x38, 0x1, 0x1, [r6, r13, r1, r9, r8, r1, 0xffffffffffffffff, 0xffffffffffffffff, r12, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}], 0x58, 0x4000090}, 0x2c000001) 1.544682619s ago: executing program 1 (id=1326): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x9, 0x0, 0x0, 0x0, @str='%!\xf9[\x00'}]}]}, 0x20}], 0x1}, 0x0) syz_usb_connect$uac1(0x1, 0x9c, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0) 1.395640558s ago: executing program 0 (id=1327): mount$cgroup(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x208800b, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) getsockopt$inet6_tcp_buf(r2, 0x6, 0x8, 0x0, &(0x7f0000001040)) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7e, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x35, 0x2, 0x2, 0xffffffff}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_clone(0x280100, &(0x7f0000000800)="9d271f27c8fcfa9af1deb458b5094f2bde6eb33a195e2af7f79e0c4fba57b183dca98a30c88244290b44078dd4ef9c91ad2acc3a141139ccb907e5b7d92f2b99546dbc580a092a65eee4992124b8a2c22a3525a3fa803ad2428a4d47645f8baabccc4ea37b58f77c210c7a7bf995aa56ca7c3de0c11e5b4f1c5238b712c4e0699f1efa211b11e9cd8cdb31c1f795afdc942ecfdb6b1663cdfa46050818db7f2ff91a2117da36206045f3111aa044216e7d33594b7b2e22cb61ab5644fe8f1236c216ec168ffa0837f64b6a9caf803d0694855d517835d724b11eac91f8d04fb8085aba9da366", 0xe6, &(0x7f0000000480), &(0x7f0000000900), &(0x7f0000000940)="d05d33df05546a5305") syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x0, 0x8000000, 0x2000, &(0x7f0000192000/0x2000)=nil}) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x20, 0x16, 0x4, "b90ea2ba"}, 0x0, 0x0, 0x0, 0x0}) 1.077768437s ago: executing program 1 (id=1328): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x30, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xff, {0x8, 0x6, "6bb28a", 0x6, 0x33, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}}}, 0x6a) getpid() futex(&(0x7f0000000180)=0x2, 0x5, 0x2, 0x0, &(0x7f00000001c0)=0x2, 0x6) setns(0xffffffffffffffff, 0x24020000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001b00), 0x22000, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000001b40)={0x5, 0x8}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000400)={{}, "3a7b57dae0a4b426adb4a7ca270f3f6a8d3c6dcf5a09cdbbba0028ec8bc7025b834a00a7c01172a1c988039fff24096e9357b05f9437308d484f6fba98997a8ae89981819596ac9ced6fcc734ea902e4a067d6a202628eb0ac8cb64be242f1793c0a378d3d92d600e5548268f6f03575404c2145786cdb8c1f91a8fe96e3b089085b278f143d69e2734298f56956a1bb7ea12f457f327e3129db9994fd1ab4d5d5c6760c2a968efb692caf109179b18448feb7d14eb7a1e68ecba2895746d6ddc70f1a0f66348d4791768abf3239fe32b75b7bcbf09dbbb5e869238af14c4f94891a69feaa2d228737282dfe9dab3f961014f621b015958a9fc436444fd7b58690986f868f6f6e9d2235a04046d37af2f7149c789ed015e17434be283410a0bec3aaa82dc71193eb3b7b3064548fb1539dbaaf4809cffa4fdd0a18a5dbd5546ba7b604120be396c02ccb801d057254b764991b04468206aab6bfcdf075af8c9973381cc80f81acb76b2413da9bddaf4fccd7b54a010ee4c50b1d78ea217761dffc898f9556dce41396c932ef2f42de6a81a850ad3afe2a39503d5d995a4bb159bbfc506a0365fa834b7d96e9c5c2d7b5425a29b18c0316e453c55da18d74494daf6705f6aedb5bb9d010305d7d8fb7afdc477ff4a9cdbb38aa302a5f3c08dd8479b0b2996af27bc82857b83908489f38d853f12e6e65d69f4bb90785228ad6de5240858636209a99b7933a2f5dd2b0d1531607da42089c3b68fc67fc1cf947b8fd6e68d002581533f8d9570555c4b613616a62d9b1903a842afa0f0b80471595fcb18b82f9c851a0d1662636efde352b8bce3c7f32a576f455c73a5450fbb98e32bb74fca8faa8b35e5d89f5ffb41919d5e10777d2dc3d67b894119fa29d393399cc7e755c74afad4e0ebd780e2be5f437ace823cc876a2d630683ca88a9cdc7030329e543e79b18a91db1ac425c2f51c0929e53cc9215a71001c9782bb63b13bf7ae766446304fc39d52d5492c3e98a9ad1ac7e6389687b4a790fc7412e19c00b03d6943213b02e7b422694b6dec45c26a9f631cbe823a5a4c2ebb553bc1d74ff4e5f1bc4fc6140cbfbc998ffd30f1fdd0a11d43ed70629655a1d927633af78e16d256d0fd0502db1f3bc9a351b2bff13793a586ebe0dfe9d1b644851a4583f2eca680d07d41771ad58f9acb6c0dd25a9f2d33c978e52f06407ab750ea564c5c4fa55cbefa1439829f6078128caeeb0a3ce3412ccbddc1ce71d86be05a072dcc47e0fcf8865c878e2e8f8652e53f1d6ee4814884556c38db866b4994d63968dab3bbff406624797f9e324893cdc6131611f076f674a9251d7760d265bcff6a389dc5aaed4794a81cc23dc6456da0507eb74c4e97428280f19b1c04fccf3a2e5132a66035b479dfe447c683e0a20989b685bb111935d4c006cd8dc80df67377f587613fa96c66c6e233aabb0772a7160ce2800ec1fdae1b405299c560c4821bf86e201bfb09991d73a96b79a212ee38cbf6162cf3aca08fa5edc53f8a213a0a4b0c613a44aea87365556556c90f1dd30931ff9d772de73632bb4dd1c378d9f30652e780a5c32280a849e370848bf76b7dbcbd497d48bdcab9591f2247a6f83eb1f0c9f376be2f1d5f63e22db83bcb3d3462658c05fc2eaf373f1f379ad43e8ee8779ca0e5197f695f4de9da377828f215be7bbf29a7d579d5e33387585f56b93edd51bb06a10fdf0af616b0dda75e9cc8491532d8b11e10215ddc27e028f0e9ed46aea205d24d6761ed72acf7ab2e8d992fc4d338ac6740005c847f1e8d7e79c9e9240f5f82e76f51e1d841fdd0fb9f711f7c9e08cac6d7c70ecb3d666b33e31dab68f445024d61a89337d2e1af6d2bb90336164491815db504a5df9c93aeeef9096f594e3eaf9833d85700ad76670c64da6f8df8c6e902bf8400ba929ae65dd7ff33bbdd4d31e3f5ef44ddcef47ad7c3a7702b7e2635c8e64a130ae3cf73758240138e46724b98d9f512c2740a66f976559640ef679e08ff15b877480dbfce29eaf335f957634974b6d9eaa3a8b6991e05bb5629da4885a9d9f54ac48dc48531bb0b3aa93dd16819466b5604073a60f6222e8e86d472ce50e352071ae4d52ad4a9360db935389c3ea0e43f0d2f465fce7e9f2307621b28fdcd3707732113f931551f15496d25d6de4295183ce490949bca502a83f8a804d6c2b43e0eed4b243d36ca69e5ad72d399f4d5009b16cbb29a59ea0046d7833f0cc4a834a21bcdbe5e5f737bcace6165a58b888671962d5574a41a789f230eb655c190550710ee6c83d61a18fa5f9ddb366a3f083d49b0e34067fe05b98b5872468fb4b59251006345f3b37b250733a97241c3c52dc1f84f7b986d073ae701f1769f24ace3be04b1f5d78feaff87daf36e546c718655e0c8f019887a63d08d95f4b2989d638d9bbcebf59651294c5ae0cf9d4a89c6bbf93231ff04887366f89ab12868a30cfc35fc51b025a54ca5f1c23243111a32e622198d4a354bf9e7d47fdb5de87f034bae2ed75b1f743c76db7a66d7a76e8fac2329a7bd0438bd2ed70bca11c9ed77939dcf71fd7556cb83d7b2fafd8391e55d7a137d4279a31af3bd9421661cc5398c00b8f9390bffd2943ef52c7f619fdfc0a966de2332ac28221e71c229faa703f01fe73e98b369fb868250983e138e35f2b05f8c007422e3b13754e9f197a573612cce8eb95c4307f6ed01157e629654ff7cc9667c0a080ca664f8ae18216058dca0e148dae1bb35ea8f45c9cdafc2135aba699c656588b1e88a8a776f1eff1c7cb3b8c833d555b7a5c4738539806781de555f646c2104775f05413ad2a82e494a317b82458d4b0acf0fd28fc3eaecad63e5ac41f801050cdabef0d7eaca5917f2a44c0480702ea36d215926a5489c27b9d4bc2482b1494e74fc85445c226bfc442154e4b2e7bd768e86e0422577cdf4a20483e1907c0c3b4e4228964cf49e76ca884ecca35032d8539ffc4505a529e47febcf27886c0361fdbd2cc25386e4c0e3b9dabbfd388c095e08fcb45742378b9494bba19eb33762938b69235c6c126b7126ed96466a59c05694c159bf0232cc3f13b72878b9a31a9b35f9d5cdb304b222bddb18e9f7d4d67e1c0a74369ea2f686322595534380de3490e5176a22a6e2f1c74e4fa67e5fd84fb3c0e4b6774c38cd5ff410b6399ed110280b0339ff22b892319b5327d7461bbaf877830e97c5f04189bd03ff5cb8321cc07661b460de9ab215eb73d1d3009cd7ce1d45446c50bef8bba4558cfae40f2103160bcf32ac19b376c0b1cad3da85a965bc129ee5f927e5866353f94b6b246f193808aad874ba2a9e56441735c8a23d10847bb757278498d41588f1ff5a1abcc36b5a3d84a875929eb32a470c987a4d68140469c20690e41d6187c035e5aad059c30e7e44b9db196406a926e58ebb3a567656a6fe517fd59494300ff9855d8deab63776743bcecce81cf034789c3759806269476d82c55b899c0e5b862ff6e4efde247edd9293167d60be48cd4f07509539132ae858a99341434eb3d952110fa49db28c6bfabd559bdebd7cf94195ce114d8965d05422356ba8175d3fe3fc80a3a68fa46ef092a132c287f5aa8292c1629a4411868439451bb240e96a84e92762458c643378cd62b183e83ae2b289c3a4885f9c26b48a7f12db3cd2df5b399aeaa09ebacd2f43596108b8d144463a2441a90bf39785d8afc6e05e451c4293612df86f36007f1a28d4e896091092b73c05fa0092c9ac625a5ec335eb804b1d66c2bc7036c5be4ac24902147f8dac7421c0abf8763c395bdfad55a7252320cd0d52ecc34b45751bf82451478042c1e8fd7a3fbbdc9068bbaa8c1f955c37da89e47642c5e02c2e767f36458936d79f7dffd1a43576b6593727c22f0f61802fd282c9b8958f4d53d9c080d799b91d99b8a5d0fe4cb4cf2829d11cc457671013dcdbb7e70b3c6a8276e01074821f220652088b17dd2e475586c4c6d825db7688b733a679f466c87975f0836b58cf3932d49ce8570c03b07c461d66d23a11d9b3c2a1dea7b24eceef56bc1a66030428eb1622027daf3680bd70cd16750805897662faaab36d7cd22237fe9b4ac22155a91a618e733cdb86cf77d5dd3a6590fd2fc3ba4211b9434ee35fd91b008e19c615f48322e54b562feda3d1259cfb5feab21b8d69d946c0eaf663fa35f16cdcedd55ddd81dea41a72da0df00dbd4336ea5d7eac68c46d407515fb4a5db656a1f4b227f1f88abc87f6cd1283e0ce15bf2c726fc7c2e0128a208172ab3e7b45f4e03b5a28f9106f93d0cd397e54b0e7834e7b27a36c0864c0f08de511ee1cf8cff3476d6d3e212e68cf2fee007c1ed0183f28eb41e6bf96bac0ea7bf4357510f31a8de95c6cb994eccf621cc733d22f32215a42793a9ad367fe6dc1e1fc144f33536f81d3ef581d82a2f114b26431c332f8156bb9d892220e27235eb39fae6ab2981c37c594eec4f3f10b7753a0dc242cb63ec08cb71ad7604444222959b575484376f3783291bde007c95272b457e36d74ffa0ef23b1a00885734704e9ee7e3fa614e65d3665ccee56c3a62ada8436792f71468bc5f104a4999cf2e2d8a3b663d9a18984a6796726ece7604a1d9391e6fd1228eabe68c17236418f6b85f54da36b90942073bb565ec37c612ff0d5907915bd48bd15bc6bb508fcc55dcfac412a55276891d327e50539bc287131836930aa8d3be3aff4115a9735af2455f555a7a7ad28bcf61c264d13f8124e1344d69112fd00a3150238e230a9329daedd9b3cdbd9f02367875f9280283eeeb6438b6f57303b39cafa84781519d13536f650e5395a1df6d1a5b06963bdf8158bc579e13b5f5fde3f89558d6d770c0abf09ab5d6f8adbb8d3b31e97dc9a51990b93c74f0c0628c22ff4e07ccf5e857ce8b75c0c488b21b35cc2e820c5f6306d79e1f3f7b6091f8100a3d2af008ec23165acb58c2239d2c4ff02cc8b641172c02d4e44b393ad6bdb966fbcb60a4cb08b5aabbd57fce1954bcff9cee16fda12b50881552855772dfdf9ba8c4155277697115db27e5e739ada8bb9d6de8f06fcd31b02e32b87d3d3c16630686a2b34f6862798256de2c27f347e6c7c0817a9c98ff27bb4722a1774eb9d189646ce869340b96939c6dc7d2609b3749619af6a17974e9650d9a7f37d6c2bdc585020754a2cfbbf037eb6b49d796af95343a7f32a4d44070e801e14abf4b668607153dfa23d8a9cb8946f24abbc97d46624ff7a3e4fecde3bccb7a2040643b72b1cf5ae8c4dbd4ad72abe8dea181a3d77836de410f9beabea5411b434fa557ec11f5414a9d00be4949c13fdceb47fd597d3ba87d2631d89c97bcaf2b689efd67310df964adc859296882a8715ae6d444fb47f6cbf64d34e092257add0c90d70024454b6eefca376b10b4d4bd46463c698d3150b42511b57d6d1ff94ff60cb906e707b81f9d576d176bccd11588a3add5745418b7f1429c97f12700bbd3dad3feeb259a7155f85301f1012be37f8a6f36759c32fb6941649e24f84252a4bc61f399f0664c7d7338fc0b6011095408410e1820c58f67ba064efadfbe2a84d6d7c43fa8947278042a9bea63d36d19210dca57479661db572613ddb917fc7b0cec0b6a6ce2217dd1d781b07a6b7c56b8da359bb35349d329138aa2e6ae9c7a512aeb58cad4f1947e00f9113ae3fbb06a015e824dd4c3a25a585d5dfeb63dc0e3dd563054ab682917cb8e738f6a6ab9a4cfe6e5fbb313f46705ce1929e535945935dc"}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000100000407d1e502d0000000000010902240001000000000904000005030002000921000033012205000905810300000c0007"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x7, {0x7, 0x7, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 853.92194ms ago: executing program 0 (id=1330): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x8b}], 0x2, 0x10001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x80402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) (async, rerun: 64) ppoll(&(0x7f0000000280)=[{r0, 0xc0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 566.688707ms ago: executing program 1 (id=1331): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f00000000c0)="5200bacf753c76fd6f74ab787ccc10ee5c345586d158aef3eae07e208811dcee264351ccd6b0d723e601410fec53c26a983f34e30e7efa202b6fc681855e2d34ef6a9a329e269e272703b63f7e088dd40d02514259efb7affa2f3b61f8d072e41ebe9c9606e864353298c4249e7733", 0xfde7}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 460.511163ms ago: executing program 1 (id=1332): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x29, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xc, 'S'}, @global=@item_012={0x2, 0x1, 0x5, '\x00\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8400, &(0x7f0000000240)={[{@nfs_export_off}, {@nfs_export_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@verity_off}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_auto}, {@index_off}, {@uuid_off}], [{@pcr={'pcr', 0x3d, 0x30}}, {@euid_lt={'euid<', r6}}]}) 12.26954ms ago: executing program 2 (id=1335): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00\x00', @ANYRESHEX]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001500e9990000000000000000fc010000000000000000000000000001ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000f500000000000000460100000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200, 0x2, 0xff, 0xe, 0x5, 0x7}, &(0x7f0000000040)=0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.23573ms ago: executing program 2 (id=1336): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) (async) fstatfs(r0, &(0x7f00000002c0)=""/112) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x8000000, 0x0, 0x0}, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) (async, rerun: 64) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x2, 0xb}, 0x18, 0x0) (rerun: 64) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) 647.97µs ago: executing program 2 (id=1337): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x1f, 0x0, 0x8) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0xb, &(0x7f0000000000)={0x200c, 0x3, 0x4}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r4, &(0x7f0000000740)=""/377, 0x179) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) r5 = accept4$unix(r1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7f, 0xfff4, 0x2}}}, {{@arp={@local, @local, 0x0, 0xff, 0x2, 0x10, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="38922c29806c", {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0xfff9, 0x1, 0x9, 0x40, 0x0, 'veth1_to_team\x00', 'veth1_to_bond\x00', {0xff}, {0x1fe}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4fc}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f00000002c0)='./file0\x00') recvfrom$unix(r5, &(0x7f0000000300)=""/278, 0x116, 0x22, 0x0, 0x0) 0s ago: executing program 2 (id=1338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060013"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) kernel console output (not intermixed with test programs): dm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.438272][ T2028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.447075][ T2028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.525717][ T1994] input: syz1 as /devices/virtual/input/input19 [ 99.533878][ T10] usb 3-1: USB disconnect, device number 54 [ 99.672058][ T1104] usb 1-1: USB disconnect, device number 51 [ 100.266244][ T2043] syzkaller1: entered promiscuous mode [ 100.271803][ T2043] syzkaller1: entered allmulticast mode [ 100.318148][ T1104] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 100.321932][ T36] audit: type=1400 audit(1770605410.316:448): avc: denied { setopt } for pid=2046 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.326716][ T2047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.353789][ T2047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.428236][ T31] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 100.498199][ T1104] usb 3-1: Using ep0 maxpacket: 32 [ 100.504593][ T1104] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.515553][ T1104] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.526462][ T1104] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.535653][ T1104] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 100.544032][ T1104] usb 3-1: Product: syz [ 100.548225][ T1104] usb 3-1: Manufacturer: syz [ 100.554754][ T1104] hub 3-1:4.0: USB hub found [ 100.589588][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.600664][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.611427][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.624472][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.633552][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.642403][ T31] usb 1-1: config 0 descriptor?? [ 100.755856][ T1104] hub 3-1:4.0: 2 ports detected [ 100.901121][ T2057] random: crng reseeded on system resumption [ 100.901138][ T36] audit: type=1400 audit(1770605410.896:449): avc: denied { write } for pid=2056 comm="syz.3.557" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.934188][ T36] audit: type=1400 audit(1770605410.926:450): avc: denied { ioctl } for pid=2056 comm="syz.3.557" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.053336][ T31] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 101.062539][ T31] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.851304][ T36] audit: type=1400 audit(1770605411.846:451): avc: denied { ioctl } for pid=2072 comm="syz.2.562" path="socket:[14291]" dev="sockfs" ino=14291 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.882358][ T36] audit: type=1400 audit(1770605411.856:452): avc: denied { name_bind } for pid=2074 comm="syz.2.563" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 101.910033][ T36] audit: type=1400 audit(1770605411.856:453): avc: denied { write } for pid=2074 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.956249][ T36] audit: type=1400 audit(1770605411.946:454): avc: denied { map } for pid=2081 comm="syz.2.566" path="socket:[14330]" dev="sockfs" ino=14330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 102.126280][ T2086] netlink: 228 bytes leftover after parsing attributes in process `syz.2.567'. [ 102.150115][ T2088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 102.232966][ T66] usb 3-1: USB disconnect, device number 55 [ 102.741838][ T2109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 102.839272][ T2114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.848773][ T2114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.208189][ T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 103.226491][ T2120] netlink: 11 bytes leftover after parsing attributes in process `syz.0.578'. [ 103.359381][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.377952][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.389647][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.402765][ T31] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 103.412109][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.416989][ T2132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=2132 comm=syz.1.581 [ 103.424301][ T31] usb 3-1: config 0 descriptor?? [ 103.488885][ T10] usb 1-1: USB disconnect, device number 52 [ 103.513556][ T36] audit: type=1400 audit(1770605413.506:455): avc: denied { mount } for pid=2138 comm="syz.3.583" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 103.538153][ T2139] overlayfs: failed to resolve './file2': -2 [ 103.763172][ T2147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.772682][ T2147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.862660][ T31] steelseries 0003:1038:12B6.0016: item fetching failed at offset 9/11 [ 103.871507][ T31] steelseries 0003:1038:12B6.0016: probe with driver steelseries failed with error -22 [ 104.382864][ T2161] netlink: 'syz.3.592': attribute type 27 has an invalid length. [ 104.424402][ T36] audit: type=1400 audit(1770605414.416:456): avc: denied { relabelfrom } for pid=2167 comm="syz.3.595" name="" dev="pipefs" ino=14954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 104.427988][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 104.459650][ T2168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.468327][ T2168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.653254][ T36] audit: type=1400 audit(1770605414.646:457): avc: denied { setattr } for pid=2171 comm="syz.0.597" name="/" dev="configfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.948198][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 105.062278][ T2182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.070923][ T2182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.098227][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 105.104629][ T31] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 105.112792][ T31] usb 1-1: config 0 has no interface number 0 [ 105.119004][ T31] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 105.130344][ T31] usb 1-1: config 0 interface 96 has no altsetting 0 [ 105.138473][ T31] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 105.147674][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.155842][ T31] usb 1-1: Product: syz [ 105.160075][ T31] usb 1-1: Manufacturer: syz [ 105.164660][ T31] usb 1-1: SerialNumber: syz [ 105.169977][ T31] usb 1-1: config 0 descriptor?? [ 105.380749][ T31] usb 1-1: USB disconnect, device number 53 [ 105.559409][ T2184] netlink: 'syz.1.602': attribute type 27 has an invalid length. [ 105.642685][ T2186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.651752][ T2186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.660942][ T2186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.669736][ T2186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.098940][ T66] usb 3-1: USB disconnect, device number 56 [ 106.201972][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.210590][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.438165][ T66] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 106.588171][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 106.596206][ T66] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 106.605386][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.613422][ T66] usb 3-1: Product: syz [ 106.617709][ T66] usb 3-1: Manufacturer: syz [ 106.622544][ T66] usb 3-1: SerialNumber: syz [ 106.627910][ T66] usb 3-1: config 0 descriptor?? [ 106.633914][ T66] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 106.773507][ T2228] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.787781][ T2228] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.788616][ T2229] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.803382][ T2228] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.816838][ T2229] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.830783][ T2228] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.858865][ T10] usb 3-1: USB disconnect, device number 57 [ 106.865805][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.865995][ T2231] netlink: 'syz.1.616': attribute type 28 has an invalid length. [ 106.881101][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.888667][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.896430][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.904001][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.911569][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.919525][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.926943][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.934466][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.942040][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.949668][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.957157][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.964624][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.972152][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.979658][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.987064][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 106.994520][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.001992][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.009400][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.017033][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.024486][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.032144][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.039777][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.047204][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.054643][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.062121][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.069754][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.077348][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.084918][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.092476][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.100160][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.107538][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.114999][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.122413][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.129974][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.137301][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.144673][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.152107][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.159613][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.166968][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.174393][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.181774][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.189282][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.196613][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.198161][ T1104] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 107.211774][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.219381][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.226750][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.234331][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.241747][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.249167][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.256535][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.263956][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.271339][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.278738][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.286091][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.293509][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.300875][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.308349][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.315676][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.323153][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.330533][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.337845][ T2228] overlay: filesystem on ./file1 not supported as upperdir [ 107.357322][ T36] audit: type=1400 audit(1770605417.346:458): avc: denied { wake_alarm } for pid=2247 comm="syz.3.623" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.368139][ T1104] usb 1-1: Using ep0 maxpacket: 16 [ 107.393346][ T1104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.404558][ T1104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.414370][ T1104] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.416205][ T2251] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.427294][ T1104] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.444564][ T1104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.457109][ T1104] usb 1-1: config 0 descriptor?? [ 107.558716][ T36] audit: type=1326 audit(1770605417.556:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2258 comm="syz.1.626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd9aeb9 code=0xffff0000 [ 107.585537][ T2261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.594345][ T2261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.603710][ T2261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.612783][ T2261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.628188][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 107.789017][ T10] usb 3-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 107.798237][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.807516][ T10] usb 3-1: config 0 descriptor?? [ 107.865544][ T1104] usbhid 1-1:0.0: can't add hid device: -71 [ 107.871704][ T1104] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.886105][ T1104] usb 1-1: USB disconnect, device number 54 [ 107.955041][ T36] audit: type=1400 audit(1770605417.946:460): avc: denied { read } for pid=2264 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.154415][ T2270] syzkaller0: entered promiscuous mode [ 108.160071][ T2270] syzkaller0: entered allmulticast mode [ 108.167176][ T2270] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=2270 comm=syz.3.630 [ 108.227556][ T10] thrustmaster 0003:044F:B651.0017: global environment stack underflow [ 108.236051][ T10] thrustmaster 0003:044F:B651.0017: item 0 4 1 11 parsing failed [ 108.244254][ T10] thrustmaster 0003:044F:B651.0017: parse failed [ 108.250944][ T10] thrustmaster 0003:044F:B651.0017: probe with driver thrustmaster failed with error -22 [ 108.301551][ T2274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.632'. [ 108.420137][ T10] usb 3-1: USB disconnect, device number 58 [ 108.960720][ T2286] netlink: 'syz.2.636': attribute type 4 has an invalid length. [ 108.968570][ T2286] netlink: 'syz.2.636': attribute type 5 has an invalid length. [ 108.976284][ T2286] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 109.038224][ T2290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.047002][ T2290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.125012][ T36] audit: type=1400 audit(1770605419.116:461): avc: denied { audit_control } for pid=2296 comm="syz.2.641" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 109.244512][ T2304] netlink: 'syz.0.643': attribute type 27 has an invalid length. [ 109.418205][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 109.528186][ T66] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 109.569998][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 109.579268][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.588841][ T10] usb 3-1: config 0 descriptor?? [ 109.595061][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 109.603616][ T10] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 109.657418][ T2315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.665994][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.666800][ T2315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.675410][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.699567][ T66] usb 1-1: config 1 has an invalid interface number: 253 but max is 1 [ 109.707999][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.718278][ T66] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 109.727397][ T66] usb 1-1: config 1 has no interface number 2 [ 109.733642][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.744761][ T66] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.757773][ T66] usb 1-1: config 1 interface 1 has no altsetting 0 [ 109.766251][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.775572][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.783735][ T66] usb 1-1: Product: syz [ 109.787935][ T66] usb 1-1: Manufacturer: syz [ 109.792596][ T66] usb 1-1: SerialNumber: syz [ 109.797706][ T10] usb 3-1: USB disconnect, device number 59 [ 109.806198][ T66] cdc_ncm 1-1:1.253: CDC Union missing and no IAD found [ 109.807295][ T10] ftdi_sio 3-1:0.0: device disconnected [ 109.816753][ T66] cdc_ncm 1-1:1.253: bind() failure [ 110.006397][ T66] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 110.016398][ T66] usb 1-1: USB disconnect, device number 55 [ 110.397584][ T2326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.406232][ T2326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.808192][ T10] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 110.959307][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 110.970359][ T10] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 110.979529][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.988352][ T10] usb 1-1: config 0 descriptor?? [ 110.993962][ T2333] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.098180][ T66] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 111.228191][ T66] usb 3-1: device descriptor read/64, error -71 [ 111.404086][ T10] a4tech 0003:09DA:001A.0018: hidraw0: USB HID vff.fb Device [HID 09da:001a] on usb-dummy_hcd.0-1/input0 [ 111.468188][ T66] usb 3-1: device descriptor read/64, error -71 [ 111.708191][ T66] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 111.838170][ T66] usb 3-1: device descriptor read/64, error -71 [ 112.078178][ T66] usb 3-1: device descriptor read/64, error -71 [ 112.188267][ T66] usb usb3-port1: attempt power cycle [ 112.528185][ T66] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 112.549333][ T66] usb 3-1: device descriptor read/8, error -71 [ 112.617800][ T2349] fuse: Unknown parameter 'Ɋڏ9>T ' [ 112.679357][ T66] usb 3-1: device descriptor read/8, error -71 [ 112.918184][ T66] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 112.939427][ T66] usb 3-1: device descriptor read/8, error -71 [ 113.069441][ T66] usb 3-1: device descriptor read/8, error -71 [ 113.178293][ T66] usb usb3-port1: unable to enumerate USB device [ 113.379292][ T2367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.387946][ T2367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.397126][ T2367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.405898][ T2367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.432080][ T36] audit: type=1400 audit(1770605652.429:462): avc: denied { read } for pid=2366 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.482850][ T36] audit: type=1400 audit(1770605652.479:463): avc: denied { setopt } for pid=2366 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.584591][ T330] usb 1-1: USB disconnect, device number 56 [ 113.690481][ T36] audit: type=1400 audit(1770605652.689:464): avc: denied { execute } for pid=2370 comm="syz.0.664" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.724707][ T2388] loop9: detected capacity change from 0 to 7 [ 114.731317][ T2388] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.739314][ T2388] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.747551][ T2388] loop9: unable to read partition table [ 114.753425][ T2388] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 114.753425][ T2388] ) failed (rc=-5) [ 114.768030][ T1728] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.776458][ T1728] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.784723][ T2388] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.793027][ T1728] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.801086][ T2388] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.809260][ T1728] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.817254][ T2388] loop9: unable to read partition table [ 114.817402][ T1728] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.078198][ T330] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 115.228156][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 115.234629][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.245938][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.255820][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.265029][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.274103][ T330] usb 3-1: config 0 descriptor?? [ 115.281820][ T330] hub 3-1:0.0: USB hub found [ 115.462873][ T2402] netlink: 108 bytes leftover after parsing attributes in process `syz.1.674'. [ 115.481954][ T330] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 115.499788][ T36] audit: type=1400 audit(1770605654.499:465): avc: denied { setattr } for pid=2409 comm="syz.1.676" name="RAWv6" dev="sockfs" ino=17507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.682328][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.691101][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.901852][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 115.907892][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 115.928474][ T330] usb 3-1: USB disconnect, device number 64 [ 116.546251][ T36] audit: type=1400 audit(1770605655.539:466): avc: denied { connect } for pid=2433 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.568229][ T66] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 116.607935][ T2437] fuse: Unknown parameter '' [ 116.718170][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 116.738199][ T45] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 116.848172][ T66] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 116.889358][ T45] usb 3-1: config 2 has an invalid interface number: 105 but max is 0 [ 116.897629][ T45] usb 3-1: config 2 has no interface number 0 [ 116.903810][ T45] usb 3-1: config 2 interface 105 has no altsetting 0 [ 116.911999][ T45] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 116.921391][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.929421][ T45] usb 3-1: Product: syz [ 116.933636][ T45] usb 3-1: Manufacturer: syz [ 116.938345][ T45] usb 3-1: SerialNumber: syz [ 116.998174][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 117.003638][ T66] usb usb1-port1: attempt power cycle [ 117.146004][ T45] usb 3-1: USB disconnect, device number 65 [ 117.348195][ T66] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 117.368655][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 117.508192][ T66] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 117.538554][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 117.544074][ T66] usb usb1-port1: unable to enumerate USB device [ 117.638550][ T2464] overlayfs: failed to resolve './file1': -2 [ 117.948166][ T66] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 118.098173][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 118.105916][ T66] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 118.115032][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.123070][ T66] usb 3-1: Product: syz [ 118.127234][ T66] usb 3-1: Manufacturer: syz [ 118.131875][ T66] usb 3-1: SerialNumber: syz [ 118.338207][ T36] audit: type=1400 audit(1770605657.329:467): avc: denied { append } for pid=2481 comm="syz.2.700" name="pfkey" dev="proc" ino=4026532541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 118.391671][ T2490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.400246][ T2490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.416212][ T66] usb_ehset_test 3-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 118.422035][ T2494] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 118.434213][ T2494] rust_binder: Write failure EINVAL in pid:314 [ 118.434288][ T66] usb 3-1: USB disconnect, device number 66 [ 118.501112][ T2497] cgroup: fork rejected by pids controller in /syz2 [ 118.565635][ T2632] overlayfs: missing 'lowerdir' [ 118.690139][ T2640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.707110][ T2640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.802517][ T2643] tipc: Failed to remove unknown binding: 66,1,1/0:2298970431/2298970433 [ 119.128204][ T330] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 119.267629][ T2652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.276814][ T2652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.279793][ T330] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.296938][ T330] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 119.308397][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.323126][ T330] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 119.335303][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.348213][ T330] usb 3-1: Product: syz [ 119.356191][ T330] usb 3-1: Manufacturer: syz [ 119.366746][ T330] usb 3-1: SerialNumber: syz [ 119.377400][ T330] usb 3-1: config 0 descriptor?? [ 119.599889][ T45] usb 3-1: USB disconnect, device number 67 [ 119.698163][ T66] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 119.848169][ T66] usb 1-1: Invalid ep0 maxpacket: 16 [ 119.978191][ T66] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 120.128169][ T66] usb 1-1: Invalid ep0 maxpacket: 16 [ 120.133751][ T66] usb usb1-port1: attempt power cycle [ 120.193159][ T36] audit: type=1400 audit(1770605659.189:468): avc: denied { map } for pid=2663 comm="syz.2.717" path="pipe:[1545]" dev="pipefs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 120.468200][ T45] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 120.488182][ T66] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 120.508538][ T66] usb 1-1: Invalid ep0 maxpacket: 16 [ 120.619248][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.630254][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.640072][ T66] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 120.647615][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.660584][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.669720][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.678431][ T45] usb 3-1: config 0 descriptor?? [ 120.684383][ T45] hub 3-1:0.0: USB hub found [ 120.689537][ T66] usb 1-1: Invalid ep0 maxpacket: 16 [ 120.694978][ T66] usb usb1-port1: unable to enumerate USB device [ 120.884623][ T45] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 121.058154][ T45] usb 3-1: reset high-speed USB device number 68 using dummy_hcd [ 121.066389][ T45] usb 3-1: device reset changed ep0 maxpacket size! [ 121.073313][ T45] usb 3-1: USB disconnect, device number 68 [ 121.368210][ T45] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 121.441838][ T2687] netlink: 'syz.1.726': attribute type 4 has an invalid length. [ 121.457250][ T2687] netlink: 'syz.1.726': attribute type 4 has an invalid length. [ 121.490120][ T36] audit: type=1400 audit(1770605660.489:469): avc: denied { create } for pid=2693 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.513185][ T2700] netlink: 'syz.1.730': attribute type 13 has an invalid length. [ 121.528163][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 121.534843][ T45] usb 3-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 121.547879][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.554538][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 121.563760][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.572379][ T45] usb 3-1: config 0 descriptor?? [ 121.981484][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 121.987494][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.996403][ T45] usb 3-1: USB disconnect, device number 69 [ 122.200218][ T2725] fuse: Unknown parameter '00000000000000000000003' [ 122.293764][ T2729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.302310][ T2729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.323253][ T2729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.332975][ T2729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.513358][ T36] audit: type=1400 audit(1770605661.509:470): avc: denied { append } for pid=2735 comm="syz.2.742" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.703863][ T2746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 122.970333][ T36] audit: type=1400 audit(1770605661.969:471): avc: denied { accept } for pid=2764 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 123.055854][ T2774] netlink: 104 bytes leftover after parsing attributes in process `syz.3.757'. [ 123.065697][ T2774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.074945][ T2774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.082823][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 123.160647][ T36] audit: type=1326 audit(1770605662.159:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2776 comm="syz.2.758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f8a16f94cd7 code=0x0 [ 123.239267][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 123.247799][ T10] usb 1-1: config 220 has an invalid descriptor of length 248, skipping remainder of the config [ 123.258531][ T10] usb 1-1: config 220 has no interface number 2 [ 123.265135][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 123.278386][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 123.285255][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 123.292212][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 123.300970][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 123.310296][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.318549][ T10] usb 1-1: Product: syz [ 123.322813][ T10] usb 1-1: Manufacturer: syz [ 123.327421][ T10] usb 1-1: SerialNumber: syz [ 123.537520][ T10] usb 1-1: selecting invalid altsetting 0 [ 123.544561][ T10] usb 1-1: selecting invalid altsetting 0 [ 123.550845][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 123.557468][ T10] usb 1-1: No valid video chain found. [ 123.567987][ T10] usb 1-1: USB disconnect, device number 65 [ 123.619281][ T2783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.628013][ T2783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.646452][ T2783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.655150][ T2783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.883603][ T36] audit: type=1400 audit(1770605662.879:473): avc: denied { nlmsg_write } for pid=2786 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 123.919579][ T2792] overlayfs: failed to clone lowerpath [ 124.073979][ T2811] overlay: filesystem on ./file0 not supported as upperdir [ 124.187529][ T2819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.196993][ T2819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.218578][ T45] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 124.348227][ T66] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 124.369774][ T45] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 124.380868][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.387506][ T45] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 124.396978][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.406052][ T45] usb 3-1: config 0 descriptor?? [ 124.412074][ T2802] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 124.453540][ T2821] netlink: 'syz.1.770': attribute type 27 has an invalid length. [ 124.462181][ T2821] overlayfs: failed to clone upperpath [ 124.499312][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.510689][ T66] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 124.520450][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.529891][ T66] usb 1-1: Product: syz [ 124.539023][ T66] usb 1-1: Manufacturer: syz [ 124.543792][ T66] usb 1-1: SerialNumber: syz [ 124.550000][ T66] usb 1-1: config 0 descriptor?? [ 124.757094][ T2815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.767315][ T2815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.781150][ T2815] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 124.790426][ T2815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2815 comm=syz.0.768 [ 124.820871][ T2829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.822929][ T45] samsung 0003:0419:0001.0019: unknown main item tag 0x0 [ 124.832554][ T2829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.837119][ T45] samsung 0003:0419:0001.0019: unknown main item tag 0x0 [ 124.851792][ T45] samsung 0003:0419:0001.0019: unknown main item tag 0x0 [ 124.859636][ T45] samsung 0003:0419:0001.0019: hidraw0: USB HID v0.02 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 125.026539][ T330] usb 3-1: USB disconnect, device number 70 [ 125.317161][ T2838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.325796][ T2838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.337717][ T2838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.346418][ T2838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.425070][ T36] audit: type=1326 audit(1770605664.419:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f948f39aeb9 code=0x0 [ 125.798202][ T45] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 125.884562][ T2854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.893271][ T2854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.901883][ T36] audit: type=1400 audit(1770605664.899:475): avc: denied { execute } for pid=2853 comm="syz.0.782" path="pipe:[19490]" dev="pipefs" ino=19490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 125.949335][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.959559][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.969390][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.978523][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.986535][ T45] usb 3-1: SerialNumber: syz [ 126.212420][ T2856] netlink: 25 bytes leftover after parsing attributes in process `syz.3.783'. [ 126.307635][ T2866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.316787][ T2866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.360492][ T36] audit: type=1400 audit(1770605665.359:476): avc: denied { create } for pid=2871 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 126.434021][ T36] audit: type=1400 audit(1770605665.429:477): avc: denied { read } for pid=2878 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.846242][ T2888] Invalid argument reading file caps for ./file0 [ 126.922977][ T36] audit: type=1400 audit(1770605665.919:478): avc: denied { read } for pid=2899 comm="syz.3.798" name="file2" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.028884][ T36] audit: type=1400 audit(1770605666.029:479): avc: denied { mounton } for pid=2899 comm="syz.3.798" path="/206/file2" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.064039][ T2905] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.800'. [ 127.073308][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 127.093044][ T2907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.101624][ T2907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.110041][ T2907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.118565][ T2907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.376409][ T2911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.385457][ T2911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.520742][ T2913] 9pnet_fd: Insufficient options for proto=fd [ 127.639381][ T36] audit: type=1400 audit(1770605666.639:480): avc: denied { create } for pid=2917 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.758691][ T2921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 127.768387][ T2921] IPv6: Can't replace route, no match found [ 127.774664][ T2921] SELinux: security_context_str_to_sid () failed with errno=-22 [ 127.810698][ T2928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.819363][ T2928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.906814][ T2931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.915470][ T2931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.393015][ T2938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.401811][ T2938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.443682][ T36] audit: type=1400 audit(1770605667.439:481): avc: denied { append } for pid=2939 comm="syz.0.812" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.619064][ T2948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.627808][ T2948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.744767][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.753428][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.954798][ T2954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.963449][ T2954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.102411][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 129.111479][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 129.488958][ T36] audit: type=1400 audit(1770605668.489:482): avc: denied { create } for pid=2967 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 129.567138][ T2973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.575808][ T2973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.584038][ T45] usb 3-1: 0:2 : does not exist [ 129.584666][ T2973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.597640][ T2973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.598474][ T2974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.614244][ T45] usb 3-1: unit 5: unexpected type 0x09 [ 129.621994][ T45] usb 3-1: USB disconnect, device number 71 [ 129.624108][ T2974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.636927][ T1728] udevd[1728]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 129.771375][ T2978] netlink: 'syz.2.824': attribute type 4 has an invalid length. [ 129.779189][ T2978] netlink: 17 bytes leftover after parsing attributes in process `syz.2.824'. [ 129.999640][ T2988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 130.164210][ T2990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.172926][ T2990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.714734][ T2996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.724354][ T2996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.134274][ T3004] netlink: 'syz.1.833': attribute type 16 has an invalid length. [ 131.142115][ T3004] netlink: 'syz.1.833': attribute type 4 has an invalid length. [ 131.150151][ T3004] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.833'. [ 131.162230][ T3004] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 131.171987][ T36] audit: type=1400 audit(1770605670.169:483): avc: denied { relabelto } for pid=3003 comm="syz.1.833" name="cgroup" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 131.199028][ T36] audit: type=1400 audit(1770605670.169:484): avc: denied { associate } for pid=3003 comm="syz.1.833" name="cgroup" dev="tmpfs" ino=1793 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 131.252163][ T36] audit: type=1400 audit(1770605670.239:485): avc: denied { accept } for pid=3005 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.264469][ T3008] netlink: 'syz.3.835': attribute type 4 has an invalid length. [ 131.279907][ T3008] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.835'. [ 131.290635][ T3008] netlink: 'syz.3.835': attribute type 29 has an invalid length. [ 131.298493][ T3008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 131.409150][ T3012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.417815][ T3012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.677480][ T36] audit: type=1400 audit(1770605670.669:486): avc: denied { unlink } for pid=290 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 131.725922][ T3016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.735142][ T3016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.755042][ T3021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.763997][ T3021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.991114][ T3028] overlayfs: missing 'lowerdir' [ 132.069374][ T3033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.077978][ T3033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.287814][ T36] audit: type=1400 audit(1770605671.279:487): avc: denied { mount } for pid=3037 comm="syz.0.846" name="/" dev="ramfs" ino=20064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.418799][ T3050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.427645][ T3050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.619263][ T3052] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 132.628823][ T3052] kvm: pic: level sensitive irq not supported [ 132.628889][ T3052] kvm: pic: non byte read [ 132.639849][ T3052] kvm: pic: level sensitive irq not supported [ 132.639910][ T3052] kvm: pic: non byte read [ 132.651061][ T3052] kvm: pic: level sensitive irq not supported [ 132.651145][ T3052] kvm: pic: non byte read [ 133.108156][ T330] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 133.181500][ T3072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.190129][ T3072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.199168][ T3072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.207867][ T3072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.259158][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 133.265665][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.276751][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.294817][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.310506][ T330] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 133.319824][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.336074][ T330] usb 3-1: config 0 descriptor?? [ 133.380062][ T36] audit: type=1400 audit(1770605672.379:488): avc: denied { create } for pid=3082 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.558604][ T330] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001A/input/input21 [ 133.580575][ T330] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001A/input/input22 [ 133.608212][ T330] kye 0003:0458:5011.001A: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 133.622821][ T330] usb 3-1: USB disconnect, device number 72 [ 133.641766][ T3096] fido_id[3096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 133.741666][ T3100] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 133.741954][ T3101] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 133.970999][ T3104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 134.084417][ T3107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.094908][ T36] audit: type=1400 audit(1770605673.099:489): avc: denied { accept } for pid=3103 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.096499][ T3107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.132486][ T3107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.142057][ T3107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.198142][ T330] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 134.213879][ T3112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.222486][ T3112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.348631][ T330] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 134.357685][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 134.365370][ T330] usb 3-1: can't read configurations, error -61 [ 134.498199][ T330] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 134.648621][ T330] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 134.657554][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 134.665546][ T330] usb 3-1: can't read configurations, error -61 [ 134.670713][ T3117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.672960][ T330] usb usb3-port1: attempt power cycle [ 134.681053][ T3117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.931442][ T3136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.940301][ T3136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.949225][ T36] audit: type=1400 audit(1770605673.949:490): avc: denied { nlmsg_read } for pid=3135 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 134.971037][ T3136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.979684][ T3136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.018173][ T330] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 135.039011][ T330] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 135.047829][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.055432][ T330] usb 3-1: can't read configurations, error -61 [ 135.188249][ T330] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 135.205000][ T3138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.208902][ T330] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 135.213645][ T3138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.223260][ T330] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.236651][ T330] usb 3-1: can't read configurations, error -61 [ 135.243117][ T330] usb usb3-port1: unable to enumerate USB device [ 135.506609][ T3140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.515217][ T3140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.542124][ T36] audit: type=1400 audit(1770605674.539:491): avc: denied { bind } for pid=3141 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.752161][ T3146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.761004][ T3146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.895869][ T36] audit: type=1400 audit(1770605674.889:492): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.043909][ T3153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.052629][ T3153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.279601][ T330] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 136.291413][ T3161] Unsupported ieee802154 address type: 0 [ 136.295628][ T36] audit: type=1400 audit(1770605675.289:493): avc: denied { ioctl } for pid=3160 comm="syz.0.889" path="socket:[20735]" dev="sockfs" ino=20735 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.322316][ T36] audit: type=1400 audit(1770605675.289:494): avc: denied { mounton } for pid=3162 comm="syz.1.890" path="/342/file0" dev="tmpfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.375182][ T36] audit: type=1400 audit(1770605675.369:495): avc: denied { create } for pid=3177 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.409162][ T3180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.417890][ T3180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.488189][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 136.494709][ T330] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 136.503115][ T330] usb 3-1: config 0 has no interface number 0 [ 136.509371][ T330] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 136.519504][ T330] usb 3-1: config 0 interface 196 has no altsetting 0 [ 136.528494][ T330] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 136.537636][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.545782][ T330] usb 3-1: Product: syz [ 136.549971][ T330] usb 3-1: Manufacturer: syz [ 136.554558][ T330] usb 3-1: SerialNumber: syz [ 136.559832][ T330] usb 3-1: config 0 descriptor?? [ 136.565064][ T3151] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.660229][ T3183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.668855][ T3183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.971621][ T3185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.980338][ T3185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.214870][ T3193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.223660][ T3193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.234354][ T36] audit: type=1400 audit(1770605676.229:496): avc: denied { associate } for pid=3192 comm="syz.3.901" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 137.753461][ T3196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.762418][ T3196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.772441][ T3196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.781195][ T3196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.789766][ T3196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.798384][ T3196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.038286][ T330] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 138.047614][ T330] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 138.386798][ T66] usb 3-1: USB disconnect, device number 77 [ 138.408993][ T66] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 139.318146][ T330] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 139.399258][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.407917][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.426870][ T3252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.435620][ T3252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.448168][ T330] usb 3-1: device descriptor read/64, error -71 [ 139.698159][ T330] usb 3-1: device descriptor read/64, error -71 [ 139.938181][ T330] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 139.972242][ T3258] fuse: Bad value for 'rootmode' [ 139.979834][ T36] audit: type=1400 audit(1770605678.979:497): avc: denied { execute } for pid=3257 comm="syz.0.914" path="/162/file0" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.010866][ T3262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.019602][ T3262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.039046][ T3263] IPv6: Can't replace route, no match found [ 140.078172][ T330] usb 3-1: device descriptor read/64, error -71 [ 140.112097][ T3266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.120702][ T3266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.318169][ T330] usb 3-1: device descriptor read/64, error -71 [ 140.428263][ T330] usb usb3-port1: attempt power cycle [ 140.537116][ T3271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.545942][ T3271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.768188][ T330] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 140.789344][ T330] usb 3-1: device descriptor read/8, error -71 [ 140.919354][ T330] usb 3-1: device descriptor read/8, error -71 [ 140.942487][ T36] audit: type=1400 audit(1770605679.939:498): avc: denied { getopt } for pid=3273 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.125942][ T3289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.135974][ T3289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.158145][ T330] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 141.179206][ T330] usb 3-1: device descriptor read/8, error -71 [ 141.309275][ T330] usb 3-1: device descriptor read/8, error -71 [ 141.418570][ T330] usb usb3-port1: unable to enumerate USB device [ 141.494264][ T36] audit: type=1400 audit(1770605680.489:499): avc: denied { connect } for pid=3290 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.795939][ T3304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 141.804205][ T3304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 141.815282][ T3304] ovl_remap_lower_ino: 34 callbacks suppressed [ 141.815297][ T3304] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 141.829895][ T3304] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 141.838173][ T3304] overlayfs: d_ino too big (170, ino=9223372036854776744, xinobits=3) [ 141.846699][ T3304] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 141.855557][ T3304] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 141.864497][ T3304] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 141.873036][ T3304] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 141.881974][ T3304] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 141.890641][ T3304] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 141.899028][ T3304] overlayfs: d_ino too big (instances, ino=4611686018427387995, xinobits=3) [ 141.922928][ T36] audit: type=1326 audit(1770605680.919:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3306 comm="syz.0.930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f546f99aeb9 code=0x0 [ 142.065429][ T3310] overlay: Unknown parameter 'uid' [ 142.090799][ T3317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 142.093347][ T36] audit: type=1400 audit(1770605681.089:501): avc: denied { getopt } for pid=3314 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.101981][ T3318] overlayfs: failed to clone upperpath [ 142.138059][ T3321] netlink: 120 bytes leftover after parsing attributes in process `syz.1.934'. [ 142.147142][ T3321] netlink: 96 bytes leftover after parsing attributes in process `syz.1.934'. [ 142.438186][ T66] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 142.588198][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 142.594734][ T66] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 142.603174][ T66] usb 3-1: config 0 has no interface number 0 [ 142.609398][ T66] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 142.620945][ T66] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 142.630122][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.638135][ T66] usb 3-1: Product: syz [ 142.642304][ T66] usb 3-1: Manufacturer: syz [ 142.646922][ T66] usb 3-1: SerialNumber: syz [ 142.652341][ T66] usb 3-1: config 0 descriptor?? [ 142.657683][ T3323] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.671828][ T3326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3326 comm=syz.1.936 [ 142.696192][ T3329] overlayfs: failed to clone upperpath [ 142.750850][ T3337] batadv_slave_0: entered promiscuous mode [ 142.761055][ T3336] batadv_slave_0: left promiscuous mode [ 142.780337][ T3341] sock: sock_timestamping_bind_phc: sock not bind to device [ 142.867333][ T3323] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.880095][ T3343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.888799][ T3343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.897466][ T3343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.906094][ T3343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.914698][ T3343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:509 [ 143.030343][ T3343] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 143.075935][ T36] audit: type=1400 audit(1770605682.069:502): avc: denied { read } for pid=3322 comm="syz.2.935" name="/" dev="configfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.098056][ T36] audit: type=1400 audit(1770605682.069:503): avc: denied { open } for pid=3322 comm="syz.2.935" path="/" dev="configfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.120442][ T36] audit: type=1326 audit(1770605682.119:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3265 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948f39aeb9 code=0x7fc00000 [ 143.143820][ T66] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 143.154030][ T66] asix 3-1:0.188: probe with driver asix failed with error -71 [ 143.162889][ T66] usb 3-1: USB disconnect, device number 82 [ 143.225602][ T3350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.234148][ T3350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.294294][ T3363] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.949'. [ 143.303551][ T3363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 143.313946][ T3363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.314837][ T36] audit: type=1400 audit(1770605682.319:505): avc: denied { read write } for pid=3362 comm="syz.3.949" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.324026][ T3363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.346887][ T36] audit: type=1400 audit(1770605682.319:506): avc: denied { open } for pid=3362 comm="syz.3.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.359702][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 143.377338][ T36] audit: type=1400 audit(1770605682.319:507): avc: denied { ioctl } for pid=3362 comm="syz.3.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.411017][ T384] tipc: Subscription rejected, illegal request [ 143.443435][ T36] audit: type=1400 audit(1770605682.439:508): avc: denied { execmem } for pid=3371 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.663700][ T384] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.166148][ T3409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.207553][ T3413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.222742][ T3413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.647202][ T3419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.655803][ T3419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.664785][ T3419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.673371][ T3419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.772397][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.781207][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.790935][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.799570][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.207382][ T3451] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 145.216699][ T3451] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 145.323743][ T3465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.333480][ T3465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.359102][ T3463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.367508][ T3462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.367673][ T3463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.376221][ T3462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.461383][ T3473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3473 comm=syz.3.988 [ 145.466333][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 145.728173][ T827] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.728182][ T1049] Bluetooth: hci0: command 0x1003 tx timeout [ 145.765581][ T3480] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.780130][ T3480] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.910261][ T3485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.919357][ T3485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.998145][ T330] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 146.034473][ T3487] netlink: 'syz.3.993': attribute type 27 has an invalid length. [ 146.046486][ T3487] sit0: left promiscuous mode [ 146.053077][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.060437][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.150470][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.161586][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 146.170963][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.187030][ T3490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.187071][ T330] usb 3-1: config 0 descriptor?? [ 146.195832][ T3490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.218908][ T3490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.228407][ T3490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.415220][ T3480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.425340][ T3481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.426155][ T3480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.438287][ T3481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.989378][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 146.989396][ T36] audit: type=1326 audit(1770605685.989:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.3.998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f948f39aeb9 code=0x0 [ 147.093423][ T3504] tipc: Started in network mode [ 147.098443][ T3504] tipc: Node identity 4a210c11b40b, cluster identity 9 [ 147.105519][ T3504] tipc: Enabled bearer , priority 0 [ 147.124569][ T3504] syzkaller0: entered promiscuous mode [ 147.130202][ T3504] syzkaller0: entered allmulticast mode [ 147.135933][ T3504] tipc: Resetting bearer [ 147.161971][ T3504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.170733][ T3504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.118151][ T45] tipc: Node number set to 4264168465 [ 148.128835][ T384] tipc: Resetting bearer [ 148.772136][ T36] audit: type=1326 audit(1770605687.769:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a16f9aeb9 code=0x7fc00000 [ 148.840403][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 148.851019][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.869088][ T330] usb 3-1: USB disconnect, device number 83 [ 149.208151][ T330] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 149.358147][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 149.364608][ T330] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 149.372887][ T330] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 149.381616][ T330] usb 3-1: config 3 has no interface number 0 [ 149.387718][ T330] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.400770][ T330] usb 3-1: config 3 interface 45 has no altsetting 0 [ 149.409108][ T330] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 149.418197][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.426191][ T330] usb 3-1: Product: syz [ 149.430366][ T330] usb 3-1: Manufacturer: syz [ 149.434961][ T330] usb 3-1: SerialNumber: syz [ 149.647241][ T330] usb 3-1: USB disconnect, device number 84 [ 149.729230][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.737792][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.021257][ T3502] tipc: Resetting bearer [ 150.033026][ T3502] tipc: Disabling bearer [ 150.120138][ T36] audit: type=1400 audit(1770605689.119:516): avc: denied { create } for pid=3531 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 150.165554][ T3535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1010'. [ 150.182014][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.191764][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.200166][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.209909][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.219686][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.228312][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.239434][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.247977][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.276334][ T3549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.284982][ T3549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.376535][ T3551] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1013'. [ 150.376557][ T36] audit: type=1400 audit(1770605689.369:517): avc: denied { nlmsg_read } for pid=3547 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.414547][ T3553] fuse: Unknown parameter 'e;;tDcu.%#1hA3͞`_-Xl|W|d b38jv~ߡE!u$6ڨ QA~sKo"1.uMU':j4Ty&7@k4' [ 150.458130][ T45] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 150.467700][ T36] audit: type=1400 audit(1770605689.459:518): avc: denied { shutdown } for pid=3547 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.598159][ T45] usb 3-1: device descriptor read/64, error -71 [ 150.823258][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.832139][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.840352][ T45] usb 3-1: device descriptor read/64, error -71 [ 150.847836][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.856658][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.034170][ T3559] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 151.043977][ T3559] overlayfs: failed to clone upperpath [ 151.078130][ T45] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 151.190757][ T3571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.199315][ T3571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.208274][ T45] usb 3-1: device descriptor read/64, error -71 [ 151.376501][ T3577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.386031][ T3577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.399165][ T3577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.408047][ T3577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.417854][ T36] audit: type=1400 audit(1770605690.409:519): avc: denied { watch } for pid=3576 comm="syz.3.1021" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 151.458213][ T45] usb 3-1: device descriptor read/64, error -71 [ 151.568298][ T45] usb usb3-port1: attempt power cycle [ 151.908141][ T45] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 151.929001][ T3581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.930235][ T45] usb 3-1: device descriptor read/8, error -71 [ 151.937997][ T3581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.955368][ T3581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.966099][ T3581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.005270][ T36] audit: type=1400 audit(1770605690.999:520): avc: denied { execmod } for pid=3589 comm="syz.3.1026" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.036214][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.044787][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.056576][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.065609][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.074494][ T45] usb 3-1: device descriptor read/8, error -71 [ 152.104112][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.113473][ T3602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.114228][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.122075][ T3602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.138806][ T36] audit: type=1400 audit(1770605691.139:521): avc: denied { remount } for pid=3600 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 152.318256][ T45] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 152.339465][ T45] usb 3-1: device descriptor read/8, error -71 [ 152.469299][ T45] usb 3-1: device descriptor read/8, error -71 [ 152.578295][ T45] usb usb3-port1: unable to enumerate USB device [ 152.604537][ T3615] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 152.643046][ T36] audit: type=1400 audit(1770605691.639:522): avc: denied { setopt } for pid=3619 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.678792][ T36] audit: type=1400 audit(1770605691.669:523): avc: denied { unmount } for pid=441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 152.905105][ T3626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.914165][ T3626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.461239][ T3638] bridge0: entered allmulticast mode [ 153.468499][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 153.477465][ T3638] bridge_slave_1: left allmulticast mode [ 153.485843][ T3638] bridge_slave_1: left promiscuous mode [ 153.491827][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.499598][ T3638] bridge_slave_0: left allmulticast mode [ 153.505434][ T3638] bridge_slave_0: left promiscuous mode [ 153.511330][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.523722][ T3638] bridge0 (unregistering): left allmulticast mode [ 153.627877][ T3641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.636483][ T3641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.648177][ T31] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 153.798170][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 153.803757][ T31] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 153.812435][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 153.820699][ T31] usb 3-1: config 0 has no interface number 0 [ 153.827009][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 153.837086][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 153.844730][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 153.853002][ T31] usb 3-1: config 0 has no interface number 0 [ 153.859130][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 153.869398][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 153.877045][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 153.885450][ T31] usb 3-1: config 0 has no interface number 0 [ 153.891614][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 153.901807][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 153.909429][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 153.917623][ T31] usb 3-1: config 0 has no interface number 0 [ 153.923784][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 153.933910][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 153.941401][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 153.949618][ T31] usb 3-1: config 0 has no interface number 0 [ 153.955804][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 153.965818][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 153.973423][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 153.981668][ T31] usb 3-1: config 0 has no interface number 0 [ 153.987749][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 153.997754][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 154.005332][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 154.013624][ T31] usb 3-1: config 0 has no interface number 0 [ 154.019721][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 154.029824][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 154.037279][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 154.045496][ T31] usb 3-1: config 0 has no interface number 0 [ 154.051655][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 154.061742][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 154.070141][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 154.079426][ T31] usb 3-1: New USB device strings: Mfr=248, Product=194, SerialNumber=112 [ 154.087972][ T31] usb 3-1: Product: syz [ 154.092180][ T31] usb 3-1: Manufacturer: syz [ 154.096786][ T31] usb 3-1: SerialNumber: syz [ 154.102043][ T31] usb 3-1: config 0 descriptor?? [ 154.107306][ T3636] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 154.173805][ T36] audit: type=1400 audit(1770605693.169:524): avc: denied { map } for pid=3644 comm="syz.3.1042" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.258456][ T3647] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 154.267740][ T36] audit: type=1400 audit(1770605693.259:525): avc: denied { getattr } for pid=3646 comm="syz.3.1044" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.290656][ T3647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 154.301463][ T3647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.309991][ T3647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.319908][ T3647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.328539][ T3647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.704483][ T3649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.713147][ T3649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.775643][ T3651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3651 comm=syz.2.1039 [ 154.870382][ T3656] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1046'. [ 155.163430][ T3669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.172187][ T3669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.181917][ T3669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.191544][ T3669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.425794][ T36] audit: type=1326 audit(1770605694.419:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948f39aeb9 code=0x7ffc0000 [ 155.431865][ T3674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.449891][ T36] audit: type=1326 audit(1770605694.419:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f948f35b78e code=0x7ffc0000 [ 155.458190][ T3674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.481775][ T36] audit: type=1326 audit(1770605694.419:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f948f39c1d7 code=0x7ffc0000 [ 155.513288][ T36] audit: type=1326 audit(1770605694.419:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f948f39aeb9 code=0x7ffc0000 [ 155.808425][ T3684] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.054462][ T3687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.063054][ T3687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.332180][ T31] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 156.338122][ T3689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 156.340273][ T31] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 156.360281][ T31] usb 3-1: USB disconnect, device number 89 [ 156.652303][ T3701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.660960][ T3701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.691819][ T3707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.700436][ T3707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.778200][ T31] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 156.929234][ T31] usb 3-1: descriptor type invalid, skip [ 156.935312][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 156.943942][ T31] usb 3-1: config 0 has no interfaces? [ 156.951096][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 156.960204][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.968236][ T31] usb 3-1: Product: syz [ 156.972419][ T31] usb 3-1: Manufacturer: syz [ 156.977008][ T31] usb 3-1: SerialNumber: syz [ 156.982732][ T31] usb 3-1: config 0 descriptor?? [ 157.189712][ T3694] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1060'. [ 157.199264][ T10] usb 3-1: USB disconnect, device number 90 [ 157.220320][ T3717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.228936][ T3717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.361153][ T3721] netlink: 'syz.3.1069': attribute type 6 has an invalid length. [ 157.738855][ T3732] binder: Bad value for 'defcontext' [ 157.760328][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 157.760346][ T36] audit: type=1400 audit(1770605696.749:601): avc: granted { setsecparam } for pid=3733 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 157.966584][ T3742] rust_binder: Write failure EFAULT in pid:584 [ 158.288384][ T31] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 158.353518][ T3756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.362976][ T3756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.373721][ T3760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.382362][ T3760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.391210][ T3760] netlink: 'syz.0.1084': attribute type 4 has an invalid length. [ 158.459381][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.474728][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 158.484140][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 158.492264][ T31] usb 3-1: Product: syz [ 158.496419][ T31] usb 3-1: Manufacturer: syz [ 158.501027][ T31] usb 3-1: SerialNumber: syz [ 158.708187][ T3752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.717051][ T3752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.726144][ T31] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 158.916167][ T3768] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 158.967204][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.975870][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.984722][ C0] usblp0: nonzero write bulk status received: -71 [ 158.984866][ T31] usb 3-1: USB disconnect, device number 91 [ 158.997721][ T31] usblp0: removed [ 159.121447][ T36] audit: type=1400 audit(1770605698.119:602): avc: denied { getopt } for pid=3781 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.171167][ T36] audit: type=1326 audit(1770605698.169:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.1.1093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bddd9aeb9 code=0x0 [ 159.223347][ T3789] netlink: 'syz.1.1093': attribute type 4 has an invalid length. [ 159.321927][ T36] audit: type=1400 audit(1770605698.319:604): avc: denied { write } for pid=3787 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.369327][ T36] audit: type=1400 audit(1770605698.369:605): avc: denied { execute_no_trans } for pid=3790 comm="syz.3.1095" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.520551][ T3797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.530270][ T3797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.768138][ T462] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 159.919239][ T462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.930224][ T462] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.939409][ T462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.948442][ T462] usb 3-1: config 0 descriptor?? [ 160.356529][ T462] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 160.366101][ T462] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input25 [ 160.437642][ T462] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 160.482424][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.491272][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.901659][ T36] audit: type=1400 audit(1770605699.899:606): avc: denied { setopt } for pid=3861 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.993024][ T36] audit: type=1400 audit(1770605699.989:607): avc: denied { ioctl } for pid=3863 comm="syz.3.1117" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 161.267989][ T462] usb 3-1: USB disconnect, device number 92 [ 161.602638][ T3886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.611255][ T3886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.658140][ T462] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 161.808158][ T462] usb 3-1: Using ep0 maxpacket: 16 [ 161.814692][ T462] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 161.825502][ T462] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.836429][ T462] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 161.849505][ T462] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.856117][ T462] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 161.865447][ T462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.874412][ T462] usb 3-1: config 0 descriptor?? [ 161.897516][ T3890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.906196][ T3890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.211092][ T3904] netlink: 'syz.1.1132': attribute type 27 has an invalid length. [ 162.285282][ T462] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 162.292268][ T462] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 162.302403][ T462] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 162.309208][ T462] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 162.315922][ T462] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 162.323530][ T462] lua 0003:1E7D:2C2E.001C: hidraw0: USB HID v0.0b Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 162.430028][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.438662][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.448990][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.457578][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.008568][ T3919] syz.0.1138 (3919): /proc/3918/oom_adj is deprecated, please use /proc/3918/oom_score_adj instead. [ 163.020589][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.029321][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.032994][ T3920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=3920 comm=syz.3.1135 [ 163.039225][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.058757][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.144271][ T3924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.152985][ T3925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.153847][ T3924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.161617][ T3925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.627442][ T3929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.635972][ T3929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.687251][ T36] audit: type=1400 audit(1770605702.685:608): avc: denied { create } for pid=3930 comm="syz.3.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 163.691758][ T3931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.715798][ T3931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.221992][ T3949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.230434][ T3950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.231322][ T3949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.239103][ T3950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.255111][ T3949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.263654][ T3949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.339800][ T31] usb 3-1: USB disconnect, device number 93 [ 164.564312][ T36] audit: type=1400 audit(1770605703.565:609): avc: denied { relabelfrom } for pid=3956 comm="syz.2.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 164.584515][ T36] audit: type=1400 audit(1770605703.565:610): avc: denied { relabelto } for pid=3956 comm="syz.2.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 164.660773][ T3961] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 164.670201][ T3961] kvm: pic: level sensitive irq not supported [ 164.670290][ T3961] kvm: pic: non byte read [ 164.681175][ T3961] kvm: pic: level sensitive irq not supported [ 164.681233][ T3961] kvm: pic: non byte read [ 164.692313][ T3961] kvm: pic: level sensitive irq not supported [ 164.692386][ T3961] kvm: pic: non byte read [ 164.703386][ T3961] kvm: pic: level sensitive irq not supported [ 164.703480][ T3961] kvm: pic: non byte read [ 164.881972][ T3976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.890684][ T3976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.958166][ T462] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 165.108132][ T462] usb 3-1: Using ep0 maxpacket: 16 [ 165.114769][ T462] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.123319][ T462] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.133507][ T462] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.144211][ T462] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.153352][ T462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.161391][ T462] usb 3-1: Product: syz [ 165.165564][ T462] usb 3-1: Manufacturer: syz [ 165.170279][ T462] usb 3-1: SerialNumber: syz [ 165.296780][ T3983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 165.382860][ T462] usb 3-1: 0:2 : does not exist [ 165.387925][ T462] usb 3-1: unit 0 not found! [ 165.395254][ T462] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 165.408797][ T462] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 165.420746][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.429612][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.432480][ T462] usb 3-1: USB disconnect, device number 94 [ 165.438993][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.450794][ T1728] udevd[1728]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 165.452327][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.483741][ T3988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3988 comm=syz.3.1162 [ 166.083816][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.097363][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.110578][ T36] audit: type=1400 audit(1770605705.115:611): avc: denied { map } for pid=4007 comm="syz.3.1169" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 166.118956][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.147018][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.156889][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.169627][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.179653][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.188991][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.198307][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 166.226290][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.235030][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.568167][ T31] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 166.659886][ T4038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.668509][ T4038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.719473][ T31] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 166.727655][ T31] usb 3-1: config 0 has no interface number 0 [ 166.734010][ T31] usb 3-1: config 0 interface 41 has no altsetting 0 [ 166.742394][ T31] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 166.751668][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.760146][ T31] usb 3-1: Product: syz [ 166.767444][ T31] usb 3-1: Manufacturer: syz [ 166.772453][ T31] usb 3-1: SerialNumber: syz [ 166.777896][ T31] usb 3-1: config 0 descriptor?? [ 166.781085][ T4045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.791584][ T4045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.248897][ T36] audit: type=1400 audit(1770605706.255:612): avc: denied { write } for pid=4052 comm="syz.0.1184" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.250171][ T4053] fuse: Unknown parameter 'fdqZba6 (U0x0000000000000009' [ 167.270876][ T36] audit: type=1400 audit(1770605706.255:613): avc: denied { remove_name } for pid=4052 comm="syz.0.1184" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.304562][ T36] audit: type=1400 audit(1770605706.255:614): avc: denied { unlink } for pid=4052 comm="syz.0.1184" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.343956][ T4061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.347040][ T4062] x_tables: duplicate entry at hook 1 [ 167.352578][ T4061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.394285][ T31] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 167.403922][ T31] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 167.417115][ T31] usb 3-1: USB disconnect, device number 95 [ 168.016801][ T4093] overlayfs: conflicting options: nfs_export=on,index=off [ 168.035046][ T4096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.043726][ T4096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.044392][ T4097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.060094][ T4097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.168132][ T31] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 168.263136][ T4099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.271847][ T4099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.318139][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 168.324606][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.331499][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 168.340704][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.349635][ T31] usb 3-1: config 0 descriptor?? [ 168.588032][ T4101] overlayfs: missing 'lowerdir' [ 168.606915][ T4105] FAT-fs (rnullb0): bogus number of reserved sectors [ 168.613819][ T4105] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 168.632000][ T4109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.640627][ T4109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.758164][ T31] hid (null): nested delimiters [ 168.793945][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.803058][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.812555][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.821129][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.020915][ T462] usb 3-1: USB disconnect, device number 96 [ 169.160762][ T4113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.170597][ T4113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.338345][ T4124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.346953][ T4124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.361320][ T4125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.370149][ T4125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.532843][ T4128] overlayfs: conflicting lowerdir path [ 169.539732][ T4128] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 169.967553][ T4215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.976152][ T4215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.008163][ T462] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 170.170033][ T462] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.183071][ T462] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.193734][ T462] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 170.203171][ T462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.211600][ T462] usb 3-1: SerialNumber: syz [ 170.220588][ T462] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 170.229116][ T462] usb-storage 3-1:1.0: USB Mass Storage device detected [ 170.238383][ T462] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 170.246574][ T462] scsi host1: usb-storage 3-1:1.0 [ 170.358648][ T4233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.367172][ T4233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.396051][ T4231] overlay: ./file0 is not a directory [ 170.420966][ T4206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.429727][ T4206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.454174][ T4231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.462858][ T4231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.792727][ T462] usb 3-1: USB disconnect, device number 97 [ 170.902659][ T36] audit: type=1400 audit(1770605709.905:615): avc: denied { read } for pid=4242 comm="syz.3.1224" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.926319][ T36] audit: type=1400 audit(1770605709.905:616): avc: denied { open } for pid=4242 comm="syz.3.1224" path="/354/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.981807][ T4248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.990451][ T4248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.039679][ T4258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.048754][ T4258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.145597][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.148155][ T462] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 171.155378][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.173100][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.181693][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.308148][ T462] usb 3-1: Using ep0 maxpacket: 16 [ 171.314586][ T462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.325575][ T462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.335356][ T462] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 171.344469][ T462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.353016][ T462] usb 3-1: config 0 descriptor?? [ 171.575692][ T4276] fuse: Bad value for 'fd' [ 171.756412][ T4288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.767279][ T4239] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 171.767934][ T4288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.776370][ T4239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.785667][ T36] audit: type=1400 audit(1770605710.785:617): avc: denied { map } for pid=4287 comm="syz.0.1239" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 171.794265][ T4239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.830445][ T462] usbhid 3-1:0.0: can't add hid device: -71 [ 171.836519][ T462] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.848224][ T462] usb 3-1: USB disconnect, device number 98 [ 171.849641][ T36] audit: type=1400 audit(1770605710.855:618): avc: denied { validate_trans } for pid=4297 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 171.880585][ T4300] netlink: 'syz.2.1242': attribute type 4 has an invalid length. [ 171.969120][ T4303] netlink: 'syz.2.1243': attribute type 27 has an invalid length. [ 171.978642][ T4303] z00X: left allmulticast mode [ 172.040156][ T4309] netlink: 'syz.1.1245': attribute type 32 has an invalid length. [ 172.048510][ T46] ip6_tunnel:  xmit: Local address not yet configured! [ 172.055691][ T46] ip6_tunnel:  xmit: Local address not yet configured! [ 172.078215][ T10] ip6_tunnel:  xmit: Local address not yet configured! [ 172.341106][ T4330] __nla_validate_parse: 57 callbacks suppressed [ 172.341121][ T4330] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1252'. [ 172.398410][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 172.523577][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.525451][ T4341] fuse: Bad value for 'user_id' [ 172.532370][ T4342] fuse: Bad value for 'user_id' [ 172.537135][ T10] usb 3-1: device descriptor read/64, error -71 [ 172.542256][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.549813][ T4341] fuse: Bad value for 'user_id' [ 172.557117][ T4342] fuse: Bad value for 'user_id' [ 172.650362][ T4344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1257'. [ 172.688627][ T462] ip6_tunnel:  xmit: Local address not yet configured! [ 172.726657][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.735107][ T4353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.735590][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.744169][ T4353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.767873][ T4358] netlink: 85 bytes leftover after parsing attributes in process `syz.0.1261'. [ 172.798208][ T10] usb 3-1: device descriptor read/64, error -71 [ 172.928596][ T462] ip6_tunnel:  xmit: Local address not yet configured! [ 172.944721][ T36] audit: type=1400 audit(1770605711.945:619): avc: denied { map } for pid=4357 comm="syz.0.1261" path="socket:[27623]" dev="sockfs" ino=27623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.040014][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 173.075132][ T4365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1262'. [ 173.095295][ T4368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.103918][ T4368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.178176][ T10] usb 3-1: device descriptor read/64, error -71 [ 173.418151][ T10] usb 3-1: device descriptor read/64, error -71 [ 173.528254][ T10] usb usb3-port1: attempt power cycle [ 173.627818][ T4375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.636403][ T4375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.645640][ T4375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.654747][ T4375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.825696][ T4387] __vm_enough_memory: pid: 4387, comm: syz.0.1271, bytes: 18014402804453376 not enough memory for the allocation [ 173.868339][ T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 173.889554][ T10] usb 3-1: device descriptor read/8, error -71 [ 173.909405][ T4396] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 173.919499][ T36] audit: type=1400 audit(1770605712.925:620): avc: denied { relabelto } for pid=4395 comm="syz.1.1275" name="rnullb0" dev="tmpfs" ino=2013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 173.945790][ T36] audit: type=1400 audit(1770605712.925:621): avc: denied { associate } for pid=4395 comm="syz.1.1275" name="rnullb0" dev="tmpfs" ino=2013 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 174.007424][ T36] audit: type=1400 audit(1770605713.005:622): avc: denied { sys_module } for pid=4406 comm="syz.1.1278" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 174.019212][ T10] usb 3-1: device descriptor read/8, error -71 [ 174.278136][ T10] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 174.299428][ T10] usb 3-1: device descriptor read/8, error -71 [ 174.339709][ T36] audit: type=1400 audit(1770605713.345:623): avc: denied { create } for pid=4419 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.398751][ T4426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.407470][ T4426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.429270][ T10] usb 3-1: device descriptor read/8, error -71 [ 174.467240][ T4428] netlink: 1323 bytes leftover after parsing attributes in process `syz.1.1282'. [ 174.538208][ T10] usb usb3-port1: unable to enumerate USB device [ 174.780924][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.789571][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.805164][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.813864][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.971410][ T4435] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 175.008776][ T36] audit: type=1400 audit(1770605714.015:624): avc: denied { setattr } for pid=4434 comm="syz.3.1287" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 175.185901][ T4458] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.215489][ T4460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.224332][ T4460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.385194][ T4481] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.394078][ T4481] overlayfs: missing 'lowerdir' [ 175.438955][ T4490] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 175.446394][ T4490] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.514757][ T4497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.523518][ T4497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.547651][ T4497] kvm: kvm [4496]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xfffffffffffffff9 [ 175.563230][ T4497] sit0: entered promiscuous mode [ 175.570680][ T4497] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 175.578628][ T4497] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1308'. [ 175.588729][ T4497] netlink: 'syz.0.1308': attribute type 4 has an invalid length. [ 175.596529][ T4497] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1308'. [ 175.914133][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 175.914154][ T36] audit: type=1400 audit(1770605714.915:629): avc: denied { write } for pid=4509 comm="syz.2.1313" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.189213][ T4513] fuse: Bad value for 'group_id' [ 176.194280][ T4513] fuse: Bad value for 'group_id' [ 176.209976][ T4515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.218517][ T4515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.228254][ T31] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 176.288198][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 176.323303][ T36] audit: type=1326 audit(1770605715.325:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.1.1318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bddd9aeb9 code=0x0 [ 176.388118][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 176.394613][ T31] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 176.403090][ T31] usb 3-1: config 0 has no interface number 0 [ 176.411065][ T31] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=fe.d1 [ 176.420387][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.429372][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.437804][ T31] usb 3-1: Product: syz [ 176.442570][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.450652][ T31] usb 3-1: Manufacturer: syz [ 176.455300][ T31] usb 3-1: SerialNumber: syz [ 176.461098][ T31] usb 3-1: config 0 descriptor?? [ 176.467136][ T31] usb_ehset_test 3-1:0.16: probe with driver usb_ehset_test failed with error -32 [ 176.667879][ T4511] x_tables: unsorted underflow at hook 3 [ 176.674371][ T31] usb 3-1: USB disconnect, device number 103 [ 176.737843][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.746426][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.247581][ T36] audit: type=1400 audit(1770605716.245:631): avc: denied { read } for pid=4550 comm="syz.2.1329" path="socket:[28374]" dev="sockfs" ino=28374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.631109][ T4561] veth0_to_team: entered promiscuous mode [ 178.102854][ T36] audit: type=1400 audit(1770605717.105:632): avc: denied { rmdir } for pid=4578 comm="syz.2.1337" name="file0" dev="incremental-fs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.129208][ T291] ------------[ cut here ]------------ [ 178.134725][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 178.143182][ T291] Modules linked in: [ 178.143557][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.147112][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 178.156150][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.167126][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.184943][ T291] RIP: 0010:drop_nlink+0xce/0x110 [ 178.190055][ T291] Code: 04 00 00 be 08 00 00 00 e8 bf 25 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 57 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 178.209742][ T291] RSP: 0018:ffffc9000118fc60 EFLAGS: 00010293 [ 178.215830][ T291] RAX: ffffffff81f145be RBX: ffff88811b7f9a78 RCX: ffff88810aefa600 [ 178.223830][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.231978][ T291] RBP: ffffc9000118fc88 R08: 0000000000000003 R09: 0000000000000004 [ 178.240002][ T291] R10: dffffc0000000000 R11: fffff52000231f7c R12: dffffc0000000000 [ 178.248004][ T291] R13: 1ffff110236ff358 R14: ffff88811b7f9ac0 R15: 0000000000000000 [ 178.256003][ T291] FS: 000055555c171500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 178.265254][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.271888][ T291] CR2: 000055555c194948 CR3: 000000012b09a000 CR4: 00000000003526b0 [ 178.279906][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.287975][ T291] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 178.296087][ T291] Call Trace: [ 178.299403][ T291] [ 178.302470][ T291] shmem_rmdir+0x5f/0x90 [ 178.306711][ T291] vfs_rmdir+0x3e3/0x560 [ 178.310988][ T291] incfs_kill_sb+0x109/0x230 [ 178.315596][ T291] deactivate_locked_super+0xd5/0x2a0 [ 178.321028][ T291] deactivate_super+0xb8/0xe0 [ 178.325905][ T291] cleanup_mnt+0x406/0x4a0 [ 178.330459][ T291] __cleanup_mnt+0x1d/0x40 [ 178.334892][ T291] task_work_run+0x1e5/0x260 [ 178.339529][ T291] ? __cfi_task_work_run+0x10/0x10 [ 178.344660][ T291] ? __x64_sys_umount+0x12e/0x180 [ 178.349735][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 178.355124][ T291] ? __kasan_check_read+0x15/0x20 [ 178.360267][ T291] resume_user_mode_work+0x35/0x50 [ 178.365395][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 178.370882][ T291] do_syscall_64+0x63/0xf0 [ 178.375403][ T291] ? clear_bhb_loop+0x50/0xa0 [ 178.380112][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 178.386028][ T291] RIP: 0033:0x7f8a16f9c117 [ 178.390559][ T291] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 178.410219][ T291] RSP: 002b:00007fff274da998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.418672][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8a16f9c117 [ 178.426680][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff274daa50 [ 178.434726][ T291] RBP: 00007fff274daa50 R08: 00007fff274dba50 R09: 00000000ffffffff [ 178.442823][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff274dbae0 [ 178.450829][ T291] R13: 00007f8a1700471f R14: 000000000002b7a1 R15: 00007fff274dbb20 [ 178.458953][ T291] [ 178.461973][ T291] ---[ end trace 0000000000000000 ]--- [ 178.467586][ T291] ================================================================== [ 178.475657][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 178.481908][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291 [ 178.489876][ T291] [ 178.492197][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 178.492220][ T291] Tainted: [W]=WARN [ 178.492225][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.492232][ T291] Call Trace: [ 178.492238][ T291] [ 178.492244][ T291] __dump_stack+0x21/0x30 [ 178.492262][ T291] dump_stack_lvl+0x140/0x1c0 [ 178.492276][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 178.492291][ T291] print_report+0x3d/0x70 [ 178.492304][ T291] kasan_report+0x162/0x1a0 [ 178.492321][ T291] ? ihold+0x24/0x70 [ 178.492336][ T291] ? _raw_spin_unlock+0x45/0x60 [ 178.492352][ T291] ? ihold+0x24/0x70 [ 178.492366][ T291] kasan_check_range+0x25a/0x2b0 [ 178.492383][ T291] __kasan_check_write+0x18/0x20 [ 178.492396][ T291] ihold+0x24/0x70 [ 178.492410][ T291] vfs_rmdir+0x26a/0x560 [ 178.492422][ T291] incfs_kill_sb+0x109/0x230 [ 178.492442][ T291] deactivate_locked_super+0xd5/0x2a0 [ 178.492454][ T291] deactivate_super+0xb8/0xe0 [ 178.492465][ T291] cleanup_mnt+0x406/0x4a0 [ 178.492480][ T291] __cleanup_mnt+0x1d/0x40 [ 178.492495][ T291] task_work_run+0x1e5/0x260 [ 178.492508][ T291] ? __cfi_task_work_run+0x10/0x10 [ 178.492520][ T291] ? __x64_sys_umount+0x12e/0x180 [ 178.492533][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 178.492545][ T291] ? __kasan_check_read+0x15/0x20 [ 178.492558][ T291] resume_user_mode_work+0x35/0x50 [ 178.492573][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 178.492587][ T291] do_syscall_64+0x63/0xf0 [ 178.492602][ T291] ? clear_bhb_loop+0x50/0xa0 [ 178.492618][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 178.492633][ T291] RIP: 0033:0x7f8a16f9c117 [ 178.492644][ T291] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 178.492655][ T291] RSP: 002b:00007fff274da998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.492670][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8a16f9c117 [ 178.492678][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff274daa50 [ 178.492687][ T291] RBP: 00007fff274daa50 R08: 00007fff274dba50 R09: 00000000ffffffff [ 178.492698][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff274dbae0 [ 178.492706][ T291] R13: 00007f8a1700471f R14: 000000000002b7a1 R15: 00007fff274dbb20 [ 178.492716][ T291] [ 178.492721][ T291] ================================================================== [ 178.738100][ T291] Disabling lock debugging due to kernel taint [ 178.744463][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 178.748678][ T36] audit: type=1400 audit(1770605717.745:633): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 178.752277][ T291] #PF: supervisor write access in kernel mode [ 178.752292][ T291] #PF: error_code(0x0002) - not-present page [ 178.752304][ T291] PGD 800000010cb12067 [ 178.774444][ T36] audit: type=1400 audit(1770605717.745:634): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.780054][ T291] P4D 800000010cb12067 PUD 0 [ 178.780079][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 178.780102][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 178.786403][ T36] audit: type=1400 audit(1770605717.745:635): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.790215][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN [ 178.790226][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.790238][ T291] RIP: 0010:ihold+0x2a/0x70 [ 178.811817][ T36] audit: type=1400 audit(1770605717.745:636): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.816156][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 3d 4e 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 7c 1c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 4d [ 178.816178][ T291] RSP: 0018:ffffc9000118fca0 EFLAGS: 00010246 [ 178.822512][ T36] audit: type=1400 audit(1770605717.745:637): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.835322][ T291] [ 178.835332][ T291] RAX: ffff88810aefa600 RBX: 0000000000000000 RCX: ffff88810aefa600 [ 178.835348][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.835361][ T291] RBP: ffffc9000118fcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 178.857164][ T36] audit: type=1400 audit(1770605717.745:638): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.861745][ T291] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff88811b7f9a84 [ 178.861767][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 178.861781][ T291] FS: 000055555c171500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 178.861800][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.023535][ T291] CR2: 0000000000000168 CR3: 000000012b09a000 CR4: 00000000003526b0 [ 179.031613][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.039708][ T291] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 179.047947][ T291] Call Trace: [ 179.051246][ T291] [ 179.054263][ T291] vfs_rmdir+0x26a/0x560 [ 179.058511][ T291] incfs_kill_sb+0x109/0x230 [ 179.063111][ T291] deactivate_locked_super+0xd5/0x2a0 [ 179.068485][ T291] deactivate_super+0xb8/0xe0 [ 179.073163][ T291] cleanup_mnt+0x406/0x4a0 [ 179.077715][ T291] __cleanup_mnt+0x1d/0x40 [ 179.082349][ T291] task_work_run+0x1e5/0x260 [ 179.087038][ T291] ? __cfi_task_work_run+0x10/0x10 [ 179.092244][ T291] ? __x64_sys_umount+0x12e/0x180 [ 179.097368][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 179.102770][ T291] ? __kasan_check_read+0x15/0x20 [ 179.107823][ T291] resume_user_mode_work+0x35/0x50 [ 179.112956][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 179.118480][ T291] do_syscall_64+0x63/0xf0 [ 179.122893][ T291] ? clear_bhb_loop+0x50/0xa0 [ 179.127567][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 179.133453][ T291] RIP: 0033:0x7f8a16f9c117 [ 179.137860][ T291] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.157543][ T291] RSP: 002b:00007fff274da998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.166047][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8a16f9c117 [ 179.174024][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff274daa50 [ 179.182193][ T291] RBP: 00007fff274daa50 R08: 00007fff274dba50 R09: 00000000ffffffff [ 179.190247][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff274dbae0 [ 179.198208][ T291] R13: 00007f8a1700471f R14: 000000000002b7a1 R15: 00007fff274dbb20 [ 179.206172][ T291] [ 179.209272][ T291] Modules linked in: [ 179.213155][ T291] CR2: 0000000000000168 [ 179.217652][ T291] ---[ end trace 0000000000000000 ]--- [ 179.223102][ T291] RIP: 0010:ihold+0x2a/0x70 [ 179.227603][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 3d 4e 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 7c 1c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 4d [ 179.247205][ T291] RSP: 0018:ffffc9000118fca0 EFLAGS: 00010246 [ 179.253266][ T291] RAX: ffff88810aefa600 RBX: 0000000000000000 RCX: ffff88810aefa600 [ 179.261233][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.269213][ T291] RBP: ffffc9000118fcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 179.277190][ T291] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff88811b7f9a84 [ 179.285176][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 179.293165][ T291] FS: 000055555c171500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 179.302132][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.308709][ T291] CR2: 0000000000000168 CR3: 000000012b09a000 CR4: 00000000003526b0 [ 179.316679][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.324735][ T291] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 179.332801][ T291] Kernel panic - not syncing: Fatal exception [ 179.339114][ T291] Kernel Offset: disabled [ 179.343458][ T291] Rebooting in 86400 seconds..