last executing test programs: 22.708766525s ago: executing program 0 (id=82): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e22, 0x8000, 0x4e24, 0x3, 0xa, 0x20, 0x20, 0x33}, {0x80000000, 0x7, 0x8, 0x5, 0xd50, 0x81, 0x2, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x3, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000029c0)={@ptr={0x77622a85, 0x1, 0x0, 0x0, 0x1, 0x3c}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x4, 0xb}, @fda={0x66646185, 0x7, 0x2, 0x1b}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x400}], 0xd, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 22.652112717s ago: executing program 0 (id=83): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001e000000200000000000000000000000000000004800000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = eventfd2(0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f00000001c0)) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fedbdf25030000f66f250008000800ac141419080006007f00000114000900ff0200000000000000000000000000f303000500"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x201, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000200)={0x5, 0x5, 0xffffffffffffffff, 0x4, 0x0, 0x800}) r9 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r10, 0x540a, 0x2) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r11, &(0x7f0000000080)={0x1e, @long={0x3, 0x1}}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001300000325bd7000fbdbdf25ffffffff000000000000000000000000000000000000000000ffffe00000024e2300034e2400050200a08004000000", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000100000000000000010400000000000001000000000000000300000000000000000000000000fefffffffff7ffff090000000000000003000000000000000700000000000000e70b000000000000090000000000000000010000bd6b6e00020002020000000008001600080000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x24008041}, 0x4044014) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) 21.763942319s ago: executing program 0 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x34, 0xdd, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x5, 0x1, 0x1, 0x0, 0x7, 0xa4}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x9, 0x3, 0x0, 0x3, 0x6, 0x80}, 0x2, {0x5, 0x1, 0x1, 0x7, 0x1, 0x0, 0x2}}}, {0x8, 0x6558, 0x1, "d998ee031eaa99dc87544bfbc61c71dbdfefce8022eef2d8081a44fd40efed71e90dcdd7518fb0b8fb2c4fa1b229984810a6020b10ba69f6210efeda64763743e715c9e785691ed132668dd616e5e2feb4abb676359c3b4e6228abca6de38e621e5b62d67933758686dcad0643b2b8dc84581ead88f303a913fc2165c299c3a292e4b58637"}}}}, 0xeb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(r1, 0xa0200) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x1, 0x6, 0x9, 0x9, 0x1, "1a63ab98bcb3c6649117b9cf972121496ea79d", 0x7ff, 0x7f}) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f0000000e00)={0x2020}, 0x2020) syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x8, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xfc8, 0x4, 0x8001, 0xe}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x40, 0x2}}}}}]}}]}}, 0x0) 18.725548804s ago: executing program 0 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='serial8250', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='serial8250', 0xa) r2 = epoll_create1(0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000002c0)={0x0, 0xfb87, 0x8, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x200, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x800, 0x3, 0x125, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0xfff5, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x5, 0x0, 0x5, 0x1, 0x2, 0x9, 0xff, 0xf6, 0x5, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) r12 = epoll_create1(0x80000) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r13, &(0x7f0000000140)=""/214, 0xd6) epoll_pwait(r12, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a00", @ANYRES8=r14], 0x1c}], 0x1}, 0x4000080) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r11, &(0x7f0000000100)={0x8}) shutdown(r11, 0x0) 17.871225156s ago: executing program 0 (id=115): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setns(r2, 0x2000000) syz_usb_disconnect(r0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) syz_usb_connect$midi(0x0, 0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="120108000000f00000004b4740000102030109024000010108300c0904000003010320010724010000070009050800000292de070425010009050f02400006fa03042500040b00000000000000000000007e25c196cdbc9c07b5fdf1f4b438fcb2f83a850bf0437e7247e7b18a642913a3ba6007531022966b878f63fb976546e20d985e9f65e08538370fedb408901a0793add052e1ba2c189d13e5bbb3d8ec44d504e5c8bbf875fc08b0c55373f3874f7a5bd4c634ef238d721e5c681bfecc809c7bcf31"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 14.840852491s ago: executing program 0 (id=141): r0 = inotify_init() sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x1e, 0x3, 0x38) (async) r1 = socket(0x1e, 0x3, 0x38) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) fsopen(&(0x7f0000000500)='pstore\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000500)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x2400000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) (async) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x0, 0x800) (async) accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x0, 0x800) 5.200978891s ago: executing program 2 (id=180): pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = fsmount(r2, 0x0, 0x1) link(&(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000080)='./cgroup/../file0/file0\x00') fchdir(r3) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000086d0434c5000000000000000000000000008073090400fe0103000300092181000301222800090581034000020801"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400b280000001702c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0688881ce2a52973661d67a0c5540c1a1d959ad58fe59444ec9a4134e73a678399591d9b4b9ed022895afe458932c272c6f00cddbf27049aeefd293ee545d9ab0e1d9cd8f0c12ddfd1e4ee4aa6628d39f2cd3cac9197f9ed8a17051cf5bf96cf7deb14f244edde93075ba3ed9713c3f14299b6655c677e3105a91008be2baff1e45f10a963d39a8dd5e2e04bb63fb7c07b1960130f775c456dec7fe032ad1b4296165d02275c18c1d7f05c035375f9c5cd91dc221fda1c0aee0fb33cddee1ed0458a119c1bc8c294b0085"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/../file0/file0\x00', 0x200040, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r5, 0xc139, 0x2) creat(&(0x7f0000000140)='./file0\x00', 0x90) getdents64(r5, 0xfffffffffffffffe, 0x29) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x1}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000980), 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0x7ffd}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0x80009, 0x80, 0x2, 0x3, 0x7b, 0x6, 0x4d, 0x39cc1916, 0x2, 0x9, 0x5, 0x2, 0x0, 0x1, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x6, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x5, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x3ff, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x7, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2c, 0x4, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x3, 0x2, 0x8000002, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x9, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x6c8fa4a1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x0, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x12000, 0x1005, 0x0, 0x1f0, 0x0, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x406, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x7, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0x5, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x3112, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x9, 0xee1, 0x0, 0xcb79, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x1007, 0x1, 0x6c1b, 0x800, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3440, 0xfff]}, 0x45c) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) tgkill(r7, r7, 0x5) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64$ublk_ch(r8, &(0x7f00000015c0)=@buf_max_buf, 0x1000, 0xe9ea) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.195704075s ago: executing program 2 (id=207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000003300000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b"], 0x23c}}, 0x4080) 2.144520737s ago: executing program 2 (id=209): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000002ec0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82400, 0x0) fadvise64(r0, 0x2, 0x4, 0x2) r1 = gettid() r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040aa5503a10000000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x4) write(r3, &(0x7f0000000100)='!:my_read_msr1', 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$rtl8150(0x4, 0x62, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0235, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r5, 0x550c, &(0x7f00000000c0)=0x18) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="74f702752bf2dd19b2d1d88a1bde1c0a9ebe2a171f0265875478830a16b8566b5f5a1b98b5806f3d745ba574340df56fc65dda047bd9607f79072ca0fa350403298777a99bd36354eaa90db9483293e7cdbaf8b9", 0x54, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.423499505s ago: executing program 1 (id=220): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setns(r2, 0x2000000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) syz_usb_connect$midi(0x0, 0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="120108000000f00000004b4740000102030109024000010108300c0904000003010320010724010000070009050800000292de070425010009050f02400006fa03042500040b00000000000000000000007e25c196cdbc9c07b5fdf1f4b438fcb2f83a850bf0437e7247e7b18a642913a3ba6007531022966b878f63fb976546e20d985e9f65e08538370fedb408901a0793add052e1ba2c189d13e5bbb3d8ec44d504e5c8bbf875fc08b0c55373f3874f7a5bd4c634ef238d721e5c681bfecc809c7bcf31"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.083802303s ago: executing program 3 (id=223): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) syz_ublk_setup_io_uring(0x3218, &(0x7f00000004c0)={0x0, 0x818e, 0x4, 0x1, 0x3b9}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000002540)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) remap_file_pages(&(0x7f0000477000/0x2000)=nil, 0x2000, 0x3, 0x9, 0x20000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) write(r3, &(0x7f0000000080)='4', 0x1) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 848.540339ms ago: executing program 1 (id=224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000100000000000000840005"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 847.980899ms ago: executing program 1 (id=225): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x12a0422, &(0x7f0000000340)={[{@none}]}) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (async) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2040) syz_fuse_handle_req(r9, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x83, 0x8, 0x7fffffff, 0xc1, {0x9, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x0, 0x3, 0x10, 0x4, 0x0, 0x8000, 0x2, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000380)={0x50, 0x0, r10, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x41}}, 0x50) (async) syz_fuse_handle_req(r9, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0xb70, 0x7e30, 0xf, 0x3, {0x0, 0xfffffffffffffffc, 0x0, 0x100000000, 0x3, 0x1, 0x2, 0x4, 0x2608636, 0x4000, 0x104, r11, r12}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000002100), 0x100002, &(0x7f0000000840)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r15, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r13, @ANYBLOB=',\x00']) (async) read$FUSE(r15, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r15, &(0x7f0000000080)={0x50, 0x0, r16, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r15, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004dde00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xfffffffff94e4ad8, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r15, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="5001000000000000f9ffffffffffffff0200000000000000000000000000000000000000000000000d00000000000000fcffffff10000000030000000000000000000000000000800000010000000000ffffff7f00000000ff7f0000000000000600000000000000feff0000a80000006c00000000200000ff070000", @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="56000000f6800000000000000300000000000000fc83000000000000050000000e030000667573650000000006000000000000000300000000000000ed00000000000000010000000000000001000000f7ffffff010000000000000006000000000000009c0000000000000000000000000070000200000000000000030000000000000047fbffffff04000080eb0300008000000a000000", @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="0900000003000000000000000100000000000000070000000000000005000000000000002c5b40d3b500000065de563a52ee6c4adc3fd121c1ee994519b6ec7ce887ec1d71b65057"], 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000440)={0x288, 0x0, r2, [{{0x1, 0x1, 0x3, 0x6, 0xe, 0xb, {0x0, 0xfffffffffffffe00, 0x9b, 0x8001, 0x5, 0x5, 0x5, 0x5, 0xa000000, 0x1000, 0x7d, r6, r7, 0x4, 0x651b5bed}}, {0x5, 0xffffffffffffffff, 0x8, 0x5, 'bridge0\x00'}}, {{0x1, 0x1, 0x4, 0xc0000, 0x8948, 0x81, {0x1, 0xa, 0x3, 0x3, 0x8, 0x6, 0x4, 0xf, 0x1, 0x4000, 0x1, 0x0, 0xee00, 0x9, 0x4}}, {0x5, 0x100000000, 0x1, 0x0, '^'}}, {{0x3, 0x3, 0x5, 0x401, 0xffff, 0x2, {0x3, 0xc4e0, 0x9, 0x893, 0x2c, 0x3ff, 0x49, 0x7a, 0xfffffff9, 0x8000, 0x4, r3, r12, 0x6, 0x3}}, {0x0, 0x10, 0x4, 0x7ff, ',,.#'}}, {{0x4, 0x3, 0x4, 0x8, 0x4, 0x40, {0x1, 0x1, 0x48ab047f, 0x8, 0x176, 0x6, 0x9, 0x7, 0x1000, 0xa000, 0x0, r14, r17, 0x5, 0x6}}, {0x5, 0x8, 0x0, 0x6}}]}, 0x288) 814.98272ms ago: executing program 1 (id=226): r0 = inotify_init() r1 = socket(0xa, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0xfff, 0x2a, 0x2, 0x400, 0x6}, 0x14) connect$inet(r2, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f000000dd40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)=[{0x10, 0x1, 0x9}], 0x10}}], 0x1, 0x0) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 670.737053ms ago: executing program 3 (id=227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000006c00000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b"], 0x23c}}, 0x4080) 612.494175ms ago: executing program 3 (id=228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff480001"], 0x1cc}, 0x1, 0x200000000000000}, 0x0) 611.960895ms ago: executing program 3 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/virtio-pci/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)="00c5", 0x2) recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000000)=""/113, 0x71}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000300)="d4c4b8c259cc13fecd725d26814bbb65368221e71408c93c0f42813726bfe736a370f53f77693b156dc94b1822b09b19768a60be9020ce2fecb1bdd3bef2ff0559c179de4e1e", 0x46}], 0x1, 0xf, 0x83) 467.561548ms ago: executing program 3 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000080)={0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x8010000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 291.203383ms ago: executing program 1 (id=231): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000004ac0)=""/31, &(0x7f0000004b00)=0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x8}, 0xa) 236.485654ms ago: executing program 1 (id=232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setns(r2, 0x2000000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) syz_usb_connect$midi(0x0, 0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="120108000000f00000004b4740000102030109024000010108300c0904000003010320010724010000070009050800000292de070425010009050f02400006fa03042500040b00000000000000000000007e25c196cdbc9c07b5fdf1f4b438fcb2f83a850bf0437e7247e7b18a642913a3ba6007531022966b878f63fb976546e20d985e9f65e08538370fedb408901a0793add052e1ba2c189d13e5bbb3d8ec44d504e5c8bbf875fc08b0c55373f3874f7a5bd4c634ef238d721e5c681bfecc809c7bcf31"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 235.810394ms ago: executing program 3 (id=233): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000180)={{0x54000, 0x40000, 0xb, 0xb, 0x1, 0x5, 0xf8, 0x8, 0x32, 0x1, 0xd, 0xfc}, {0x25000, 0xeefe3000, 0xa, 0x8, 0x6, 0x1, 0x5c, 0x3, 0xe, 0x5, 0x21, 0xc}, {0x5000, 0x54000, 0xa, 0xe2, 0xf0, 0x86, 0x9, 0x7, 0xd, 0x5, 0x4, 0x6}, {0xfffdafff, 0x5000, 0xc, 0x0, 0x1, 0x4, 0x3, 0x1, 0xfb, 0xff, 0x3, 0x2}, {0xfec00000, 0x6000, 0x0, 0x9, 0x2, 0x95, 0x0, 0xfd, 0x6, 0x6, 0x3, 0x6}, {0xa000, 0x41000, 0x10, 0x10, 0x6, 0x1, 0x1, 0x5, 0x0, 0x8, 0x3, 0x7}, {0x4, 0x60000, 0xc, 0x53, 0x6, 0x95, 0x5, 0x3, 0x10, 0x2, 0x1, 0x5}, {0x1, 0xffffffff, 0xe, 0x2, 0x9, 0x7f, 0x8, 0x2, 0x80, 0x6, 0x1, 0x1}, {0xc000, 0x200}, {0x30000, 0x9}, 0x8, 0x0, 0xffffffff, 0x230122, 0xf, 0x2000, 0xe000, [0x0, 0xf, 0x2, 0x401]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) r9 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r9, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 196.144005ms ago: executing program 2 (id=234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000100000000000000840005"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 186.347446ms ago: executing program 2 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0xe020a00) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) read(r1, &(0x7f00000003c0)=""/18, 0x12) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff8, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) eventfd2(0x7, 0x801) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x1000) getsockopt(r4, 0xff, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 0s ago: executing program 2 (id=236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) syz_ublk_setup_io_uring(0x3218, &(0x7f00000004c0)={0x0, 0x818e, 0x4, 0x1, 0x3b9}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000002540)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) remap_file_pages(&(0x7f0000477000/0x2000)=nil, 0x2000, 0x3, 0x9, 0x20000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) write(r3, &(0x7f0000000080)='4', 0x1) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.931889][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 19.931905][ T36] audit: type=1400 audit(1786161181.180:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.936059][ T36] audit: type=1400 audit(1786161181.180:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.938723][ T36] audit: type=1400 audit(1786161181.180:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[3129]" dev="pipefs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.942024][ T36] audit: type=1400 audit(1786161181.180:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.944818][ T36] audit: type=1400 audit(1786161181.180:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 27.378959][ T36] audit: type=1400 audit(1786161188.620:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.380120][ T286] cgroup: Unknown subsys name 'net' [ 27.401611][ T36] audit: type=1400 audit(1786161188.620:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.428872][ T36] audit: type=1400 audit(1786161188.650:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.429056][ T286] cgroup: Unknown subsys name 'devices' [ 27.551370][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.556993][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.689807][ T36] audit: type=1400 audit(1786161188.940:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.712989][ T36] audit: type=1400 audit(1786161188.940:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.737792][ T36] audit: type=1400 audit(1786161188.940:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.748027][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.769690][ T36] audit: type=1400 audit(1786161189.020:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.795118][ T36] audit: type=1400 audit(1786161189.020:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.799315][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.820852][ T36] audit: type=1400 audit(1786161189.040:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.854907][ T36] audit: type=1400 audit(1786161189.040:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.586139][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.593316][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.600501][ T295] bridge_slave_0: entered allmulticast mode [ 28.606713][ T295] bridge_slave_0: entered promiscuous mode [ 28.614262][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.621405][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.628558][ T295] bridge_slave_1: entered allmulticast mode [ 28.634916][ T295] bridge_slave_1: entered promiscuous mode [ 28.730057][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.737111][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.744238][ T296] bridge_slave_0: entered allmulticast mode [ 28.750547][ T296] bridge_slave_0: entered promiscuous mode [ 28.759827][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.766871][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.774008][ T293] bridge_slave_0: entered allmulticast mode [ 28.780326][ T293] bridge_slave_0: entered promiscuous mode [ 28.787995][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.795098][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.802180][ T296] bridge_slave_1: entered allmulticast mode [ 28.808349][ T296] bridge_slave_1: entered promiscuous mode [ 28.818659][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.825777][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.832875][ T293] bridge_slave_1: entered allmulticast mode [ 28.839012][ T293] bridge_slave_1: entered promiscuous mode [ 28.860674][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.867735][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.874860][ T294] bridge_slave_0: entered allmulticast mode [ 28.881087][ T294] bridge_slave_0: entered promiscuous mode [ 28.887521][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.894611][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.901694][ T294] bridge_slave_1: entered allmulticast mode [ 28.907980][ T294] bridge_slave_1: entered promiscuous mode [ 28.959379][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.966464][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.065387][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.072488][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.079770][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.086793][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.095068][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.103200][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.110629][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.119015][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.126076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.134678][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.141755][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.198543][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.205634][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.218536][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.225639][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.237540][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.244626][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.260025][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.267086][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.295496][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.302578][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.310673][ T295] veth0_vlan: entered promiscuous mode [ 29.320275][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.327316][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.349230][ T295] veth1_macvtap: entered promiscuous mode [ 29.379206][ T293] veth0_vlan: entered promiscuous mode [ 29.389201][ T296] veth0_vlan: entered promiscuous mode [ 29.405368][ T294] veth0_vlan: entered promiscuous mode [ 29.426548][ T294] veth1_macvtap: entered promiscuous mode [ 29.435835][ T296] veth1_macvtap: entered promiscuous mode [ 29.446667][ T293] veth1_macvtap: entered promiscuous mode [ 29.453140][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.522691][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.546393][ T319] SELinux: policydb version -1290638604 does not match my version range 15-33 [ 29.567144][ T319] SELinux: failed to load policy [ 29.570651][ T315] raw_sendmsg: syz.1.2 forgot to set AF_INET. Fix it! [ 29.597341][ T326] rust_binder: 325:326 error while translating object: EBADF [ 29.605555][ T326] rust_binder: Failure in copy_transaction_data: EBADF [ 29.605600][ T326] rust_binder: 325:326 transaction call to 325:0 failed EBADF, code 0 size 104-24 [ 29.624205][ T9] rust_binder: 325: undelivered TRANSACTION_ERROR: 29201 [ 29.666888][ T333] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8'. [ 29.749556][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.829550][ T313] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 29.900546][ T66] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 29.908663][ T66] usb 4-1: config 1 has no interface number 0 [ 29.914892][ T66] usb 4-1: config 1 interface 93 has no altsetting 0 [ 29.921654][ T66] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 29.931217][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.981148][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.989285][ T313] usb 1-1: not running at top speed; connect to a high speed hub [ 29.998248][ T313] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 30.006529][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.014138][ T313] usb 1-1: config 0 has no interface number 0 [ 30.020310][ T313] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 30.031485][ T313] usb 1-1: config 0 interface 88 has no altsetting 0 [ 30.040279][ T313] usb 1-1: string descriptor 0 read error: -22 [ 30.046481][ T313] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 30.055643][ T313] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 30.064434][ T313] usb 1-1: config 0 descriptor?? [ 30.069939][ T323] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.079625][ T313] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input4 [ 30.141910][ T312] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 30.149949][ T66] usb 4-1: string descriptor 0 read error: -71 [ 30.156511][ T66] gl620a 4-1:1.93: probe with driver gl620a failed with error -22 [ 30.165288][ T66] usb 4-1: USB disconnect, device number 2 [ 30.180231][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 30.189085][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 30.196918][ T9] usb 3-1: can't read configurations, error -61 [ 30.229463][ T316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.295479][ T31] usb 1-1: USB disconnect, device number 2 [ 30.329818][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.379546][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 30.385838][ T316] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 30.394167][ T316] usb 2-1: config 0 has no interface number 0 [ 30.400391][ T316] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 30.411733][ T316] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 30.423111][ T316] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 30.432219][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.440253][ T316] usb 2-1: Product: syz [ 30.444417][ T316] usb 2-1: Manufacturer: syz [ 30.448999][ T316] usb 2-1: SerialNumber: syz [ 30.454397][ T316] usb 2-1: config 0 descriptor?? [ 30.459783][ T353] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 30.466940][ T353] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 30.479828][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 30.488692][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 30.496738][ T9] usb 3-1: can't read configurations, error -61 [ 30.503381][ T9] usb usb3-port1: attempt power cycle [ 30.681985][ T353] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 30.689291][ T353] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 30.824476][ T359] rust_binder: 357:359 error while translating object: EBADF [ 30.835604][ T359] rust_binder: Failure in copy_transaction_data: EBADF [ 30.835637][ T359] rust_binder: 357:359 transaction call to 357:0 failed EBADF, code 0 size 104-24 [ 30.839775][ T362] mmap: syz.3.17 (362) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.842783][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.854724][ T354] rust_binder: 357: undelivered TRANSACTION_ERROR: 29201 [ 30.881655][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 30.895037][ T367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 30.898081][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 30.906200][ T316] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 30.914353][ T9] usb 3-1: can't read configurations, error -61 [ 30.923900][ T369] netlink: 140 bytes leftover after parsing attributes in process `syz.3.19'. [ 30.937025][ T316] asix 2-1:0.34: probe with driver asix failed with error -61 [ 30.973688][ T374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=374 comm=syz.3.21 [ 30.986138][ T374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 31.044599][ T388] rust_binder: 387:388 error while translating object: EBADF [ 31.049821][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.052461][ T388] rust_binder: Failure in copy_transaction_data: EBADF [ 31.059563][ T388] rust_binder: 387:388 transaction call to 387:0 failed EBADF, code 0 size 104-24 [ 31.076752][ T390] rust_binder: 389:390 error while translating object: EBADF [ 31.080248][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 31.084304][ T390] rust_binder: Failure in copy_transaction_data: EBADF [ 31.092170][ T390] rust_binder: 389:390 transaction call to 389:0 failed EBADF, code 0 size 104-24 [ 31.096547][ T388] FAULT_INJECTION: forcing a failure. [ 31.096547][ T388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.114082][ T392] rust_binder: 391:392 error while translating object: EPERM [ 31.122075][ T388] CPU: 0 UID: 0 PID: 388 Comm: syz.3.27 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 31.122105][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.122124][ T388] Call Trace: [ 31.122130][ T388] [ 31.122138][ T388] __dump_stack+0x21/0x30 [ 31.122174][ T388] dump_stack_lvl+0x140/0x1c0 [ 31.122197][ T388] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.122222][ T388] dump_stack+0x19/0x20 [ 31.122244][ T388] should_fail_ex+0x3c2/0x510 [ 31.122265][ T388] should_fail+0xf/0x20 [ 31.122283][ T388] should_fail_usercopy+0x1e/0x30 [ 31.122303][ T388] _copy_from_user+0x20/0xa0 [ 31.122325][ T388] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0xeef/0x3fe0 [ 31.122352][ T388] ? __asan_set_shadow_00+0x12/0x20 [ 31.122377][ T388] ? do_vfs_ioctl+0x182d/0x2010 [ 31.122398][ T388] ? arch_stack_walk+0x10a/0x170 [ 31.122416][ T388] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 31.122437][ T388] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 31.122470][ T388] ? _parse_integer+0x2e/0x40 [ 31.122487][ T388] ? irqentry_exit+0x4a/0x60 [ 31.122505][ T388] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 31.122532][ T388] ? ioctl_has_perm+0x39a/0x500 [ 31.122549][ T388] ? has_cap_mac_admin+0xd0/0xd0 [ 31.122567][ T388] ? proc_fail_nth_write+0x184/0x220 [ 31.122592][ T388] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 31.122617][ T388] ? selinux_file_ioctl+0x732/0x1480 [ 31.122633][ T388] ? vfs_write+0xbcf/0xfd0 [ 31.122651][ T388] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 31.122669][ T388] ? __cfi_vfs_write+0x10/0x10 [ 31.122687][ T388] ? __kasan_check_write+0x18/0x20 [ 31.122703][ T388] ? mutex_unlock+0x90/0x240 [ 31.122726][ T388] ? __cfi_mutex_unlock+0x10/0x10 [ 31.122751][ T388] ? bpf_lsm_file_ioctl+0xd/0x20 [ 31.122773][ T388] ? security_file_ioctl+0x3e/0x110 [ 31.122798][ T388] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 31.122822][ T388] __se_sys_ioctl+0x135/0x1b0 [ 31.122843][ T388] __x64_sys_ioctl+0x7f/0xa0 [ 31.122863][ T388] x64_sys_call+0x1878/0x2ee0 [ 31.122878][ T388] do_syscall_64+0x57/0xf0 [ 31.122897][ T388] ? clear_bhb_loop+0x50/0xa0 [ 31.122920][ T388] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.122942][ T388] RIP: 0033:0x7fcbd4f9e0d9 [ 31.122957][ T388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.122972][ T388] RSP: 002b:00007fcbd5ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.122998][ T388] RAX: ffffffffffffffda RBX: 00007fcbd5225fa0 RCX: 00007fcbd4f9e0d9 [ 31.123012][ T388] RDX: 0000200000000600 RSI: 00000000c0306201 RDI: 0000000000000004 [ 31.123025][ T388] RBP: 00007fcbd5ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 31.123036][ T388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.123047][ T388] R13: 00007fcbd5226038 R14: 00007fcbd5225fa0 R15: 00007ffd93d1d378 [ 31.123062][ T388] [ 31.123319][ T313] rust_binder: 387: undelivered TRANSACTION_ERROR: 29201 [ 31.132005][ T392] rust_binder: Failure in copy_transaction_data: EPERM [ 31.155755][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 31.164144][ T392] rust_binder: 391:392 transaction call to 391:0 failed EPERM, code 0 size 104-24 [ 31.169720][ T9] usb 3-1: can't read configurations, error -61 [ 31.206925][ T396] netlink: 140 bytes leftover after parsing attributes in process `syz.0.31'. [ 31.213798][ T9] usb usb3-port1: unable to enumerate USB device [ 31.409664][ T316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.649494][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 31.655761][ T316] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 31.668534][ T316] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 31.677742][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.686103][ T316] usb 4-1: Product: syz [ 31.690930][ T316] usb 4-1: Manufacturer: syz [ 31.695549][ T316] usb 4-1: SerialNumber: syz [ 31.739080][ T408] Zero length message leads to an empty skb [ 31.748411][ T408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.803302][ T415] rust_binder: 414:415 error while translating object: EBADF [ 31.810798][ T415] rust_binder: Failure in copy_transaction_data: EBADF [ 31.810825][ T415] rust_binder: 414:415 transaction call to 414:0 failed EBADF, code 0 size 104-24 [ 31.827463][ T415] FAULT_INJECTION: forcing a failure. [ 31.827463][ T415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.840648][ T415] CPU: 1 UID: 0 PID: 415 Comm: syz.0.38 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 31.840676][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.840688][ T415] Call Trace: [ 31.840698][ T415] [ 31.840705][ T415] __dump_stack+0x21/0x30 [ 31.840735][ T415] dump_stack_lvl+0x140/0x1c0 [ 31.840759][ T415] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.840784][ T415] dump_stack+0x19/0x20 [ 31.840808][ T415] should_fail_ex+0x3c2/0x510 [ 31.840829][ T415] should_fail+0xf/0x20 [ 31.840847][ T415] should_fail_usercopy+0x1e/0x30 [ 31.840869][ T415] _copy_to_user+0x24/0xa0 [ 31.840894][ T415] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x2b67/0x3fe0 [ 31.840931][ T415] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 31.840954][ T415] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 31.840974][ T415] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 31.840998][ T415] ? _parse_integer+0x2e/0x40 [ 31.841019][ T415] ? ioctl_has_perm+0x39a/0x500 [ 31.841038][ T415] ? has_cap_mac_admin+0xd0/0xd0 [ 31.841058][ T415] ? selinux_file_ioctl+0x732/0x1480 [ 31.841075][ T415] ? vfs_write+0xbcf/0xfd0 [ 31.841094][ T415] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 31.841112][ T415] ? __cfi_vfs_write+0x10/0x10 [ 31.841130][ T415] ? __kasan_check_write+0x18/0x20 [ 31.841148][ T415] ? mutex_unlock+0x90/0x240 [ 31.841173][ T415] ? __cfi_mutex_unlock+0x10/0x10 [ 31.841201][ T415] ? bpf_lsm_file_ioctl+0xd/0x20 [ 31.841224][ T415] ? security_file_ioctl+0x3e/0x110 [ 31.841252][ T415] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 31.841278][ T415] __se_sys_ioctl+0x135/0x1b0 [ 31.841301][ T415] __x64_sys_ioctl+0x7f/0xa0 [ 31.841322][ T415] x64_sys_call+0x1878/0x2ee0 [ 31.841339][ T415] do_syscall_64+0x57/0xf0 [ 31.841358][ T415] ? clear_bhb_loop+0x50/0xa0 [ 31.841382][ T415] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.841405][ T415] RIP: 0033:0x7f20c919e0d9 [ 31.841421][ T415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.841442][ T415] RSP: 002b:00007f20c9fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.841462][ T415] RAX: ffffffffffffffda RBX: 00007f20c9425fa0 RCX: 00007f20c919e0d9 [ 31.841476][ T415] RDX: 0000200000000600 RSI: 00000000c0306201 RDI: 0000000000000004 [ 31.841489][ T415] RBP: 00007f20c9fef090 R08: 0000000000000000 R09: 0000000000000000 [ 31.841501][ T415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.841513][ T415] R13: 00007f20c9426038 R14: 00007f20c9425fa0 R15: 00007ffdaabeb258 [ 31.841529][ T415] [ 31.841558][ T415] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.949844][ T394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.954861][ T415] rust_binder: Read failure Err(EFAULT) in pid:38 [ 31.958562][ T394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.964553][ T31] rust_binder: 414: undelivered TRANSACTION_ERROR: 29201 [ 32.164933][ T316] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.172130][ T316] usb 4-1: unit 6: unexpected type 0x03 [ 32.177733][ T316] usb 4-1: unit 12 not found! [ 32.182902][ T316] usb 4-1: unit 4 not found! [ 32.187490][ T316] usb 4-1: unit 8 not found! [ 32.192141][ T316] usb 4-1: unit 1 not found! [ 32.196740][ T316] usb 4-1: unit 9 not found! [ 32.213849][ T316] usb 4-1: USB disconnect, device number 3 [ 32.227696][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.439501][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.599449][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 32.605565][ T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 32.615725][ T9] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.628632][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.636654][ T9] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.40 [ 32.645744][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.653974][ T9] usb 1-1: Product: syz [ 32.658127][ T9] usb 1-1: Manufacturer: syz [ 32.662787][ T9] usb 1-1: SerialNumber: syz [ 32.731291][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 32.731322][ T36] audit: type=1400 audit(1786161193.980:164): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.739695][ T439] rust_binder: 438:439 error while translating object: EBADF [ 32.765673][ T439] rust_binder: Failure in copy_transaction_data: EBADF [ 32.765702][ T439] rust_binder: 438:439 transaction call to 438:0 failed EBADF, code 0 size 104-24 [ 32.782339][ T36] audit: type=1400 audit(1786161194.020:165): avc: denied { name_bind } for pid=440 comm="syz.2.48" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 32.803359][ T36] audit: type=1400 audit(1786161194.020:166): avc: denied { write } for pid=440 comm="syz.2.48" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.803821][ T442] FAULT_INJECTION: forcing a failure. [ 32.803821][ T442] name failslab, interval 1, probability 0, space 0, times 1 [ 32.839488][ T442] CPU: 1 UID: 0 PID: 442 Comm: syz.3.47 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 32.839523][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.839535][ T442] Call Trace: [ 32.839542][ T442] [ 32.839550][ T442] __dump_stack+0x21/0x30 [ 32.839582][ T442] dump_stack_lvl+0x140/0x1c0 [ 32.839607][ T442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.839633][ T442] dump_stack+0x19/0x20 [ 32.839655][ T442] should_fail_ex+0x3c2/0x510 [ 32.839674][ T442] should_failslab+0xac/0x100 [ 32.839695][ T442] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 32.839714][ T442] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 32.839740][ T442] krealloc_noprof+0x8d/0x130 [ 32.839770][ T442] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 32.839797][ T442] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x63c/0x1a60 [ 32.839831][ T442] ? __cfi_selinux_file_open+0x10/0x10 [ 32.839851][ T442] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 32.839878][ T442] ? avc_has_extended_perms+0x7fb/0xe60 [ 32.839898][ T442] ? __asan_memcpy+0x5a/0x80 [ 32.839914][ T442] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 32.839937][ T442] ? __asan_set_shadow_00+0x12/0x20 [ 32.839961][ T442] ? do_vfs_ioctl+0x182d/0x2010 [ 32.839981][ T442] ? arch_stack_walk+0x10a/0x170 [ 32.839997][ T442] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 32.840016][ T442] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 32.840039][ T442] ? _parse_integer+0x2e/0x40 [ 32.840058][ T442] ? ioctl_has_perm+0x39a/0x500 [ 32.840074][ T442] ? has_cap_mac_admin+0xd0/0xd0 [ 32.840089][ T442] ? proc_fail_nth_write+0x184/0x220 [ 32.840113][ T442] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 32.840139][ T442] ? selinux_file_ioctl+0x732/0x1480 [ 32.840156][ T442] ? vfs_write+0xbcf/0xfd0 [ 32.840175][ T442] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 32.840194][ T442] ? __cfi_vfs_write+0x10/0x10 [ 32.840212][ T442] ? __kasan_check_write+0x18/0x20 [ 32.840230][ T442] ? mutex_unlock+0x90/0x240 [ 32.840254][ T442] ? __cfi_mutex_unlock+0x10/0x10 [ 32.840279][ T442] ? bpf_lsm_file_ioctl+0xd/0x20 [ 32.840302][ T442] ? security_file_ioctl+0x3e/0x110 [ 32.840329][ T442] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 32.840354][ T442] __se_sys_ioctl+0x135/0x1b0 [ 32.840376][ T442] __x64_sys_ioctl+0x7f/0xa0 [ 32.840398][ T442] x64_sys_call+0x1878/0x2ee0 [ 32.840412][ T442] do_syscall_64+0x57/0xf0 [ 32.840430][ T442] ? clear_bhb_loop+0x50/0xa0 [ 32.840454][ T442] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.840477][ T442] RIP: 0033:0x7fcbd4f9e0d9 [ 32.840494][ T442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.840510][ T442] RSP: 002b:00007fcbd5e9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.840530][ T442] RAX: ffffffffffffffda RBX: 00007fcbd5226090 RCX: 00007fcbd4f9e0d9 [ 32.840545][ T442] RDX: 0000200000000600 RSI: 00000000c0306201 RDI: 0000000000000004 [ 32.840564][ T442] RBP: 00007fcbd5e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 32.840577][ T442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.840589][ T442] R13: 00007fcbd5226128 R14: 00007fcbd5226090 R15: 00007ffd93d1d378 [ 32.840605][ T442] [ 32.840808][ T31] rust_binder: 438: undelivered TRANSACTION_ERROR: 29201 [ 32.894533][ T36] audit: type=1400 audit(1786161194.140:167): avc: denied { mount } for pid=424 comm="syz.0.42" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.898726][ T446] netlink: 140 bytes leftover after parsing attributes in process `syz.3.49'. [ 32.995920][ T10] usb 2-1: USB disconnect, device number 2 [ 33.035023][ T12] device offline error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 35 prio class 2 [ 33.169443][ T313] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.172684][ T12] device offline error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2 [ 33.256766][ T12] device offline error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 43 prio class 2 [ 33.267922][ T12] device offline error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 33.278784][ T12] device offline error, dev sda, sector 280880 op 0x1:(WRITE) flags 0x4000 phys_seg 61 prio class 2 [ 33.290901][ T12] device offline error, dev sda, sector 281392 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 33.312207][ T50] device offline error, dev sda, sector 281902 op 0x1:(WRITE) flags 0x0 phys_seg 25 prio class 2 [ 33.322912][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35237) [ 33.334504][ T313] usb 3-1: device descriptor read/64, error -71 [ 33.341018][ T50] device offline error, dev sda, sector 282102 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 33.351869][ T50] device offline error, dev sda, sector 282608 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 33.355465][ T73] device offline error, dev sda, sector 1049710 op 0x1:(WRITE) flags 0x9800 phys_seg 21 prio class 2 [ 33.362835][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35516) [ 33.379975][ T12] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139552) [ 33.385787][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35772) [ 33.397230][ T73] Aborting journal on device sda1-8. [ 33.408508][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35965) [ 33.425123][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139302) [ 33.436712][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139306) [ 33.448295][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139308) [ 33.460097][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139339) [ 33.471673][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139344) [ 33.483597][ T45] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 33.484038][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 33.504251][ T36] audit: type=1400 audit(1786161194.730:168): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.505094][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 33.527105][ T45] Buffer I/O error on device sda1, logical block 35736 [ 33.534988][ T36] audit: type=1400 audit(1786161194.730:169): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.544354][ T286] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 33.568824][ T36] audit: type=1400 audit(1786161194.730:170): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.574058][ T45] Buffer I/O error on device sda1, logical block 35737 [ 33.595670][ T36] audit: type=1400 audit(1786161194.730:171): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.602627][ T286] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 33.623160][ T45] Buffer I/O error on device sda1, logical block 35738 [ 33.631066][ T286] EXT4-fs (sda1): I/O error while writing superblock [ 33.637558][ T451] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.644168][ T286] EXT4-fs (sda1): Remounting filesystem read-only [ 33.660072][ T45] Buffer I/O error on device sda1, logical block 35739 [ 33.668020][ T45] Buffer I/O error on device sda1, logical block 35740 [ 33.674310][ T36] audit: type=1400 audit(1786161194.730:172): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.675260][ T45] Buffer I/O error on device sda1, logical block 35741 [ 33.698312][ T36] audit: type=1400 audit(1786161194.730:173): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.708953][ T45] Buffer I/O error on device sda1, logical block 35742 [ 33.732958][ T45] Buffer I/O error on device sda1, logical block 35743 [ 33.740006][ T45] Buffer I/O error on device sda1, logical block 35744 [ 33.746972][ T45] Buffer I/O error on device sda1, logical block 35745 [ 33.757626][ T427] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 33.766394][ T427] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 33.774936][ T427] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 33.783599][ T427] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 33.792118][ T313] usb 3-1: device descriptor read/64, error -71 [ 33.792414][ T427] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 33.806954][ T427] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 33.815534][ T427] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 33.820581][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.824130][ T427] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 33.835156][ T451] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.852514][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.861390][ T451] usb 2-1: config 0 descriptor?? [ 33.874046][ T110] udevd[110]: worker [324] terminated by signal 7 (Bus error) [ 33.881688][ T110] udevd[110]: worker [324] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 33.895057][ T427] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 33.901040][ T110] udevd[110]: worker [317] terminated by signal 7 (Bus error) [ 33.909581][ T110] udevd[110]: worker [317] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 33.975244][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 34.039504][ T313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.072185][ T451] usbhid 2-1:0.0: can't add hid device: -71 [ 34.078454][ T451] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.088296][ T451] usb 2-1: USB disconnect, device number 3 [ 34.092254][ T110] udevd[110]: worker [468] terminated by signal 7 (Bus error) [ 34.101882][ T110] udevd[110]: worker [468] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 34.169863][ T313] usb 3-1: device descriptor read/64, error -71 [ 34.204488][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.220881][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 34.228628][ T31] usb 4-1: can't read configurations, error -71 [ 34.409869][ T313] usb 3-1: device descriptor read/64, error -71 [ 34.509495][ T354] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.519598][ T313] usb usb3-port1: attempt power cycle [ 34.660547][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.671614][ T354] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 34.680695][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.689356][ T354] usb 2-1: config 0 descriptor?? [ 34.848617][ T482] rust_binder: 481:482 error while translating object: EBADF [ 34.856130][ T482] rust_binder: Failure in copy_transaction_data: EBADF [ 34.856157][ T482] rust_binder: 481:482 transaction call to 481:0 failed EBADF, code 0 size 104-24 [ 34.872320][ T313] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.873437][ T482] FAULT_INJECTION: forcing a failure. [ 34.873437][ T482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.893091][ T482] CPU: 0 UID: 0 PID: 482 Comm: syz.3.58 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 34.893125][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.893136][ T482] Call Trace: [ 34.893142][ T482] [ 34.893150][ T482] __dump_stack+0x21/0x30 [ 34.893180][ T482] dump_stack_lvl+0x140/0x1c0 [ 34.893204][ T482] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.893220][ T482] ? __kasan_check_read+0x15/0x20 [ 34.893231][ T482] dump_stack+0x19/0x20 [ 34.893244][ T482] should_fail_ex+0x3c2/0x510 [ 34.893256][ T482] should_fail+0xf/0x20 [ 34.893266][ T482] should_fail_usercopy+0x1e/0x30 [ 34.893285][ T482] _copy_to_user+0x24/0xa0 [ 34.893309][ T482] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x3370/0x3fe0 [ 34.893337][ T482] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 34.893359][ T482] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 34.893373][ T482] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 34.893387][ T482] ? _parse_integer+0x2e/0x40 [ 34.893398][ T482] ? ioctl_has_perm+0x39a/0x500 [ 34.893408][ T482] ? has_cap_mac_admin+0xd0/0xd0 [ 34.893421][ T482] ? selinux_file_ioctl+0x732/0x1480 [ 34.893447][ T482] ? vfs_write+0xbcf/0xfd0 [ 34.893466][ T482] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 34.893485][ T482] ? __cfi_vfs_write+0x10/0x10 [ 34.893500][ T482] ? __kasan_check_write+0x18/0x20 [ 34.893510][ T482] ? mutex_unlock+0x90/0x240 [ 34.893524][ T482] ? __cfi_mutex_unlock+0x10/0x10 [ 34.893538][ T482] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.893551][ T482] ? security_file_ioctl+0x3e/0x110 [ 34.893571][ T482] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 34.893597][ T482] __se_sys_ioctl+0x135/0x1b0 [ 34.893619][ T482] __x64_sys_ioctl+0x7f/0xa0 [ 34.893640][ T482] x64_sys_call+0x1878/0x2ee0 [ 34.893649][ T482] do_syscall_64+0x57/0xf0 [ 34.893660][ T482] ? clear_bhb_loop+0x50/0xa0 [ 34.893675][ T482] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.893687][ T482] RIP: 0033:0x7fcbd4f9e0d9 [ 34.893698][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.893709][ T482] RSP: 002b:00007fcbd5ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.893730][ T482] RAX: ffffffffffffffda RBX: 00007fcbd5225fa0 RCX: 00007fcbd4f9e0d9 [ 34.893745][ T482] RDX: 0000200000000600 RSI: 00000000c0306201 RDI: 0000000000000004 [ 34.893758][ T482] RBP: 00007fcbd5ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 34.893771][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.893782][ T482] R13: 00007fcbd5226038 R14: 00007fcbd5225fa0 R15: 00007ffd93d1d378 [ 34.893792][ T482] [ 34.905578][ T484] netlink: 140 bytes leftover after parsing attributes in process `syz.3.59'. [ 34.914125][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.188840][ T9] usb 1-1: USB disconnect, device number 3 [ 35.202749][ T110] udevd[110]: worker [311] terminated by signal 7 (Bus error) [ 35.210874][ T110] udevd[110]: worker [311] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 35.233251][ T110] udevd[110]: worker [471] terminated by signal 7 (Bus error) [ 35.296459][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.305700][ T502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.314366][ T502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.317166][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.323460][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.332010][ T502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.345082][ T502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.499803][ T354] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 35.507865][ T354] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 35.579480][ T313] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 35.600488][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.609561][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 35.619554][ T451] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.730466][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.760794][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.768843][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 35.777434][ T9] usb 1-1: config index 0 descriptor too short (expected 6761, got 105) [ 35.785873][ T9] usb 1-1: config 244 has too many interfaces: 235, using maximum allowed: 32 [ 35.795015][ T9] usb 1-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 35.797360][ T354] usb 2-1: USB disconnect, device number 4 [ 35.805357][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 35.819645][ T9] usb 1-1: config 244 has 1 interface, different from the descriptor's value: 235 [ 35.820437][ T451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.839648][ T313] usb usb3-port1: unable to enumerate USB device [ 35.846372][ T451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.859538][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 35.868835][ T451] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.877958][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.880260][ T510] rust_binder: 509:510 error while translating object: EBADF [ 35.886060][ T9] usb 1-1: Product: syz [ 35.893828][ T510] rust_binder: Failure in copy_transaction_data: EBADF [ 35.897619][ T510] rust_binder: 509:510 transaction call to 509:0 failed EBADF, code 0 size 104-24 [ 35.897658][ T9] usb 1-1: Manufacturer: syz [ 35.905207][ T510] FAULT_INJECTION: forcing a failure. [ 35.905207][ T510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.913980][ T9] usb 1-1: SerialNumber: syz [ 35.918851][ T510] CPU: 1 UID: 0 PID: 510 Comm: syz.2.68 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 35.918877][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.918889][ T510] Call Trace: [ 35.918895][ T510] [ 35.918901][ T510] __dump_stack+0x21/0x30 [ 35.918930][ T510] dump_stack_lvl+0x140/0x1c0 [ 35.918953][ T510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.918977][ T510] ? check_stack_object+0x138/0x150 [ 35.918997][ T510] dump_stack+0x19/0x20 [ 35.919017][ T510] should_fail_ex+0x3c2/0x510 [ 35.919038][ T510] should_fail+0xf/0x20 [ 35.919055][ T510] should_fail_usercopy+0x1e/0x30 [ 35.919076][ T510] _copy_to_user+0x24/0xa0 [ 35.919098][ T510] simple_read_from_buffer+0xed/0x160 [ 35.919122][ T510] proc_fail_nth_read+0x1aa/0x220 [ 35.919147][ T510] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.919171][ T510] ? bpf_lsm_file_permission+0xd/0x20 [ 35.919194][ T510] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.919217][ T510] vfs_read+0x288/0xc70 [ 35.919234][ T510] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 35.919252][ T510] ? __cfi_vfs_read+0x10/0x10 [ 35.919269][ T510] ? __kasan_check_write+0x18/0x20 [ 35.919295][ T510] ? mutex_lock+0x97/0x1d0 [ 35.919319][ T510] ? __cfi_mutex_lock+0x10/0x10 [ 35.919343][ T510] ksys_read+0x145/0x260 [ 35.919361][ T510] ? __cfi_ksys_read+0x10/0x10 [ 35.919379][ T510] ? __kasan_check_read+0x15/0x20 [ 35.919400][ T510] __x64_sys_read+0x7f/0x90 [ 35.919418][ T510] x64_sys_call+0x2638/0x2ee0 [ 35.919434][ T510] do_syscall_64+0x57/0xf0 [ 35.919453][ T510] ? clear_bhb_loop+0x50/0xa0 [ 35.919477][ T510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.919499][ T510] RIP: 0033:0x7ff6f895e90e [ 35.919515][ T510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.919528][ T510] RSP: 002b:00007ff6f9806fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.919548][ T510] RAX: ffffffffffffffda RBX: 00007ff6f98076c0 RCX: 00007ff6f895e90e [ 35.919561][ T510] RDX: 000000000000000f RSI: 00007ff6f98070a0 RDI: 0000000000000005 [ 35.919573][ T510] RBP: 00007ff6f9807090 R08: 0000000000000000 R09: 0000000000000000 [ 35.919585][ T510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.919596][ T510] R13: 00007ff6f8c26038 R14: 00007ff6f8c25fa0 R15: 00007ffc9dae2fc8 [ 35.919611][ T510] [ 35.939103][ T512] netlink: 140 bytes leftover after parsing attributes in process `syz.2.69'. [ 35.949365][ T451] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 35.977531][ T514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 35.980564][ T451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.112693][ T517] process 'syz.2.71' launched './file0' with NULL argv: empty string added [ 36.124727][ T451] usb 4-1: Product: syz [ 36.226573][ T9] usb 1-1: USB disconnect, device number 4 [ 36.232532][ T451] usb 4-1: Manufacturer: syz [ 36.237675][ T451] usb 4-1: SerialNumber: syz [ 36.249870][ T451] usb 4-1: selecting invalid altsetting 1 [ 36.255780][ T451] usb 4-1: unit 6 not found! [ 36.360102][ T533] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 36.378794][ T537] netlink: 140 bytes leftover after parsing attributes in process `syz.1.78'. [ 36.448583][ T508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 36.458085][ T508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 36.467564][ T451] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 36.477634][ T451] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.529498][ T354] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.679909][ T547] rust_binder: 546:547 FDA parent offset not aligned correctly [ 36.682473][ T354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.687781][ T547] rust_binder: 546:547 error while translating object: EINVAL [ 36.699563][ T354] usb 3-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 36.702818][ T547] rust_binder: Failure in copy_transaction_data: EINVAL [ 36.711776][ T547] rust_binder: 546:547 transaction call to 546:0 failed EINVAL, code 0 size 112-24 [ 36.712126][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.719037][ T547] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.728511][ T354] usb 3-1: Product: syz [ 36.737848][ T547] rust_binder: Read failure Err(EFAULT) in pid:59 [ 36.744708][ T354] usb 3-1: Manufacturer: syz [ 36.756350][ T9] rust_binder: 546: undelivered TRANSACTION_ERROR: 29201 [ 36.759777][ T354] usb 3-1: SerialNumber: syz [ 36.787371][ T551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=551 comm=syz.0.83 [ 36.990144][ T354] usb 3-1: USB disconnect, device number 10 [ 37.519489][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.671024][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.682110][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 37.691222][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.700272][ T9] usb 2-1: config 0 descriptor?? [ 37.705203][ T110] udevd[110]: worker [561] terminated by signal 7 (Bus error) [ 37.712934][ T110] udevd[110]: worker [561] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 37.727315][ T110] udevd[110]: worker [554] terminated by signal 7 (Bus error) [ 37.729458][ T354] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 37.735033][ T110] udevd[110]: worker [554] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 37.889451][ T354] usb 3-1: Using ep0 maxpacket: 16 [ 37.895745][ T354] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 37.908205][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 37.908407][ T354] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 37.916448][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 37.926193][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.934090][ T9] usb 2-1: USB disconnect, device number 5 [ 37.944468][ T354] usb 3-1: Product: syz [ 37.945406][ T110] udevd[110]: worker [573] terminated by signal 7 (Bus error) [ 37.949120][ T354] usb 3-1: Manufacturer: syz [ 37.949138][ T354] usb 3-1: SerialNumber: syz [ 37.957683][ T110] udevd[110]: worker [573] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 37.979450][ T55] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 38.109481][ T55] usb 1-1: device descriptor read/64, error -71 [ 38.170351][ T354] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 38.179343][ T354] usb 3-1: unit 1 not found! [ 38.184103][ T354] usb 3-1: unit 9 not found! [ 38.195330][ T584] netlink: 140 bytes leftover after parsing attributes in process `syz.2.89'. [ 38.213990][ T354] usb 3-1: USB disconnect, device number 11 [ 38.216481][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 38.216497][ T36] audit: type=1400 audit(1786161199.460:214): avc: denied { ioctl } for pid=585 comm="syz.2.90" path="socket:[4439]" dev="sockfs" ino=4439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.252583][ T36] audit: type=1400 audit(1786161199.500:215): avc: denied { write } for pid=585 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.256553][ T587] udevd[587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.272148][ T36] audit: type=1400 audit(1786161199.500:216): avc: denied { getopt } for pid=585 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.310818][ T36] audit: type=1400 audit(1786161199.560:217): avc: denied { bind } for pid=589 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.330104][ T36] audit: type=1400 audit(1786161199.560:218): avc: denied { ioctl } for pid=589 comm="syz.2.91" path="socket:[5697]" dev="sockfs" ino=5697 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.359530][ T55] usb 1-1: device descriptor read/64, error -71 [ 38.499471][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.599466][ T55] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 38.650478][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.661633][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 38.669451][ T354] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 38.670845][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.687002][ T9] usb 2-1: config 0 descriptor?? [ 38.729446][ T55] usb 1-1: device descriptor read/64, error -71 [ 38.820513][ T354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.830678][ T354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 38.839638][ T354] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.850651][ T354] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36, setting to 8 [ 38.861342][ T354] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 38.870472][ T354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.880359][ T595] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 38.888351][ T354] hub 3-1:1.0: bad descriptor, ignoring hub [ 38.894640][ T354] hub 3-1:1.0: probe with driver hub failed with error -5 [ 38.901977][ T354] cdc_wdm 3-1:1.0: skipping garbage [ 38.904140][ T451] usb 4-1: USB disconnect, device number 6 [ 38.907187][ T354] cdc_wdm 3-1:1.0: skipping garbage [ 38.910272][ T354] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 38.927776][ T354] cdc_wdm 3-1:1.0: Unknown control protocol [ 38.936028][ T597] rust_binder: 596:597 error while translating object: EBADF [ 38.943626][ T597] rust_binder: Failure in copy_transaction_data: EBADF [ 38.943673][ T597] rust_binder: 596:597 transaction call to 596:0 failed EBADF, code 0 size 104-24 [ 38.961737][ T597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 38.999441][ T55] usb 1-1: device descriptor read/64, error -71 [ 39.005761][ T36] audit: type=1400 audit(1786161200.250:219): avc: denied { create } for pid=602 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.026124][ T36] audit: type=1400 audit(1786161200.250:220): avc: denied { write } for pid=602 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.046361][ T36] audit: type=1400 audit(1786161200.250:221): avc: denied { map } for pid=602 comm="syz.3.95" path="pipe:[2317]" dev="pipefs" ino=2317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 39.069031][ T36] audit: type=1400 audit(1786161200.250:222): avc: denied { map } for pid=602 comm="syz.3.95" path="socket:[4507]" dev="sockfs" ino=4507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 39.098183][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.108671][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.119586][ T55] usb usb1-port1: attempt power cycle [ 39.199522][ T451] usb 3-1: USB disconnect, device number 12 [ 39.221031][ T610] rust_binder: 609:610 got reply transaction with no transaction stack [ 39.229363][ T610] rust_binder: 609:610 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 [ 39.239012][ T610] rust_binder: Read failure Err(EAGAIN) in pid:97 [ 39.239103][ T610] rust_binder: 609:610 got reply transaction with no transaction stack [ 39.253855][ T610] rust_binder: 609:610 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 39.269590][ T610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.288215][ T36] audit: type=1400 audit(1786161200.530:223): avc: denied { mounton } for pid=613 comm="syz.3.98" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.369343][ T617] netlink: 140 bytes leftover after parsing attributes in process `syz.3.99'. [ 39.458167][ T623] X.509: signatureAlgorithm (103) differs from tbsCertificate.signature (7) [ 39.459475][ T55] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 39.467753][ T623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.476214][ T354] rust_binder: 609: undelivered TRANSACTION_ERROR: 29201 [ 39.477131][ T313] rust_binder: 609: undelivered TRANSACTION_ERROR: 29201 [ 39.483160][ T623] rust_binder: 622:623 no such ref 0 [ 39.502278][ T623] rust_binder: 622:623 no such ref 2 [ 39.508423][ T55] usb 1-1: device descriptor read/8, error -71 [ 39.510693][ T623] rust_binder: 622:623 got transaction to invalid handle 1 [ 39.521915][ T623] rust_binder: 622:623 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 39.561124][ T623] can0: slcan on ttyS3. [ 39.566174][ T313] rust_binder: 622: undelivered TRANSACTION_ERROR: 29201 [ 39.590699][ T622] can0 (unregistered): slcan off ttyS3. [ 39.641623][ T55] usb 1-1: device descriptor read/8, error -71 [ 39.849548][ T313] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.879463][ T451] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 39.879463][ T55] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 39.910460][ T55] usb 1-1: device descriptor read/8, error -71 [ 39.979439][ T313] usb 4-1: device descriptor read/64, error -71 [ 40.029453][ T451] usb 3-1: Using ep0 maxpacket: 8 [ 40.036852][ T451] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 40.046035][ T451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.050457][ T55] usb 1-1: device descriptor read/8, error -71 [ 40.054123][ T451] usb 3-1: Product: syz [ 40.064450][ T451] usb 3-1: Manufacturer: syz [ 40.069058][ T451] usb 3-1: SerialNumber: syz [ 40.169548][ T55] usb usb1-port1: unable to enumerate USB device [ 40.219479][ T313] usb 4-1: device descriptor read/64, error -71 [ 40.275239][ T634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.283782][ T634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.291977][ T634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.300498][ T634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.308579][ T634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.317387][ T634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.325476][ T634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.333502][ T9] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 40.334327][ T634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.348559][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 40.358651][ T634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.368566][ T634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.378862][ T9] usb 2-1: USB disconnect, device number 6 [ 40.378867][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 40.395487][ T451] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.405549][ T451] usb 3-1: unit 1 not found! [ 40.410223][ T451] usb 3-1: unit 9 not found! [ 40.417831][ T451] usb 3-1: USB disconnect, device number 13 [ 40.423037][ T110] udevd[110]: worker [587] terminated by signal 7 (Bus error) [ 40.431436][ T110] udevd[110]: worker [587] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 40.451786][ T110] udevd[110]: worker [560] terminated by signal 7 (Bus error) [ 40.459461][ T313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.599465][ T313] usb 4-1: device descriptor read/64, error -71 [ 40.859438][ T313] usb 4-1: device descriptor read/64, error -71 [ 40.912743][ T660] netlink: 140 bytes leftover after parsing attributes in process `syz.2.110'. [ 40.970457][ T313] usb usb4-port1: attempt power cycle [ 41.209445][ T55] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 41.329432][ T313] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.359452][ T55] usb 3-1: device descriptor read/64, error -71 [ 41.360411][ T313] usb 4-1: device descriptor read/8, error -71 [ 41.510409][ T313] usb 4-1: device descriptor read/8, error -71 [ 41.599492][ T55] usb 3-1: device descriptor read/64, error -71 [ 41.759494][ T313] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.781502][ T313] usb 4-1: device descriptor read/8, error -71 [ 41.799456][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.839463][ T55] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 41.910536][ T313] usb 4-1: device descriptor read/8, error -71 [ 41.950656][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.961603][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 41.970692][ T55] usb 3-1: device descriptor read/64, error -71 [ 41.977009][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.985828][ T31] usb 1-1: config 0 descriptor?? [ 42.019527][ T313] usb usb4-port1: unable to enumerate USB device [ 42.032318][ T677] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 42.040058][ T677] netlink: 'syz.1.116': attribute type 5 has an invalid length. [ 42.047720][ T677] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 42.067059][ T681] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 42.146964][ T683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 42.193607][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 42.199712][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 42.208483][ T31] usb 1-1: USB disconnect, device number 9 [ 42.214675][ T55] usb 3-1: device descriptor read/64, error -71 [ 42.329582][ T55] usb usb3-port1: attempt power cycle [ 42.629449][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 42.669462][ T55] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 42.690515][ T55] usb 3-1: device descriptor read/8, error -71 [ 42.790440][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.801389][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 42.810876][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.819491][ T31] usb 1-1: config 0 descriptor?? [ 42.826223][ T55] usb 3-1: device descriptor read/8, error -71 [ 43.019454][ T66] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.069519][ T55] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 43.090454][ T55] usb 3-1: device descriptor read/8, error -71 [ 43.169459][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 43.175593][ T66] usb 4-1: config index 0 descriptor too short (expected 548, got 36) [ 43.183858][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.194758][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.204554][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.217433][ T66] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 43.226647][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.229043][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.240166][ T55] usb 3-1: device descriptor read/8, error -71 [ 43.244345][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.249807][ T66] usb 4-1: config 0 descriptor?? [ 43.263914][ T110] udevd[110]: worker [688] terminated by signal 7 (Bus error) [ 43.274274][ T110] udevd[110]: worker [688] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 43.283577][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 43.283597][ T36] audit: type=1400 audit(1786161204.520:241): avc: denied { read } for pid=700 comm="syz.1.123" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.291890][ T110] udevd[110]: worker [689] terminated by signal 7 (Bus error) [ 43.317743][ T110] udevd[110]: worker [689] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 43.379544][ T55] usb usb3-port1: unable to enumerate USB device [ 43.473362][ T36] audit: type=1400 audit(1786161204.720:242): avc: denied { read } for pid=695 comm="syz.3.121" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.476482][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.498388][ T36] audit: type=1400 audit(1786161204.720:243): avc: denied { open } for pid=695 comm="syz.3.121" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.512212][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.528908][ T110] udevd[110]: worker [644] terminated by signal 7 (Bus error) [ 43.541946][ T36] audit: type=1400 audit(1786161204.790:244): avc: denied { ioctl } for pid=695 comm="syz.3.121" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.543911][ T110] udevd[110]: worker [644] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 43.745210][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 43.751292][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.760529][ T66] usb 4-1: USB disconnect, device number 11 [ 43.764898][ T110] udevd[110]: worker [707] terminated by signal 7 (Bus error) [ 43.774053][ T110] udevd[110]: worker [707] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 43.855957][ T712] capability: warning: `syz.1.126' uses deprecated v2 capabilities in a way that may be insecure [ 43.875127][ T715] netlink: 'syz.1.127': attribute type 12 has an invalid length. [ 43.903362][ T36] audit: type=1400 audit(1786161205.150:245): avc: denied { getopt } for pid=718 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.976808][ T730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=730 comm=syz.1.131 [ 44.015237][ T36] audit: type=1400 audit(1786161205.260:246): avc: denied { bind } for pid=734 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.032553][ T736] netlink: 100 bytes leftover after parsing attributes in process `syz.1.133'. [ 44.066953][ T36] audit: type=1400 audit(1786161205.310:247): avc: denied { connect } for pid=742 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.261336][ T745] rust_binder: 744:745 error while translating object: EBADF [ 44.268867][ T745] rust_binder: Failure in copy_transaction_data: EBADF [ 44.268893][ T745] rust_binder: 744:745 transaction call to 744:0 failed EBADF, code 0 size 104-24 [ 44.350804][ T348] rust_binder: 744: undelivered TRANSACTION_ERROR: 29201 [ 44.376859][ T750] netlink: 140 bytes leftover after parsing attributes in process `syz.3.138'. [ 44.575021][ T31] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 44.587405][ T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 44.606766][ T36] audit: type=1400 audit(1786161205.850:248): avc: denied { mount } for pid=757 comm="syz.0.141" name="/" dev="pstore" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 44.629772][ T348] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 44.635329][ T31] usb 1-1: USB disconnect, device number 10 [ 44.637363][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 44.666741][ T36] audit: type=1400 audit(1786161205.910:249): avc: denied { cmd } for pid=760 comm="syz.2.142" path="socket:[4922]" dev="sockfs" ino=4922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.757663][ T313] rust_binder: 766: undelivered transaction 64, process died [ 44.757687][ T66] rust_binder: 766: undelivered TRANSACTION_COMPLETE [ 44.757702][ T66] rust_binder: 766: undelivered TRANSACTION_COMPLETE [ 44.765411][ T313] rust_binder: 766: undelivered transaction 63, process died [ 44.791776][ T36] audit: type=1400 audit(1786161206.040:250): avc: denied { create } for pid=768 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.812410][ T348] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 44.821170][ T348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.831434][ T348] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 44.840335][ T348] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.857963][ T348] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.867108][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.875311][ T348] usb 4-1: Product: syz [ 44.880807][ T348] usb 4-1: Manufacturer: syz [ 44.882849][ T772] netlink: 'syz.2.146': attribute type 16 has an invalid length. [ 44.885429][ T348] usb 4-1: SerialNumber: syz [ 44.894280][ T110] udevd[110]: worker [733] terminated by signal 7 (Bus error) [ 44.898296][ T772] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.146'. [ 44.906171][ T348] cdc_ncm 4-1:1.0: skipping garbage [ 44.920354][ T110] udevd[110]: worker [733] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 44.921068][ T772] rust_binder: 771:772 error while translating object: EBADF [ 44.930559][ T348] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 44.938284][ T772] rust_binder: Failure in copy_transaction_data: EBADF [ 44.944569][ T772] rust_binder: 771:772 transaction call to 771:0 failed EBADF, code 0 size 104-24 [ 44.949481][ T348] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 44.967496][ T348] cdc_ncm 4-1:1.0: bind() failure [ 45.051384][ T780] netlink: 140 bytes leftover after parsing attributes in process `syz.2.149'. [ 45.124184][ T66] usb 4-1: USB disconnect, device number 12 [ 45.299488][ T348] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 45.450811][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.461812][ T348] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 45.470867][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.479908][ T348] usb 3-1: config 0 descriptor?? [ 45.688014][ T348] usbhid 3-1:0.0: can't add hid device: -71 [ 45.694075][ T348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.702683][ T348] usb 3-1: USB disconnect, device number 18 [ 45.889711][ T66] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 46.039453][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 46.045753][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.055919][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 46.067224][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 46.077007][ T66] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 46.088151][ T66] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice= 0.40 [ 46.097446][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.105489][ T66] usb 4-1: Product: syz [ 46.109812][ T66] usb 4-1: Manufacturer: syz [ 46.114417][ T66] usb 4-1: SerialNumber: syz [ 46.119460][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 46.270458][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.281461][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 46.290534][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.299208][ T31] usb 3-1: config 0 descriptor?? [ 46.330935][ T66] usb 4-1: invalid MIDI out EP 0 [ 46.340569][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.350826][ T66] usb 4-1: USB disconnect, device number 13 [ 46.705841][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.714876][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.850375][ T803] rust_binder: 802:803 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 46.858214][ T803] rust_binder: 802:803 inc_ref_done called when no active inc_refs [ 46.866166][ T803] rust_binder: 802:803 no such ref 0 [ 46.871507][ T803] rust_binder: 802:803 no such ref 0 [ 46.877648][ T803] rust_binder: 802:803 error while translating object: EBADF [ 46.885111][ T803] rust_binder: Failure in copy_transaction_data: EBADF [ 46.885136][ T803] rust_binder: 802:803 transaction call to 802:0 failed EBADF, code 0 size 104-24 [ 47.149477][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 47.300818][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.310714][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 47.319815][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.327816][ T9] usb 4-1: Product: syz [ 47.331995][ T9] usb 4-1: Manufacturer: syz [ 47.336599][ T9] usb 4-1: SerialNumber: syz [ 47.543265][ T805] fuse: Unknown parameter 'p/-n6:Hid"N ' [ 47.552554][ T805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.561301][ T805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.585142][ T9] usb 4-1: USB disconnect, device number 14 [ 47.889468][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 48.040476][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.051477][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.061292][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.074201][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.074947][ T31] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 48.083310][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.111029][ T9] usb 4-1: config 0 descriptor?? [ 48.112419][ T31] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 48.126334][ T824] netlink: 140 bytes leftover after parsing attributes in process `syz.2.159'. [ 48.155132][ T31] usb 3-1: USB disconnect, device number 19 [ 48.155206][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 48.187537][ T828] fuse: Bad value for 'rootmode' [ 48.283214][ T833] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 48.293193][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 48.293215][ T36] audit: type=1400 audit(1786161209.540:260): avc: denied { relabelto } for pid=831 comm="syz.1.161" name="38" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 48.321601][ T810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.326789][ T36] audit: type=1400 audit(1786161209.540:261): avc: denied { associate } for pid=831 comm="syz.1.161" name="38" dev="tmpfs" ino=210 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 48.335190][ T810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.574934][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 48.580952][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 48.590327][ T9] usb 4-1: USB disconnect, device number 15 [ 49.068229][ T36] audit: type=1400 audit(1786161210.310:262): avc: denied { write } for pid=294 comm="syz-executor" name="38" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 49.094290][ T36] audit: type=1400 audit(1786161210.310:263): avc: denied { remove_name } for pid=294 comm="syz-executor" name="binderfs" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 49.121596][ T36] audit: type=1400 audit(1786161210.310:264): avc: denied { rmdir } for pid=294 comm="syz-executor" name="38" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 49.243403][ T36] audit: type=1400 audit(1786161210.490:265): avc: denied { read write } for pid=840 comm="syz.3.164" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.244260][ T841] rust_binder: 840:841 error while translating object: EBADF [ 49.266741][ T36] audit: type=1400 audit(1786161210.490:266): avc: denied { open } for pid=840 comm="syz.3.164" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.274223][ T841] rust_binder: Failure in copy_transaction_data: EBADF [ 49.297508][ T36] audit: type=1400 audit(1786161210.490:267): avc: denied { ioctl } for pid=840 comm="syz.3.164" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.297920][ T841] rust_binder: 840:841 transaction call to 840:0 failed EBADF, code 0 size 104-24 [ 50.075717][ T354] rust_binder: 840: undelivered TRANSACTION_ERROR: 29201 [ 50.091892][ T846] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 50.102972][ T846] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 50.118388][ T846] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 50.140410][ T846] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 50.145960][ T849] syzkaller0: entered promiscuous mode [ 50.155512][ T849] syzkaller0: entered allmulticast mode [ 50.159444][ T846] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 50.249498][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.296845][ T36] audit: type=1400 audit(1786161211.540:268): avc: denied { name_bind } for pid=854 comm="syz.2.169" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.462758][ T853] Write-error on swap-device (8:0:787782) [ 50.468737][ T853] Write-error on swap-device (8:0:787790) [ 50.474763][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 50.475362][ T36] audit: type=1400 audit(1786161211.710:269): avc: denied { mount } for pid=859 comm="syz.1.170" name="/" dev="configfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.483738][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 50.506132][ T853] Write-error on swap-device (8:0:787798) [ 50.527688][ T853] Write-error on swap-device (8:0:787806) Aug 8 03:53:31 [ 50.536502][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 50.540258][ T853] Write-error on swap-device (8:0:787814) lert kernel: [ [ 50.554073][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 50.462758][ T8[ 50.559673][ T853] Write-error on swap-device (8:0:787822) 53] Write-error [ 50.571640][ T853] Write-error on swap-device (8:0:787830) on swap-device (8:0:787782) Aug 8 03:53:31 syz[ 50.571700][ T853] Write-error on swap-device (8:0:787838) kaller kern.alert kernel: [ 50.468737][ T853] Write-error on swap-device (8:0:787790) [ 50.571748][ T853] Write-error on swap-device (8:0:787846) [ 50.571795][ T853] Write-error on swap-device (8:0:787854) Aug 8 03:53:31 [ 50.610697][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.alert kernel: [ 50.506132][ T8[ 50.624473][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 53] Write-error on swap-device (8:0:787798) Aug 8 03:53:31 syz[ 50.638591][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 kaller kern.alert kernel: [ 50.527688][ T853] Write-error on [ 50.652973][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 swap-device (8:0[ 50.663312][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 :787806) Aug 8[ 50.673261][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 03:53:31 syzkal[ 50.683460][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 ler kern.alert kernel: [ 50.540258][ T853] Write-error on swap-device (8:0:787814) Aug 8 03:53:31 syzkaller kern.alert kernel: [ 50.559673][ T853] Write-error on swap-device (8:0:787822) Aug 8 03:53:31 syzkaller kern.alert kernel: [ 50.571640][ T853] Write-error on swap-device (8:0:787830) Aug 8 03:53:31 syzkaller kern.alert kernel: [ 50.571700][ T853] Write-error on swap-device (8:0:787838) Aug 8 03:53:31 syzkaller kern.alert kernel: [ 50.571748][ T853] Write-error on swap-device (8:0:787846) Aug 8 03:53:31 syzkaller kern.alert kernel: [ 50.571795][ T853] Write-error on swap-device (8:0:787854) [ 51.109461][ T348] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 51.270719][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.281820][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.291595][ T348] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.300727][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.309252][ T348] usb 4-1: config 0 descriptor?? [ 51.316262][ T110] udevd[110]: worker [818] terminated by signal 7 (Bus error) [ 51.323841][ T110] udevd[110]: worker [818] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 51.529443][ T354] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 51.679426][ T354] usb 3-1: Using ep0 maxpacket: 8 [ 51.685635][ T354] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.695707][ T354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.705471][ T354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.715405][ T354] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.722517][ T110] udevd[110]: worker [826] terminated by signal 7 (Bus error) [ 51.728383][ T354] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 51.736560][ T110] udevd[110]: worker [826] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 51.744966][ T354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.916253][ T348] usb 4-1: language id specifier not provided by device, defaulting to English [ 52.319578][ T348] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input10 [ 52.331763][ T876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.340441][ T876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.341008][ T348] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input11 [ 52.364616][ T348] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input12 [ 52.379579][ T348] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input13 [ 52.395770][ T348] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 52.396646][ T877] udevd[877]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 52.442442][ T110] udevd[110]: worker [820] terminated by signal 7 (Bus error) [ 52.450111][ T110] udevd[110]: worker [820] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 53.805318][ T866] 9pnet_fd: p9_fd_create_tcp (866): problem connecting socket to 127.0.0.1 [ 53.818077][ T9] usb 4-1: USB disconnect, device number 16 [ 53.827959][ T110] udevd[110]: worker [825] terminated by signal 7 (Bus error) [ 53.835626][ T110] udevd[110]: worker [825] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 54.074647][ T888] netlink: 140 bytes leftover after parsing attributes in process `syz.3.178'. [ 54.169049][ T31] usb 3-1: USB disconnect, device number 20 [ 54.198851][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 54.198868][ T36] audit: type=1400 audit(1786161215.440:278): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 54.362455][ T36] audit: type=1400 audit(1786161215.610:279): avc: denied { create } for pid=902 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.383016][ T36] audit: type=1400 audit(1786161215.610:280): avc: denied { write } for pid=902 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.407688][ T36] audit: type=1400 audit(1786161215.650:281): avc: denied { view } for pid=907 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.461259][ T908] ======================================================= [ 54.461259][ T908] WARNING: The mand mount option has been deprecated and [ 54.461259][ T908] and is ignored by this kernel. Remove the mand [ 54.461259][ T908] option from the mount to silence this warning. [ 54.461259][ T908] ======================================================= [ 54.507654][ T908] kvm: kvm [907]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc1) = 0xe50000000401 [ 54.517168][ T908] kvm: kvm [907]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc2) = 0xe50000000401 [ 54.531089][ T908] kvm: kvm [907]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x11e) = 0xe50000000401 [ 54.545621][ T908] kvm: kvm [907]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x186) = 0xe50000000401 [ 54.554997][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 54.562907][ T908] kvm: kvm [907]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x187) = 0xe50000000401 [ 54.577025][ T908] kvm_intel: kvm [907]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x1d9) = 0xe50000000401 [ 54.632261][ T36] audit: type=1400 audit(1786161215.880:282): avc: denied { mounton } for pid=910 comm="syz.3.186" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 54.632478][ T911] FAT-fs (rnullb0): bogus number of reserved sectors [ 54.662548][ T911] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 54.709446][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 54.714874][ T31] usb 3-1: no configurations [ 54.719628][ T31] usb 3-1: can't read configurations, error -22 [ 54.849499][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 54.939442][ T348] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 54.999442][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 55.004875][ T31] usb 3-1: no configurations [ 55.009514][ T31] usb 3-1: can't read configurations, error -22 [ 55.015856][ T31] usb usb3-port1: attempt power cycle [ 55.089447][ T348] usb 4-1: Using ep0 maxpacket: 8 [ 55.095779][ T348] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.105708][ T348] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.115490][ T348] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.125463][ T348] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.138561][ T348] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.147620][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.359531][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 55.379807][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 55.385286][ T31] usb 3-1: no configurations [ 55.389951][ T31] usb 3-1: can't read configurations, error -22 [ 55.523812][ T919] netlink: 140 bytes leftover after parsing attributes in process `syz.1.190'. [ 55.529783][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 55.569801][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 55.575267][ T31] usb 3-1: no configurations [ 55.579929][ T31] usb 3-1: can't read configurations, error -22 [ 55.586597][ T31] usb usb3-port1: unable to enumerate USB device [ 55.680728][ T927] netlink: 'syz.1.194': attribute type 29 has an invalid length. [ 55.708992][ T931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.717563][ T931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.962347][ T9] usb 4-1: USB disconnect, device number 17 [ 56.488248][ T941] netlink: 'syz.3.199': attribute type 3 has an invalid length. [ 56.496351][ T941] netlink: 944 bytes leftover after parsing attributes in process `syz.3.199'. [ 56.545549][ T945] netlink: 140 bytes leftover after parsing attributes in process `syz.1.200'. [ 57.331346][ T972] netlink: 140 bytes leftover after parsing attributes in process `syz.3.210'. [ 57.629471][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 57.780212][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 57.786794][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.800406][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.812167][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.822456][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.835736][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 57.844980][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.924356][ T36] audit: type=1400 audit(1786161219.170:283): avc: denied { lock } for pid=986 comm="syz.1.216" path="socket:[6847]" dev="sockfs" ino=6847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 57.963453][ T994] syz.1.218 uses obsolete (PF_INET,SOCK_PACKET) [ 57.971000][ T994] fuse: Unknown parameter '000000000000000000000000xffffffffffffffff' [ 57.988448][ T996] netlink: 140 bytes leftover after parsing attributes in process `syz.1.219'. [ 58.408204][ T1011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.418396][ T1011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.443617][ T1010] __end_swap_bio_write: 799 callbacks suppressed [ 58.443630][ T1010] Write-error on swap-device (8:0:787782) [ 58.450301][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 58.455847][ T1010] Write-error on swap-device (8:0:787790) [ 58.470447][ T1010] Write-error on swap-device (8:0:787798) Aug 8 03:53:39 [ 58.476426][ T1010] Write-error on swap-device (8:0:787806) [ 58.476515][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 58.492416][ T1010] Write-error on swap-device (8:0:787814) lert kernel: [ [ 58.499527][ T1010] Write-error on swap-device (8:0:787822) 58.443630][ T10[ 58.506601][ T1010] Write-error on swap-device (8:0:787830) 10] Write-error [ 58.513704][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 on swap-device ([ 58.518947][ T1010] Write-error on swap-device (8:0:787838) 8:0:787782) Aug[ 58.531339][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 8 03:53:39 syz[ 58.535603][ T1010] Write-error on swap-device (8:0:787846) kaller kern.aler[ 58.548626][ T1010] Write-error on swap-device (8:0:787854) t kernel: [ 58[ 58.548725][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 .455847][ T1010][ 58.566956][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Write-error on [ 58.576476][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 swap-device (8:0[ 58.579536][ T36] audit: type=1400 audit(1786161219.810:284): avc: denied { remount } for pid=1015 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 :787790) Aug 8[ 58.607844][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 03:53:39 syzkal[ 58.618660][ T1020] IPv6: NLM_F_CREATE should be specified when creating new route ler kern.alert kernel: [ 58.47[ 58.628375][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 0447][ T1010] Wr[ 58.638505][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 ite-error on swap-device (8:0:787798) Aug 8 03:53:39 syzkaller kern.alert kernel: [ 58.476426][ T1010] Write-error on swap-device (8:0:787806) Aug 8 03:53:39 syzkaller kern.alert kernel: [ 58.492416][ T1010] Write-error on swap-device (8:0:787814) Aug 8 03:53:39 syzkaller kern.alert kernel: [ 58.499527][ T1010] Write-error on swap-device (8:0:787822) Aug 8 03:53:39 syzkaller kern.alert kernel: [ 58.506601][ T1010] Write-error on swap-device (8:0:787830) Aug 8 03:53:39 syzkaller kern.alert kernel: [ 58.518947][ T1010] Write-error on swap-device (8:0:787838) Aug 8 03:53:39 syzkalle[ 58.700273][ T66] usb 3-1: USB disconnect, device number 25 r kern.alert kernel: [ 58.535603][ T1010] Write-error on swap-device (8:0:787846) Aug 8 03:53:39 syzkaller kern.alert kernel: [ 58.548626][ T1010] Write-error on swap-device (8:0:787854) [ 58.778831][ T1024] netlink: 140 bytes leftover after parsing attributes in process `syz.3.228'. [ 58.958190][ T36] audit: type=1400 audit(1786161220.200:285): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.249515][ T36] audit: type=1400 audit(1786161220.500:286): avc: denied { unlink } for pid=1043 comm="syz.2.235" name="#1" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.251270][ T1044] incfs_lookup_dentry err:-40 [ 59.271739][ T36] audit: type=1400 audit(1786161220.500:287): avc: denied { mount } for pid=1043 comm="syz.2.235" name="/" dev="overlay" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.282463][ T1044] kvm: user requested TSC rate below hardware speed [ 59.298857][ T36] audit: type=1400 audit(1786161220.520:288): avc: denied { getopt } for pid=1043 comm="syz.2.235" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.383172][ T293] ------------[ cut here ]------------ [ 59.388721][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 59.398124][ T293] Modules linked in: [ 59.402051][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 59.413708][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.423790][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 59.429468][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 59.449112][ T293] RSP: 0018:ffffc9000b6afb88 EFLAGS: 00010293 [ 59.455207][ T293] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff888101fd5f00 [ 59.463228][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.471263][ T293] RBP: ffffc9000b6afbb0 R08: ffff88811cdf615f R09: 1ffff110239bec2b [ 59.479290][ T293] R10: dffffc0000000000 R11: ffffed10239bec2c R12: 0000000000000000 [ 59.487315][ T293] R13: dffffc0000000000 R14: ffff88811cdf60c0 R15: ffff88811cdfe880 [ 59.495342][ T293] FS: 000055558289b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.504314][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.510927][ T293] CR2: 00005555828c6998 CR3: 00000001243cc000 CR4: 00000000003526b0 [ 59.518904][ T293] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 59.526922][ T293] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 59.534943][ T293] Call Trace: [ 59.538218][ T293] [ 59.541216][ T293] ovl_do_remove+0x824/0xd10 [ 59.545950][ T293] ? ovl_set_redirect+0x780/0x780 [ 59.551025][ T293] ? __cfi_down_write+0x10/0x10 [ 59.555919][ T293] ovl_rmdir+0x1e/0x30 [ 59.560028][ T293] vfs_rmdir+0x3de/0x560 [ 59.564293][ T293] incfs_kill_sb+0x102/0x220 [ 59.568878][ T293] deactivate_locked_super+0xd5/0x270 [ 59.574281][ T293] deactivate_super+0xb8/0xe0 [ 59.578973][ T293] cleanup_mnt+0x438/0x4d0 [ 59.583504][ T293] __cleanup_mnt+0x1d/0x40 [ 59.587924][ T293] task_work_run+0x1e8/0x260 [ 59.592542][ T293] ? __cfi_task_work_run+0x10/0x10 [ 59.597663][ T293] ? __x64_sys_umount+0x12e/0x180 [ 59.602723][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 59.608109][ T293] ? __kasan_check_read+0x15/0x20 [ 59.613198][ T293] resume_user_mode_work+0x35/0x50 [ 59.618343][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 59.623834][ T293] do_syscall_64+0x63/0xf0 [ 59.628285][ T293] ? clear_bhb_loop+0x50/0xa0 [ 59.633008][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.638911][ T293] RIP: 0033:0x7ff6f899f317 [ 59.643358][ T293] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 59.663011][ T293] RSP: 002b:00007ffc9dae2238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 59.671565][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6f899f317 [ 59.679578][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9dae22f0 [ 59.687558][ T293] RBP: 00007ffc9dae22f0 R08: 00007ffc9dae32f0 R09: 00000000ffffffff [ 59.696157][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9dae3380 [ 59.704417][ T293] R13: 00007ff6f8a34474 R14: 000000000000e7a9 R15: 00007ffc9dae33c0 [ 59.712462][ T293] [ 59.715492][ T293] ---[ end trace 0000000000000000 ]--- [ 59.721374][ T293] ------------[ cut here ]------------ [ 59.726854][ T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 59.736194][ T293] Modules linked in: [ 59.740120][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 59.753248][ T293] Tainted: [W]=WARN [ 59.757040][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.767130][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 59.772845][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 59.792517][ T293] RSP: 0018:ffffc9000b6afb88 EFLAGS: 00010293 [ 59.798594][ T293] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff888101fd5f00 [ 59.806596][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.814612][ T293] RBP: ffffc9000b6afbb0 R08: ffff88811cdf615f R09: 1ffff110239bec2b [ 59.822608][ T293] R10: dffffc0000000000 R11: ffffed10239bec2c R12: 0000000000000000 [ 59.830604][ T293] R13: dffffc0000000000 R14: ffff88811cdf60c0 R15: ffff88811cdfe880 [ 59.838576][ T293] FS: 000055558289b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 59.847533][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.854152][ T293] CR2: 0000555577ba2918 CR3: 00000001243cc000 CR4: 00000000003526b0 [ 59.862276][ T293] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 59.870279][ T293] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 59.878264][ T293] Call Trace: [ 59.881572][ T293] [ 59.884519][ T293] ovl_do_remove+0x824/0xd10 [ 59.889111][ T293] ? ovl_set_redirect+0x780/0x780 [ 59.894163][ T293] ? __cfi_down_write+0x10/0x10 [ 59.899042][ T293] ovl_rmdir+0x1e/0x30 [ 59.903140][ T293] vfs_rmdir+0x3de/0x560 [ 59.907392][ T293] incfs_kill_sb+0x197/0x220 [ 59.912008][ T293] deactivate_locked_super+0xd5/0x270 [ 59.917389][ T293] deactivate_super+0xb8/0xe0 [ 59.922100][ T293] cleanup_mnt+0x438/0x4d0 [ 59.926546][ T293] __cleanup_mnt+0x1d/0x40 [ 59.931033][ T293] task_work_run+0x1e8/0x260 [ 59.935637][ T293] ? __cfi_task_work_run+0x10/0x10 [ 59.940774][ T293] ? __x64_sys_umount+0x12e/0x180 [ 59.945809][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 59.951201][ T293] ? __kasan_check_read+0x15/0x20 [ 59.956236][ T293] resume_user_mode_work+0x35/0x50 [ 59.961389][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 59.966855][ T293] do_syscall_64+0x63/0xf0 [ 59.971289][ T293] ? clear_bhb_loop+0x50/0xa0 [ 59.975985][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.981934][ T293] RIP: 0033:0x7ff6f899f317 [ 59.986353][ T293] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 60.006081][ T293] RSP: 002b:00007ffc9dae2238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 60.014513][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6f899f317 [ 60.022508][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9dae22f0 [ 60.030500][ T293] RBP: 00007ffc9dae22f0 R08: 00007ffc9dae32f0 R09: 00000000ffffffff [ 60.038464][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9dae3380 [ 60.046484][ T293] R13: 00007ff6f8a34474 R14: 000000000000e7a9 R15: 00007ffc9dae33c0 [ 60.054489][ T293] [ 60.057501][ T293] ---[ end trace 0000000000000000 ]--- [ 60.063960][ T36] audit: type=1400 audit(1786161221.310:289): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1