last executing test programs: 1m21.598717237s ago: executing program 2 (id=3): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2818801}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5d, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16], 0x20}}, 0x40816) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f8c87"]}, 0x24}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7f) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$UHID_INPUT(r6, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1m21.471413359s ago: executing program 2 (id=6): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000270001000000000000000000ac1414bb000000000000000000000000fc0000000000000000000000000000010000000010040000000000c00c000000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB="b76b6e0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002277000000740b4550182195458ff59584b39a3ce079a740b2ebb37efb93a446240fab97581bb94c2aab8fc59b181a4e50e9e432ad500a9e162c73f1f488a1626bf879ac8843580d7e1c5948"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x0) (async) r4 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xa, 0x0, 0x1, 0x5, 0x9}, 0x20) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100", @ANYRES64=0x2710], 0x48}}, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) (async) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r6, 0xffff) (async) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000080)=0x7ffffffe) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r8) (async) syz_genetlink_get_family_id$nl80211(0x0, r8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, 0x0, 0x4050) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, 0x0, 0x4050) 1m20.269023158s ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x81000) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) iopl(0x0) iopl(0x4) r3 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x80100, 0x10d) move_mount(r3, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0/file0\x00', 0x100) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) 1m20.16779803s ago: executing program 2 (id=42): sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf2503000000"], 0x14}}, 0x4000001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000a25000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000011c0), 0x4e, 0x2100, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = openat(r7, &(0x7f0000000040)='./cgroup\x00', 0x40000, 0x35) read$FUSE(r8, &(0x7f0000002a40)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@clear_death], 0x0, 0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xbe, 0x9}}}}}]}}]}}, 0x0) 1m20.14397294s ago: executing program 2 (id=44): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="38010000fe0000", @ANYRESOCT=r2, @ANYRESOCT=r2], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\xb79V\xd9\xfeO\x17\xa8\xd2\xe5\xd5V\x9f\xceF\x85\x1a\a\x9e\x0fz\xb6k\xa9\xad?\xe7O\xb1\xc67T\xca\xec\x15\xc6t\xd3\xa1\x1e\xa4s\a\x19\xac\v\bN;\x02\x9ab\x9ae\x1a/\xae\xc6\xe1\x86\xd34\xb1\xfc;\xdd\x85\x93\xd3\xb6\x99]\xb5\xc4\x1d\xe5\"\xc7\x9cwKl\xa2\x9a\x9cx\f\xa6f*d\xa0z\x9c\xc1\xb1\x18\x01\xf8\xc1)F\xbd`\xac[\x860\xff\xc7\x8c\x18^\x84\x18`\xab\x0e\xb0\xe7/\x8f\x95\x87\xd6\xdb\xa5]\x01y\x15p\x8e\\\x93\xc7v\x96:\xf0v\x91\xb1{\xc3\xa09\xc8OGPI\x8e\xae\xf2_Ge\x9c\xa7\xf4\x9c\x91\xda}\x00\xa2\'$\xc4\xf4\xb0\v=d\xa9z\'Qv\x01\x13\xa6\xe9\xeb\xf9\xcf\xdc\xe3\xc0\n=\x80Y\x119\xbf'}}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 1m20.065099812s ago: executing program 32 (id=44): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="38010000fe0000", @ANYRESOCT=r2, @ANYRESOCT=r2], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\xb79V\xd9\xfeO\x17\xa8\xd2\xe5\xd5V\x9f\xceF\x85\x1a\a\x9e\x0fz\xb6k\xa9\xad?\xe7O\xb1\xc67T\xca\xec\x15\xc6t\xd3\xa1\x1e\xa4s\a\x19\xac\v\bN;\x02\x9ab\x9ae\x1a/\xae\xc6\xe1\x86\xd34\xb1\xfc;\xdd\x85\x93\xd3\xb6\x99]\xb5\xc4\x1d\xe5\"\xc7\x9cwKl\xa2\x9a\x9cx\f\xa6f*d\xa0z\x9c\xc1\xb1\x18\x01\xf8\xc1)F\xbd`\xac[\x860\xff\xc7\x8c\x18^\x84\x18`\xab\x0e\xb0\xe7/\x8f\x95\x87\xd6\xdb\xa5]\x01y\x15p\x8e\\\x93\xc7v\x96:\xf0v\x91\xb1{\xc3\xa09\xc8OGPI\x8e\xae\xf2_Ge\x9c\xa7\xf4\x9c\x91\xda}\x00\xa2\'$\xc4\xf4\xb0\v=d\xa9z\'Qv\x01\x13\xa6\xe9\xeb\xf9\xcf\xdc\xe3\xc0\n=\x80Y\x119\xbf'}}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 8.311905891s ago: executing program 4 (id=802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffffffffffc, 0x10000) close_range(r0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x1a5) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="781a02000856f1e35b6f9f125300004169519358567578ae9dfe0400000000000002b4611ffcaed1a8a0c79f4f130661f6b02de8e041759d67ce66a77b24b987cc9f2a1721ae7a"], 0x40) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xf3fa, 0x9, 0xa}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x4010744d, &(0x7f0000000000)=0x20000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000380)=[@decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000980)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f7395ee7ebb6f09b6e07fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b8"}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x6, 0x1, 0xa7f, 0x4, 0x0, 0xa9, 0x0, 0x9, 0x9, 0x3, 0x6, 0x9, 0x3, 0x7fffffffffffffff, 0x3, 0xe], 0x1000, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fspick(r1, &(0x7f0000000340)='./file0\x00', 0x0) fsmount(r5, 0x6b8d88a272a5e30b, 0x8c) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x390) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000400000000000000be79005700000000"]) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x2, 0x8000, 0x2, r4}}}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 8.143175613s ago: executing program 4 (id=810): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x22, 0xd) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) read$FUSE(r1, &(0x7f00000031c0)={0x2020}, 0x661) 8.067978545s ago: executing program 4 (id=811): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000104050000000000000000000a00000005000100"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) lsm_get_self_attr(0x68, &(0x7f00000015c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1) 8.067238154s ago: executing program 4 (id=812): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540), 0x40001b6, 0x4054) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x40000acd6, 0x10000, 0x7}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xc6, 0x0, 0xfb, 0x5}, {0x700, 0x5, 0x6, 0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r5) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x6, 0xffffffffffffffff}], {0x10, 0x1}}, 0x34, 0x3) chmod(&(0x7f0000000200)='./bus\x00', 0x44) (async) syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000001380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x29, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xb9, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x9, 0x4, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x6, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x2, 0xe6}}}}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) 775.897418ms ago: executing program 3 (id=900): creat(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') unshare(0x7e020600) lseek(r0, 0x10001, 0x0) 772.065618ms ago: executing program 1 (id=901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r4, 0x1, 0x6, @broadcast}, 0x10) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80801) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r4, 0x1, 0x6, @broadcast}, 0x10) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) (async) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 770.877658ms ago: executing program 3 (id=902): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x566afa30a48730) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRES16=r3, @ANYRES32=r2, @ANYRES64=r2, @ANYRESOCT=r4]) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x7d23000) read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 720.239769ms ago: executing program 1 (id=903): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000140)=""/120, 0x78, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x170, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x170}}, 0x4000) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x8}, 0xdb) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0xea60}}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) setns(r5, 0x10000000) 705.055139ms ago: executing program 1 (id=904): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffffe) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000340)={0x1, 0x9}, 0x0) setreuid(0x0, 0xee00) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = fcntl$dupfd(r2, 0x0, r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(r4, &(0x7f00000008c0)='\x00', 0x1001) r5 = syz_clone(0x100, &(0x7f0000000140)="bcf4a6c890888135a2e83ce99b2cfbb9ba3ce013f03baf22a4c53ec0f63877382f25", 0x22, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d5ff1902ef7cce9e043cc0e86806ecb4d3fc3887478ca0318386020a30617267bbe52572b7ec7acab6ccd72a12e39c761050407293c376563cf1daea892cb6da3e50") r6 = syz_open_procfs(r5, &(0x7f0000000300)='attr/current\x00') fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) fchdir(r6) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x26) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000540)=@urb_type_interrupt={0x1, {0xc, 0x1}, 0x0, 0x82, &(0x7f0000001900)="09b908699a957b88fa334d9145e792792f5e25b36f836f2de4219abf137265aea6a7f92d2cc8f3465d36353e99d6d660a88faa57034297fd9a621eee328218f56bd26a990d4be4cc7b37caff060ce8946cc86be4b2dbee1a9a41c95139c70b70eba1f1f5b3211793541cfc91370dac4fadf0fc98fac0eff376870ef1c11dab0c0cac39d8603f0f1db30a72ec388ffcbb1eb44e19f961179730855164a5ec72354170a199dfaa30503adae3d9cc3a410210f0aafae2ee72d3d06ffecd86ed59a957db1cff49008a4bcf00f54b467bf47eb29397b36d23563063fd5de9984bc65af0ceeace9101795e8c29d9edc286861e35c372d883c7807e0cf328a599dec058d7f51b6459e58b2575621b070fed45d0892eb1d152fef4ee182e7acdb567dbd3adece1ca2fb439979b6ee0ccc42d7c69d3e1863c5e86ba5d33ed3e79b5adeeddb985dc62a9bb49f93a7cc16635182fa92514df845728fa7436dca2414a8c98fe4dae5315774bcb6552b7e952077ad64f761da2c4dbf2a08373334534e19ff897816ecea10c185ae9a2b23615f9aeb60de2da29b2204f84dd26bdaad14e76f099ddf926113cdf8ba5e4210b092253ea02ecb86de882cfe7a2cc0f90ed28f1e16b800f0aada87fe413a887b782002e8445e39ed8ceed62c7958bae3dd1fac405e88bd7cf3b0067ae08c4382567facbe9fbe9f061c99b90a2d57de58b853a467438a356d32b81d274e14d1d590de743539b56829217297595ac5755250610f0ab8d05a3a0c7eb69ef680439877f849f9ed90c6e58fb9fee915228ae95d1b4bbe32383e695245bd32db2fd50744f84b82d8e74868637208253568fcd1e782401a139632d7e7919d2b0f4a7846ee728dd06c75c7361c399e778b086ec77fcc46c297df6704bce8cce39febaa971de0ab7ffa1262bc5d1e3a315f54cc1a0699711a421df4c7336fd051cff15f0bcb1de360b5c6248ddd8ec2bf926e7ae7344d02ec4d5a3ddae21099a633cbfc9a0c7fbd5408f5b7da8046d98725b9ab778789fab3b91f21d76380dfd807a9ffe9b7561f67f239cd9f1c99d17ffdf8d159ccb536c012b6b8a894073cbe0ddb060be58bf7c4884284e51b61af4a545504cebdffb41ecaa767381db18b3c064ac4da06c82046e5e219c560deb42995265622320ca4bf98ea8f73ceafd194c1d7b019b58583bda18e7f6be19ebdb523aa525f60d2d451005838feadf1daca7c8b9aad42d6669d22a6814ffd0780ec1c9232252234e04b0b4b43e3d9178d37e141e67b93b2a40d5fc5e7caca955472c6cecf822278cf895b826028e6f8d2c9d50710e27d682c7bbc935bfd0ca5ff77a53dcb731063e7635590bb65e5523b8904bddd1007abfa67d3af245a18914aa1ed66f04fd8267f46cc1fd2a1eb41cc882140dd1cc712755b91d6b1bcf978892dba63749d0e9ec52905c1dc2eb2da929bde400981ebf1e3d6fede4d9730c105b6eadec404de749a1e7c99433fbf935ff074dcc08ceec0d7f87d0494e416f3edf484c13ea1e9a3088edfa36f1d85774994b5e8b8bc91decb446e37e09c0d77a9fefca030687d69ecc737e6ebb2240eb60bd9f58fe33dd5180e0678715a71354b358fe1ddeb1e41e11f7d7ce08dcea3a6776c503aaa2d6c3ecddbd220d39dd7f0926a6c2b4396ef60d6459e3f4a0087d83f92abd6048a6dfba870a3eac39aef1e1832c1d8f864bd723001ef7b439ea9d10eb21d74a9f59e3443d92cc6d79f73c9c68173755cec5e6e82473ab3d142e584ea9d87fe1e3073a669593edc3fc025732bdcfd6ae3a6483cb779969df52cc9da592f096f4fbae1ff7aef2a5fa9ad859a24fa59373ddefeee21212cb92fb7ca773972d768d0849bc8a3143463c376892a75ba10544806e97481179edc0874f6cbf5ae84bae608091afac89d427bb756e7478d87327561c8aeddfb16e084933a35a7ca02bc15e4652e7519cccbf713c3491a50eec43de2e1f3e2b57da09f1c0c71418054cbe4b34e98c7019742515c72dd4badc2726cb6d22bd7b85b45ff736f6cc27a2a85e0c92a9d1254c4fa10e8ce3d0be9f50b36e75ecf0bf0a9a288b575a98a93cd7f1bdedb5aa4e6833f685b1f85ed90f44296ded5d94f9f2d009fff2cbbab0877ff190f805bce583f057e76a7685ba95d1a1087000d01fbc957b32892ff5822fddfd84bc2c3f95ad583aa9b2c417f86ea8c8fa39245451baa8034fbe91e9ed2d7693ed9d966b1d05586d1c0f27c5490632730f6f3d294b2f6d65f1543114bc6872d2b6a8c451657d95bd5810e2476592311b974cd2210cc94cbf55649f2b58797192e77459f9dac48be1155a8f110869e178a8a8e83ab0e6cfc7b9a73c3bdf7216ba2febaea60e75a51c7830a010602bf06b587bbcd687a60a4c7c8a6178324567f044b72168a0f98f753772d6e6972aa82f35ab5e1d4f940771e1faeda16f169d8491bff6cc584720423cdf0ab397c71b88d6dbffad811d710fe1bf196f24ddb9e60031da3b521bff0ae77efbf161733cb95f87066a15c877915f65ee70b077f61948e72a87da5d68cf29236ab221a0bf64495ce02d5d8d61912447c2b039cfb84721de7e62e61d2822fb8b5af90125824559d485badfc8426d9c755dd09ec9e7167b49d6d2bc38f269674887efe39217ad363a743beacf5ce78af5b57438fc862cc9b7448114b2c4e798ae06eed0ebec4e82d5576c0ca556865ebccd263f7ef7e9c26532197ef72307304c4e97dde4b69729c734c020fc362d6ce4effaf8acd950ebe92b68605bcec6c2ebfeda51a66dbd0dcea4011a0f02d9a8dacd5387c2eb07768892b0b91b5479ae168b93af5b597bb3b1fe22233251110204f422b9e48566bcbf686fc6f54286d70f94d44b4b03855422ee55c1077bf741de4b229309d2494b08582cb7656a861e4335ac0f002b658f34d8ea927586f42784bc14eef8927d51ff062e969083e6431da59cbf7df926357f737754b7272714c6460b818116133e5e916b3dcf1f2ad812fa18666f6bf0867b19f58e51b425f3963e0a1fc0909b6a637909e8430905994e0dade3e0c48166ee0c953bbcb613a52998f41c477fdaeb18407471651373958682162d72f20659ff8e7e48eb5c145c62600b0050b66d3fed189a3db5b98e3d4e2c548d2ac7719cbd0b3831ac1a242a61165653c239553267c87fc5a5f0173338ecd5bd683a94b05ec2429689e20e21ea516a05c616896761570c98c94fc942a215554ea94fdee17996ef16d141bf113887c61ab33c473c768b8f4e507cb26918c4e24d3c3907f4aa25a7c0bed64c800be4a5c2ad84bc2585013032b2b7c3d4313853db0a81685850ac874b07a065a65d8dc9797964fa580fbbc69254c20ea610b8a77fbd3a759a44c9a634b5617f90c683ab905d88b3d8b003f452f721dd485e495faade24d9f84a90d6964ad52d4d5bfe477d9b28e560e451f3b364dfb19f00239a1a9e8dd8af71d2203db4d3afe8f35620e015886d502fd14bb63b55c45de351439e17feeda7b3280369999d4384f2c2645114579128e13e1feaf694b3d23150e7424010bb2a8ad3d5251c2b4fd4005e2b53b451fcfae278403ab991125a70812f4fbb5d3f509b227809cef6bbae319d0e0127f93ac70ce1f64ae49704aa0f13d86d88714916e177a69e5029258c366b4ba43944af8f875adfc3153885620c9e94011c29376d23a8256383c4bac7c954f13761703e28c0c0737c8e8e77743a32d9157dfeb81d46647ccd0d4b03ecf1334cb05206857ef370800c9e3b7fc2c67293abbbc217e8b09b9569d9eb4862057238583c5c76d8fe7926671a30184bf2f8bec577c25d65d35ba5aada8bf478e60ca41b31b1cb3740dc0fef5ddeabc1e30bbd8f4b050ee96a24609d6b60485b9bed71042eb3685020bd1147729f369292a0a5451596bd8034767adca00a39dc6b266c2fc21bfcd36bfe443b3890c1d556178c9d45bbaafc8960c12c96ceed74ba7b817f05289d2c69365f2ec25d3409da862b38c99896f8d34413a36509c166c166669aa6dda4b0df603d4c8f685d5d780b29b3dfcdf40e52caf068a623596fb477a35b18a59199c52f41efb24c065cdd1ea29b873f52b7beafd744be4d9fb0fc004c8c52c43a2ea9d6b2cd4ac0b51bb1d48088ea59fb2fa49a313fe3ebbc8aa76c35403078e79deae1cd47219cc07a9a594e42daa5b4c78586c42d0780d776d8bc713729721a6c2099eefa6ce93104318d8b6255a74c1001e711c550dc6f71458e9b1a18ffdebfec5f7757be48a9a7a4fb98502907abb3e0f7545b1ca0ec9290d91d416dfbf6a2d12729debb52a93a0005410bbc9aca6ea58b3cf80ee779b42c77f7a225b30cdacdd417fd815a2bd0c6fe19987ef2d051556d9ff9cb06e226cc3fd740905ac07737f22f093818dbf3b6a8a8a7ab61082e84b5855a78de3c5dbca45fdd05dcc8d7869204aaf9b87ec9f0e3c65fb957f62dbb3e390fe66dfb37faeb20ca95c2075f99b5fabbdbc3f8aec3d56ed4fe9bdb1ca64f7403f7704ceb87fd79b9cd99e98289835e4678684dc9293c6d516a68e60a460f45500cdc6489cf8c91afb318cd7588f80353bb7ff511a8b1d2ee35e28f61d09d67fc4670d623377d3ede69da263f8181f3b001d09f35e4d83a57dc30e78f5a82c9504307abaf1adc53d4ac9fe0a92c075f6f8c34ecdf8b4e9e9404cb60cafd77d1046ab0ca9046a42073bd88d20a4ab57b99d7b9a95cc0e90743a8349c76ff2e71825ecab5c7be3703484be642f00f67b41298029875c77184ecd64edaf5eeb2cfcf1371f5471923d86bc2a835732cc8f0bdea39b392744941a598b0d8513848bf9a79e72d39457263cb8856845f631b6cfb6d1a77d5bd2524e9632bbadaa4ac595fc59d29b9142a7014b2a24cbb7ce49c036b54cec5f7b0b15887c1a83b4c7aec046ad1d70240cd9785f6fb02ac3a87fef79d123841a8712818ee05cf8b245f3dc1a05a30f112f43e24b370113937836ab1bcfb8b88f8b8052837640acadab2c1d79bbd5a46a119196bcfc3ced17028caebed04814608681f2d7a6067662ff13567ef63abc59cfc86c8061f388163eb713eee9cb4fb1dd207751a0998d3f15c7acc75462beeeb5c031f4286f489d6768530cb07715ac256882c4ff79a23e863c3d0b38595294ee4b3f2e7ccf0ac1c18918b21bdacf54c5b2e95058c16dbff68c1fea563eedf0a6ceb6759a58aa6254f4541f5a4b7f4375e0be1be59a8dacc03143702504143159465b44323a3f2cdd3b69178a191e062bdd11b76bad0d070023e14e2a8b18a69578db7354f992fce5025e6bde89bc8e6062d50ddec28beea7397e4659849332cc83cbddaf56569411e1b19859909f3c680c93cc08f8cb889ac87612108e713857171d2c220e6944d38f9393fe98683830f6a83d3b6ce14e1b578d6c7518d50d39918d24647d5ef5e3245f0e6e57553766eebbcab9680091ecae8b7aec4bfec795cb0705041491955e50c7c9c157b0fc725b3e04f29154f0b9fc7c93777b78b37162b34cc30a0c62b47d25005a0652077ed79b7bd4897ee23ee1dfb3bec4df39a6dceec1dd89661907a0298b84ec0afc911af939cf51b8ad497d2a30bab6c762c3ba757c8014ab7418116ad3a9ac508b499813b031e1991a49ca3c9036de8ab033a2893c4ab2dfd9961bf294e953b26d4abfd26670ea0d1778deb9fcdeb22e03a4ad2b5a7624c8cd9576f05ffdc6d075850b19fe995d009159a7ee0b6ae521e1d36957bde0d4a099c25b0f3b6efcedec337caf8946a5c330f3a3c630b", 0x1000, 0x4, 0x5, 0x0, 0x2, 0x8, &(0x7f0000000000)="c2fbb107d816d3fa4e9bf4e54b17d68748b5939e2cbdcfb88c897ca4b33a4db8a47e85e8d45b0b23cc16bca739f65c1c28e09083a4"}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xa, 0x110, r2, 0x70ff000) 655.817531ms ago: executing program 3 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)={0x6c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) 655.44684ms ago: executing program 1 (id=906): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = dup(r1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="c400000095736119b387bc276a5ac81c13b391f9c00a847282417c18c59bac8b77c30ed74ea3b96a4aab296097e6e464b54554c6d71f7a478cb86a286f4984bcae3019fe5f39ed", @ANYRES16=r4, @ANYBLOB="000128bd7000fddbdf25260000000c00990004000000600000000800a10000000000050018010400000008009f000100000008009f000000000008002700d021b6070800a000050000001e001f0000101f02000000000000000700b800050000000800837000000900001e001f000100140300000000000000f20001000600000008000f00000030000010009d000800000001000200040007002200f20049194bce24e9db95ea92930dda2db521606da87c2aefc8c282e290290c2c0000"], 0xc4}, 0x1, 0x0, 0x0, 0x240400c2}, 0x20000000) io_setup(0xe4, &(0x7f0000000000)=0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000047c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfc, r6, &(0x7f0000000040), 0x0, 0xc00000}]) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000080)=""/38, 0x0, 0x1800, 0x3, 0x7}, 0x20) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000180)={0x2}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 653.76446ms ago: executing program 1 (id=907): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f00000011c0)=0x1ff) r2 = openat$cgroup_ro(r0, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x0) (async) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) (async) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) readv(r3, &(0x7f0000002500)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) (async) readv(r3, &(0x7f0000002500)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r5 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) tkill(r5, 0x8) (async) tkill(r5, 0x8) r8 = dup2(r4, r4) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES8=r8], 0x46) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x5, 0x9, 0x1bc, 0xffffffffffffffff, 0x101, 0x883e53a, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x2000000, 0x400}) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x5, 0x9, 0x1bc, 0xffffffffffffffff, 0x101, 0x883e53a, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x2000000, 0x400}) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 644.287171ms ago: executing program 3 (id=908): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400440, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x717d, 0x3, 0xbe14, 0x9c, 0x0, "e88e76d49ad96dc88b09cc45015aeeb796f418"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x147a5000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x2, 0x4, 0xd81, 0x5}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80e00001300f19a000000000052d280ffed771ea2912404392d7a000000fe8000000000000000000000000000aaac1e040100000000000000000000000000000000000000000a00003000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000300000000000000010000000000000000000000000000000400000000000000010000000000000000000000000000000100000000000000000000000000000005000000000000000300"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x40830) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), 0x4) 579.853161ms ago: executing program 3 (id=910): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x8, 0x3, 0x1, 0xfffffffe]}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) pidfd_getfd(0xffffffffffffffff, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, 0x0, 0x5b) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x80000000]}, 0x8) 578.478151ms ago: executing program 3 (id=911): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x20, 0xe, 0x4, "c46aea6c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto(r2, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x48000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)=""/47, 0x2f}, {&(0x7f0000005180)=""/4094, 0xffe}, {&(0x7f0000000ac0)=""/238, 0xee}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000000480)=""/51, 0x33}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x3e}], 0x2, 0x97e3f8286987426c, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0xd631ea6e5c06d3d2, 0x4) 557.447552ms ago: executing program 1 (id=913): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828f27b6e"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fgetxattr(r4, &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) 351.951565ms ago: executing program 0 (id=915): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) read(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c) (async) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20404000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x13, @l2={'ib', 0x3a, '\x00'}}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async) setuid(0xee00) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r3, &(0x7f00000002c0)='./file0\x00') (async) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222020000962313068100070900be00070a0000002a7500830004e2000b09007a150b5d8c3dda5523d8c121381ddfd54316a751890a14457607e5687dc424e2ab841140b76dcc"], 0x0}, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) sendfile(r6, r1, &(0x7f0000000240)=0xffffffffffffffff, 0x101) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000200)={0x42}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 324.205905ms ago: executing program 0 (id=916): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x102102, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="b656f9a5015bc4eb175478fcff8af08088e56a6a03ad78292d7eee3202c8822888da0b1deaf380cb8484d3c74aca9931557bcea91f77f4a599303310652ac0259e917e75fe0039d6377421a4b4dcd49dcc79fa0acba12c4260dfae2656e0828b333f86146ad7b7eac4dd29db8f84fa2a6d94a300933f2e9230aeaeb238403ac98776208a8ca090738540631bf45d677cb1f564a5e9d9958b584adb655890d4e55ce3019603a552aa7bc0e5ee5fdc049e72f0de79e0725746e38ca94b65b89fffcd60c6d98a5ec17fcc9b16eb3c46882be7ac623f4e3f53452cec8361cf3ce521aa02", 0xe2}, {0x0}, {&(0x7f0000000400)="2547d180cb49f635f63164ae8d65587dd35090d0abaab89e4ac37f3e3bdf3139ff79e23bf105a79f33b6086ebde0ca0caf70155fd330e24a4e4f368ae2ff89f422fb8720c20eafc6946d301b8196ecaa24b3ccb549374865ab3f2fcff55b1083cedcd65abafa73e5766307787c04d55d383193a03c61325a71f76733639b16bd460c4f9d30a20f9c34ee07cfa20642d86e4c16cf880639d92d614666f85371db3078f3f2eb06f2eb51233a6113414e4a", 0xb0}, {&(0x7f0000000500)="b7acf632112c1c7dca7107cee3374574926af0c9c385e6c5643c4cf8f0dd9695db4a0469cdac173f640d5f37e2d170f25a24f6ef77ad138af9f6db8a00e22f810009f033f0ae1e4099b6fcf4e38cb0558b81d36d07882df9a9fc4a21adda3ffcbbf805fbba6b81d7cb7a6e828eacc2", 0x6f}, {0x0}, {0x0}], 0x6, 0xfffffe00, 0x400, 0x0) (async) preadv2(r0, &(0x7f0000002f00), 0x0, 0x2, 0x9, 0x9) 307.118136ms ago: executing program 0 (id=917): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r0, &(0x7f0000000480)=""/14, 0xd, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 220.187517ms ago: executing program 0 (id=918): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, &(0x7f0000000040)={0x0, 0x26, 0x1, @thr={&(0x7f0000000000)="39b547d0b250df5e451a", &(0x7f0000000280)="8e1e131c81f6cab7223f65f099b8901ec7fe72646bdcf0ab3e29784723941e322d51fc5b8539f1319125c4ead6d46f05a4c7ad1429ed20a3b6a8644204f0bdc0993ad81e6fdd82bbdad211b2f2e4b879da20a157d24a617c3d17a2d268cd4c486278962401b6584a69c07eb235ce24c556df43301bbf9d75cf7190786093536dea7d49f74fd14141a035d8a042b20c453a1e2bf400927ff02e778eca627aa901e9b0f5ff9028e919363c60af733728c5dbb4c5"}}, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0xfe, 0x7fff0000}]}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000089450c1391c6fc3c25ef2c4f01d300"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000089450c1391c6fc3c25ef2c4f01d300"], 0x1c}}, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003740)=""/4111, 0x100f}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000c00)=""/255, 0xff}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) (async) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003740)=""/4111, 0x100f}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000c00)=""/255, 0xff}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, 0x17, 0xa, 0x700, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}]}, 0xa4}}, 0x4040080) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) dup(r4) close_range(r2, r4, 0x2) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 202.127477ms ago: executing program 0 (id=919): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x104c008, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000240)=""/242, 0xf2) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x5d, 0x9) fadvise64(r0, 0x10000001003, 0x9, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000340)=0xe8) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000200)=@filename='./file0\x00', r5, &(0x7f0000000380)) rmdir(&(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) 167.942727ms ago: executing program 0 (id=920): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x1, 0xffffffff}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000005000000000000070000000000000000473f371a84fd8471a4dffb490651ee68679064c741e9f8060000000b3df56e"]) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000880)={{0x0, 0x0, 0x80, {0xf000, 0x1000, 0x2}}, "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", "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"}) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010003, 0x0, 0xe0}]}) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r14 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000340)="b799cbc18248f0e71446324ee69d75cd17c97ea5d1e523b1582f3a4152e3bc6a036b69cce164012751fe0f15914ad4683b93a2906e103813751ff59aea1be9b0e6ab174daa3dac60", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000180)="8a792f4147f5598b3db260dfb5191544dc5b1c77df8a71235556ee20dae5705d4e056a7bfa475e167b5b6a4f3a17ca843d70cf3d0d02ae402b96c688fd5466a86cae33e4cbd72725", 0x0, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 1.07538ms ago: executing program 4 (id=921): socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'ipvlan0\x00', {0x2, 0x0, @remote}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x32a00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 0s ago: executing program 4 (id=922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x4, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000000)={0x9, r0, 'id1\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 3][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 28.600823][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.614237][ T306] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 28.623748][ T306] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.635081][ T306] usb 4-1: can't read configurations, error -61 [ 28.649738][ T446] fuse: Unknown parameter '[-S@K`0ٵLj' [ 28.661801][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.668977][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.676396][ T441] bridge_slave_0: entered allmulticast mode [ 28.682795][ T441] bridge_slave_0: entered promiscuous mode [ 28.689575][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.696715][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.704280][ T441] bridge_slave_1: entered allmulticast mode [ 28.710542][ T441] bridge_slave_1: entered promiscuous mode [ 28.750834][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 28.757199][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 28.768532][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.778975][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.789445][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.790853][ T306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.799032][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.816926][ T10] usb 1-1: Product: syz [ 28.822853][ T10] usb 1-1: Manufacturer: syz [ 28.823751][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.831234][ T10] usb 1-1: SerialNumber: syz [ 28.834588][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.846487][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.853581][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.878902][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.886380][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.896340][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.903449][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.913189][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.920260][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.951790][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 28.952658][ T441] veth0_vlan: entered promiscuous mode [ 28.962546][ T306] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 28.972216][ T306] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.975337][ T441] veth1_macvtap: entered promiscuous mode [ 28.979825][ T306] usb 4-1: can't read configurations, error -61 [ 28.992455][ T306] usb usb4-port1: attempt power cycle [ 29.048975][ T455] netlink: 'syz.4.47': attribute type 4 has an invalid length. [ 29.059255][ T455] netlink: 'syz.4.47': attribute type 17 has an invalid length. [ 29.077464][ T455] binder: Unknown parameter '' [ 29.100447][ T457] rust_binder: Failed copying remainder into alloc: EFAULT [ 29.100467][ T457] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 29.108728][ T457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.117452][ T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9 [ 29.127536][ T458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.242575][ T10] usb 1-1: 0:2 : does not exist [ 29.263664][ T475] capability: warning: `syz.1.53' uses deprecated v2 capabilities in a way that may be insecure [ 29.292391][ T475] mmap: syz.1.53 (475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.330827][ T306] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.361433][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 29.366962][ T306] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 29.376553][ T306] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.384269][ T306] usb 4-1: can't read configurations, error -61 [ 29.520846][ T306] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.541192][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 29.551551][ T306] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 29.560474][ T306] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.568145][ T306] usb 4-1: can't read configurations, error -61 [ 29.574623][ T306] usb usb4-port1: unable to enumerate USB device [ 29.846480][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.856066][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.875009][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 29.876733][ T36] audit: type=1400 audit(1751139555.010:180): avc: denied { write } for pid=494 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.884124][ T10] usb 1-1: USB disconnect, device number 2 [ 29.931575][ T36] audit: type=1400 audit(1751139555.070:181): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.024833][ T36] audit: type=1400 audit(1751139555.160:182): avc: denied { write } for pid=501 comm="syz.0.59" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.163222][ T36] audit: type=1400 audit(1751139555.300:183): avc: denied { connect } for pid=510 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.198543][ T36] audit: type=1400 audit(1751139555.330:184): avc: denied { write } for pid=512 comm="syz.0.62" name="vlan0" dev="proc" ino=4026532786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.202645][ T513] @: renamed from bridge0 (while UP) [ 30.335018][ T517] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.347948][ T36] audit: type=1400 audit(1751139555.480:185): avc: denied { remount } for pid=516 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.349135][ T517] rust_binder: Write failure EINVAL in pid:30 [ 30.369228][ T517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 30.409383][ T36] audit: type=1400 audit(1751139555.540:186): avc: denied { create } for pid=516 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 30.489443][ T36] audit: type=1400 audit(1751139555.620:187): avc: denied { ioctl } for pid=516 comm="syz.4.63" path="socket:[3806]" dev="sockfs" ino=3806 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.513982][ T36] audit: type=1400 audit(1751139555.650:188): avc: denied { setopt } for pid=516 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.514020][ T518] x_tables: duplicate underflow at hook 1 [ 30.720231][ T36] audit: type=1400 audit(1751139555.850:189): avc: denied { create } for pid=519 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 30.808509][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 31.100008][ T544] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 31.147624][ T549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 31.410816][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.550836][ T9] usb 1-1: device descriptor read/64, error -71 [ 31.609748][ T596] 9pnet_fd: Insufficient options for proto=fd [ 31.619502][ T602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.619548][ T602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:48 [ 31.639795][ T607] can0: slcan on ptm0. [ 31.701709][ T620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'. [ 31.790840][ T9] usb 1-1: device descriptor read/64, error -71 [ 31.827110][ T636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 31.849069][ T638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.849484][ T638] rust_binder: Error while translating object. [ 31.856068][ T638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.863279][ T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 31.911163][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.030842][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.081865][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.092119][ T45] usb 4-1: config 0 has no interfaces? [ 32.099056][ T45] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 32.108207][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.116364][ T45] usb 4-1: Product: syz [ 32.120570][ T45] usb 4-1: Manufacturer: syz [ 32.125253][ T45] usb 4-1: SerialNumber: syz [ 32.130940][ T45] usb 4-1: config 0 descriptor?? [ 32.161567][ T9] usb 1-1: device descriptor read/64, error -71 [ 32.338992][ T66] usb 4-1: USB disconnect, device number 6 [ 32.400796][ T9] usb 1-1: device descriptor read/64, error -71 [ 32.510897][ T9] usb usb1-port1: attempt power cycle [ 32.565528][ T605] can0 (unregistered): slcan off ptm0. [ 32.796911][ T685] ======================================================= [ 32.796911][ T685] WARNING: The mand mount option has been deprecated and [ 32.796911][ T685] and is ignored by this kernel. Remove the mand [ 32.796911][ T685] option from the mount to silence this warning. [ 32.796911][ T685] ======================================================= [ 32.847034][ T689] incfs: Options parsing error. -22 [ 32.850880][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.852532][ T689] incfs: mount failed -22 [ 32.893693][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.021828][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.260819][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.281902][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.289191][ T713] netlink: 'syz.1.118': attribute type 4 has an invalid length. [ 33.297124][ T713] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.118'. [ 33.316878][ T716] 9pnet_fd: Insufficient options for proto=fd [ 33.370935][ T306] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.411821][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.521986][ T306] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 33.530781][ T306] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 33.541189][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 33.551249][ T9] usb usb1-port1: unable to enumerate USB device [ 33.587904][ T306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12147, setting to 1024 [ 33.599266][ T306] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 33.610616][ T306] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 33.619857][ T306] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 33.627899][ T306] usb 4-1: Product: syz [ 33.632220][ T306] usb 4-1: Manufacturer: syz [ 33.638918][ T704] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.647474][ T306] cdc_wdm 4-1:1.0: skipping garbage [ 33.652996][ T306] cdc_wdm 4-1:1.0: skipping garbage [ 33.665267][ T306] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 33.856354][ T337] usb 4-1: USB disconnect, device number 7 [ 34.162729][ T742] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 34.246703][ T752] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 34.315452][ T765] overlayfs: failed to clone upperpath [ 34.324207][ T767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=767 comm=syz.4.134 [ 34.366795][ T771] GUP no longer grows the stack in syz.1.136 (771): 200000003000-200000005000 (200000001000) [ 34.377199][ T771] CPU: 0 UID: 0 PID: 771 Comm: syz.1.136 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 34.377238][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.377263][ T771] Call Trace: [ 34.377270][ T771] [ 34.377277][ T771] __dump_stack+0x21/0x30 [ 34.377307][ T771] dump_stack_lvl+0x10c/0x190 [ 34.377327][ T771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.377347][ T771] ? find_vma+0xcd/0x110 [ 34.377370][ T771] dump_stack+0x19/0x20 [ 34.377389][ T771] __get_user_pages+0x1e34/0x22d0 [ 34.377404][ T771] ? post_alloc_hook+0x3b9/0x3f0 [ 34.377419][ T771] ? prep_new_page+0x1c/0x120 [ 34.377434][ T771] ? __kasan_check_write+0x18/0x20 [ 34.377457][ T771] ? down_read_killable+0x79/0xf0 [ 34.377479][ T771] ? populate_vma_page_range+0x230/0x230 [ 34.377497][ T771] ? kasan_unpoison+0x4a/0x70 [ 34.377518][ T771] __gup_longterm_locked+0xcb1/0x1580 [ 34.377536][ T771] ? try_get_folio+0x249/0x2a0 [ 34.377554][ T771] gup_fast_fallback+0x12ae/0x14a0 [ 34.377575][ T771] ? get_user_pages_fast_only+0xc0/0xc0 [ 34.377592][ T771] ? __kasan_check_read+0x15/0x20 [ 34.377611][ T771] ? static_key_count+0x45/0x70 [ 34.377630][ T771] get_user_pages_fast+0x73/0xb0 [ 34.377646][ T771] __iov_iter_get_pages_alloc+0x38e/0x9f0 [ 34.377674][ T771] iov_iter_get_pages2+0x68/0xb0 [ 34.377700][ T771] sk_msg_zerocopy_from_iter+0x1db/0x830 [ 34.377727][ T771] ? __cfi_sk_msg_zerocopy_from_iter+0x10/0x10 [ 34.377757][ T771] tls_sw_sendmsg+0xa1d/0x20d0 [ 34.377784][ T771] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 34.377808][ T771] ? avc_has_perm_noaudit+0x1d7/0x360 [ 34.377827][ T771] ? inet_send_prepare+0x64/0x4f0 [ 34.377846][ T771] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 34.377868][ T771] inet6_sendmsg+0x116/0x120 [ 34.377886][ T771] sock_write_iter+0x2cb/0x4f0 [ 34.377907][ T771] ? __cfi_sock_write_iter+0x10/0x10 [ 34.377931][ T771] ? selinux_file_permission+0x88b/0xb30 [ 34.377957][ T771] do_iter_readv_writev+0x4f5/0x6a0 [ 34.377981][ T771] ? vfs_iter_read+0x5f0/0x5f0 [ 34.378004][ T771] ? bpf_lsm_file_permission+0xd/0x20 [ 34.378024][ T771] vfs_writev+0x485/0xcf0 [ 34.378040][ T771] ? do_writev+0x2d0/0x2d0 [ 34.378054][ T771] ? tls_setsockopt+0x925/0xd60 [ 34.378076][ T771] ? tcp_setsockopt+0x58/0x110 [ 34.378098][ T771] do_writev+0x14d/0x2d0 [ 34.378112][ T771] ? vfs_readv+0xa50/0xa50 [ 34.378127][ T771] ? __kasan_check_write+0x18/0x20 [ 34.378146][ T771] ? fpregs_restore_userregs+0x11d/0x260 [ 34.378163][ T771] __x64_sys_writev+0x81/0x90 [ 34.378186][ T771] x64_sys_call+0x1fbb/0x2ee0 [ 34.378208][ T771] do_syscall_64+0x58/0xf0 [ 34.378223][ T771] ? clear_bhb_loop+0x50/0xa0 [ 34.378250][ T771] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.378269][ T771] RIP: 0033:0x7f3365f8e929 [ 34.378287][ T771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.378301][ T771] RSP: 002b:00007f3366e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 34.378325][ T771] RAX: ffffffffffffffda RBX: 00007f33661b5fa0 RCX: 00007f3365f8e929 [ 34.378338][ T771] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 34.378349][ T771] RBP: 00007f3366010b39 R08: 0000000000000000 R09: 0000000000000000 [ 34.378360][ T771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.378370][ T771] R13: 0000000000000000 R14: 00007f33661b5fa0 R15: 00007ffebc6cf028 [ 34.378385][ T771] [ 34.754788][ T781] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 34.779798][ T788] netlink: 'syz.0.142': attribute type 15 has an invalid length. [ 34.787727][ T788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'. [ 34.824716][ T793] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 34.833530][ T793] rust_binder: Write failure EINVAL in pid:98 [ 34.860814][ T337] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.923492][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 34.923512][ T36] audit: type=1400 audit(2000000000.640:254): avc: denied { create } for pid=804 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 34.950506][ T36] audit: type=1400 audit(2000000000.640:255): avc: denied { write } for pid=804 comm="syz.3.148" path="socket:[6501]" dev="sockfs" ino=6501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 34.974402][ T36] audit: type=1400 audit(2000000000.640:256): avc: denied { write } for pid=804 comm="syz.3.148" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.020846][ T337] usb 5-1: Using ep0 maxpacket: 8 [ 35.033688][ T337] usb 5-1: config 0 interface 0 has no altsetting 0 [ 35.040612][ T337] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 35.049763][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.059120][ T337] usb 5-1: config 0 descriptor?? [ 35.143170][ T306] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.244510][ T36] audit: type=1400 audit(2000000000.960:257): avc: denied { bind } for pid=818 comm="syz.1.154" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.264746][ T36] audit: type=1400 audit(2000000000.960:258): avc: denied { name_bind } for pid=818 comm="syz.1.154" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 35.286079][ T36] audit: type=1400 audit(2000000000.960:259): avc: denied { node_bind } for pid=818 comm="syz.1.154" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 35.291087][ T306] usb 1-1: device descriptor read/64, error -71 [ 35.307137][ T36] audit: type=1400 audit(2000000000.980:260): avc: denied { connect } for pid=818 comm="syz.1.154" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.480847][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.550983][ T306] usb 1-1: device descriptor read/64, error -71 [ 35.630798][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 35.637286][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.648387][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.661340][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.670407][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.679460][ T45] usb 4-1: config 0 descriptor?? [ 35.688133][ T337] usbhid 5-1:0.0: can't add hid device: -71 [ 35.694213][ T337] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 35.703393][ T337] usb 5-1: USB disconnect, device number 2 [ 35.800819][ T306] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.940839][ T306] usb 1-1: device descriptor read/64, error -71 [ 36.087210][ T45] HID 045e:07da: Invalid code 65791 type 1 [ 36.096387][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input4 [ 36.108638][ T36] audit: type=1400 audit(2000000001.830:261): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=452 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.121384][ T45] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 36.137600][ T36] audit: type=1400 audit(2000000001.830:262): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=452 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.170836][ T36] audit: type=1400 audit(2000000001.880:263): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=452 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.200843][ T306] usb 1-1: device descriptor read/64, error -71 [ 36.250668][ T838] SELinux: security_context_str_to_sid () failed with errno=-22 [ 36.272038][ T840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 36.280856][ T840] overlayfs: missing 'lowerdir' [ 36.291274][ T840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=840 comm=syz.4.160 [ 36.304172][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.320949][ T306] usb usb1-port1: attempt power cycle [ 36.342340][ T849] overlayfs: failed to clone upperpath [ 36.405097][ T860] netlink: 64 bytes leftover after parsing attributes in process `syz.1.165'. [ 36.670860][ T306] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.691833][ T306] usb 1-1: device descriptor read/8, error -71 [ 36.831873][ T306] usb 1-1: device descriptor read/8, error -71 [ 36.907211][ T817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.918399][ T817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.932481][ T45] usb 4-1: USB disconnect, device number 8 [ 37.054203][ T876] cgroup: subsys name conflicts with all [ 37.070977][ T306] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.091900][ T306] usb 1-1: device descriptor read/8, error -71 [ 37.104652][ T882] netlink: 168 bytes leftover after parsing attributes in process `syz.1.175'. [ 37.221941][ T306] usb 1-1: device descriptor read/8, error -71 [ 37.268637][ T907] 9pnet_fd: Insufficient options for proto=fd [ 37.330954][ T306] usb usb1-port1: unable to enumerate USB device [ 37.700828][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.850853][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 37.857315][ T45] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 37.865656][ T45] usb 4-1: config 0 has no interface number 0 [ 37.873417][ T45] usb 4-1: New USB device found, idVendor=0b05, idProduct=edda, bcdDevice= 5.46 [ 37.882786][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.891169][ T45] usb 4-1: Product: syz [ 37.895508][ T45] usb 4-1: Manufacturer: syz [ 37.900136][ T45] usb 4-1: SerialNumber: syz [ 37.915917][ T45] usb 4-1: config 0 descriptor?? [ 37.923502][ T930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 37.947639][ T935] /dev/rnullb0: Can't lookup blockdev [ 38.140945][ T337] usb 4-1: USB disconnect, device number 9 [ 38.310809][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.702587][ T969] rust_binder: Error while translating object. [ 38.702636][ T969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.709105][ T969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 39.064973][ T1003] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.083512][ T1003] binder: Unknown parameter 'ax' [ 39.148424][ T1009] binder: Unknown parameter 'euid>18446744073709551615' [ 39.166652][ T1011] rust_binder: Failed copying remainder into alloc: EFAULT [ 39.166674][ T1011] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 39.175533][ T1011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.184200][ T1011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:133 [ 39.191897][ T1013] syz.4.225 uses obsolete (PF_INET,SOCK_PACKET) [ 39.550809][ T337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.631620][ T1023] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 39.638989][ T1023] rust_binder: Write failure EINVAL in pid:109 [ 39.639296][ T1023] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 39.652699][ T1023] rust_binder: Write failure EINVAL in pid:109 [ 39.700794][ T337] usb 5-1: Using ep0 maxpacket: 16 [ 39.713313][ T337] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.725015][ T337] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.734302][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.742437][ T337] usb 5-1: Product: syz [ 39.746702][ T337] usb 5-1: Manufacturer: syz [ 39.751563][ T337] usb 5-1: SerialNumber: syz [ 39.759332][ T337] cdc_ncm 5-1:1.0: skipping garbage [ 39.764674][ T337] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 39.772198][ T337] cdc_ncm 5-1:1.0: bind() failure [ 39.962490][ T337] usb 5-1: USB disconnect, device number 3 [ 40.375066][ T1030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.231'. [ 40.397684][ T1034] netlink: 'syz.3.232': attribute type 64 has an invalid length. [ 40.636145][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 40.636165][ T36] audit: type=1400 audit(2000000006.350:284): avc: denied { ioctl } for pid=1046 comm="syz.3.238" path="socket:[7408]" dev="sockfs" ino=7408 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.725917][ T1050] rust_binder: Error while translating object. [ 40.725947][ T1050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.732257][ T1050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 40.760392][ T1052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 40.894909][ T1056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.002666][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.105693][ T1075] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 41.186218][ T36] audit: type=1400 audit(2000000006.900:285): avc: denied { ioctl } for pid=1077 comm="syz.0.248" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.264904][ T1082] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 41.275896][ T1082] rust_binder: Write failure EINVAL in pid:159 [ 41.297706][ T36] audit: type=1400 audit(2000000007.010:286): avc: denied { remount } for pid=1083 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.489644][ T36] audit: type=1400 audit(2000000007.200:287): avc: denied { connect } for pid=1087 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.762237][ T36] audit: type=1400 audit(2000000007.480:288): avc: denied { lock } for pid=1098 comm="syz.1.256" path="socket:[8347]" dev="sockfs" ino=8347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 41.800821][ T45] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 41.950827][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 42.080812][ T45] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 42.230865][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 42.236350][ T45] usb usb1-port1: attempt power cycle [ 42.298788][ T1118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.298968][ T1118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.305627][ T1118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 42.326560][ T1120] rust_binder: Write failure EFAULT in pid:142 [ 42.336420][ T36] audit: type=1400 audit(2000000008.050:289): avc: denied { ioctl } for pid=1119 comm="syz.4.263" path="socket:[7816]" dev="sockfs" ino=7816 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.470070][ T1131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.470278][ T1131] rust_binder: Error in use_page_slow: ESRCH [ 42.476887][ T1131] rust_binder: use_range failure ESRCH [ 42.482967][ T1131] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 42.488446][ T1131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.496379][ T1131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153 [ 42.580806][ T45] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 42.611336][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 42.642038][ T1134] overlayfs: failed to clone upperpath [ 42.647781][ T1133] overlayfs: failed to clone upperpath [ 42.668159][ T36] audit: type=1400 audit(2000000008.380:290): avc: denied { create } for pid=1136 comm="syz.1.268" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.689036][ T36] audit: type=1400 audit(2000000008.380:291): avc: denied { link } for pid=1136 comm="syz.1.268" name="file1" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.740825][ T306] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.770814][ T45] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 42.800847][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 42.806407][ T45] usb usb1-port1: unable to enumerate USB device [ 42.901961][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.912997][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.922834][ T306] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 42.931987][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.940691][ T306] usb 5-1: config 0 descriptor?? [ 43.030815][ T841] Bluetooth: hci0: command 0x1003 tx timeout [ 43.036893][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.342680][ T1164] netlink: 128 bytes leftover after parsing attributes in process `syz.1.277'. [ 43.350852][ T45] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 43.351992][ T1164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 43.370312][ T306] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 43.379914][ T306] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 43.412523][ T36] audit: type=1400 audit(2000000009.130:292): avc: denied { write } for pid=1170 comm="syz.1.279" path="socket:[8442]" dev="sockfs" ino=8442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.504807][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.505954][ T1179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 43.516000][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 43.535592][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.542290][ T45] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 43.551427][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.560423][ T45] usb 4-1: config 0 descriptor?? [ 43.563645][ T1188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 43.569069][ T1158] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 43.581576][ T306] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x4C [ 43.639785][ T36] audit: type=1400 audit(2000000009.350:293): avc: denied { sqpoll } for pid=1195 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.994063][ T45] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x6 [ 44.001769][ T45] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x6 [ 44.009296][ T45] holtek_mouse 0003:04D9:A067.0004: item fetching failed at offset 7/8 [ 44.017921][ T45] holtek_mouse 0003:04D9:A067.0004: hid parse failed: -22 [ 44.025118][ T45] holtek_mouse 0003:04D9:A067.0004: probe with driver holtek_mouse failed with error -22 [ 44.385756][ T306] usb 5-1: USB disconnect, device number 4 [ 44.658247][ T1227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 44.665544][ T1227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 44.672866][ T1227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 44.680162][ T1227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 44.687863][ T1227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 44.695091][ T1227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 44.808556][ T1239] vcan0: entered allmulticast mode [ 44.814076][ T1239] vcan0: left allmulticast mode [ 44.819299][ T1239] fuse: blksize only supported for fuseblk [ 44.840529][ T1242] tipc: Started in network mode [ 44.845586][ T1242] tipc: Node identity 4, cluster identity 4711 [ 44.851844][ T1242] tipc: Node number set to 4 [ 44.907530][ T1245] FAT-fs (rnullb0): bogus number of reserved sectors [ 44.914481][ T1245] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 45.014420][ T1248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.505653][ T1255] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 45.531687][ T1259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.531968][ T1259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 45.682287][ T1263] fuse: Unknown parameter 'Mi0x0000000000000003' [ 45.699132][ T1263] fuse: Unknown parameter 'roo' [ 45.699132][ T1263] *node' [ 45.736344][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 45.736364][ T36] audit: type=1400 audit(2000000011.450:300): avc: denied { mount } for pid=1266 comm="syz.1.311" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.115060][ T45] usb 4-1: USB disconnect, device number 10 [ 46.200932][ T36] audit: type=1400 audit(2000000011.920:301): avc: denied { write } for pid=1281 comm="syz.0.317" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.222786][ T36] audit: type=1400 audit(2000000011.920:302): avc: denied { remove_name } for pid=1281 comm="syz.0.317" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.246754][ T36] audit: type=1400 audit(2000000011.920:303): avc: denied { unlink } for pid=1281 comm="syz.0.317" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.425236][ T36] audit: type=1400 audit(2000000012.140:304): avc: denied { setattr } for pid=1291 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.460818][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 46.489843][ T1300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 46.490818][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 46.587837][ T36] audit: type=1400 audit(2000000012.300:305): avc: denied { add_name } for pid=1323 comm="syz.4.331" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.609376][ T36] audit: type=1400 audit(2000000012.300:306): avc: denied { create } for pid=1323 comm="syz.4.331" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.628690][ T1329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 46.632300][ T36] audit: type=1400 audit(2000000012.300:307): avc: denied { associate } for pid=1323 comm="syz.4.331" name="memory.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.647096][ T1332] tmpfs: Unknown parameter 'huze' [ 46.663864][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 46.673306][ T36] audit: type=1326 audit(2000000012.350:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1328 comm="syz.1.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3365f8e929 code=0x0 [ 46.681423][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.707862][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.717758][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.730862][ T31] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 46.742087][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.751218][ T31] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.761074][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.769120][ T31] usb 1-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 46.784407][ T45] usb 4-1: config 0 descriptor?? [ 46.795318][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 46.803262][ T31] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 46.812490][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.822648][ T31] usb 1-1: config 0 descriptor?? [ 47.000810][ T337] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 47.086334][ T1338] overlayfs: failed to get inode (-116) [ 47.092083][ T1338] overlayfs: failed to get inode (-116) [ 47.150812][ T337] usb 5-1: Using ep0 maxpacket: 32 [ 47.157445][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.168592][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.178456][ T337] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 47.187634][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.196498][ T337] usb 5-1: config 0 descriptor?? [ 47.212430][ T1278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.221062][ T1278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.231286][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.238790][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.246304][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.253776][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.261250][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.268704][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.276226][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.283697][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.291152][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.298583][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.306028][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.313491][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.320950][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.328385][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.335841][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 47.343503][ T45] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 47.356833][ T45] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 47.524065][ T66] usb 4-1: USB disconnect, device number 11 [ 47.593863][ T36] audit: type=1400 audit(2000000013.310:309): avc: denied { map } for pid=1351 comm="syz.1.341" path="socket:[9516]" dev="sockfs" ino=9516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.618635][ T337] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 47.625914][ T337] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 47.633494][ T337] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 47.640914][ T337] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 47.648197][ T337] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 47.656562][ T337] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 48.155255][ T1360] binder: Unknown parameter 'rw^F4' [ 48.770402][ T1372] netlink: 108 bytes leftover after parsing attributes in process `syz.1.349'. [ 49.253952][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 49.260083][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 49.275898][ T31] usb 1-1: USB disconnect, device number 15 [ 49.610816][ T31] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 49.735149][ T337] usb 5-1: USB disconnect, device number 5 [ 49.767145][ T1390] FAT-fs (rnullb0): bogus number of reserved sectors [ 49.772405][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 49.774887][ T1390] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 49.783067][ T31] usb 1-1: config 0 has an invalid interface number: 4 but max is 2 [ 49.803723][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.830642][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 49.852160][ T31] usb 1-1: config 0 has no interface number 0 [ 49.860182][ T31] usb 1-1: config 0 interface 4 altsetting 2 endpoint 0x2 has an invalid bInterval 242, changing to 4 [ 49.876135][ T31] usb 1-1: config 0 interface 4 altsetting 2 endpoint 0x2 has invalid maxpacket 52658, setting to 1023 [ 49.887628][ T31] usb 1-1: config 0 interface 4 has no altsetting 0 [ 49.909293][ T31] usb 1-1: New USB device found, idVendor=1435, idProduct=d111, bcdDevice=51.b1 [ 49.918937][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.927124][ T31] usb 1-1: Product: Џ [ 49.940910][ T31] usb 1-1: Manufacturer: 퓮ϕ赱앇촨푥靰ῇ䢘涎ạ⎩퍑曻⥾寨媟몹᥷肼죑ი䃧嶤ዼ‰蘆额拱縀鍡곯֎䇻な꺂켙㥂쉝囗䗌௢녫퍵ꦿ鏹윕ᖈ䣭⦅哬㱯濉䐚僁⮧㻰⪦亰뼞鑿襻堚爪㓾狹皙斔੮貘ඍ뻝쵸⽵᤭腃方탶굵寯겡ꦢꄐ [ 49.978740][ T31] usb 1-1: SerialNumber: ࠖ [ 49.987876][ T31] usb 1-1: config 0 descriptor?? [ 49.997429][ T1420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 50.018567][ T1424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.028864][ T1424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.035433][ T1424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 50.050381][ T1429] syzkaller0: entered allmulticast mode [ 50.066269][ T1429] syzkaller0: entered promiscuous mode [ 50.075476][ T1428] syzkaller0: left promiscuous mode [ 50.080902][ T1428] syzkaller0: left allmulticast mode [ 50.190856][ T66] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.232960][ T31] usb 1-1: USB disconnect, device number 16 [ 50.340824][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 50.347123][ T66] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 50.356277][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.365216][ T66] usb 4-1: config 0 descriptor?? [ 50.400801][ T453] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 50.551981][ T453] usb 5-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 50.562372][ T453] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 50.776322][ T66] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 51.056541][ T1452] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3800340960 (243221821440 ns) > initial count (201909558272 ns). Using initial count to start timer. [ 51.257452][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 51.257472][ T36] audit: type=1400 audit(2000000016.966:316): avc: denied { bind } for pid=1471 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.877577][ T1490] tipc: Enabled bearer , priority 0 [ 51.899142][ T36] audit: type=1400 audit(2000000017.606:317): avc: denied { read } for pid=1491 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.971546][ T1502] overlayfs: failed to clone upperpath [ 52.032234][ T1512] netlink: 9 bytes leftover after parsing attributes in process `syz.1.399'. [ 52.041687][ T1512] gretap0: entered promiscuous mode [ 52.048944][ T1512] netlink: 5 bytes leftover after parsing attributes in process `syz.1.399'. [ 52.058267][ T1512] 0{X: renamed from gretap0 [ 52.064914][ T1512] 0{X: left promiscuous mode [ 52.070961][ T1512] 0{X: entered allmulticast mode [ 52.077361][ T1512] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 52.247754][ T1520] tipc: Started in network mode [ 52.252976][ T1520] tipc: Node identity 6af0dc92c19f, cluster identity 4711 [ 52.260312][ T1520] tipc: Enabled bearer , priority 0 [ 52.268677][ T1520] tipc: Disabling bearer [ 52.356684][ T1533] input: syz1 as /devices/virtual/input/input5 [ 52.383663][ T36] audit: type=1400 audit(2000000018.096:318): avc: denied { read } for pid=1536 comm="syz.0.407" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.408001][ T36] audit: type=1400 audit(2000000018.096:319): avc: denied { open } for pid=1536 comm="syz.0.407" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.438705][ T36] audit: type=1400 audit(2000000018.116:320): avc: denied { ioctl } for pid=1536 comm="syz.0.407" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.471561][ T36] audit: type=1400 audit(2000000018.186:321): avc: denied { read write } for pid=1541 comm="syz.0.408" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.473521][ T9] hid-generic 0002:80000001:0001.0008: unknown main item tag 0x4 [ 52.497381][ T36] audit: type=1400 audit(2000000018.186:322): avc: denied { open } for pid=1541 comm="syz.0.408" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.504723][ T9] hid-generic 0002:80000001:0001.0008: unknown main item tag 0x7 [ 52.526523][ T36] audit: type=1400 audit(2000000018.216:323): avc: granted { setsecparam } for pid=1541 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 52.536794][ T9] hid-generic 0002:80000001:0001.0008: unexpected long global item [ 52.561232][ T9] hid-generic 0002:80000001:0001.0008: probe with driver hid-generic failed with error -22 [ 52.910789][ T9] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 53.081916][ T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.100802][ T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 53.120793][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.127466][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 53.137103][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.149389][ T9] usb 1-1: config 0 descriptor?? [ 53.154940][ T1549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.176051][ T453] usb 5-1: New USB device found, idVendor=a06d, idProduct=a06d, bcdDevice= 2.69 [ 53.192128][ T453] usb 5-1: New USB device strings: Mfr=78, Product=85, SerialNumber=239 [ 53.203937][ T453] usb 5-1: config 0 descriptor?? [ 53.210996][ T453] usb 5-1: can't set config #0, error -71 [ 53.219198][ T453] usb 5-1: USB disconnect, device number 6 [ 53.391855][ T453] usb 4-1: USB disconnect, device number 12 [ 53.571808][ T9] logitech 0003:046D:C286.0009: unknown main item tag 0x6 [ 53.590981][ T9] logitech 0003:046D:C286.0009: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 53.605746][ T9] logitech 0003:046D:C286.0009: no inputs found [ 53.819324][ T453] usb 1-1: USB disconnect, device number 17 [ 54.631831][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 54.792061][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.803156][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.812973][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.828482][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.838532][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.847776][ T9] usb 5-1: config 0 descriptor?? [ 54.900804][ T453] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 55.060888][ T453] usb 1-1: Using ep0 maxpacket: 32 [ 55.067399][ T453] usb 1-1: config 1 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 55.088992][ T453] usb 1-1: config 1 interface 0 has no altsetting 0 [ 55.103973][ T453] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.40 [ 55.115319][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.127031][ T453] usb 1-1: Product: 惈Ḓ⤅권瀽๸런溉﯃뾂鞗圤컡쉶욉焳篈碵搐踋眜︳훽싥Ŝᖴ㨘ज䨐亀礹㵞搟谞﹗ჟ鷇㜵ᑊ힮ᇔ넌඲ꏒ岗뎣곍鶽ੲ̹ꑦ祔ଁၖ赍渋ڼ␌ێ呐趯擱䖲韐ިᙜ൸䌻棒壴≛ﭠ껅㫏ᒽ㿜䒑˧ӯ䂯ꂣ鑪㐙虸昳舑ﱥ襊倽㉉ꌨ塍ԍ [ 55.158814][ T453] usb 1-1: Manufacturer: 떘莌ꦽ뾖ゞئⅤ덡ﲊ㍵椒뭥≋藟죑ෝ⭑巳鄆ⴑ村㡘졟ొ杬憔뺊喰왛ꯔ칻裂寂㮋專䘀묬⤀ᛊ꩸侦爋ﱔ㙌閁吼元괮讀貉薩몠腞뻘❐쀜老㱞뷆鎠낅ᤶ욬擌♌삻ﱩ恽阚崙蝵蕅䂫ᯖܽ铯敘ஙឲ쓑擊⚀쨻㟟뗡៉Ⓕ몈恒 [ 55.189016][ T453] usb 1-1: SerialNumber: 㨦胥銍ᖫ㋰긜靗ﹷ㲃혗闊쬜㬧㇐醌ṣ氀䤬蒢긷奱蟉獺䄴Ȧယ婴菲㾸꜊땲ჯ␧줠綖뮙⹬긕鵜飙银㑌伍ㆥ漢㍚艚໑瞻楾䚾曢ꩥ坂눉呆읔୤뉏啟᷍㇁뢙绕斲縭ㅌ㶚₽￤뻽ㆽ [ 55.257274][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 55.264122][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 55.271023][ T1634] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 55.273369][ T9] usb 5-1: USB disconnect, device number 7 [ 55.284548][ T1634] overlayfs: missing 'lowerdir' [ 55.418949][ T36] audit: type=1400 audit(2000000021.126:324): avc: denied { listen } for pid=1615 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 55.774714][ T36] audit: type=1400 audit(2000000021.486:325): avc: denied { bind } for pid=1649 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.890196][ T1660] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 55.900815][ T1660] rust_binder: Write failure EINVAL in pid:251 [ 55.952073][ T453] usbhid 1-1:1.0: can't add hid device: -71 [ 55.968536][ T453] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 55.979754][ T453] usb 1-1: USB disconnect, device number 18 [ 56.064681][ T1669] fuseblk: Unknown parameter 'uid>00000000000000000000' [ 56.232142][ T1674] sit0: entered promiscuous mode [ 56.254492][ T1674] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 56.268196][ T1674] netlink: 9 bytes leftover after parsing attributes in process `syz.0.454'. [ 56.464572][ T36] audit: type=1400 audit(2000000022.176:326): avc: denied { read } for pid=1695 comm="syz.3.460" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.489222][ T36] audit: type=1400 audit(2000000022.176:327): avc: denied { open } for pid=1695 comm="syz.3.460" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.515049][ T36] audit: type=1400 audit(2000000022.196:328): avc: denied { ioctl } for pid=1695 comm="syz.3.460" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.537322][ T337] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 56.546962][ T1698] syz.3.461 (1698): attempted to duplicate a private mapping with mremap. This is not supported. [ 56.611451][ T1699] rust_binder: Error while translating object. [ 56.611477][ T1699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 56.617680][ T1699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:226 [ 56.689925][ T36] audit: type=1400 audit(2000000022.396:329): avc: denied { create } for pid=1700 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 56.721568][ T337] usb 1-1: not running at top speed; connect to a high speed hub [ 56.730492][ T337] usb 1-1: config 255 has an invalid interface number: 161 but max is 0 [ 56.739458][ T337] usb 1-1: config 255 has no interface number 0 [ 56.746021][ T337] usb 1-1: config 255 interface 161 has no altsetting 0 [ 56.754574][ T337] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=bc.7e [ 56.763718][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.771751][ T337] usb 1-1: Product: syz [ 56.775933][ T337] usb 1-1: Manufacturer: syz [ 56.780551][ T337] usb 1-1: SerialNumber: syz [ 56.992130][ T337] snd-usb-audio 1-1:255.161: probe with driver snd-usb-audio failed with error -71 [ 57.003773][ T337] usb 1-1: USB disconnect, device number 19 [ 57.390651][ T36] audit: type=1400 audit(2000000023.096:330): avc: denied { listen } for pid=1706 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.462084][ T36] audit: type=1400 audit(2000000023.176:331): avc: denied { setopt } for pid=1706 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.483927][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 57.492014][ T45] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.596326][ T36] audit: type=1400 audit(2000000023.306:332): avc: denied { create } for pid=1730 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 57.597635][ T1731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.618086][ T1731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.625196][ T1731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 57.681737][ T1739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'. [ 57.762323][ T36] audit: type=1400 audit(2000000023.476:333): avc: denied { setattr } for pid=1738 comm="syz.0.473" name="HCI" dev="sockfs" ino=10780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.868681][ T1744] fuse: Bad value for 'group_id' [ 57.873756][ T1744] fuse: Bad value for 'group_id' [ 58.520798][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 58.607362][ T36] audit: type=1400 audit(2000000024.316:334): avc: denied { bind } for pid=1760 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.630938][ T1761] overlayfs: failed to resolve './file1': -2 [ 58.674309][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.684506][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.695882][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 58.707111][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.721545][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.730638][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.739005][ T9] usb 4-1: Product: syz [ 58.743776][ T9] usb 4-1: Manufacturer: syz [ 58.749326][ T9] usb 4-1: SerialNumber: syz [ 58.755032][ T1757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.900809][ T453] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 58.980813][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.050796][ T453] usb 1-1: Using ep0 maxpacket: 32 [ 59.057100][ T453] usb 1-1: config 1 interface 0 altsetting 177 endpoint 0x81 has an invalid bInterval 198, changing to 11 [ 59.069094][ T453] usb 1-1: config 1 interface 0 altsetting 177 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.082632][ T453] usb 1-1: config 1 interface 0 has no altsetting 0 [ 59.090885][ T453] usb 1-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.40 [ 59.099974][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.108098][ T453] usb 1-1: Product: ᐁ [ 59.112433][ T453] usb 1-1: Manufacturer: 幉‥蔛䘮ꒄﲰ㘭⪬ﰹ脋遜匃嚸య뎼ꅲ⏣摒㷦댼㟪댘푛愅ᓐ麚䇁鷚鞂ꚶ催̔⯎쎭묉듣鍫ޭ꿲 [ 59.128482][ T453] usb 1-1: SerialNumber: 䪍⍇ㅰ᧐恖넾ﯤˏಓ᝜廱衺奧笞껿茙⌕膯씥 麟㬩崳㢤효⠏ٸ﷟馁ꇳ꓌ꛠ [ 59.141140][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 59.149067][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 59.157527][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 59.166190][ T45] usb 5-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 59.176501][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 59.185532][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.196775][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.206538][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 59.219572][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 59.228678][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.237681][ T45] usb 5-1: config 0 descriptor?? [ 59.349069][ T1772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'. [ 59.350409][ T1768] 9pnet_fd: Insufficient options for proto=fd [ 59.366839][ T36] audit: type=1400 audit(2000000025.076:335): avc: granted { setsecparam } for pid=1767 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 59.374501][ T453] usbhid 1-1:1.0: can't add hid device: -71 [ 59.391907][ T453] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 59.401030][ T453] usb 1-1: USB disconnect, device number 20 [ 59.896030][ T1799] SELinux: security_context_str_to_sid () failed with errno=-22 [ 59.967521][ T1757] batadv_slave_1: entered promiscuous mode [ 59.973808][ T1756] batadv_slave_1: left promiscuous mode [ 59.980194][ T9] cdc_ncm 4-1:1.0: bind() failure [ 59.989207][ T9] usb 4-1: USB disconnect, device number 13 [ 60.150868][ T66] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 60.301881][ T66] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 60.312854][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.329158][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.339362][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 60.358365][ T66] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 60.367634][ T66] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 60.375914][ T66] usb 1-1: Manufacturer: syz [ 60.384697][ T66] usb 1-1: config 0 descriptor?? [ 60.522185][ T1821] overlayfs: failed to clone upperpath [ 60.568473][ T1823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 60.993966][ T66] usbhid 1-1:0.0: can't add hid device: -71 [ 61.001389][ T66] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 61.010612][ T66] usb 1-1: USB disconnect, device number 21 [ 61.746647][ T45] usb 5-1: USB disconnect, device number 8 [ 70.176209][ T1842] fuseblk: Unknown parameter 'fd<0xffffffffffffffff' [ 70.208049][ T1850] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 70.258697][ T1861] netlink: 116 bytes leftover after parsing attributes in process `syz.4.512'. [ 70.268269][ T1861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.268373][ T1861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.274959][ T1861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 70.440788][ T1835] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 70.601919][ T1835] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 70.611807][ T1835] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 70.623144][ T1835] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 70.632291][ T1835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.640307][ T1835] usb 1-1: Product: syz [ 70.644537][ T1835] usb 1-1: Manufacturer: syz [ 70.649186][ T1835] usb 1-1: SerialNumber: syz [ 70.654467][ T1835] usb 1-1: config 0 descriptor?? [ 70.659751][ T1842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.667060][ T1842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.734752][ T1878] fuse: Unknown parameter 'f0x0000000000000004' [ 70.874949][ T1842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.882309][ T1842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.117338][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 71.117359][ T36] audit: type=1400 audit(2000000036.826:342): avc: denied { write } for pid=1895 comm="syz.3.522" name="ptype" dev="proc" ino=4026532594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.163264][ T36] audit: type=1326 audit(2000000036.876:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02758e929 code=0x7fc00000 [ 71.186689][ T36] audit: type=1326 audit(2000000036.876:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb02758e929 code=0x7fc00000 [ 71.210115][ T36] audit: type=1326 audit(2000000036.876:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02758e929 code=0x7fc00000 [ 71.223138][ T1898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.233571][ T36] audit: type=1326 audit(2000000036.876:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02758e929 code=0x7fc00000 [ 71.242065][ T1898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.267585][ T1898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:302 [ 71.271124][ T36] audit: type=1326 audit(2000000036.876:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02758e929 code=0x7fc00000 [ 71.290936][ T1835] Error reading MAC address [ 71.328294][ T36] audit: type=1400 audit(2000000037.036:348): avc: denied { create } for pid=1899 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.381647][ T36] audit: type=1400 audit(2000000037.096:349): avc: denied { create } for pid=1907 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.389447][ T1912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.414998][ T36] audit: type=1400 audit(2000000037.116:350): avc: denied { append } for pid=1911 comm="syz.4.527" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.571410][ T1923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.579919][ T1923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.604071][ T1912] rust_binder: Error in use_page_slow: ESRCH [ 71.604099][ T1912] rust_binder: use_range failure ESRCH [ 71.610348][ T1912] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 71.616169][ T1912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 71.624553][ T1912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:308 [ 71.734031][ T1933] tipc: Enabling of bearer rejected, failed to enable media [ 71.871453][ T1953] 9pnet_fd: Insufficient options for proto=fd [ 71.936930][ T1958] tipc: Enabling of bearer rejected, already enabled [ 72.165422][ T36] audit: type=1400 audit(2000000037.876:351): avc: denied { read } for pid=1980 comm="syz.4.547" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.221724][ T1993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.274836][ T2008] netlink: 'syz.4.550': attribute type 11 has an invalid length. [ 72.275605][ T2009] incfs: Options parsing error. -22 [ 72.282114][ T2008] rust_binder: Error while translating object. [ 72.289260][ T2009] incfs: mount failed -22 [ 72.294514][ T2008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.305238][ T2008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 72.333843][ T2013] overlayfs: conflicting options: userxattr,redirect_dir=on [ 72.377390][ T2017] netlink: 124 bytes leftover after parsing attributes in process `syz.1.559'. [ 73.178650][ T1835] usb 1-1: USB disconnect, device number 22 [ 73.340823][ T31] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 73.503404][ T31] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.514850][ T31] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 73.535246][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.545819][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 73.555365][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.574021][ T31] usb 5-1: config 0 descriptor?? [ 73.589014][ T2052] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.850800][ T1835] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 74.000793][ T1835] usb 1-1: Using ep0 maxpacket: 32 [ 74.001762][ T31] logitech 0003:046D:C286.000B: unknown main item tag 0x6 [ 74.010145][ T1835] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.026287][ T1835] usb 1-1: config 1 interface 0 has no altsetting 0 [ 74.027417][ T31] logitech 0003:046D:C286.000B: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.4-1/input0 [ 74.042237][ T1835] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.40 [ 74.044719][ T31] logitech 0003:046D:C286.000B: no inputs found [ 74.060171][ T1835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.068338][ T1835] usb 1-1: Product: ⪕샥݉㶄ө鸥Ə曟줾ㅜ❏ꮌ귖驓嚮䎫쫠 [ 74.078343][ T1835] usb 1-1: Manufacturer: ⠊ [ 74.083072][ T1835] usb 1-1: SerialNumber: Ѓ [ 74.208105][ T2085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.217241][ T2085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.244501][ T10] usb 5-1: USB disconnect, device number 9 [ 74.292106][ T2089] fuse: Bad value for 'user_id' [ 74.297038][ T2089] fuse: Bad value for 'user_id' [ 74.305579][ T1835] usbhid 1-1:1.0: can't add hid device: -71 [ 74.311655][ T1835] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 74.321202][ T1835] usb 1-1: USB disconnect, device number 23 [ 74.360937][ T2098] binder: Unknown parameter 'subj_user' [ 74.582222][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.751938][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.763011][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.772794][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.785891][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.794999][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.809423][ T10] usb 5-1: config 0 descriptor?? [ 74.955766][ T2115] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 75.060864][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 75.200785][ T31] usb 1-1: device descriptor read/64, error -71 [ 75.219460][ T10] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 75.220825][ T453] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 75.237880][ T10] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 75.381960][ T453] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.393035][ T453] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.399651][ T453] usb 4-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 75.408735][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.417470][ T453] usb 4-1: config 0 descriptor?? [ 75.445748][ T31] usb 1-1: device descriptor read/64, error -71 [ 75.690825][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 75.820827][ T31] usb 1-1: device descriptor read/64, error -71 [ 75.828937][ T453] wacom 0003:056A:032F.000D: unknown main item tag 0x6 [ 75.837189][ T453] wacom 0003:056A:032F.000D: hidraw1: USB HID v0.08 Device [HID 056a:032f] on usb-dummy_hcd.3-1/input0 [ 76.029779][ T453] usb 4-1: USB disconnect, device number 14 [ 76.060869][ T31] usb 1-1: device descriptor read/64, error -71 [ 76.077407][ T2143] fuse: Bad value for 'fd' [ 76.170901][ T31] usb usb1-port1: attempt power cycle [ 76.510859][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 76.531862][ T31] usb 1-1: device descriptor read/8, error -71 [ 76.602977][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 76.603517][ T36] audit: type=1400 audit(2000000042.316:360): avc: denied { remount } for pid=2151 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.765190][ T2160] netlink: 1619 bytes leftover after parsing attributes in process `syz.1.611'. [ 76.776772][ T2160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 76.791861][ T31] usb 1-1: device descriptor read/8, error -71 [ 76.811027][ T2162] @: renamed from veth0_vlan (while UP) [ 77.030815][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 77.051857][ T31] usb 1-1: device descriptor read/8, error -71 [ 77.181805][ T31] usb 1-1: device descriptor read/8, error -71 [ 77.290970][ T31] usb usb1-port1: unable to enumerate USB device [ 77.351119][ T1835] usb 5-1: USB disconnect, device number 10 [ 77.515219][ T36] audit: type=1400 audit(2000000043.226:361): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 77.800794][ T1835] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 77.800794][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 77.936427][ T31] usb 4-1: device descriptor read/64, error -71 [ 78.050813][ T1835] usb 5-1: Using ep0 maxpacket: 8 [ 78.057558][ T1835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.066254][ T1835] usb 5-1: config 7 has an invalid interface number: 187 but max is 1 [ 78.077718][ T1835] usb 5-1: config 7 has an invalid interface number: 88 but max is 1 [ 78.085914][ T1835] usb 5-1: config 7 has no interface number 0 [ 78.092076][ T1835] usb 5-1: config 7 has no interface number 1 [ 78.098198][ T1835] usb 5-1: config 7 interface 187 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 78.109254][ T1835] usb 5-1: config 7 interface 187 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 78.121389][ T1835] usb 5-1: config 7 interface 88 altsetting 6 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 78.133085][ T1835] usb 5-1: config 7 interface 88 altsetting 6 has a duplicate endpoint with address 0x8A, skipping [ 78.143905][ T1835] usb 5-1: config 7 interface 187 has no altsetting 0 [ 78.150785][ T1835] usb 5-1: config 7 interface 88 has no altsetting 0 [ 78.161602][ T1835] usb 5-1: string descriptor 0 read error: -22 [ 78.167933][ T1835] usb 5-1: New USB device found, idVendor=05e0, idProduct=2008, bcdDevice=41.b1 [ 78.177081][ T1835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.200798][ T31] usb 4-1: device descriptor read/64, error -71 [ 78.407744][ T1835] usb 5-1: USB disconnect, device number 11 [ 78.422504][ T36] audit: type=1400 audit(2000000044.136:362): avc: denied { ioctl } for pid=2216 comm="syz.4.629" path="socket:[12102]" dev="sockfs" ino=12102 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.447212][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 78.457409][ T36] audit: type=1400 audit(2000000044.166:363): avc: denied { mount } for pid=2218 comm="syz.4.630" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.459369][ T2219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 78.510805][ T306] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 78.580801][ T31] usb 4-1: device descriptor read/64, error -71 [ 78.671924][ T306] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.683013][ T306] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 78.693787][ T306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.702679][ T306] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 78.711965][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.721140][ T306] usb 1-1: config 0 descriptor?? [ 78.726475][ T2214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.790867][ T1835] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 78.840772][ T31] usb 4-1: device descriptor read/64, error -71 [ 78.941874][ T1835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.952191][ T1835] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.961021][ T31] usb usb4-port1: attempt power cycle [ 78.965355][ T1835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.977834][ T1835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.988011][ T1835] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.000953][ T1835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.008278][ T1835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.018439][ T1835] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.031385][ T1835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.038693][ T1835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.049027][ T1835] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.062068][ T1835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.069392][ T1835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.079591][ T1835] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.092511][ T1835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.099162][ T1835] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 79.108247][ T1835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.116997][ T1835] usb 5-1: config 0 descriptor?? [ 79.123081][ T1835] hub 5-1:0.0: Invalid hub with more than one config or interface [ 79.131015][ T1835] hub 5-1:0.0: probe with driver hub failed with error -22 [ 79.139974][ T306] logitech 0003:046D:C286.000E: unknown main item tag 0x6 [ 79.147873][ T306] logitech 0003:046D:C286.000E: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 79.159342][ T306] logitech 0003:046D:C286.000E: no inputs found [ 79.300845][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 79.321865][ T31] usb 4-1: device descriptor read/8, error -71 [ 79.330649][ T2219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.339912][ T2219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.348139][ T1835] usb 1-1: USB disconnect, device number 28 [ 79.360690][ T10] usb 5-1: USB disconnect, device number 12 [ 79.451815][ T31] usb 4-1: device descriptor read/8, error -71 [ 79.690922][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 79.712058][ T31] usb 4-1: device descriptor read/8, error -71 [ 79.841938][ T31] usb 4-1: device descriptor read/8, error -71 [ 79.922023][ T36] audit: type=1400 audit(2000000045.636:364): avc: denied { unmount } for pid=441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.951018][ T31] usb usb4-port1: unable to enumerate USB device [ 87.512078][ T36] audit: type=1400 audit(2000000053.226:365): avc: denied { accept } for pid=2223 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.750802][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 87.750802][ T306] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 87.830856][ T1835] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 87.890834][ T10] usb 4-1: device descriptor read/64, error -71 [ 87.911916][ T306] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.923040][ T306] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.929668][ T306] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 87.938802][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.947693][ T306] usb 5-1: config 0 descriptor?? [ 87.982290][ T1835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.990439][ T1835] usb 1-1: not running at top speed; connect to a high speed hub [ 87.999515][ T1835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.009730][ T1835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.020196][ T1835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.029335][ T1835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.037446][ T1835] usb 1-1: Product: syz [ 88.041701][ T1835] usb 1-1: Manufacturer: syz [ 88.046304][ T1835] usb 1-1: SerialNumber: syz [ 88.140795][ T10] usb 4-1: device descriptor read/64, error -71 [ 88.259428][ T2236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.268112][ T2236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.356167][ T306] wacom 0003:056A:032F.000F: unknown main item tag 0x6 [ 88.375667][ T306] wacom 0003:056A:032F.000F: hidraw0: USB HID v0.08 Device [HID 056a:032f] on usb-dummy_hcd.4-1/input0 [ 88.381038][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 88.418987][ T1835] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 88.442743][ T1835] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.468935][ T1835] usb 1-1: USB disconnect, device number 29 [ 88.480289][ T2233] udevd[2233]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.557216][ T2166] usb 5-1: USB disconnect, device number 13 [ 88.563311][ T10] usb 4-1: device descriptor read/64, error -71 [ 88.813279][ T10] usb 4-1: device descriptor read/64, error -71 [ 88.824072][ T36] audit: type=1326 audit(2000000054.536:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2251 comm="syz.0.640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f617418e929 code=0x0 [ 88.930886][ T10] usb usb4-port1: attempt power cycle [ 89.271240][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 89.302221][ T10] usb 4-1: device descriptor read/8, error -71 [ 89.330795][ T31] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 89.433472][ T10] usb 4-1: device descriptor read/8, error -71 [ 89.481596][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 89.491291][ T31] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.504220][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.512682][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 89.521864][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.529888][ T31] usb 5-1: Product: syz [ 89.534212][ T31] usb 5-1: Manufacturer: syz [ 89.538911][ T31] usb 5-1: SerialNumber: syz [ 89.670856][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 89.692421][ T10] usb 4-1: device descriptor read/8, error -71 [ 89.838229][ T10] usb 4-1: device descriptor read/8, error -71 [ 89.947267][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 89.950965][ T10] usb usb4-port1: unable to enumerate USB device [ 90.298248][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.306738][ T2304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.307800][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.315439][ T2304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.331087][ T2255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.331135][ T2304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.344112][ T2255] rust_binder: Error while translating object. [ 90.350576][ T2255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.356805][ T2255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 90.659066][ T2311] tmpfs: Unknown parameter 'nv[inodes' [ 90.675399][ T36] audit: type=1400 audit(2000000056.386:367): avc: denied { mounton } for pid=2305 comm="syz.3.656" path="/109/file0" dev="tmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 90.699198][ T2306] random: crng reseeded on system resumption [ 90.705307][ T36] audit: type=1400 audit(2000000056.406:368): avc: denied { write } for pid=2305 comm="syz.3.656" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.740804][ T36] audit: type=1400 audit(2000000056.406:369): avc: denied { open } for pid=2305 comm="syz.3.656" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.764273][ T36] audit: type=1400 audit(2000000056.446:370): avc: denied { mounton } for pid=2314 comm="syz.1.660" path="/294/file0" dev="tmpfs" ino=1616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.788976][ T36] audit: type=1400 audit(2000000056.496:371): avc: denied { ioctl } for pid=2305 comm="syz.3.656" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.830594][ T2318] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 91.100809][ T453] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 91.251894][ T453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.262890][ T453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.272776][ T453] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.285704][ T453] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.294780][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.303564][ T453] usb 4-1: config 0 descriptor?? [ 91.528169][ T36] audit: type=1326 audit(2000000057.236:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2329 comm="syz.0.667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f617418e929 code=0x0 [ 91.835246][ T36] audit: type=1400 audit(2000000057.546:373): avc: denied { read } for pid=2321 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.923209][ T453] usbhid 4-1:0.0: can't add hid device: -71 [ 91.929276][ T453] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.937076][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 91.945617][ T453] usb 4-1: USB disconnect, device number 23 [ 92.096356][ T10] usb 5-1: USB disconnect, device number 14 [ 92.100830][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 92.106879][ T10] usblp0: removed [ 92.110617][ T45] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 92.119958][ T45] usb 1-1: config 0 has no interface number 0 [ 92.128122][ T45] usb 1-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.141539][ T45] usb 1-1: config 0 interface 196 has no altsetting 0 [ 92.152113][ T2339] binder: Bad value for 'defcontext' [ 92.152388][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 92.167072][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.175194][ T45] usb 1-1: Product: syz [ 92.179425][ T45] usb 1-1: Manufacturer: syz [ 92.184081][ T45] usb 1-1: SerialNumber: syz [ 92.189428][ T45] usb 1-1: config 0 descriptor?? [ 92.263303][ T2343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.277137][ T2346] fuse: Bad value for 'fd' [ 92.312726][ T2348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 92.321955][ T2349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 92.331976][ T2348] netlink: 168 bytes leftover after parsing attributes in process `syz.1.672'. [ 92.333790][ T36] audit: type=1400 audit(2000000058.046:374): avc: denied { create } for pid=2347 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.385687][ T2343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.385726][ T2343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 92.434498][ T304] tipc: Subscription rejected, illegal request [ 92.523259][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.523292][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.529812][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.536485][ T2358] rust_binder: Error while translating object. [ 92.536718][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.542986][ T2358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.555695][ T2358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 92.558948][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.578455][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.585175][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.591861][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.598387][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.604874][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.611376][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.617831][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.624316][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.630828][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.637292][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.643880][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.650337][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.657583][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.664152][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.670696][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.677265][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.683791][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.690279][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.696813][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.704382][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.710877][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.717336][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.723817][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.730271][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.736757][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.743244][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.749701][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.139057][ T2371] tap0: tun_chr_ioctl cmd 1074025677 [ 93.151140][ T2371] tap0: linktype set to 774 [ 93.222223][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 93.222242][ T36] audit: type=1400 audit(2000000058.936:378): avc: denied { getopt } for pid=2372 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.222594][ T2373] binder: Bad value for 'defcontext' [ 93.291845][ T2378] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 93.425393][ T36] audit: type=1400 audit(2000000059.136:379): avc: denied { create } for pid=2379 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.660793][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 93.793355][ T2383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.793411][ T2385] rust_binder: Error in use_page_slow: ESRCH [ 93.799983][ T2385] rust_binder: use_range failure ESRCH [ 93.806175][ T2385] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 93.811753][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 93.812096][ T2385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 93.821308][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.825085][ T2385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:380 [ 93.835262][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 93.859808][ T31] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 93.870022][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.880684][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.889834][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.897932][ T31] usb 4-1: Product: syz [ 93.902156][ T31] usb 4-1: Manufacturer: syz [ 93.906817][ T31] usb 4-1: SerialNumber: syz [ 93.914951][ T2392] binder: Bad value for 'stats' [ 94.115481][ T31] usb 4-1: 0:2 : does not exist [ 94.115652][ T2406] FAT-fs (rnullb0): bogus number of reserved sectors [ 94.128190][ T2406] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 94.316187][ T10] usb 4-1: USB disconnect, device number 24 [ 94.322477][ T2408] overlayfs: failed to clone upperpath [ 94.330940][ T306] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 94.481989][ T306] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.493191][ T306] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.499908][ T306] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 94.509114][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.518530][ T306] usb 5-1: config 0 descriptor?? [ 94.527333][ T2426] overlayfs: failed to clone upperpath [ 94.598494][ T45] ipheth 1-1:0.196: Unable to find alternate settings interface [ 94.607681][ T45] usb 1-1: USB disconnect, device number 30 [ 94.671560][ T2440] xfrm0: mtu less than device minimum [ 94.715921][ T2445] kvm: pic: non byte write [ 94.925785][ T306] usbhid 5-1:0.0: can't add hid device: -71 [ 94.934148][ T306] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.945510][ T306] usb 5-1: USB disconnect, device number 15 [ 95.029872][ T2462] rust_binder: Write failure EINVAL in pid:358 [ 95.070818][ T10] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 95.126697][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.140592][ T2485] tipc: Enabling of bearer rejected, already enabled [ 95.206300][ T2492] netlink: 188 bytes leftover after parsing attributes in process `syz.1.718'. [ 95.251875][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 95.270789][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.279671][ T10] usb 1-1: config 0 descriptor?? [ 95.320784][ T36] audit: type=1400 audit(2000000061.027:380): avc: denied { create } for pid=2496 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 95.397507][ T2502] fuseblk: Bad value for 'fd' [ 95.484310][ T2513] overlayfs: failed to resolve './file1': -2 [ 95.515281][ T2511] kvm: pic: non byte write [ 95.566014][ T2523] netlink: 48 bytes leftover after parsing attributes in process `syz.1.728'. [ 95.603938][ T2526] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 95.603985][ T2526] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.612994][ T2526] rust_binder: Read failure Err(EFAULT) in pid:404 [ 95.623179][ T36] audit: type=1400 audit(2000000061.337:381): avc: denied { accept } for pid=2525 comm="syz.1.730" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.698001][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 95.711175][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 95.725806][ T2535] netlink: 176 bytes leftover after parsing attributes in process `syz.4.731'. [ 95.735075][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 95.758022][ T10] usb 1-1: USB disconnect, device number 31 [ 95.809989][ T304] tipc: Subscription rejected, illegal request [ 95.832693][ T2546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.736'. [ 95.843381][ T2546] rust_binder: Error while translating object. [ 95.843416][ T2546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.849629][ T2546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:410 [ 95.870871][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.880301][ T2548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 95.887442][ T2548] rust_binder: Error while translating object. [ 95.896690][ T2548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.902999][ T2548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 95.928415][ T2555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.089122][ T36] audit: type=1400 audit(2000000061.797:382): avc: denied { execute } for pid=2564 comm="syz.1.744" name="file1" dev="tmpfs" ino=1866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.117863][ T2568] process 'syz.1.744' launched './file1' with NULL argv: empty string added [ 96.134678][ T36] audit: type=1400 audit(2000000061.837:383): avc: denied { execute_no_trans } for pid=2564 comm="syz.1.744" path="/340/file1" dev="tmpfs" ino=1866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.176627][ T2570] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.184572][ T2570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.191849][ T2570] IPv6: NLM_F_CREATE should be set when creating new route [ 96.306965][ T36] audit: type=1400 audit(2000000062.017:384): avc: denied { setattr } for pid=2588 comm="syz.0.752" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 96.471972][ T2603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411 [ 96.480695][ T2603] rust_binder: Error while translating object. [ 96.489958][ T2603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.500821][ T2603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411 [ 96.554767][ T36] audit: type=1400 audit(2000000062.267:385): avc: denied { append } for pid=2608 comm="syz.0.759" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.596226][ T36] audit: type=1400 audit(2000000062.307:386): avc: denied { relabelfrom } for pid=2608 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.622571][ T36] audit: type=1400 audit(2000000062.307:387): avc: denied { relabelto } for pid=2608 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.724362][ T2619] tipc: Enabled bearer , priority 0 [ 96.747579][ T2619] tipc: Disabling bearer [ 96.874094][ T2630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.886905][ T2632] SELinux: security_context_str_to_sid () failed with errno=-22 [ 97.030901][ T10] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 97.190817][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.196723][ T841] Bluetooth: hci0: command 0x1003 tx timeout [ 97.230795][ T1835] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 97.382118][ T1835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.393815][ T1835] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 97.403023][ T1835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.411099][ T1835] usb 5-1: Product: syz [ 97.415345][ T1835] usb 5-1: Manufacturer: syz [ 97.419954][ T1835] usb 5-1: SerialNumber: syz [ 97.428017][ T1835] usb 5-1: config 0 descriptor?? [ 97.434341][ T1835] usb 5-1: bad CDC descriptors [ 97.439299][ T1835] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 97.447172][ T1835] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 97.453803][ T1835] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 97.510797][ T66] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 97.660778][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 97.667676][ T66] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.680728][ T66] usb 4-1: config 1 interface 0 has no altsetting 0 [ 97.689160][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.698409][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.706492][ T66] usb 4-1: Product: 萠ⶱ쩶鹹ૢ湔ﱬྐྵ녦뭉䷴ᕟ=ೃ〗ᱤ쯸唄嗐鮞髮徬㔓鴩嘤䥉庂뭎鴉蜗᷼䞏业ఇ뭤앂긅꿤ꭈഓ껚虋㾬趪煘튊ᦒ [ 97.723835][ T66] usb 4-1: Manufacturer: 㽹犱ỳ핥⾹㢐﯒嫮ㆢ季୺炅⏁䝲詥啻줺袅ꬾ篥⿃䗏ସ栞儭㠤댣Ƥ玅珍眾⚴䋾ⶍ㾲彿⛊켵⫎텉檣皊∄넓ᱡ䛹鹖缁퀒귺欖疨㭲鏩搒쾍퐧뿨鲌ꚽ鷕拟࠸뷣师韴㞆쳪뼴﮴Ր沔☌ꙣꦲꄼብ蔦颭䓚砑ဳఉ䌸嫰⠍숇练㝅ސ쪕姃䈼퀊ꁩ휖噡ኃ椱骫澖㮺㔕憿띸 [ 97.758816][ T66] usb 4-1: SerialNumber: ࡃ [ 97.764673][ T2654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.173889][ T2654] fuse: Unknown parameter 'fowner<00000000000000000000' [ 98.182372][ T2654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.191320][ T2654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.203838][ T66] usb 4-1: USB disconnect, device number 25 [ 98.555943][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 98.555963][ T36] audit: type=1326 audit(2000000064.267:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3365f8e929 code=0x0 [ 98.795019][ T36] audit: type=1400 audit(2000000064.507:392): avc: denied { read } for pid=2680 comm="syz.3.784" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.320803][ T453] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 99.424978][ T36] audit: type=1400 audit(2000000065.137:393): avc: denied { bind } for pid=2696 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.471920][ T453] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.483501][ T453] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.490240][ T453] usb 4-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 99.499579][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.514656][ T453] usb 4-1: config 0 descriptor?? [ 99.923475][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.930465][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.937418][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.944395][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.951374][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.958535][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.965597][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.972579][ T453] wacom 0003:056A:032F.0010: unknown main item tag 0x0 [ 99.981444][ T453] wacom 0003:056A:032F.0010: hidraw0: USB HID v0.08 Device [HID 056a:032f] on usb-dummy_hcd.3-1/input0 [ 100.029326][ T453] usb 5-1: USB disconnect, device number 16 [ 100.126211][ T45] usb 4-1: USB disconnect, device number 26 [ 100.181589][ T2735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.189098][ T2735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.197338][ T2735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:443 [ 100.225260][ T36] audit: type=1400 audit(2000000065.937:394): avc: denied { mount } for pid=2740 comm="syz.1.804" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 100.257424][ T36] audit: type=1400 audit(2000000065.937:395): avc: denied { search } for pid=2740 comm="syz.1.804" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.279801][ T36] audit: type=1400 audit(2000000065.937:396): avc: denied { read } for pid=2740 comm="syz.1.804" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.304633][ T36] audit: type=1400 audit(2000000065.937:397): avc: denied { open } for pid=2740 comm="syz.1.804" path="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.348949][ T36] audit: type=1400 audit(2000000065.937:398): avc: denied { ioctl } for pid=2740 comm="syz.1.804" path="/" dev="configfs" ino=2540 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.377546][ T36] audit: type=1400 audit(2000000065.937:399): avc: denied { write } for pid=2740 comm="syz.1.804" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.412082][ T2748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.428548][ T2758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 100.721449][ T36] audit: type=1400 audit(2000000066.437:400): avc: denied { shutdown } for pid=2771 comm="syz.3.814" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.846014][ T2775] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 101.258614][ T2793] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 101.357356][ T2810] overlayfs: failed to clone lowerpath [ 101.381185][ T2815] tipc: Enabling of bearer rejected, already enabled [ 101.450794][ T45] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 101.600774][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 101.607152][ T45] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 101.615739][ T45] usb 1-1: config 0 has no interface number 0 [ 101.622155][ T45] usb 1-1: config 0 interface 155 has no altsetting 0 [ 101.630640][ T45] usb 1-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice=32.14 [ 101.640258][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.648543][ T45] usb 1-1: Product: syz [ 101.653080][ T45] usb 1-1: Manufacturer: syz [ 101.657792][ T45] usb 1-1: SerialNumber: syz [ 101.663692][ T45] usb 1-1: config 0 descriptor?? [ 101.780862][ T2821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 102.032659][ T2829] binder: Unknown parameter '00000000000000000000003' [ 102.583624][ T45] usb-storage 1-1:0.155: USB Mass Storage device detected [ 102.615682][ T2848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:469 [ 102.629159][ T2850] rust_binder: Write failure EINVAL in pid:471 [ 102.645839][ T45] usb 1-1: USB disconnect, device number 33 [ 102.950862][ T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 102.968197][ T2859] tipc: Enabling of bearer rejected, already enabled [ 102.976660][ T2859] tipc: Enabling of bearer rejected, already enabled [ 102.985001][ T2859] tipc: Enabling of bearer rejected, already enabled [ 102.993593][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.002202][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.010517][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.019567][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.028930][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.038333][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.047169][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.055704][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.064127][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.072538][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.080939][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.089257][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.097653][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.105977][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.114323][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.122633][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.131109][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.132129][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.139544][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.150694][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.159016][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.169661][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.177724][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.187429][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.196078][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.209579][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.217178][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.225996][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.234725][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.242318][ T45] usb 1-1: Manufacturer: syz [ 103.250873][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.263482][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.263583][ T45] usb 1-1: config 0 descriptor?? [ 103.271989][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.285523][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.293805][ T2166] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 103.294328][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.309732][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.318121][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.326434][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.334833][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.343133][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.351648][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.360093][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.368424][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.376825][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.385171][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.393574][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.401923][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.410203][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.418551][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.426907][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.435249][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.443585][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.451944][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.460260][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.462033][ T2166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.468736][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.479873][ T2166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.487991][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.498006][ T2166] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.506018][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.519050][ T2166] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.527106][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.536223][ T2166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.544374][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.557560][ T2166] usb 4-1: config 0 descriptor?? [ 103.560513][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.573598][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.581945][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.590280][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.598671][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.606997][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.615449][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.623848][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.632200][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.640558][ T2859] tipc: Enabling of bearer rejected, already enabled [ 103.707155][ T45] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 103.714498][ T45] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 103.723367][ T45] appleir 0003:05AC:8243.0011: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 103.967488][ T2862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.976322][ T2862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.986865][ T2862] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 103.992665][ T2862] pim6reg0: linktype set to 769 [ 104.143205][ T2166] usbhid 4-1:0.0: can't add hid device: -71 [ 104.149245][ T2166] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.164724][ T2166] usb 4-1: USB disconnect, device number 27 [ 104.273599][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 104.273620][ T36] audit: type=1326 audit(2000000069.987:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2876 comm="syz.1.847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3365f8e929 code=0x0 [ 105.568882][ T2903] tipc: Can't bind to reserved service type 2 [ 105.575511][ T2903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 105.575545][ T2903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:476 [ 105.585707][ T2905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.605061][ T2909] 9pnet_fd: Insufficient options for proto=fd [ 105.643593][ T2916] binder: Unknown parameter 'fscontext?}' [ 105.649642][ T36] audit: type=1400 audit(2000000071.357:408): avc: denied { map } for pid=2917 comm="syz.3.861" path="pipe:[2973]" dev="pipefs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.050996][ T45] usb 1-1: USB disconnect, device number 34 [ 106.180816][ T45] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 106.233514][ T2954] rust_binder: Failed to allocate buffer. len:1128, is_oneway:true [ 106.342267][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.358467][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 106.367474][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.379275][ T45] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 106.388435][ T45] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 106.396604][ T45] usb 1-1: Product: syz [ 106.402001][ T45] usb 1-1: Manufacturer: syz [ 106.406657][ T45] usb 1-1: SerialNumber: syz [ 106.416465][ T45] usb 1-1: config 0 descriptor?? [ 106.600804][ T66] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 106.637400][ T45] usb 1-1: USB disconnect, device number 35 [ 106.700832][ T2993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.750786][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 106.764134][ T66] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 106.771350][ T36] audit: type=1400 audit(2000000072.477:409): avc: denied { accept } for pid=2996 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 106.772774][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.802740][ T66] usb 4-1: config 1 has no interface number 1 [ 106.808865][ T66] usb 4-1: too many endpoints for config 1 interface 4 altsetting 0: 249, using maximum allowed: 30 [ 106.819960][ T66] usb 4-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 106.833211][ T66] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.847859][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.857164][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.865369][ T66] usb 4-1: Product: syz [ 106.869613][ T66] usb 4-1: Manufacturer: syz [ 106.877686][ T3000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 106.880631][ T66] usb 4-1: SerialNumber: syz [ 107.057678][ T3014] binder: Unknown parameter 'context' [ 107.110920][ T66] usb 4-1: USB disconnect, device number 28 [ 107.593238][ T3023] netlink: 9 bytes leftover after parsing attributes in process `syz.1.896'. [ 107.602452][ T3023] 0{X: entered promiscuous mode [ 107.607753][ T3023] 0{X: left allmulticast mode [ 107.613809][ T3023] netlink: 5 bytes leftover after parsing attributes in process `syz.1.896'. [ 107.622669][ T3023] 1{X: renamed from 30{X [ 107.628465][ T3023] 1{X: left promiscuous mode [ 107.633814][ T3023] 1{X: entered allmulticast mode [ 107.640105][ T3023] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 107.727938][ T3035] veth0: entered promiscuous mode [ 107.791474][ T3042] veth0: left promiscuous mode [ 107.842650][ T3050] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 107.906557][ T36] audit: type=1400 audit(2000000073.617:410): avc: denied { append } for pid=3061 comm="syz.0.909" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.951043][ T3069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.962834][ T3069] rust_binder: Error in use_page_slow: ESRCH [ 107.969424][ T3069] rust_binder: use_range failure ESRCH [ 107.975693][ T3069] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 107.981213][ T3069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 107.989225][ T3069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:525 [ 108.035978][ T3073] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 108.130948][ T36] audit: type=1400 audit(2000000073.847:411): avc: denied { append } for pid=3074 comm="syz.0.915" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.190892][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 108.217746][ T3085] fuse: Bad value for 'user_id' [ 108.222695][ T3085] fuse: Bad value for 'user_id' [ 108.241832][ T36] audit: type=1326 audit(2000000073.957:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3086 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617418e929 code=0x7ffc0000 [ 108.242333][ T3088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 108.265183][ T36] audit: type=1326 audit(2000000073.957:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3086 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617418e929 code=0x7ffc0000 [ 108.274550][ T3087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 108.297470][ T36] audit: type=1326 audit(2000000073.957:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3086 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f617418e929 code=0x7ffc0000 [ 108.329484][ T36] audit: type=1326 audit(2000000073.957:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3086 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617418e929 code=0x7ffc0000 [ 108.352788][ T45] usb 4-1: device descriptor read/64, error -71 [ 108.359160][ T36] audit: type=1326 audit(2000000073.957:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3086 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617418e929 code=0x7ffc0000 [ 108.492613][ T3099] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 108.492613][ T3099] null pointer dereference occurred [ 108.505318][ T3099] ------------[ cut here ]------------ [ 108.510862][ T3099] kernel BUG at rust/helpers/bug.c:7! [ 108.517454][ T3099] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 108.524446][ T3099] CPU: 0 UID: 0 PID: 3099 Comm: syz.4.922 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 108.537823][ T3099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.547891][ T3099] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 108.553194][ T3099] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 93 59 b2 c5 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d9 9d fb 49 90 90 90 90 90 90 90 90 90 [ 108.572909][ T3099] RSP: 0018:ffffc90006d871b0 EFLAGS: 00010246 [ 108.579015][ T3099] RAX: 000000000000005a RBX: 1ffff92000db0e38 RCX: 9f686d751cfead00 [ 108.587003][ T3099] RDX: ffffc9000cc9f000 RSI: 0000000000002ba8 RDI: 0000000000002ba9 [ 108.594992][ T3099] RBP: ffffc90006d871b0 R08: ffffc90006d86ea7 R09: 1ffff92000db0dd4 [ 108.602982][ T3099] R10: dffffc0000000000 R11: fffff52000db0dd5 R12: 0000000000000000 [ 108.610959][ T3099] R13: dffffc0000000000 R14: ffffc90006d871e0 R15: ffffc90006d87210 [ 108.618944][ T3099] FS: 00007fb0283166c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 108.627880][ T3099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.634470][ T3099] CR2: 0000200000001000 CR3: 000000011dd9e000 CR4: 00000000003526b0 [ 108.642447][ T3099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.650426][ T3099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.650855][ T45] usb 4-1: device descriptor read/64, error -71 [ 108.658402][ T3099] Call Trace: [ 108.658415][ T3099] [ 108.658426][ T3099] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 108.678367][ T3099] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 108.686368][ T3099] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 108.699934][ T3099] ? p9pdu_vwritef+0x2720/0x2720 [ 108.704890][ T3099] ? radix_tree_node_alloc+0x1af/0x400 [ 108.710362][ T3099] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 108.718715][ T3099] ? __asan_memcpy+0x5a/0x80 [ 108.723316][ T3099] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 108.731400][ T3099] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 108.740187][ T3099] ? p9pdu_writef+0xdb/0x130 [ 108.744792][ T3099] ? p9pdu_vwritef+0x2720/0x2720 [ 108.749839][ T3099] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 108.758971][ T3099] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 108.767838][ T3099] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 108.775684][ T3099] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 108.783338][ T3099] ? p9_client_prepare_req+0x732/0xa10 [ 108.788820][ T3099] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 108.797089][ T3099] ? __kasan_check_write+0x18/0x20 [ 108.802214][ T3099] ? _raw_spin_lock+0x8c/0x120 [ 108.806993][ T3099] ? __cfi__raw_spin_lock+0x10/0x10 [ 108.812210][ T3099] ? __kasan_check_write+0x18/0x20 [ 108.817337][ T3099] ? _raw_spin_lock+0x8c/0x120 [ 108.822118][ T3099] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 108.830379][ T3099] p9_fd_request+0x38d/0x500 [ 108.834980][ T3099] p9_client_rpc+0x2f9/0xb40 [ 108.839581][ T3099] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 108.847840][ T3099] ? p9_fid_create+0x3d0/0x3d0 [ 108.852615][ T3099] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 108.860872][ T3099] ? p9_conn_create+0x4c9/0x570 [ 108.865737][ T3099] ? p9_fd_create+0x2f3/0x4c0 [ 108.870430][ T3099] p9_client_create+0x96a/0x1190 [ 108.875497][ T3099] ? __cfi_p9_client_create+0x10/0x10 [ 108.880909][ T3099] ? kasan_save_alloc_info+0x40/0x50 [ 108.886249][ T3099] ? __kasan_kmalloc+0x96/0xb0 [ 108.891044][ T3099] ? kstrdup+0x7b/0x140 [ 108.895226][ T3099] ? __kasan_check_write+0x18/0x20 [ 108.900357][ T3099] v9fs_session_init+0x1e1/0x1820 [ 108.905405][ T3099] ? __cfi_v9fs_session_init+0x10/0x10 [ 108.910879][ T3099] ? kasan_save_alloc_info+0x40/0x50 [ 108.916179][ T3099] ? __kasan_kmalloc+0x96/0xb0 [ 108.920954][ T3099] ? v9fs_mount+0xbd/0xa00 [ 108.925381][ T3099] v9fs_mount+0xd7/0xa00 [ 108.929632][ T3099] ? __cfi_v9fs_mount+0x10/0x10 [ 108.934494][ T3099] ? selinux_capable+0x38/0x50 [ 108.939267][ T3099] legacy_get_tree+0x106/0x1b0 [ 108.944055][ T3099] ? __cfi_v9fs_mount+0x10/0x10 [ 108.948924][ T3099] vfs_get_tree+0x9e/0x290 [ 108.950883][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 108.953350][ T3099] do_new_mount+0x251/0xb40 [ 108.965511][ T3099] ? security_capable+0xcf/0xf0 [ 108.970374][ T3099] path_mount+0x688/0x1050 [ 108.974803][ T3099] ? putname+0x113/0x150 [ 108.979059][ T3099] __se_sys_mount+0x2bd/0x480 [ 108.983751][ T3099] ? __x64_sys_mount+0xf0/0xf0 [ 108.988524][ T3099] ? __kasan_check_write+0x18/0x20 [ 108.993638][ T3099] ? fpregs_restore_userregs+0x11d/0x260 [ 108.999279][ T3099] __x64_sys_mount+0xc3/0xf0 [ 109.003880][ T3099] x64_sys_call+0x2021/0x2ee0 [ 109.008568][ T3099] do_syscall_64+0x58/0xf0 [ 109.013077][ T3099] ? clear_bhb_loop+0x50/0xa0 [ 109.017766][ T3099] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.023666][ T3099] RIP: 0033:0x7fb02758e929 [ 109.028093][ T3099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.047751][ T3099] RSP: 002b:00007fb028316038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.056185][ T3099] RAX: ffffffffffffffda RBX: 00007fb0277b5fa0 RCX: 00007fb02758e929 [ 109.064168][ T3099] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000000 [ 109.072157][ T3099] RBP: 00007fb027610b39 R08: 00002000000001c0 R09: 0000000000000000 [ 109.080154][ T3099] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 109.088141][ T3099] R13: 0000000000000000 R14: 00007fb0277b5fa0 R15: 00007ffcec99f2e8 [ 109.096136][ T3099] [ 109.099171][ T3099] Modules linked in: [ 109.103365][ T3099] ---[ end trace 0000000000000000 ]--- [ 109.109984][ T3099] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 109.110890][ T3100] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 109.115655][ T3100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 109.117103][ T3099] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 93 59 b2 c5 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d9 9d fb 49 90 90 90 90 90 90 90 90 90 [ 109.130371][ T3100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:458 [ 109.134245][ T3099] RSP: 0018:ffffc90006d871b0 EFLAGS: 00010246 [ 109.169148][ T3099] RAX: 000000000000005a RBX: 1ffff92000db0e38 RCX: 9f686d751cfead00 [ 109.177222][ T45] usb 4-1: device descriptor read/64, error -71 [ 109.177619][ T3099] RDX: ffffc9000cc9f000 RSI: 0000000000002ba8 RDI: 0000000000002ba9 [ 109.192813][ T3099] RBP: ffffc90006d871b0 R08: ffffc90006d86ea7 R09: 1ffff92000db0dd4 [ 109.201108][ T3099] R10: dffffc0000000000 R11: fffff52000db0dd5 R12: 0000000000000000 [ 109.209198][ T3099] R13: dffffc0000000000 R14: ffffc90006d871e0 R15: ffffc90006d87210 [ 109.220796][ T3099] FS: 00007fb0283166c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 109.235562][ T3099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.242354][ T3099] CR2: 00007fb025bf7d58 CR3: 000000011dd9e000 CR4: 00000000003526b0 [ 109.250377][ T3099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.258424][ T3099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.266466][ T3099] Kernel panic - not syncing: Fatal exception [ 109.272823][ T3099] Kernel Offset: disabled [ 109.277174][ T3099] Rebooting in 86400 seconds..