last executing test programs: 2.633436561s ago: executing program 3 (id=4126): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001fad61b2077329e000f2e0102030109021b000100009d0509047d00010e0101000905", @ANYRES32], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000015c0)='smaps\x00') close(r0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001640)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x81, {0x9, 0x21, 0xe64c, 0x9, 0x1, {0x22, 0x505}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x29, 0x1}}}}}]}}]}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40085507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4000, 0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0xff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@empty, 0xffffffde, 0x4, 0x3, 0x0, 0x4000, 0x0, 0x40000000}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) madvise(&(0x7f00002e6000/0x3000)=nil, 0x3000, 0x11) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000000)=0x800, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 2.199375027s ago: executing program 0 (id=4144): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x4283cafe) r1 = eventfd(0xb8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340), 0x820000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}, {@cache_none}, {@access_any}, {@posixacl}, {@cachetag={'cachetag', 0x3d, 'timerslack_ns\x00'}}, {@uname={'uname', 0x3d, '\x92.'}}, {@cache_none}, {@fscache}, {@uname={'uname', 0x3d, './binderfs\x00'}}, {@aname={'aname', 0x3d, 'timerslack_ns\x00'}}], [{@euid_lt={'euid<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'ethtool\x00'}}, {@euid_lt={'euid<', r2}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder-control\x00', 0x802, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000280), 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',noxattr,appraise,audit,fowner=', @ANYRESDEC=r2, @ANYBLOB="2c0025126dd51003a0ab6e3f70651944b11c8e3e7a47dec2f2dfc5ba7bd4ad7a051df21af0ae7411c0118c616911bc52ce9fb8d71950a1d071865eb8acfe781ca5fc247b709d40f20b8a9e817636dc3c3489f832b563999c757da1ce65730678d5ade40b6ae833efa563d9917952f54d5a4c6598cf99e5690500000000000000a45c1103a73e113eede8ffd02d42f290168453af29ab1cae68c8f9f2c4d709821e95ca2a678eda50b271e43a2619f0fd0ee055b51e054902419b7d87636c85f98cd9a82ebf9eb829aa7ab589dc37010f0233af071d0a88df00"/231]) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) r5 = socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001a0000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) 2.198911857s ago: executing program 0 (id=4145): openat$rnullb(0xffffffffffffff9c, 0x0, 0x111c40, 0x0) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x111c40, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x29}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/43, 0x2b, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, 0x0, 0x4044004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000200)=@arm64={0x0, 0x3, 0xa0, '\x00', 0xc51c}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000200)=@arm64={0x0, 0x3, 0xa0, '\x00', 0xc51c}) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_tcp_int(r5, 0x6, 0x7, &(0x7f00000001c0)=0x5, 0x4) connect$inet6(r6, 0x0, 0x0) (async) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="385343ced8a47af7d176ad55869eb42a80fc7c3c11d79f3329f6e2e8df340ea59bfffb03f823f327febcfd2ac99ca2562537557cda7802b8a8fa88847be2e18e8b705653cfa331538c87a9656910c4b63bd7fe0f5366704b4ed9f898c047df984984d9fee54d4a9baea8992eb14492f424e393da60d8740c1baadd36c8493fad626d9ac5a63cf624baa936386f9e3b22d51fd8f7b595bd39067b62e567091f2852c55d34fecffd87937267a11102f564e911a60330ce9ab2a87317198216dcc029db4b7d8b2aa4594f2d2204054d7095dd35a4a29f2d3406917a359db94cfaf3eca1", 0xe2}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f0000000400)="e7e930bda7c47baa2d227dee41c0d6ebcd5fb24981fb32eb1457b8896e77294a6ea004ec60545d41542a0bd2c73b3ccef69da0771940ee14f8073dfd8bc679383e68dd5d149e667e0e9432937d2f6e303a697c9d8271d90172241967bf473585bac0ec12156bb3717931030cff17fdbadaf726b893e39ce587927e347fa90f25d457d53a968bc94b90ef022aecbfe759ad208e0bc86ee98097f4b6b7329a678b23c831d028b5d4c5497808bf640ee9cac3ed607a7982d656e36966da885e046a897431d579d453", 0xc7}, {&(0x7f0000000900)="4e317af83f09e42f8f76b060", 0xc}, {&(0x7f00000029c0)="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", 0xd6a}], 0x5}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="385343ced8a47af7d176ad55869eb42a80fc7c3c11d79f3329f6e2e8df340ea59bfffb03f823f327febcfd2ac99ca2562537557cda7802b8a8fa88847be2e18e8b705653cfa331538c87a9656910c4b63bd7fe0f5366704b4ed9f898c047df984984d9fee54d4a9baea8992eb14492f424e393da60d8740c1baadd36c8493fad626d9ac5a63cf624baa936386f9e3b22d51fd8f7b595bd39067b62e567091f2852c55d34fecffd87937267a11102f564e911a60330ce9ab2a87317198216dcc029db4b7d8b2aa4594f2d2204054d7095dd35a4a29f2d3406917a359db94cfaf3eca1", 0xe2}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f0000000400)="e7e930bda7c47baa2d227dee41c0d6ebcd5fb24981fb32eb1457b8896e77294a6ea004ec60545d41542a0bd2c73b3ccef69da0771940ee14f8073dfd8bc679383e68dd5d149e667e0e9432937d2f6e303a697c9d8271d90172241967bf473585bac0ec12156bb3717931030cff17fdbadaf726b893e39ce587927e347fa90f25d457d53a968bc94b90ef022aecbfe759ad208e0bc86ee98097f4b6b7329a678b23c831d028b5d4c5497808bf640ee9cac3ed607a7982d656e36966da885e046a897431d579d453", 0xc7}, {&(0x7f0000000900)="4e317af83f09e42f8f76b060", 0xc}, {&(0x7f00000029c0)="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", 0xd6a}], 0x5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1) (async) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1) 2.066939419s ago: executing program 0 (id=4147): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') exit(0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)=0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r7, &(0x7f0000000100)={0x2, 0x3e18, 0x1, 0x4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) 1.245367742s ago: executing program 2 (id=4148): r0 = userfaultfd(0x800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xe) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000002c0)="3f031c000302140006001e00895a054ab82e6a9386ac4a85800088a8dea688a8b00081004a09", 0x26, 0x2004c8d5, &(0x7f0000000100)={0xc9, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x84}}, 0x14) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB='rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES32=0x0]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setuid(0xee00) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$sock_linger(r7, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000080)=r5) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) close_range(0xffffffffffffffff, r6, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x704}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) quotactl_fd$Q_SYNC(r8, 0xffffffff80000101, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r8, 0x2000) 1.244845591s ago: executing program 2 (id=4149): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000090d000/0x3000)=nil, 0x3000, 0xb, 0x12, r1, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001840)={'sit0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x7800, 0x786, 0x40, 0x8000, {{0x15, 0x4, 0x1, 0x4, 0x54, 0x66, 0x0, 0xa, 0x29, 0x0, @empty, @empty, {[@lsrr={0x83, 0x2b, 0xf4, [@loopback, @loopback, @broadcast, @multicast2, @multicast2, @broadcast, @local, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}]}, @generic={0x44, 0x12, "d70867214d15683392734e3527dcdbab"}]}}}}}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"a5c871ded596ba2c5af5ae6a72f700ed", 0x0, 0x0, {0x0, 0x8000}, {0xffffffffffffffff, 0x10}, 0x3, [0x5, 0x3, 0x1000, 0x1366, 0x2, 0x8, 0x6, 0xfffffffffffffff8, 0x8, 0x89d, 0x6, 0xa2, 0x8000000000000000, 0x2, 0x40, 0x3]}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"edcd73eece355d7a04933deb33884ac9", r3, r4, {0x5, 0x6}, {0x4, 0x9}, 0x5, [0x5, 0x43f, 0x64, 0xffff, 0x7, 0xc32b, 0x9, 0x9, 0x9, 0xffff, 0x502b242a, 0x10000, 0x3, 0x1, 0x3e99, 0x3]}) 1.216359902s ago: executing program 2 (id=4150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000280)=0x9, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x1, 0xfffffff3, @private1}, 0x1c) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, &(0x7f0000000080)=0xfeed) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r4, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xc0002003}) read(r5, &(0x7f00000003c0)=""/208, 0xd0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000040)={0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 1.194939582s ago: executing program 3 (id=4151): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x54, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(r3, 0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="9cf5f1a9038511ac54ae8aa1a677ee1ceb320eb7d0e093242ab28991586eb4a31e03afcd9845538b9b229f370b748e02f639625fb115b24b234c9d31bbb5cd9f27b886bededd3cb91656fe16610551b81e58102803666369ebf34f3f5587cb6ceb90db8c0f6b25b2eccda58a84a2b621a99131960856549ef9b31f24916708c9186f7c00d3f5a04395d569f03bc69740316292d162531322accb691f0c7308eeba0c79c54d35e70862eb5a6fb00ac9d353") 1.137404013s ago: executing program 2 (id=4152): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e030cc03c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad86558"], 0xffdd) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000002c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x2b, 0x3, 0xffffffffa0000000, 0xfff7, 0x1, 0xe, 0x8001, 0x0, 0x0, 0x10}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000a80)={0x60, 0x2, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xb, 0x0, 0x0, 0x4f9, 0x4, 0x28, 0x8, 0x1}) read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020) 1.135204903s ago: executing program 3 (id=4153): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendto(r1, &(0x7f00000002c0)="12000000120000d645ec1407c82eacd2ee4399dca827cc85f5bb23bdfadf2661c97f04cb6c46a13f4b62f64de7ce29bb605e1b135532dd48b0e40eb6778aaa2ab9e9245abd4aec304f54cf86aab07af1db7f07b6d5d7dec279e53eaa0f4d66bac1219844c16ba8a9933af095e6543f9c7cfab50c638f34080b8cfa73b8cb73860df94784d38a756961569f9ee1ffffffffffffff7fd53a084e5744b3ac20ef66f057dc1ee7e22ffca78798082eb3b188f2f0656f4c9b519ef880c27ef755f116fa43e23b823f950ef73911024b7bf0d80382a3c55d625f092d0f4aff5dbfdea754d607aa1f1197ea874c249f", 0xec, 0x48881, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x24008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x390) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x54094}, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioprio_get$pid(0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000040)=0xfffeffff, 0x4) connect$packet(r7, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) 1.134968423s ago: executing program 0 (id=4154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572010000000000000000000000000000000000000000000000000007"], &(0x7f0000000200)=0x2f) close_range(r0, 0xffffffffffffffff, 0x0) 1.129380303s ago: executing program 3 (id=4155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) (async) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x2) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 1.116061804s ago: executing program 3 (id=4156): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x3d, &(0x7f0000000080)={0x4, 0x9, 0x5}, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r4, &(0x7f0000000080)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="2007b5000000b5312d31e6d8ce82eb08755a78c8c78b58713bd9f152a7e69e0f71e029ba077ad3595d7b6d6a94b555b119363be4ba84b912e109f7e36f7cbb0616099c10e5a28ed3f47c3ea3c60dd9c5048d95059dcdcd74ce43cd4daad1d81fd83a337ea1452c1cb8349e67955730ba141fe3fb0f9166a74b0585c8b69f7c6d9c8835af852bb530dc0a446598670c668b35f1d03a16a6ba881c242ff56b222aa7d4a12a17140f654ebb01e43fe1bfe7e57d17e071afa931fa"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x40, 0xf, 0x27, "a245b077a32231b51824c52b8a8693d791ce0a87724fd1b376462cdc28b2d9c9d9533188bedb62"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0x6f, {0x6d, "a83a9ccfe258849f8948674f243c5169139f37556c6387c837b485f13d448e0b9a1adc43428ff2e963124f61943b69d73a0816ca879236ba8cb14dd2cebd27ab672afc50347f1229b6395063f60efb10fb08b88199bde20cdea594049629c73ae2be8571f9f940a7df36fb12e9"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x4}}) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r5, 0x0, 0x1) (async, rerun: 64) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b000101000000090400000207010100090501"], 0x0) (async, rerun: 64) fsmount(0xffffffffffffffff, 0x0, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 1.098077304s ago: executing program 2 (id=4157): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/221, 0xdd}, {&(0x7f0000000240)=""/71, 0x47}], 0x2, &(0x7f0000000300)=""/70, 0x46}, 0x2001) 1.025129335s ago: executing program 2 (id=4158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000200)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8f04"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) r9 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a000301000000090400000001010000"], 0x0) syz_usb_control_io(r9, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00031300000013030d00000000a50611a7261ec206387c89dcdd22945c9fdaec5cab776a40bad4c8c65ee83119269032c1a3621458914121fb66bb7b529dcbc15816d52a32c50bf6629fd3189582a868e1df835b9786a0bd77c166e1119954452a9efd7bebf0071927d1c844baf1c673d7b8b8bae58551c0282574dbb698d93325ba6dd64d49ab13c62651faade259e884c2207920422cad046e1197067978a9f2a927ce3a8c0a25dff4fd307b8a530a68"]}, 0x0) (async) syz_usb_control_io$uac1(r9, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00031300000013030d00000000a50611a7261ec206387c89dcdd22945c9fdaec5cab776a40bad4c8c65ee83119269032c1a3621458914121fb66bb7b529dcbc15816d52a32c50bf6629fd3189582a868e1df835b9786a0bd77c166e1119954452a9efd7bebf0071927d1c844baf1c673d7b8b8bae58551c0282574dbb698d93325ba6dd64d49ab13c62651faade259e884c2207920422cad046e1197067978a9f2a927ce3a8c0a25dff4fd307b8a530a68"]}, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r11, 0x400, 0x0) (async) fcntl$setlease(r11, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.023586275s ago: executing program 3 (id=4159): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x8, 0x2081) accept(r3, &(0x7f00000000c0)=@generic, &(0x7f0000000240)=0x80) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) 962.275836ms ago: executing program 32 (id=4159): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x8, 0x2081) accept(r3, &(0x7f00000000c0)=@generic, &(0x7f0000000240)=0x80) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) 534.149832ms ago: executing program 4 (id=4160): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x15, 0x0, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf50000e6", 0xe}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r7, &(0x7f0000000900)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000600)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x5, &(0x7f0000000700)=""/172, 0xac}, 0x4}, {{&(0x7f00000007c0)=@pppol2tpv3, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000840)=""/144, 0x90}], 0x1, &(0x7f0000000680)=""/39, 0x27}, 0x81}], 0x2, 0x100, &(0x7f0000000980)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCNXCL(r8, 0x540d) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r9) 283.492956ms ago: executing program 0 (id=4164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000440)={0x0, 0xfb, 0xd8, 0x3, 0x6, "dcccc7855659c475d1cbde64d241e506", "8581578709c3a96888cac172e7fa12f60af68e1adc3c40cf745683d5dac705ea66bc1db2196479cada40cdd71818646ae97bef3c91341692f2f1ce340c09fc16623fc36ddda160e260fe98e62a6ab9a55d1c47a1a9445e529743724383301f5e88a88fbbbd834e108fc598a9f5173c373a2e826d3fe0474c877b39cd5d520bfb08ddee7970181fe26cdf7d5051984d0bde120a93fb8bc6ba5819012010e3c4257005f5e54071b1d14298e2afd7ff191bfa5e36e4b1cd711deab41975e86016d1d72d81"}, 0xd8, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 275.647356ms ago: executing program 1 (id=4165): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) futex(&(0x7f0000000000)=0x2, 0xa, 0x1, 0x0, 0x0, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x705], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000001000000210000000c00018008000100", @ANYRES32=r6, @ANYBLOB="8ffae89025e713e9c447a96b0ad0de6b96edc629848f0b5413b2396d72ce6ec01e6963a7451ff0b36b17e3f399e2ecd3589b97483d62ed309a5e0ff9a562f631e38d0ed811b645cb1299f4b7851a47c0ed80a78fa6fe182c978d7dd8380cdd46"], 0x20}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mlockall(0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r13, 0x4188aea7, &(0x7f00000000c0)=ANY=[]) (async) ioctl$KVM_SET_XCRS(r13, 0x4188aea7, &(0x7f00000000c0)=ANY=[]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x1010, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x1010, r0, 0x45809000) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r14, 0x0, 0x1, &(0x7f0000000400)=0xfffffff8, 0x4) 266.582476ms ago: executing program 0 (id=4166): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f00000000c0)={0x6, 0xfffffffffffffffc}) r3 = eventfd2(0x0, 0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) keyctl$set_reqkey_keyring(0xe, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) socket(0x10, 0x803, 0x0) 198.817947ms ago: executing program 1 (id=4167): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x102102, 0x0) pwritev2(r3, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000300)="b656f9a5015bc4eb175478fcff8af08088e56a6a03ad78292d7eee3202c8822888da0b1deaf380cb8484d3c74aca9931557bcea91f77f4a599303310652ac0259e917e75fe0039d6377421a4b4dcd49dcc79fa0acba12c4260dfae2656e0828b333f86146ad7b7eac4dd29db8f84fa2a6d94a300933f2e9230aeaeb238403ac98776208a8ca090738540631bf45d677cb1f564a5e9d9958b584adb655890d4e55ce3019603a552aa7bc0e5ee5fdc049e72f0de79e0725746e38ca94b65b89fffcd60c6d98a5ec17fcc9b16eb3c46882be7ac623f4e3f53452cec8361cf3ce521aa02", 0xe2}, {&(0x7f0000000400)="2547d180cb49f635f63164ae8d65587dd35090d0abaab89e4ac37f3e3bdf3139ff79e23bf105a79f33b6086ebde0ca0caf70155fd330e24a4e4f368ae2ff89f422fb8720c20eafc6946d301b8196ecaa24b3ccb549374865ab3f2fcff55b1083cedcd65abafa73e5766307787c04d55d383193a03c61325a71f76733639b16bd460c4f9d30a20f9c34ee07cfa20642d86e4c16cf880639d92d614666f85371db3078f3f2eb06f2eb51233a6113414e4a", 0xb0}, {&(0x7f0000000500)="b7acf632112c1c7dca7107cee3374574926af0c9c385e6c5643c4cf8f0dd9695db4a0469cdac173f640d5f37e2d170f25a24f6ef77ad138af9f6db8a00e22f810009f033f0ae1e4099b6fcf4e38cb0558b81d36d07882df9a9fc4a21adda3ffcbbf805fbba6b81d7cb7a6e828eacc2", 0x6f}, {0x0}, {0x0}], 0x6, 0xfffffe00, 0x400, 0x0) preadv2(r3, &(0x7f0000002f00), 0x0, 0x2, 0x9, 0x9) 190.317517ms ago: executing program 1 (id=4168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000000)=""/78, 0x4e) getdents(r2, &(0x7f0000000200)=""/251, 0xfb) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, 0x0, &(0x7f0000000040)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd14, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x1) readlink(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)=""/164, 0xa4) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f00000005c0)=@attr_pmu_init) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000000)=0x10, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r9, 0x5, 0x70bd2c, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r9, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa99}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4c000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000001c0)=[@increfs_done, @register_looper], 0x0, 0x0, 0x0}) 172.839468ms ago: executing program 1 (id=4169): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) unshare(0x40800) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x801, 0x0) write$tcp_congestion(r1, &(0x7f0000000280)='vegas\x00', 0x6) (async) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x1f5, 0x4) (async) recvmmsg(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x4ce9}], 0x1, 0x45833af92e4b39ff, 0x0) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 105.481598ms ago: executing program 1 (id=4170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0xf, 0x0, 0x7, 0x7, 0x1}, {0x4ffe, 0x2, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x10, 0x2, 0x1, 0x5, 0xf, 0x8, 0x6, 0x2}, {0x0, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0xfe, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x70, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xeeee8000, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000100)={0x2}) shutdown(r4, 0x1) sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r7, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=4171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x600, 0xd, {0x0, 0x2710}, {r5, r6/1000+10000}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0xf, 0x2, 0x0, 0x0, "14cf4b0bd899050075eae0b575426a0716ed52358a931f85dbaf96203dd91587723c2bc12f617f4239ebb5d17239e1b78c099d0e73c8fbb352d9a718e4b2634c"}}, 0x80}}, 0x2010) sendmmsg$sock(r2, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6, 0x0, 0x7}, 0x14, 0x0}}], 0x1, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) ptrace$cont(0x18, r7, 0x2, 0x2) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, './binderfs/binder0\x00'}, {0x20, '#'}, {0x20, './binderfs/binder0\x00'}, {}], 0xa, "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"}, 0x133) kernel console output (not intermixed with test programs): 0x10/0x10 [ 173.655601][ T8509] ? avc_has_perm+0x144/0x220 [ 173.655626][ T8509] ? kasan_save_alloc_info+0x40/0x50 [ 173.655652][ T8509] ? __kasan_kmalloc+0x96/0xb0 [ 173.655697][ T8509] vmalloc_user_noprof+0x77/0x90 [ 173.655724][ T8509] ? xskq_create+0xdb/0x2a0 [ 173.655749][ T8509] xskq_create+0xdb/0x2a0 [ 173.655776][ T8509] xsk_init_queue+0xb6/0x120 [ 173.655801][ T8509] xsk_setsockopt+0x43f/0x6f0 [ 173.655824][ T8509] ? __cfi_xsk_setsockopt+0x10/0x10 [ 173.655849][ T8509] ? do_futex+0x309/0x500 [ 173.655884][ T8509] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 173.655909][ T8509] ? security_socket_setsockopt+0x33/0xd0 [ 173.655941][ T8509] ? __cfi_xsk_setsockopt+0x10/0x10 [ 173.655965][ T8509] do_sock_setsockopt+0x26a/0x400 [ 173.655990][ T8509] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 173.656019][ T8509] __x64_sys_setsockopt+0x1b8/0x250 [ 173.656046][ T8509] x64_sys_call+0x2adc/0x2ee0 [ 173.656076][ T8509] do_syscall_64+0x58/0xf0 [ 173.656097][ T8509] ? clear_bhb_loop+0x50/0xa0 [ 173.656124][ T8509] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.656149][ T8509] RIP: 0033:0x7ff8ccb8e929 [ 173.656170][ T8509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.656190][ T8509] RSP: 002b:00007ff8cb1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.656216][ T8509] RAX: ffffffffffffffda RBX: 00007ff8ccdb5fa0 RCX: 00007ff8ccb8e929 [ 173.656235][ T8509] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 173.656250][ T8509] RBP: 00007ff8ccc10b39 R08: 0000000000000004 R09: 0000000000000000 [ 173.656267][ T8509] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 173.656283][ T8509] R13: 0000000000000000 R14: 00007ff8ccdb5fa0 R15: 00007fffd554ae88 [ 173.656303][ T8509] [ 173.656359][ T8509] Mem-Info: [ 173.962098][ T8509] active_anon:9007 inactive_anon:136 isolated_anon:0 [ 173.962098][ T8509] active_file:10906 inactive_file:18184 isolated_file:0 [ 173.962098][ T8509] unevictable:0 dirty:80 writeback:0 [ 173.962098][ T8509] slab_reclaimable:6412 slab_unreclaimable:73519 [ 173.962098][ T8509] mapped:24664 shmem:165 pagetables:1033 [ 173.962098][ T8509] sec_pagetables:0 bounce:0 [ 173.962098][ T8509] kernel_misc_reclaimable:0 [ 173.962098][ T8509] free:1500494 free_pcp:10784 free_cma:0 [ 174.008001][ T8509] Node 0 active_anon:36004kB inactive_anon:544kB active_file:43624kB inactive_file:72736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98656kB dirty:320kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5908kB pagetables:4020kB sec_pagetables:0kB all_unreclaimable? no [ 174.043564][ T8509] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:13868kB local_pcp:7012kB free_cma:0kB [ 174.076856][ T8509] lowmem_reserve[]: 0 3921 3921 [ 174.081849][ T8509] Normal free:3077984kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36004kB inactive_anon:544kB active_file:43624kB inactive_file:72736kB unevictable:0kB writepending:320kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3204kB local_pcp:2860kB free_cma:0kB [ 174.113422][ T8509] lowmem_reserve[]: 0 0 0 [ 174.118203][ T8509] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 174.134035][ T8509] Normal: 191*4kB (UME) 134*8kB (UME) 302*16kB (UM) 679*32kB (UME) 569*64kB (UME) 109*128kB (UME) 81*256kB (UME) 65*512kB (UME) 62*1024kB (UME) 37*2048kB (UM) 685*4096kB (UM) = 3077804kB [ 174.152787][ T8509] 29412 total pagecache pages [ 174.158072][ T8509] 161 pages in swap cache [ 174.162662][ T8509] Free swap = 123756kB [ 174.166863][ T8509] Total swap = 124996kB [ 174.171132][ T8509] 2097051 pages RAM [ 174.174956][ T8509] 0 pages HighMem/MovableOnly [ 174.179671][ T8509] 351517 pages reserved [ 174.183987][ T8509] 0 pages cma reserved [ 174.184958][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.191321][ T8509] Memory allocations: [ 174.195511][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.199097][ T8509] 0 B 0 init/main.c:1370 func:do_initcalls [ 174.199123][ T8509] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 174.208352][ T8520] rust_binder: Write failure EFAULT in pid:239 [ 174.213643][ T8509] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 174.221921][ T8515] bridge_slave_0: entered allmulticast mode [ 174.227673][ T8509] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 174.235986][ T8515] bridge_slave_0: entered promiscuous mode [ 174.241768][ T8509] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 174.259712][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.270583][ T8509] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 174.279543][ T8509] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 174.290726][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.297913][ T8515] bridge_slave_1: entered allmulticast mode [ 174.300743][ T8509] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 174.304489][ T8515] bridge_slave_1: entered promiscuous mode [ 174.330739][ T8509] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 174.339031][ T8509] 0 B 0 init/initramfs.c:101 func:find_link [ 174.389128][ T8524] kvm: pic: non byte write [ 174.496686][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.503831][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.514599][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.521718][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.572536][ T8515] veth0_vlan: entered promiscuous mode [ 174.583136][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 174.587855][ T8515] veth1_macvtap: entered promiscuous mode [ 174.760709][ T778] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 174.910849][ T778] usb 2-1: Using ep0 maxpacket: 32 [ 174.919921][ T778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.940361][ T778] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.951071][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.959145][ T778] usb 2-1: Product: syz [ 174.965781][ T778] usb 2-1: Manufacturer: syz [ 174.970423][ T778] usb 2-1: SerialNumber: syz [ 174.983512][ T778] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 175.001096][ T778] cdc_ncm 2-1:1.0: bind() failure [ 175.007443][ T778] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 175.014415][ T778] cdc_ncm 2-1:1.1: bind() failure [ 175.285188][ T8610] rust_binder: Write failure EFAULT in pid:18 [ 175.678592][ T8627] binder: Unknown parameter 'stcts|!Udc{bal' [ 175.692297][ T8627] binder: Unknown parameter 'stcts|!Udc{bal' [ 175.716871][ T8629] overlayfs: failed to resolve './file0': -2 [ 175.823144][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.831720][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.355216][ T8653] cgroup: subsys name conflicts with all [ 176.418631][ T8660] ./file0: Can't lookup blockdev [ 176.485551][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 176.485572][ T36] audit: type=1400 audit(2000000007.760:812): avc: denied { map } for pid=8661 comm="syz.3.2832" path="socket:[43511]" dev="sockfs" ino=43511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 176.515706][ T36] audit: type=1400 audit(2000000007.760:813): avc: denied { accept } for pid=8661 comm="syz.3.2832" path="socket:[43511]" dev="sockfs" ino=43511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 176.542576][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.551121][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.280271][ T36] audit: type=1400 audit(2000000008.550:814): avc: denied { create } for pid=8692 comm="syz.3.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.320906][ T8695] fuseblk: Unknown parameter 'roo+O1WtmodZ)#kdaNe' [ 177.329180][ T8695] /dev/loop0: Can't lookup blockdev [ 177.522825][ T778] usb 2-1: USB disconnect, device number 44 [ 177.628137][ T8729] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 177.637009][ T8729] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 177.760477][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2859'. [ 177.823414][ T8736] rust_binder: Failed copying remainder into alloc: EFAULT [ 177.823440][ T8736] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 177.830826][ T8736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 177.839187][ T8736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:270 [ 177.882935][ T8741] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2861'. [ 177.894319][ T8741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 177.904032][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2862'. [ 177.923454][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.933604][ T8744] bridge_slave_1 (unregistering): left allmulticast mode [ 177.951752][ T8744] bridge_slave_1 (unregistering): left promiscuous mode [ 177.960627][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.908293][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.916943][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.925137][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.933750][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.942011][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.950687][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.958928][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.967818][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.975986][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.984603][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.994013][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.003077][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.104664][ T8799] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 179.112050][ T8799] rust_binder: Write failure EINVAL in pid:286 [ 180.000551][ T36] audit: type=1400 audit(2000000011.270:815): avc: denied { mounton } for pid=8828 comm="syz.2.2889" path="/187/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 180.022050][ T8834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 180.052480][ T8842] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 180.073935][ T8842] overlayfs: missing 'lowerdir' [ 180.163841][ T8857] tipc: Started in network mode [ 180.168815][ T8857] tipc: Node identity eabe9dd1aa27, cluster identity 4711 [ 180.176192][ T8857] tipc: Enabled bearer , priority 0 [ 180.184544][ T8856] tipc: Disabling bearer [ 180.664177][ T8868] SELinux: Context system_u:object_r:root_t:s0 is not valid (left unmapped). [ 180.673557][ T36] audit: type=1400 audit(2000000011.950:816): avc: denied { relabelto } for pid=8867 comm="syz.3.2901" name="rnullb0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:root_t:s0" [ 180.699661][ T36] audit: type=1400 audit(2000000011.950:817): avc: denied { associate } for pid=8867 comm="syz.3.2901" name="rnullb0" dev="tmpfs" ino=462 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:root_t:s0" [ 180.727083][ T36] audit: type=1400 audit(2000000011.950:818): avc: denied { read } for pid=8867 comm="syz.3.2901" name="rnullb0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:root_t:s0" [ 180.753927][ T36] audit: type=1400 audit(2000000011.950:819): avc: denied { open } for pid=8867 comm="syz.3.2901" path="/dev/rnullb0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:root_t:s0" [ 180.780090][ T36] audit: type=1400 audit(2000000011.950:820): avc: denied { ioctl } for pid=8867 comm="syz.3.2901" path="/dev/rnullb0" dev="tmpfs" ino=462 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:root_t:s0" [ 181.063451][ T8880] input: syz1 as /devices/virtual/input/input23 [ 181.069742][ T8880] input: failed to attach handler leds to device input23, error: -6 [ 181.182324][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.190904][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.283747][ T36] audit: type=1400 audit(2000000012.560:821): avc: denied { write } for pid=8910 comm="syz.3.2916" name="rnullb0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:root_t:s0" [ 181.387719][ T8923] rust_binder: Write failure EINVAL in pid:351 [ 181.524101][ T8955] overlayfs: failed to resolve './file0': -2 [ 181.744223][ T8969] random: crng reseeded on system resumption [ 181.773757][ T8968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.782317][ T8968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.121705][ T8973] tipc: Enabling of bearer rejected, failed to enable media [ 182.680407][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 182.680438][ T36] audit: type=1400 audit(2000000013.950:824): avc: denied { create } for pid=8991 comm="syz.3.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 182.713536][ T8996] /dev/rnullb0: Can't lookup blockdev [ 183.220996][ T8998] rust_binder: Error while translating object. [ 183.221042][ T8998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.227562][ T8998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 183.235620][ T36] audit: type=1400 audit(2000000014.500:825): avc: denied { append } for pid=8999 comm="syz.3.2947" name="rnullb0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:root_t:s0" [ 183.321740][ T9008] rust_binder: Error while translating object. [ 183.321773][ T9008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 183.328114][ T9008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:379 [ 183.371522][ T36] audit: type=1400 audit(2000000014.650:826): avc: denied { sys_module } for pid=9012 comm="syz.3.2951" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 183.373520][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2951'. [ 183.700719][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 183.850708][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 183.857672][ T9] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.870685][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 183.878644][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 183.887729][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.895787][ T9] usb 2-1: Product: చ [ 183.899953][ T9] usb 2-1: Manufacturer: Ж [ 183.904515][ T9] usb 2-1: SerialNumber: syz [ 184.116167][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 184.122181][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 184.131853][ T9] usb 2-1: USB disconnect, device number 45 [ 184.567813][ T9045] rust_binder: Write failure EINVAL in pid:31 [ 184.672649][ T36] audit: type=1400 audit(2000000015.950:827): avc: denied { mounton } for pid=9044 comm="syz.0.2964" path="/10/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 184.724627][ T9058] rust_binder: Write failure EINVAL in pid:31 [ 184.792330][ T9083] block device autoloading is deprecated and will be removed. [ 185.412489][ T9130] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 185.475302][ T9132] kvm: pic: non byte write [ 185.540534][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.550055][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.560899][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.570580][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.582836][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.592783][ T36] audit: type=1400 audit(2000000016.870:828): avc: denied { read } for pid=9129 comm="syz.0.2992" path="socket:[45529]" dev="sockfs" ino=45529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.616851][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.140729][ T373] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 186.263870][ T9151] overlayfs: failed to resolve './file1': -2 [ 186.300680][ T373] usb 2-1: Using ep0 maxpacket: 32 [ 186.306983][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.318908][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.328904][ T373] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 186.338308][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.347747][ T373] usb 2-1: config 0 descriptor?? [ 186.458465][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 186.517679][ T9185] fuse: Bad value for 'rootmode' [ 186.525539][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.534899][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.544003][ T36] audit: type=1400 audit(2000000017.820:829): avc: denied { mount } for pid=9184 comm="syz.2.3009" name="/" dev="ramfs" ino=46684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.759356][ T373] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 186.766620][ T373] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 186.774112][ T373] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 186.781332][ T373] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 186.788567][ T373] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 186.796471][ T373] koneplus 0003:1E7D:2D51.001F: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 186.900723][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 186.959199][ T373] koneplus 0003:1E7D:2D51.001F: couldn't init struct koneplus_device [ 186.962197][ T9143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 186.967461][ T373] koneplus 0003:1E7D:2D51.001F: couldn't install mouse [ 186.984436][ T373] koneplus 0003:1E7D:2D51.001F: probe with driver koneplus failed with error -32 [ 186.994946][ T373] usb 2-1: USB disconnect, device number 46 [ 187.060732][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 187.067106][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.078054][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.088018][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 187.097310][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.107086][ T9] usb 1-1: config 0 descriptor?? [ 187.115613][ T36] audit: type=1400 audit(2000000018.400:830): avc: denied { map } for pid=9199 comm="syz.2.3012" path="socket:[45933]" dev="sockfs" ino=45933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 187.140531][ T36] audit: type=1400 audit(2000000018.400:831): avc: denied { accept } for pid=9199 comm="syz.2.3012" path="socket:[45933]" dev="sockfs" ino=45933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 187.185147][ T9205] overlay: ./file0 is not a directory [ 187.231578][ T36] audit: type=1400 audit(2000000018.510:832): avc: denied { execute } for pid=9206 comm="syz.2.3015" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.273766][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 187.283290][ T9212] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3016'. [ 187.283296][ T36] audit: type=1400 audit(2000000018.570:833): avc: denied { nlmsg_read } for pid=9211 comm="syz.2.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.531026][ T9] savu 0003:1E7D:2D5A.0020: hiddev96,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 187.591474][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.611931][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.631129][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.640556][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.723483][ T9] usb 1-1: USB disconnect, device number 58 [ 187.836922][ T9270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:408 [ 188.264400][ T36] audit: type=1400 audit(2000000019.540:834): avc: denied { getopt } for pid=9271 comm="syz.2.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.293939][ T36] audit: type=1400 audit(2000000019.540:835): avc: denied { map } for pid=9271 comm="syz.2.3033" path="socket:[46900]" dev="sockfs" ino=46900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.319447][ T9275] binder: Unknown parameter 'uid' [ 188.567271][ T9310] cgroup: Unknown subsys name '#' [ 188.594061][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.603846][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.625815][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.634508][ T9317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3046'. [ 188.640985][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.651964][ T9316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 188.651998][ T9316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:411 [ 188.658024][ T9313] /dev/sg0: Can't lookup blockdev [ 188.661473][ T9316] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 188.677620][ T9316] rust_binder: Read failure Err(EFAULT) in pid:411 [ 188.705927][ T9321] overlay: ./bus is not a directory [ 188.960745][ T9] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 188.975282][ T36] audit: type=1400 audit(2000000020.250:836): avc: denied { accept } for pid=9341 comm="syz.0.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.121892][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 189.133365][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.142642][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.150761][ T9] usb 2-1: Product: syz [ 189.155138][ T9] usb 2-1: Manufacturer: syz [ 189.159826][ T9] usb 2-1: SerialNumber: syz [ 189.166775][ T9] usb 2-1: config 0 descriptor?? [ 189.219633][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.228482][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.236785][ T10] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 189.379355][ T9] usb 2-1: USB disconnect, device number 47 [ 189.390881][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 189.390884][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.540777][ T10] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 189.690723][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 189.696248][ T10] usb usb1-port1: attempt power cycle [ 189.806948][ T36] audit: type=1400 audit(2000000021.080:837): avc: denied { read write } for pid=9349 comm="syz.2.3058" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.830186][ T36] audit: type=1400 audit(2000000021.080:838): avc: denied { open } for pid=9349 comm="syz.2.3058" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.885111][ T36] audit: type=1400 audit(2000000021.160:839): avc: denied { bind } for pid=9359 comm="syz.2.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.989885][ T36] audit: type=1400 audit(2000000021.260:840): avc: denied { map } for pid=9366 comm="syz.1.3064" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.015938][ T9367] netlink: 'syz.1.3064': attribute type 4 has an invalid length. [ 190.023890][ T9367] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3064'. [ 190.038243][ T9370] netlink: 'syz.2.3065': attribute type 4 has an invalid length. [ 190.040753][ T10] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 190.057704][ T9370] netlink: 'syz.2.3065': attribute type 27 has an invalid length. [ 190.066227][ T9370] netlink: 3609 bytes leftover after parsing attributes in process `syz.2.3065'. [ 190.076524][ T9370] binder: Bad value for 'stats' [ 190.081118][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 190.210695][ T10] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 190.231053][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 190.237977][ T10] usb usb1-port1: unable to enumerate USB device [ 190.310320][ T9393] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 190.459868][ T9406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 190.471716][ T36] audit: type=1400 audit(2000000021.750:841): avc: denied { connect } for pid=9407 comm="syz.2.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.512937][ T36] audit: type=1400 audit(2000000021.790:842): avc: denied { map } for pid=9407 comm="syz.2.3076" path="socket:[47737]" dev="sockfs" ino=47737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.525957][ T9411] rust_binder: Write failure EINVAL in pid:451 [ 190.625091][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.639821][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.304595][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.313855][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.324170][ T36] audit: type=1400 audit(2000000022.610:843): avc: denied { connect } for pid=9426 comm="syz.2.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.344353][ T9429] netlink: 'syz.3.3086': attribute type 4 has an invalid length. [ 191.352231][ T9429] netlink: 'syz.3.3086': attribute type 27 has an invalid length. [ 191.360068][ T9429] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.3086'. [ 191.446857][ T9441] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 191.498349][ T9447] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 191.506964][ T9448] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 191.519401][ T9447] rust_binder: Error while translating object. [ 191.528720][ T9447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.529024][ T9448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 191.535680][ T9447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465 [ 191.544722][ T9448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:465 [ 191.592154][ T9459] SELinux: security_context_str_to_sid (sytem_uGй :ZQx6Fw_BA^*I\OFM_?ٶ [h̹]s% ,Qz=) failed with errno=-22 [ 191.890690][ T10] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 192.041526][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 192.050162][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 192.058534][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 192.067988][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.076275][ T10] usb 2-1: Product: syz [ 192.080607][ T10] usb 2-1: Manufacturer: syz [ 192.086740][ T10] usb 2-1: SerialNumber: syz [ 192.111342][ T9521] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 192.222334][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3118'. [ 192.299688][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 192.305810][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 192.316388][ T10] usb 2-1: USB disconnect, device number 48 [ 192.865024][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.875155][ T9543] netlink: 'syz.1.3123': attribute type 4 has an invalid length. [ 192.886007][ T9543] rust_binder: Error while translating object. [ 192.886039][ T9543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.893135][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.910464][ T9543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 193.080455][ T9569] SELinux: Context system_u:object_r:console_device_t:s0 is not valid (left unmapped). [ 193.194473][ T9569] binder: Unknown parameter 'context' [ 193.333016][ T9578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 193.333052][ T9578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:133 [ 193.370733][ T444] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 193.530679][ T444] usb 2-1: Using ep0 maxpacket: 8 [ 193.540384][ T444] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.550230][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.559356][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.566152][ T444] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.576149][ T444] usb 2-1: config 1 has no interface number 1 [ 193.582455][ T444] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.595557][ T444] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 193.608264][ T444] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.617369][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.625401][ T444] usb 2-1: Product: syz [ 193.629650][ T444] usb 2-1: Manufacturer: syz [ 193.634288][ T444] usb 2-1: SerialNumber: syz [ 193.790703][ T437] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 193.843582][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.852230][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.865965][ T444] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 193.874092][ T444] usb 2-1: USB disconnect, device number 49 [ 193.941821][ T437] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 193.952875][ T437] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 193.965297][ T437] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.974463][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.982487][ T437] usb 1-1: Product: ࠔ [ 193.986669][ T437] usb 1-1: Manufacturer: ⓧ良會졶ⱁﻷ黎䟎鍈곝졙Ⳟ꪿ꐗ㏥ऀ굷킵鷫※퍤ଷ傇詉垳ᑧ쑪밭ꭧ쿲긢ຄ [ 194.000166][ T437] usb 1-1: SerialNumber: 寃پ朦엤ᩯ㏃䂺뮫鑖腓㎮쇷ઓ확뀽롓놖떝ꍓ䫢ᆞ韥⫓ﶚ䌸Ꙩ⨵㬶 [ 194.013279][ T9590] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 194.087435][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 194.087457][ T36] audit: type=1400 audit(2000000025.360:850): avc: denied { nlmsg_write } for pid=9591 comm="syz.2.3141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 194.221762][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.230341][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.238666][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.247196][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.255721][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.264326][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.670725][ T444] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 194.683699][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.692314][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.820756][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 194.826939][ T444] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 194.835362][ T444] usb 2-1: config 0 has no interface number 0 [ 194.841608][ T444] usb 2-1: config 0 interface 184 has no altsetting 0 [ 194.849918][ T444] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 194.859396][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.868418][ T444] usb 2-1: Product: syz [ 194.872673][ T444] usb 2-1: Manufacturer: syz [ 194.877497][ T444] usb 2-1: SerialNumber: syz [ 194.890159][ T444] usb 2-1: config 0 descriptor?? [ 194.897372][ T444] smsc75xx v1.0.0 [ 194.966778][ T9626] netlink: 'syz.3.3155': attribute type 11 has an invalid length. [ 194.967826][ T437] cdc_ncm 1-1:1.0: bind() failure [ 194.974747][ T9626] netlink: 'syz.3.3155': attribute type 1 has an invalid length. [ 194.988050][ T437] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 194.990725][ T9626] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.3155'. [ 194.995430][ T437] cdc_ncm 1-1:1.1: bind() failure [ 195.018239][ T437] usb 1-1: USB disconnect, device number 63 [ 195.027262][ T9632] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9632 comm=syz.3.3157 [ 195.040416][ T9632] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3157'. [ 195.050213][ T9632] fuse: Unknown parameter ' !0x0000000000000006' [ 195.117229][ T36] audit: type=1400 audit(2000000026.390:851): avc: denied { nlmsg_read } for pid=9643 comm="syz.3.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 195.162896][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3163'. [ 195.220998][ T9655] exFAT-fs (rnullb0): invalid boot record signature [ 195.227767][ T9655] exFAT-fs (rnullb0): failed to read boot sector [ 195.234215][ T9655] exFAT-fs (rnullb0): failed to recognize exfat type [ 195.241157][ T9656] exFAT-fs (rnullb0): invalid boot record signature [ 195.247789][ T9656] exFAT-fs (rnullb0): failed to read boot sector [ 195.254223][ T9656] exFAT-fs (rnullb0): failed to recognize exfat type [ 195.296619][ T444] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 195.307557][ T444] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 195.317509][ T444] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 195.327861][ T444] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 195.554608][ T9690] tipc: Enabled bearer , priority 0 [ 195.563777][ T9690] tipc: Disabling bearer [ 195.575925][ T9692] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3177'. [ 195.611545][ T9699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.611586][ T9699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:773 [ 195.616068][ T9702] fuse: Invalid gid '00000000000037777777777' [ 195.652886][ T4291] tipc: Subscription rejected, illegal request [ 195.714329][ T36] audit: type=1400 audit(2000000026.990:852): avc: denied { listen } for pid=9705 comm="syz.2.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.135128][ T36] audit: type=1400 audit(2000000027.420:853): avc: denied { write } for pid=9710 comm="syz.0.3182" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 196.370711][ T10] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 196.522116][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.530933][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.619466][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.628166][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.642795][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.651124][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 196.658695][ T10] usb 1-1: can't read configurations, error -71 [ 197.206638][ T36] audit: type=1400 audit(2000000028.480:854): avc: denied { accept } for pid=9732 comm="syz.0.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.238343][ T9736] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 197.238366][ T9736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 197.247007][ T9736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:790 [ 197.448396][ T437] usb 2-1: USB disconnect, device number 50 [ 197.471641][ T9747] binder: Unknown parameter 'defcontext01777777777777777777777' [ 197.489766][ T9749] binder: Binderfs stats mode cannot be changed during a remount [ 198.300698][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 198.401823][ T36] audit: type=1400 audit(2000000029.680:855): avc: denied { append } for pid=9765 comm="syz.1.3202" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.426946][ T36] audit: type=1400 audit(2000000029.700:856): avc: denied { execute } for pid=9765 comm="syz.1.3202" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.460768][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 198.467134][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.479009][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.488970][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 198.498337][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.507013][ T10] usb 1-1: config 0 descriptor?? [ 198.526207][ T9768] binder: Bad value for 'max' [ 198.598590][ T9779] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 198.625553][ T9785] __vm_enough_memory: pid: 9785, comm: syz.1.3210, bytes: 70373039144960 not enough memory for the allocation [ 198.890695][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 198.914930][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 198.922195][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 198.929330][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 198.936528][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 198.943701][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 198.951520][ T10] koneplus 0003:1E7D:2D51.0021: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 199.041749][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 199.049812][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.059991][ T9] usb 2-1: config 0 has no interface number 0 [ 199.066132][ T9] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.079041][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 199.088146][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.097060][ T9] usb 2-1: config 0 descriptor?? [ 199.111991][ T9790] binder: Binderfs stats mode cannot be changed during a remount [ 199.118318][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.309149][ T9787] cgroup: Unknown subsys name 'subj_type' [ 199.316675][ T9787] overlayfs: failed to resolve './file1': -2 [ 199.333923][ T9787] futex_wake_op: syz.1.3211 tries to shift op by 144; fix this program [ 199.344020][ T437] usb 2-1: USB disconnect, device number 51 [ 199.360235][ T9755] Invalid ELF header type: 2 != 1 [ 199.365731][ T36] audit: type=1400 audit(2000000030.630:857): avc: denied { module_load } for pid=9754 comm="syz.0.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 199.386225][ T444] usb 1-1: USB disconnect, device number 66 [ 199.978709][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3222'. [ 200.165282][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.173977][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.445721][ T9836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:575 [ 200.496752][ T9837] rust_binder: Write failure EINVAL in pid:575 [ 200.714518][ T36] audit: type=1400 audit(2000000031.990:858): avc: denied { ioctl } for pid=9840 comm="syz.2.3230" path="socket:[50010]" dev="sockfs" ino=50010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.963044][ T9867] FAT-fs (rnullb0): bogus number of reserved sectors [ 200.969771][ T9867] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 200.989659][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.998237][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.006608][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.015205][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.023377][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.031920][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.039963][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.048708][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.057029][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.065549][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.073673][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.082164][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.110723][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 201.124634][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.124666][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.131227][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.137792][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.137818][ T9878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.144532][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.150815][ T9878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:858 [ 201.160509][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.175907][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.182386][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.188827][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.195288][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.202034][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.208588][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.215090][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.221567][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.228341][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.234936][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.241815][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.249510][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.256128][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.261967][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 201.262634][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.269139][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.279873][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.286812][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.297533][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.303755][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 201.314875][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.321213][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 201.333205][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.339712][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 201.348697][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.355806][ T10] usb 1-1: Manufacturer: syz [ 201.363609][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.372237][ T10] usb 1-1: config 0 descriptor?? [ 201.374291][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.385692][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.392182][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.398690][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.405166][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.411653][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.418097][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.424578][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.431052][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.437499][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.444191][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.450702][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.457152][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.463625][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.470077][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.476564][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.483038][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.489491][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.490705][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 201.495988][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.509987][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.516500][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.522992][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.529446][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.535935][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.542421][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.548912][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.555400][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.561897][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.568348][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.574860][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.581331][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.587784][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.594262][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.600734][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.607167][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.613659][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.620115][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.626585][ T9877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.660717][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 201.667477][ T9884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:864 [ 201.673529][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 201.690374][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.692542][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.700369][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.708759][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.718977][ T9886] rust_binder: Error while translating object. [ 201.724976][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.725009][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.725036][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.725238][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.732201][ T9886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.741166][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.751188][ T9886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:866 [ 201.770597][ T9] usb 2-1: config 0 descriptor?? [ 201.805459][ T10] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 201.812879][ T10] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 201.823282][ T10] appleir 0003:05AC:8243.0022: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 202.061551][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 202.072562][ T10] usb 1-1: USB disconnect, device number 67 [ 202.225882][ T444] usb 2-1: USB disconnect, device number 52 [ 202.232691][ T444] usblp0: removed [ 202.305619][ T9889] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3247'. [ 202.389412][ T9900] __vm_enough_memory: pid: 9900, comm: syz.2.3249, bytes: 70373039144960 not enough memory for the allocation [ 202.752643][ T9911] rust_binder: Error while translating object. [ 202.752687][ T9911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.758947][ T9911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:582 [ 202.791000][ T9911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.963784][ T9935] tmpfs: Bad value for 'uid' [ 202.968455][ T9935] tmpfs: Bad value for 'uid' [ 203.058657][ T9939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.059792][ T9939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.066549][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 203.081268][ T9939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:600 [ 203.105901][ T36] audit: type=1400 audit(2000000034.380:859): avc: denied { accept } for pid=9940 comm="syz.1.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.231702][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.251477][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.266427][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.279509][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 203.291153][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.302899][ T10] usb 1-1: config 0 descriptor?? [ 203.312815][ T36] audit: type=1400 audit(2000000034.590:860): avc: denied { append } for pid=9948 comm="syz.1.3266" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.315826][ T9949] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 203.346339][ T9949] SELinux: security_context_str_to_sid (--A) failed with errno=-22 [ 203.534336][ T9956] tmpfs: Bad value for 'nr_blocks' [ 203.749297][ T9966] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 203.776254][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.794685][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.810467][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.820259][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.913949][ T10] usb 1-1: language id specifier not provided by device, defaulting to English [ 204.320701][ T10] uclogic 0003:5543:0047.0023: failed retrieving string descriptor #100: -71 [ 204.329743][ T10] uclogic 0003:5543:0047.0023: failed retrieving pen parameters: -71 [ 204.338146][ T10] uclogic 0003:5543:0047.0023: failed probing pen v1 parameters: -71 [ 204.360713][ T10] uclogic 0003:5543:0047.0023: failed probing parameters: -71 [ 204.370729][ T10] uclogic 0003:5543:0047.0023: probe with driver uclogic failed with error -71 [ 204.403779][ T10] usb 1-1: USB disconnect, device number 68 [ 204.524742][T10014] overlayfs: failed to clone upperpath [ 204.698426][T10023] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3291'. [ 204.722090][T10021] binder: Bad value for 'defcontext' [ 204.775994][T10034] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3293'. [ 204.780677][ T36] audit: type=1400 audit(2000000036.050:861): avc: denied { accept } for pid=10033 comm="syz.1.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.930279][T10045] binder: Unknown parameter 'context' [ 204.943243][T10041] kvm: pic: non byte write [ 205.020073][ T36] audit: type=1400 audit(2000000036.290:862): avc: denied { shutdown } for pid=10047 comm="syz.0.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.410692][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 205.550691][ T9] usb 2-1: device descriptor read/64, error -71 [ 205.800684][ T9] usb 2-1: device descriptor read/64, error -71 [ 205.825309][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 206.040708][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 206.170776][ T9] usb 2-1: device descriptor read/64, error -71 [ 206.202344][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 206.210818][ T10] hid-generic 0000:0000:0000.0024: hidraw1: HID v0.00 Device [syz1] on syz0 [ 206.410691][ T9] usb 2-1: device descriptor read/64, error -71 [ 206.520795][ T9] usb usb2-port1: attempt power cycle [ 206.860710][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 206.882068][ T9] usb 2-1: device descriptor read/8, error -71 [ 206.907609][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.916647][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.929332][ T36] audit: type=1400 audit(2000000038.210:863): avc: denied { accept } for pid=10132 comm="syz.0.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 207.011701][ T9] usb 2-1: device descriptor read/8, error -71 [ 207.250777][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 207.271830][ T9] usb 2-1: device descriptor read/8, error -71 [ 207.401807][ T9] usb 2-1: device descriptor read/8, error -71 [ 207.441582][T10141] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3328'. [ 207.510780][ T9] usb usb2-port1: unable to enumerate USB device [ 207.600167][T10157] fuse: Unknown parameter '>;maE_Ά ݋*' [ 207.600167][T10155] fuse: Unknown parameter '>;maE_Ά ݋*' [ 207.632843][T10160] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 207.714282][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.723057][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.280730][ T9] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 208.430999][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 208.560689][ T9] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 208.710988][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 208.717182][ T9] usb usb1-port1: attempt power cycle [ 208.999267][ T36] audit: type=1326 audit(2000000001.170:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.1.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef478e929 code=0x7fc00000 [ 209.060786][ T9] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 209.081608][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 209.089997][T10205] netlink: 'syz.1.3348': attribute type 4 has an invalid length. [ 209.098297][T10205] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3348'. [ 209.114628][T10205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20833 sclass=netlink_route_socket pid=10205 comm=syz.1.3348 [ 209.127725][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 209.210707][ T9] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 209.231065][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 209.236539][ T9] usb usb1-port1: unable to enumerate USB device [ 209.500744][ T437] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 209.636031][T10242] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 209.651820][ T437] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.656827][T10244] binder: Bad value for 'max' [ 209.662114][ T437] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.680056][ T437] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.689537][ T437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.697765][ T437] usb 2-1: SerialNumber: syz [ 209.701450][T10250] SELinux: security_context_str_to_sid () failed with errno=-22 [ 209.787649][T10258] fuse: Bad value for 'fd' [ 209.871827][T10265] cgroup: Bad value for 'name' [ 209.911192][T10216] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.931741][ T437] usb 2-1: 0:2 : does not exist [ 209.939925][ T437] usb 2-1: USB disconnect, device number 57 [ 209.953235][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 209.980109][T10272] fuse: Bad value for 'fd' [ 210.000191][T10278] fuse: Unknown parameter ''*ZfNiJN 5U HID v0.00 Device [syz0] on syz1 [ 211.524369][T10359] fido_id[10359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.730716][ T444] usb 1-1: device descriptor read/64, error -71 [ 211.857920][T10361] 9pnet_fd: Insufficient options for proto=fd [ 211.970741][ T444] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 212.100717][ T444] usb 1-1: device descriptor read/64, error -71 [ 212.128549][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.137194][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.286600][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.295569][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.340715][ T444] usb 1-1: device descriptor read/64, error -71 [ 212.429884][T10401] /dev/loop0: Can't lookup blockdev [ 212.450831][ T444] usb usb1-port1: attempt power cycle [ 212.530693][ T373] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 212.690664][ T373] usb 2-1: Using ep0 maxpacket: 32 [ 212.698270][ T373] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.708949][ T373] usb 2-1: config 1 has an invalid interface number: 30 but max is 0 [ 212.718382][ T373] usb 2-1: config 1 has no interface number 0 [ 212.729175][ T373] usb 2-1: config 1 interface 30 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 212.740477][ T373] usb 2-1: config 1 interface 30 has no altsetting 0 [ 212.754096][ T373] usb 2-1: string descriptor 0 read error: -22 [ 212.760436][ T373] usb 2-1: New USB device found, idVendor=1a72, idProduct=1016, bcdDevice=d8.43 [ 212.769750][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.780956][ T373] ftdi_sio 2-1:1.30: FTDI USB Serial Device converter detected [ 212.790707][ T444] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 212.791313][ T373] ftdi_sio ttyUSB0: unknown device type: 0xd843 [ 212.821746][ T444] usb 1-1: device descriptor read/8, error -71 [ 212.952052][ T444] usb 1-1: device descriptor read/8, error -71 [ 213.190738][ T444] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 213.211921][ T444] usb 1-1: device descriptor read/8, error -71 [ 213.246113][ T373] usb 2-1: USB disconnect, device number 59 [ 213.252901][ T373] ftdi_sio 2-1:1.30: device disconnected [ 213.341816][ T444] usb 1-1: device descriptor read/8, error -71 [ 213.450775][ T444] usb usb1-port1: unable to enumerate USB device [ 213.822641][T10470] fuse: Bad value for 'fd' [ 213.857053][ T36] audit: type=1326 audit(2000000006.030:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.3439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8ccb8e929 code=0x0 [ 213.927816][T10486] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3442'. [ 213.964731][T10490] sit0: mtu greater than device maximum [ 213.970408][T10491] sit0: mtu greater than device maximum [ 213.977585][T10490] overlayfs: failed to clone upperpath [ 214.151747][T10493] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 214.519710][T10502] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3449'. [ 214.554040][T10508] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 214.555634][T10507] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3451'. [ 214.563184][T10508] overlayfs: missing 'lowerdir' [ 214.665636][T10532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.688468][T10535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.744372][T10554] netlink: 'syz.3.3465': attribute type 27 has an invalid length. [ 214.862362][T10573] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 214.960703][ T36] audit: type=1326 audit(2000000007.130:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10584 comm="syz.3.3477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccb8e929 code=0x0 [ 215.153328][T10589] tmpfs: Unknown parameter 'grpquota' [ 215.835511][T10622] rust_binder: Write failure EFAULT in pid:1078 [ 215.923855][T10643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.930311][T10644] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 215.938255][T10644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 215.944834][T10644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1089 [ 215.966097][T10646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1093 [ 216.060675][ T373] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 216.154187][T10659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.154216][T10659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1106 [ 216.200711][ T373] usb 2-1: device descriptor read/64, error -71 [ 216.450696][ T373] usb 2-1: device descriptor read/64, error -71 [ 216.630706][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 216.652708][T10690] overlayfs: failed to clone upperpath [ 216.681641][T10694] tipc: Enabling of bearer rejected, failed to enable media [ 216.690691][ T373] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 216.782649][T10713] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 216.790711][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 216.794844][T10713] /dev/loop0: Can't lookup blockdev [ 216.799760][ T9] usb 1-1: config 0 has no interfaces? [ 216.813510][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.822726][ T373] usb 2-1: device descriptor read/64, error -71 [ 216.829022][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.837143][ T9] usb 1-1: Product: syz [ 216.841408][ T9] usb 1-1: Manufacturer: syz [ 216.846037][ T9] usb 1-1: SerialNumber: syz [ 216.851494][ T9] usb 1-1: config 0 descriptor?? [ 217.059247][ T9] usb 1-1: USB disconnect, device number 77 [ 217.065581][ T373] usb 2-1: device descriptor read/64, error -71 [ 217.180843][ T373] usb usb2-port1: attempt power cycle [ 217.399862][ T36] audit: type=1326 audit(2000000009.570:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.3.3533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8ccb8e929 code=0x0 [ 217.520734][ T373] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 217.541820][ T373] usb 2-1: device descriptor read/8, error -71 [ 217.671808][ T373] usb 2-1: device descriptor read/8, error -71 [ 217.890702][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 217.910742][ T373] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 217.931746][ T373] usb 2-1: device descriptor read/8, error -71 [ 218.040687][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 218.046896][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.059793][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.066491][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 218.075622][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.084467][ T373] usb 2-1: device descriptor read/8, error -71 [ 218.090963][ T9] usb 1-1: config 0 descriptor?? [ 218.200781][ T373] usb usb2-port1: unable to enumerate USB device [ 218.505282][ T9] uclogic 0003:5543:0042.0026: unbalanced delimiter at end of report description [ 218.514758][ T9] uclogic 0003:5543:0042.0026: parse failed [ 218.520773][ T9] uclogic 0003:5543:0042.0026: probe with driver uclogic failed with error -22 [ 218.767752][ T437] usb 1-1: USB disconnect, device number 78 [ 219.346707][T10806] tmpfs: Unexpected value for 'inode32' [ 219.352821][T10806] /dev/rnullb0: Can't open blockdev [ 219.610701][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 219.690751][ T372] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 219.763648][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.774063][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 219.783161][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.798340][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.804319][T10828] tmpfs: Unknown parameter 'hŨqAluge?' [ 219.807810][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.821407][ T372] usb 1-1: device descriptor read/64, error -71 [ 219.827739][ T9] usb 2-1: Product: syz [ 219.832069][ T9] usb 2-1: Manufacturer: syz [ 219.837027][ T9] usb 2-1: SerialNumber: syz [ 219.840004][T10831] overlayfs: missing 'workdir' [ 220.045623][T10808] tipc: Started in network mode [ 220.050540][T10808] tipc: Node identity 660fd80dba3f, cluster identity 4711 [ 220.057817][T10808] tipc: Enabled bearer , priority 0 [ 220.066837][T10808] tipc: Disabling bearer [ 220.068297][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 220.079512][ T372] usb 1-1: device descriptor read/64, error -71 [ 220.087207][ T9] cdc_ncm 2-1:1.0: bind() failure [ 220.093888][ T9] usb 2-1: USB disconnect, device number 64 [ 220.174813][T10843] fuseblk: Bad value for 'fd' [ 220.320705][ T372] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 220.376142][T10855] IPv4: Oversized IP packet from 127.202.26.0 [ 220.450725][ T372] usb 1-1: device descriptor read/64, error -71 [ 220.690716][ T372] usb 1-1: device descriptor read/64, error -71 [ 220.800811][ T372] usb usb1-port1: attempt power cycle [ 220.850702][ T437] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 220.905434][T10863] overlayfs: missing 'lowerdir' [ 220.947017][T10871] netlink: 'syz.2.3582': attribute type 6 has an invalid length. [ 221.002255][ T437] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.006753][T10886] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.013665][ T437] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 221.021410][T10886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.032429][ T437] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.039201][T10886] IPv6: NLM_F_CREATE should be set when creating new route [ 221.046275][ T437] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 221.062288][ T437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.071007][ T437] usb 2-1: config 0 descriptor?? [ 221.076294][T10859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.150745][ T372] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 221.171844][ T372] usb 1-1: device descriptor read/8, error -71 [ 221.301820][ T372] usb 1-1: device descriptor read/8, error -71 [ 221.480673][T10888] overlayfs: failed to clone upperpath [ 221.489656][ T437] usbhid 2-1:0.0: can't add hid device: -71 [ 221.497097][ T437] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 221.509121][ T437] usb 2-1: USB disconnect, device number 65 [ 221.540688][ T372] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 221.561796][ T372] usb 1-1: device descriptor read/8, error -71 [ 221.691783][ T372] usb 1-1: device descriptor read/8, error -71 [ 221.800780][ T372] usb usb1-port1: unable to enumerate USB device [ 222.005532][T10905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.005794][T10905] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 222.012980][T10905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.073469][T10919] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.073517][T10919] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.073933][T10920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:745 [ 222.080111][T10919] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.128143][ T36] audit: type=1326 audit(2000000014.300:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.3.3601" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8ccb8e929 code=0x0 [ 222.163958][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3599'. [ 222.193553][T10945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.193662][T10945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:752 [ 222.574081][ T36] audit: type=1326 audit(2000000014.750:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.0.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c78e929 code=0x7fc00000 [ 223.037745][T10973] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 223.045256][T10973] rust_binder: Write failure EINVAL in pid:755 [ 223.067601][T10975] raw_sendmsg: syz.1.3615 forgot to set AF_INET. Fix it! [ 223.079779][T10980] overlayfs: failed to clone upperpath [ 223.180058][T10991] tipc: Cannot configure node identity twice [ 223.204474][ T36] audit: type=1326 audit(2000000015.380:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.2.3622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3dc38e929 code=0x0 [ 223.350706][ T437] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 223.500712][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 223.507178][ T437] usb 2-1: config 0 has no interfaces? [ 223.517114][ T437] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.526500][ T437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.534710][ T437] usb 2-1: Product: syz [ 223.538961][ T437] usb 2-1: Manufacturer: syz [ 223.543817][ T437] usb 2-1: SerialNumber: syz [ 223.549690][ T437] usb 2-1: config 0 descriptor?? [ 223.757914][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.766793][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.775261][ T373] usb 2-1: USB disconnect, device number 66 [ 223.810694][ T437] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 223.979766][ T437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.987937][ T437] usb 1-1: not running at top speed; connect to a high speed hub [ 223.996806][ T437] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 224.005255][ T437] usb 1-1: config 0 has no interface number 0 [ 224.011767][ T437] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 224.023314][ T437] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 224.040964][ T437] usb 1-1: config 0 interface 88 has no altsetting 0 [ 224.052575][ T437] usb 1-1: language id specifier not provided by device, defaulting to English [ 224.064780][ T437] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 224.074210][ T437] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 224.082878][ T437] usb 1-1: Product: syz [ 224.087255][ T437] usb 1-1: SerialNumber: syz [ 224.093757][ T437] usb 1-1: config 0 descriptor?? [ 224.293182][T11036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.293657][T11036] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 224.300858][T11036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.316757][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.331764][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.370880][T11048] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.395136][ T36] audit: type=1400 audit(2000000016.570:872): avc: denied { remount } for pid=11050 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 224.472577][ T437] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input25 [ 224.483593][ T437] usb 1-1: USB disconnect, device number 83 [ 224.527607][T11054] /dev/rnullb0: Can't open blockdev [ 224.656898][T11069] fuse: Bad value for 'group_id' [ 224.661936][T11069] fuse: Bad value for 'group_id' [ 224.683950][T11072] fuse: Unknown parameter '01777777777777777777777' [ 224.706785][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3649'. [ 224.716469][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.725347][T11076] bridge_slave_1 (unregistering): left allmulticast mode [ 224.732502][T11076] bridge_slave_1 (unregistering): left promiscuous mode [ 224.739447][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.771216][T11083] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 224.792107][T11086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.798061][T11087] rust_binder: Write failure EFAULT in pid:797 [ 224.872782][T11095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.879489][T11095] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 224.900386][T11097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.912050][T11097] rust_binder: Write failure EINVAL in pid:804 [ 224.918844][T11097] rust_binder: Read failure Err(EAGAIN) in pid:804 [ 224.943298][T11105] binder: Bad value for 'max' [ 224.974366][ T36] audit: type=1400 audit(2000000017.150:873): avc: denied { create } for pid=11108 comm="syz.1.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.935690][T11137] overlayfs: failed to clone upperpath [ 226.151325][T11159] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 226.301682][T11177] __vm_enough_memory: pid: 11177, comm: syz.1.3683, bytes: 70373039144960 not enough memory for the allocation [ 226.731396][T11194] overlayfs: failed to clone upperpath [ 226.760689][ T306] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 226.910711][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 226.917017][ T306] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 226.925313][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.935448][ T306] usb 1-1: config 0 has no interface number 0 [ 226.942975][ T306] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 226.952088][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.960134][ T306] usb 1-1: Product: syz [ 226.964381][ T306] usb 1-1: Manufacturer: syz [ 226.969008][ T306] usb 1-1: SerialNumber: syz [ 226.974301][ T306] usb 1-1: config 0 descriptor?? [ 227.136593][T11210] overlay: ./file0 is not a directory [ 227.159612][T11210] 9pnet_fd: Insufficient options for proto=fd [ 227.182041][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.190863][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.204779][T11183] binder: Bad value for 'max' [ 227.210111][ T373] usb 1-1: USB disconnect, device number 84 [ 227.272436][T11227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3703'. [ 227.272855][T11228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.296609][T11234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.550744][ T444] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 227.711984][ T444] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 227.720676][ T444] usb 2-1: config 0 has no interface number 0 [ 227.726818][ T444] usb 2-1: config 0 interface 41 has no altsetting 0 [ 227.735070][ T444] usb 2-1: New USB device found, idVendor=0003, idProduct=0000, bcdDevice= 0.00 [ 227.744256][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.752355][ T444] usb 2-1: SerialNumber: syz [ 227.760917][ T444] usb 2-1: config 0 descriptor?? [ 228.061185][ T36] audit: type=1326 audit(2000000249.245:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.2.3716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3dc38e929 code=0x0 [ 228.376148][ T373] usb 2-1: USB disconnect, device number 67 [ 228.744412][T11300] tipc: Started in network mode [ 228.749332][T11300] tipc: Node identity cef33222497d, cluster identity 4711 [ 228.756611][T11300] tipc: Enabled bearer , priority 0 [ 229.424770][T11306] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3726'. [ 229.574698][T11299] tipc: Disabling bearer [ 229.642484][T11319] netlink: 'syz.0.3730': attribute type 4 has an invalid length. [ 229.811369][T11338] 9pnet_fd: Insufficient options for proto=fd [ 229.817816][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3737'. [ 229.827069][T11339] rust_binder: Write failure EFAULT in pid:880 [ 229.902942][ T306] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 229.920684][T11349] rust_binder: Write failure EFAULT in pid:885 [ 229.934674][T11355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.993051][T11356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:891 [ 230.000166][T11356] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.061847][ T306] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 230.071522][T11365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.080697][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.097346][ T306] usb 1-1: config 0 has no interface number 0 [ 230.104910][ T306] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 230.114002][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.122038][ T306] usb 1-1: Product: syz [ 230.126220][ T306] usb 1-1: Manufacturer: syz [ 230.128533][T11366] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 230.130868][ T306] usb 1-1: SerialNumber: syz [ 230.132428][T11366] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 230.139533][ T306] usb 1-1: config 0 descriptor?? [ 230.393357][ T306] usb 1-1: USB disconnect, device number 85 [ 231.220680][ T45] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 231.370703][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 231.377756][ T45] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 231.387725][ T45] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.401132][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 231.410028][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.420656][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.428938][ T45] usb 1-1: Product: 畐븗꽈桉瑙뾶批楟莞擃枭荈╭ퟫጭୃ㜠쇖넉㟁᙭₊ط趃笁䬣뵁懁좳 [ 231.441740][ T45] usb 1-1: Manufacturer: ᰉ [ 231.447245][T11397] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 231.657458][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 231.660702][ T372] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 231.667907][ T45] usb 1-1: USB disconnect, device number 86 [ 231.737457][T11411] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3762'. [ 231.746530][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3762'. [ 231.782180][T11420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11420 comm=syz.3.3764 [ 231.831766][ T372] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.843637][ T372] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 231.858717][ T372] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.865601][ T372] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 231.874837][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.883647][ T372] usb 2-1: config 0 descriptor?? [ 231.888916][T11400] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 232.301613][ T372] usbhid 2-1:0.0: can't add hid device: -71 [ 232.307660][ T372] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 232.317992][ T372] usb 2-1: USB disconnect, device number 68 [ 232.494377][T11463] tipc: Enabling of bearer rejected, failed to enable media [ 232.517354][T11465] overlayfs: failed to clone upperpath [ 232.622280][ T36] audit: type=1326 audit(2000000253.805:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.2.3784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3dc38e929 code=0x0 [ 232.707533][ T36] audit: type=1326 audit(2000000253.885:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11486 comm="syz.3.3786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8ccb8e929 code=0x0 [ 232.890689][ T45] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 233.051988][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 233.059659][ T45] usb 1-1: can't read configurations, error -61 [ 233.070685][ T372] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 233.190694][ T45] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 233.221991][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.233100][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.242896][ T372] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.255885][ T372] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.264976][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.273671][ T372] usb 2-1: config 0 descriptor?? [ 233.342284][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 233.350005][ T45] usb 1-1: can't read configurations, error -61 [ 233.356510][ T45] usb usb1-port1: attempt power cycle [ 233.477801][T11499] 9p: Unknown access argument .: -22 [ 233.566752][T11506] overlayfs: failed to clone upperpath [ 233.687264][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.696801][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.700819][ T45] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 233.704289][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.719216][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.726686][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.734251][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.736001][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 233.741696][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.750413][ T45] usb 1-1: can't read configurations, error -61 [ 233.759517][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.770340][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.777819][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.785265][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.792713][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.800111][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.807542][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.814989][ T372] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 233.822608][ T372] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 233.831841][ T372] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 233.891572][ T45] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 233.900441][T11495] binder: Unknown parameter '00000000000000000001624' [ 233.912305][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 233.919917][ T45] usb 1-1: can't read configurations, error -61 [ 233.926422][ T45] usb usb1-port1: unable to enumerate USB device [ 234.074944][ T372] usb 2-1: USB disconnect, device number 69 [ 234.660679][ T372] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 234.810663][ T372] usb 2-1: Using ep0 maxpacket: 8 [ 234.817383][ T372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.826145][ T372] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.835217][ T372] usb 2-1: config 1 has no interface number 1 [ 234.841753][ T372] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 234.854872][ T372] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 234.867675][ T372] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.877076][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.885425][ T372] usb 2-1: Product: syz [ 234.889770][ T372] usb 2-1: Manufacturer: syz [ 234.894632][ T372] usb 2-1: SerialNumber: syz [ 235.053438][T11549] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3806'. [ 235.104423][T11539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.111525][T11539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.140941][T11539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.150925][T11539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.160234][T11539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.168524][T11539] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 235.175777][ T372] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 235.190922][ T372] usb 2-1: 2:1 : invalid channels 0 [ 235.203317][ T372] usb 2-1: USB disconnect, device number 70 [ 235.222757][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.231174][ T36] audit: type=1326 audit(2000000256.415:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11562 comm="syz.2.3811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3dc38e929 code=0x0 [ 235.318819][T11585] /dev/rnullb0: Can't lookup blockdev [ 235.324978][T11587] /dev/rnullb0: Can't lookup blockdev [ 235.711453][T11608] binder: Bad value for 'stats' [ 235.899899][ T36] audit: type=1326 audit(2000000257.075:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c78e929 code=0x7ffc0000 [ 235.913526][T11632] binder: Unknown parameter 'fscontext?}' [ 235.923855][ T36] audit: type=1326 audit(2000000257.075:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c78e929 code=0x7ffc0000 [ 235.948550][T11630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3832'. [ 235.964541][ T36] audit: type=1326 audit(2000000257.075:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f277c78e929 code=0x7ffc0000 [ 235.991714][ T36] audit: type=1326 audit(2000000257.075:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c78e929 code=0x7ffc0000 [ 236.016517][ T36] audit: type=1326 audit(2000000257.075:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277c78e929 code=0x7ffc0000 [ 236.040177][ T36] audit: type=1326 audit(2000000257.075:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f277c790847 code=0x7ffc0000 [ 236.080714][ T36] audit: type=1326 audit(2000000257.075:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f277c7907bc code=0x7ffc0000 [ 236.130004][ T36] audit: type=1326 audit(2000000257.075:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f277c7906f4 code=0x7ffc0000 [ 236.142960][T11650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.154021][ T36] audit: type=1326 audit(2000000257.075:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f277c7906f4 code=0x7ffc0000 [ 236.241115][T11667] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 236.241139][T11667] rust_binder: Read failure Err(EFAULT) in pid:950 [ 236.294832][T11671] overlayfs: failed to get inode (-116) [ 236.307243][T11671] overlayfs: failed to get inode (-116) [ 236.335345][T11673] netlink: 948 bytes leftover after parsing attributes in process `syz.1.3847'. [ 236.390704][ T444] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 236.411671][ T372] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 236.424742][ T372] hid-generic 0000:0000:0000.0028: hidraw1: HID v0.00 Device [syz1] on syz0 [ 236.446915][T11685] fido_id[11685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.466715][T11689] tmpfs: Unknown parameter 'hugalways' [ 236.491465][T11691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.491891][T11691] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 236.552467][ T444] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.573956][ T444] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 236.580050][T11708] /dev/rnullb0: Can't open blockdev [ 236.585046][ T444] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.611365][ T444] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 236.625704][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.642787][ T444] usb 1-1: config 0 descriptor?? [ 236.648088][T11647] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.764256][T11730] __vm_enough_memory: pid: 11730, comm: syz.1.3864, bytes: 70373039144960 not enough memory for the allocation [ 236.848259][T11746] overlayfs: failed to clone lowerpath [ 236.910099][T11751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.910135][T11751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.057666][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.072652][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.079999][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.087434][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.094846][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.102125][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.109292][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.109955][T11780] fuse: Unknown parameter '0x000000000000000400000000000000000003' [ 237.116566][ T444] logitech 0003:046D:C286.0029: unknown main item tag 0x0 [ 237.133946][ T444] logitech 0003:046D:C286.0029: hidraw1: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 237.145826][ T444] logitech 0003:046D:C286.0029: no inputs found [ 237.260671][ T45] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 237.267027][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.280181][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.295152][ T372] usb 1-1: USB disconnect, device number 91 [ 237.346134][T11821] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3891'. [ 237.421710][ T45] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.440497][ T45] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 237.451466][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 237.458589][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 237.468043][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.488440][ T45] usb 2-1: config 0 descriptor?? [ 237.495486][T11765] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 237.715772][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 237.722050][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 237.733651][ T45] usb 2-1: USB disconnect, device number 71 [ 238.110685][ T45] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 238.162058][T11904] overlayfs: missing 'workdir' [ 238.222406][T11913] overlayfs: failed to clone upperpath [ 238.222784][T11914] overlayfs: failed to clone upperpath [ 238.261745][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 238.270924][ T45] usb 2-1: config 3 has an invalid interface number: 226 but max is 0 [ 238.279527][ T45] usb 2-1: config 3 has no interface number 0 [ 238.286150][ T45] usb 2-1: config 3 interface 226 has no altsetting 0 [ 238.294752][ T45] usb 2-1: New USB device found, idVendor=0d56, idProduct=ef19, bcdDevice=a1.de [ 238.303855][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.311904][ T45] usb 2-1: Product: syz [ 238.316079][ T45] usb 2-1: Manufacturer: syz [ 238.320765][ T45] usb 2-1: SerialNumber: syz [ 238.353991][T11928] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 238.463545][T11932] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 238.501228][T11939] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 238.537838][ T45] usb-storage 2-1:3.226: USB Mass Storage device detected [ 238.606575][ T45] usb 2-1: USB disconnect, device number 72 [ 239.061559][T11952] rust_binder: Write failure EINVAL in pid:1015 [ 239.310696][ T372] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 239.471780][ T372] usb 2-1: config 1 has an invalid interface number: 229 but max is 1 [ 239.480011][ T372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.490165][ T372] usb 2-1: config 1 has no interface number 0 [ 239.496299][ T372] usb 2-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 239.507492][ T372] usb 2-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 239.521027][ T372] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.533959][ T372] usb 2-1: config 1 interface 229 has no altsetting 0 [ 239.540780][ T372] usb 2-1: config 1 interface 1 has no altsetting 0 [ 239.548920][ T372] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.558060][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.566124][ T372] usb 2-1: Product: syz [ 239.570309][ T372] usb 2-1: Manufacturer: syz [ 239.574955][ T372] usb 2-1: SerialNumber: syz [ 239.620745][ T45] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 239.771910][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.781688][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.796150][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.798193][ T372] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 239.805399][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.816582][ T372] usb 2-1: USB disconnect, device number 73 [ 239.825140][ T45] usb 1-1: Product: syz [ 239.831606][ T45] usb 1-1: Manufacturer: syz [ 239.839142][ T45] usb 1-1: SerialNumber: syz [ 239.849564][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 239.855563][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 240.340794][ T45] usb 1-1: USB disconnect, device number 92 [ 240.432794][T12020] overlayfs: missing 'lowerdir' [ 240.666697][T12061] fuse: Unknown parameter '' [ 240.697041][T12057] SELinux: policydb string does not match my string SE Linux [ 240.704747][T12057] SELinux: failed to load policy [ 240.710347][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3967'. [ 240.978369][T12099] cgroup: Unknown subsys name 'perf_event' [ 240.985415][T12099] overlayfs: failed to clone upperpath [ 241.188764][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 241.188788][ T36] audit: type=1400 audit(2000000262.365:902): avc: denied { map } for pid=12101 comm="syz.2.3985" path="socket:[61319]" dev="sockfs" ino=61319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.220892][ T306] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 241.380684][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 241.387150][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.394508][T12128] can: request_module (can-proto-7) failed. [ 241.398364][ T306] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 241.413767][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.424256][ T306] usb 1-1: config 0 descriptor?? [ 241.455725][T12134] 9pnet_fd: Insufficient options for proto=fd [ 241.721233][ T36] audit: type=1400 audit(2000000262.905:903): avc: denied { mount } for pid=12145 comm="syz.3.4002" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 241.775630][T12153] binder: Unknown parameter 'sta]s' [ 241.834005][ T306] apple 0003:05AC:027C.002A: hidraw1: USB HID v0.05 Device [HID 05ac:027c] on usb-dummy_hcd.0-1/input0 [ 242.035623][ T372] usb 1-1: USB disconnect, device number 93 [ 242.060706][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 242.211848][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.221663][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.231382][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.245876][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.254997][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.263039][ T10] usb 2-1: Product: syz [ 242.267217][ T10] usb 2-1: Manufacturer: syz [ 242.271860][ T10] usb 2-1: SerialNumber: syz [ 242.279118][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 242.285123][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 242.480002][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 242.573416][T12204] input: syz1 as /devices/virtual/input/input27 [ 242.590274][T12207] /dev/loop0: Can't lookup blockdev [ 242.604273][T12209] bpf: Bad value for 'mode' [ 242.648413][T12219] tipc: Invalid UDP bearer configuration [ 242.648440][T12219] tipc: Enabling of bearer rejected, failed to enable media [ 243.441237][T12248] fuse: Unknown parameter 'f' [ 243.511318][ T10] usb 2-1: USB disconnect, device number 74 [ 243.520855][ T10] usblp0: removed [ 243.527315][T12268] SELinux: Context system_u:object_r:cpu_device_t:s0 is not valid (left unmapped). [ 243.537370][ T36] audit: type=1400 audit(2000000264.715:904): avc: denied { relabelto } for pid=12267 comm="syz.2.4043" name="file0" dev="tmpfs" ino=3113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:cpu_device_t:s0" [ 243.539969][T12268] fuse: Bad value for 'fd' [ 243.564770][ T36] audit: type=1400 audit(2000000264.715:905): avc: denied { associate } for pid=12267 comm="syz.2.4043" name="file0" dev="tmpfs" ino=3113 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cpu_device_t:s0" [ 243.599331][ T36] audit: type=1400 audit(2000000264.715:906): avc: denied { mounton } for pid=12267 comm="syz.2.4043" path="/562/file0" dev="tmpfs" ino=3113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:cpu_device_t:s0" [ 243.599726][T12270] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4044'. [ 243.627335][ T36] audit: type=1400 audit(2000000264.765:907): avc: denied { unlink } for pid=6777 comm="syz-executor" name="file0" dev="tmpfs" ino=3113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:cpu_device_t:s0" [ 243.657085][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4045'. [ 243.720674][ T372] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 243.784604][T12282] overlay: ./file0 is not a directory [ 243.828219][T12289] fuse: Unknown parameter '' [ 243.871069][ T372] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 243.880089][ T372] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 243.889977][ T372] usb 1-1: can't read configurations, error -61 [ 244.030693][ T372] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 244.156405][T12310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.181069][ T372] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 244.189964][ T372] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 244.197672][ T372] usb 1-1: can't read configurations, error -61 [ 244.204087][ T372] usb usb1-port1: attempt power cycle [ 244.213505][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4058'. [ 244.272160][T12314] /dev/rnullb0: Can't open blockdev [ 244.287016][T12316] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4060'. [ 244.315210][ T36] audit: type=1400 audit(2000000265.495:908): avc: denied { mount } for pid=12317 comm="syz.3.4061" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 244.338320][T12318] overlayfs: failed to clone upperpath [ 244.361430][T12327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1039 [ 244.474712][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 244.517817][ T36] audit: type=1400 audit(2000000265.695:909): avc: denied { read } for pid=12347 comm="syz.3.4071" name="file0" dev="tmpfs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.550731][ T372] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 244.572069][ T372] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 244.581311][ T372] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 244.589456][ T372] usb 1-1: can't read configurations, error -61 [ 244.620665][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 244.721264][ T372] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 244.751457][ T372] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 244.770350][ T372] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 244.778017][ T372] usb 1-1: can't read configurations, error -61 [ 244.784434][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 244.794795][ T372] usb usb1-port1: unable to enumerate USB device [ 244.805344][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.814750][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.830646][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.841116][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.850642][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.870535][ T10] usb 2-1: Product: syz [ 244.874785][ T10] usb 2-1: Manufacturer: syz [ 244.879479][ T10] usb 2-1: SerialNumber: syz [ 245.286429][ T10] usb 2-1: 0:2 : does not exist [ 245.536295][T12375] 9pnet_fd: p9_fd_create_unix (12375): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 245.604526][T12380] 9pnet_fd: Insufficient options for proto=fd [ 245.611895][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4084'. [ 245.890212][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.899826][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.908879][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.914312][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.931321][ T10] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 245.944486][ T10] usb 2-1: USB disconnect, device number 75 [ 246.459081][T12421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.459404][T12421] rust_binder: Write failure EINVAL in pid:1050 [ 246.483026][T12425] fuse: Bad value for 'fd' [ 246.503310][T12429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4102'. [ 246.526690][ T36] audit: type=1400 audit(2000000267.705:910): avc: denied { mounton } for pid=12430 comm="syz.0.4103" path="pipe:[41519]" dev="pipefs" ino=41519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 246.599913][T12444] cannot load conntrack support for proto=3 [ 246.952034][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.962278][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.969470][T12468] bridge_slave_0: entered allmulticast mode [ 246.976351][T12468] bridge_slave_0: entered promiscuous mode [ 246.984475][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.992498][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.999681][T12468] bridge_slave_1: entered allmulticast mode [ 247.006660][T12468] bridge_slave_1: entered promiscuous mode [ 247.037272][T12488] kvm: pic: level sensitive irq not supported [ 247.037350][T12488] picdev_read: 77 callbacks suppressed [ 247.037372][T12488] kvm: pic: non byte read [ 247.055487][T12488] kvm: pic: level sensitive irq not supported [ 247.055552][T12488] kvm: pic: non byte read [ 247.066440][T12488] kvm: pic: level sensitive irq not supported [ 247.066515][T12488] kvm: pic: non byte read [ 247.077220][T12488] kvm: pic: level sensitive irq not supported [ 247.077282][T12488] kvm: pic: non byte read [ 247.088275][T12488] kvm: pic: level sensitive irq not supported [ 247.088336][T12488] kvm: pic: non byte read [ 247.114821][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.121906][T12468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.129176][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.136257][T12468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.160175][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.167641][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.178780][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.185882][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.195833][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.202937][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.236529][T12468] veth0_vlan: entered promiscuous mode [ 247.248770][T12468] veth1_macvtap: entered promiscuous mode [ 247.296271][T12499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.388207][T12508] /dev/nullb0: Can't lookup blockdev [ 247.404621][T12512] binder: Bad value for 'defcontext' [ 247.554204][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 247.565938][T12533] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4137'. [ 247.600474][T12540] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 247.658385][T12550] binder: Bad value for 'stats' [ 247.677548][ T306] usb 3-1: USB disconnect, device number 23 [ 247.721410][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 247.731414][ T45] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 247.739632][ T45] usb 4-1: config 0 has no interface number 0 [ 247.761060][ T45] usb 4-1: config 0 interface 125 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.790746][ T45] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.830693][ T45] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.852034][ T45] usb 4-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 247.870686][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.881516][ T45] usb 4-1: Product: syz [ 247.885729][ T45] usb 4-1: Manufacturer: syz [ 247.892449][ T45] usb 4-1: SerialNumber: syz [ 247.899001][ T45] usb 4-1: config 0 descriptor?? [ 247.905298][T12503] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.913676][ T45] usb 4-1: Found UVC 0.00 device syz (3277:009e) [ 247.929030][ T45] usb 4-1: No valid video chain found. [ 247.946067][ T4290] bridge_slave_0: left allmulticast mode [ 247.951848][ T4290] bridge_slave_0: left promiscuous mode [ 247.957528][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.049311][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.056431][T12561] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.063649][T12561] bridge_slave_0: entered allmulticast mode [ 248.070130][T12561] bridge_slave_0: entered promiscuous mode [ 248.076498][ T4290] tipc: Left network mode [ 248.076902][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.087960][T12561] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.095156][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 248.095346][T12561] bridge_slave_1: entered allmulticast mode [ 248.109540][T12561] bridge_slave_1: entered promiscuous mode [ 248.121287][ T4290] veth0_vlan: left promiscuous mode [ 248.122446][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.137191][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.238649][T12503] SELinux: security_context_str_to_sid () failed with errno=-22 [ 248.247797][ T372] usb 4-1: USB disconnect, device number 28 [ 248.254144][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 248.266482][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.280244][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.290423][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.299788][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.314320][ T10] usb 2-1: config 0 descriptor?? [ 248.323682][ T10] hub 2-1:0.0: USB hub found [ 248.335555][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.342651][T12561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.349967][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.357051][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.396609][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.404368][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.417568][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.424706][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.442107][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.449207][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.477144][T12561] veth0_vlan: entered promiscuous mode [ 248.495444][T12561] veth1_macvtap: entered promiscuous mode [ 248.520370][ T10] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 248.705721][ T36] audit: type=1400 audit(2000000269.885:911): avc: denied { create } for pid=12573 comm="syz.2.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 248.706773][T12574] fuse: Bad value for 'fd' [ 248.814978][T12582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 248.896143][T12594] /dev/rnullb0: Can't open blockdev [ 248.932775][ T10] hid-generic 0003:046D:C31C.002B: item fetching failed at offset 0/1 [ 248.941337][ T10] hid-generic 0003:046D:C31C.002B: probe with driver hid-generic failed with error -22 [ 248.952613][ T4291] bridge_slave_1: left allmulticast mode [ 248.958360][ T4291] bridge_slave_1: left promiscuous mode [ 248.965345][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.974943][ T4291] bridge_slave_0: left allmulticast mode [ 248.980798][ T4291] bridge_slave_0: left promiscuous mode [ 248.986666][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.103469][ T4291] veth1_macvtap: left promiscuous mode [ 249.109076][ T4291] veth0_vlan: left promiscuous mode [ 249.170723][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 249.183123][T12603] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.190201][T12603] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.197371][T12603] bridge_slave_0: entered allmulticast mode [ 249.205771][T12603] bridge_slave_0: entered promiscuous mode [ 249.213082][T12603] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.220186][T12603] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.227374][T12603] bridge_slave_1: entered allmulticast mode [ 249.233795][T12603] bridge_slave_1: entered promiscuous mode [ 249.240894][ T372] usb 2-1: USB disconnect, device number 76 [ 249.293774][T12603] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.300685][ T45] usb 3-1: device descriptor read/64, error -71 [ 249.300882][T12603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.314439][T12603] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.321500][T12603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.344559][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.352304][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.361973][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.369074][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.379107][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.386210][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.414577][T12603] veth0_vlan: entered promiscuous mode [ 249.426663][T12603] veth1_macvtap: entered promiscuous mode [ 249.540734][ T45] usb 3-1: device descriptor read/64, error -71 [ 249.648466][T12610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.648785][T12610] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 249.667930][T12612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.690332][T12614] overlayfs: conflicting lowerdir path [ 249.780701][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 249.802234][T12628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.860299][T12634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.879197][T12634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.911205][ T45] usb 3-1: device descriptor read/64, error -71 [ 249.993801][T12637] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 249.993801][T12637] null pointer dereference occurred [ 250.006687][T12637] ------------[ cut here ]------------ [ 250.012272][T12637] kernel BUG at rust/helpers/bug.c:7! [ 250.014637][ T36] audit: type=1400 audit(2000000271.195:912): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 250.018269][T12637] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 250.039843][ T36] audit: type=1400 audit(2000000271.195:913): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.046338][T12637] CPU: 0 UID: 0 PID: 12637 Comm: syz.1.4171 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 250.046374][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.046390][T12637] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 250.068769][ T36] audit: type=1400 audit(2000000271.195:914): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.081219][T12637] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 90 80 50 46 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 da 44 19 ca 90 90 90 90 90 90 90 90 90 [ 250.081246][T12637] RSP: 0018:ffffc900019cf1b0 EFLAGS: 00010246 [ 250.081285][T12637] RAX: 000000000000005a RBX: 1ffff92000339e38 RCX: e2a857e774050d00 [ 250.081304][T12637] RDX: ffffc90002a46000 RSI: 00000000000031d9 RDI: 00000000000031da [ 250.081324][T12637] RBP: ffffc900019cf1b0 R08: ffffc900019ceea7 R09: 1ffff92000339dd4 [ 250.092804][ T36] audit: type=1400 audit(2000000271.195:915): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.096665][T12637] R10: dffffc0000000000 R11: fffff52000339dd5 R12: 0000000000000000 [ 250.096689][T12637] R13: dffffc0000000000 R14: ffffc900019cf1e0 R15: ffffc900019cf210 [ 250.118590][ T36] audit: type=1400 audit(2000000271.195:916): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.137505][T12637] FS: 00007f8ef56b86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 250.137533][T12637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.137550][T12637] CR2: 000000110c2a60ac CR3: 0000000124d26000 CR4: 00000000003526b0 [ 250.137573][T12637] Call Trace: [ 250.137583][T12637] [ 250.144643][ T36] audit: type=1400 audit(2000000271.195:917): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.151612][T12637] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 250.151659][T12637] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 250.160034][ T36] audit: type=1400 audit(2000000271.195:918): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.167647][T12637] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 250.167703][T12637] ? p9pdu_vwritef+0x2720/0x2720 [ 250.167740][T12637] ? radix_tree_node_alloc+0x1af/0x400 [ 250.310701][ T45] usb 3-1: device descriptor read/64, error -71 [ 250.314897][T12637] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 250.353268][T12637] ? __asan_memcpy+0x5a/0x80 [ 250.357872][T12637] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 250.365965][T12637] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 250.374758][T12637] ? p9pdu_writef+0xdb/0x130 [ 250.379367][T12637] ? p9pdu_vwritef+0x2720/0x2720 [ 250.384319][T12637] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 250.393448][T12637] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 250.402314][T12637] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 250.410174][T12637] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 250.417840][T12637] ? p9_client_prepare_req+0x732/0xa10 [ 250.423343][T12637] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 250.430835][ T45] usb usb3-port1: attempt power cycle [ 250.431624][T12637] ? __kasan_check_write+0x18/0x20 [ 250.442118][T12637] ? _raw_spin_lock+0x8c/0x120 [ 250.446897][T12637] ? __cfi__raw_spin_lock+0x10/0x10 [ 250.452147][T12637] ? __kasan_check_write+0x18/0x20 [ 250.457296][T12637] ? pipe_poll+0x319/0x500 [ 250.461723][T12637] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 250.469991][T12637] p9_fd_request+0x440/0x500 [ 250.474624][T12637] p9_client_rpc+0x2f9/0xb40 [ 250.479222][T12637] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 250.487484][T12637] ? p9_fid_create+0x3d0/0x3d0 [ 250.492263][T12637] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 250.500526][T12637] ? p9_conn_create+0x4c9/0x570 [ 250.505389][T12637] ? p9_fd_create+0x2f3/0x4c0 [ 250.510080][T12637] p9_client_create+0x96a/0x1190 [ 250.515028][T12637] ? __cfi_p9_client_create+0x10/0x10 [ 250.520410][T12637] ? kasan_save_alloc_info+0x40/0x50 [ 250.525704][T12637] ? __kasan_kmalloc+0x96/0xb0 [ 250.530480][T12637] ? kstrdup+0x7b/0x140 [ 250.534645][T12637] ? __kasan_check_write+0x18/0x20 [ 250.539767][T12637] v9fs_session_init+0x1e1/0x1820 [ 250.544807][T12637] ? __cfi_v9fs_session_init+0x10/0x10 [ 250.550272][T12637] ? kasan_save_alloc_info+0x40/0x50 [ 250.555561][T12637] ? __kasan_kmalloc+0x96/0xb0 [ 250.560341][T12637] ? v9fs_mount+0xbd/0xa00 [ 250.564770][T12637] v9fs_mount+0xd7/0xa00 [ 250.569027][T12637] ? __cfi_v9fs_mount+0x10/0x10 [ 250.573896][T12637] ? selinux_capable+0x38/0x50 [ 250.578667][T12637] legacy_get_tree+0x106/0x1b0 [ 250.583432][T12637] ? __cfi_v9fs_mount+0x10/0x10 [ 250.588289][T12637] vfs_get_tree+0x9e/0x290 [ 250.592721][T12637] do_new_mount+0x251/0xb40 [ 250.597249][T12637] ? security_capable+0xcf/0xf0 [ 250.602110][T12637] path_mount+0x688/0x1050 [ 250.606534][T12637] ? putname+0x113/0x150 [ 250.610790][T12637] __se_sys_mount+0x2bd/0x480 [ 250.615473][T12637] ? __x64_sys_mount+0xf0/0xf0 [ 250.620245][T12637] ? __kasan_check_write+0x18/0x20 [ 250.625361][T12637] ? fpregs_restore_userregs+0x11d/0x260 [ 250.630999][T12637] __x64_sys_mount+0xc3/0xf0 [ 250.635598][T12637] x64_sys_call+0x2021/0x2ee0 [ 250.640288][T12637] do_syscall_64+0x58/0xf0 [ 250.644710][T12637] ? clear_bhb_loop+0x50/0xa0 [ 250.649395][T12637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 250.655291][T12637] RIP: 0033:0x7f8ef478e929 [ 250.659723][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.679330][T12637] RSP: 002b:00007f8ef56b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.687757][T12637] RAX: ffffffffffffffda RBX: 00007f8ef49b5fa0 RCX: 00007f8ef478e929 [ 250.695740][T12637] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 250.703717][T12637] RBP: 00007f8ef4810b39 R08: 0000200000000180 R09: 0000000000000000 [ 250.711698][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.719674][T12637] R13: 0000000000000000 R14: 00007f8ef49b5fa0 R15: 00007ffcdb4da948 [ 250.727656][T12637] [ 250.730694][T12637] Modules linked in: [ 250.735659][T12637] ---[ end trace 0000000000000000 ]--- [ 250.741310][T12637] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 250.747490][T12637] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 90 80 50 46 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 da 44 19 ca 90 90 90 90 90 90 90 90 90 [ 250.767848][T12637] RSP: 0018:ffffc900019cf1b0 EFLAGS: 00010246 [ 250.774249][ T45] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 250.774790][T12637] RAX: 000000000000005a RBX: 1ffff92000339e38 RCX: e2a857e774050d00 [ 250.789924][T12637] RDX: ffffc90002a46000 RSI: 00000000000031d9 RDI: 00000000000031da [ 250.798130][T12637] RBP: ffffc900019cf1b0 R08: ffffc900019ceea7 R09: 1ffff92000339dd4 [ 250.801827][ T45] usb 3-1: device descriptor read/8, error -71 [ 250.806529][T12637] R10: dffffc0000000000 R11: fffff52000339dd5 R12: 0000000000000000 [ 250.820409][T12637] R13: dffffc0000000000 R14: ffffc900019cf1e0 R15: ffffc900019cf210 [ 250.828508][T12637] FS: 00007f8ef56b86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 250.837507][T12637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.844179][T12637] CR2: 00007f8ef5697d58 CR3: 0000000124d26000 CR4: 00000000003526b0 [ 250.852293][T12637] Kernel panic - not syncing: Fatal exception [ 251.967067][T12637] Shutting down cpus with NMI [ 251.972041][T12637] Kernel Offset: disabled [ 251.976366][T12637] Rebooting in 86400 seconds..